diff --git a/README.md b/README.md
index 22a22d4..3b11493 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,7 @@
[![Install Peertube with YunoHost](https://install-app.yunohost.org/install-with-yunohost.png)](https://install-app.yunohost.org/?app=peertube)
=======
-Shipped Version: **1.0.1**
+Shipped Version: **1.1.0**
## What is Peertube ?
PeerTube is a federated (ActivityPub) video streaming platform using P2P (BitTorrent) directly in the web browser, using WebTorrent.
diff --git a/conf/app.src b/conf/app.src
index c7fea0c..feb4c89 100644
--- a/conf/app.src
+++ b/conf/app.src
@@ -1,5 +1,5 @@
-SOURCE_URL=https://github.com/Chocobozzz/PeerTube/releases/download/v1.0.1/peertube-v1.0.1.tar.xz
-SOURCE_SUM=9db6d9347160444b5fde81a843d7f2972352e3cdf3c0baf7d85dc775c164a688
+SOURCE_URL=https://github.com/Chocobozzz/PeerTube/releases/download/v1.1.0/peertube-v1.1.0.tar.xz
+SOURCE_SUM=b775bab2bb9f9a957b7f4decc1d3372bf209628cede7e0a6a908bc0d6f4eb595
SOURCE_SUM_PRG=sha256sum
SOURCE_FORMAT=tar.xz
SOURCE_IN_SUBDIR=true
diff --git a/conf/nginx.conf b/conf/nginx.conf
index 988923a..541f2f1 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -1,10 +1,10 @@
- # Bypass PeerTube for performance reasons. Could be removed
+ # Bypass PeerTube for performance reasons. Could be removed
location ~ ^/client/(.*\.(js|css|woff2|otf|ttf|woff|eot))$ {
add_header Cache-Control "public, max-age=31536000, immutable";
alias __FINALPATH__/client/dist/$1;
}
-
+ # Bypass PeerTube for performance reasons. Could be removed
location ~ ^/static/(thumbnails|avatars)/ {
if ($request_method = 'OPTIONS') {
add_header 'Access-Control-Allow-Origin' '*';
@@ -37,8 +37,17 @@
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-
- # Hard limit, PeerTube does not support videos > 8GB
+
+ # This is the maximum upload size, which roughly matches the maximum size of a video file
+ # you can send via the API or the web interface. By default this is 8GB, but administrators
+ # can increase or decrease the limit. Currently there's no way to communicate this limit
+ # to users automatically, so you may want to leave a note in your instance 'about' page if
+ # you change this.
+ #
+ # Note that temporary space is needed equal to the total size of all concurrent uploads.
+ # This data gets stored in /var/lib/nginx by default, so you may want to put this directory
+ # on a dedicated filesystem.
+ #
client_max_body_size 8G;
proxy_connect_timeout 600;
proxy_send_timeout 600;
@@ -70,7 +79,12 @@
access_log off;
}
- alias /home/yunohost.app/__NAME__/storage/videos;
+ root /home/yunohost.app/__NAME__/storage/videos;
+
+ rewrite ^/static/webseed/(.*)$ /videos/$1 break;
+ rewrite ^/static/redundancy/(.*)$ /redundancy/$1 break;
+
+ try_files $uri /;
}
# Websocket tracker
diff --git a/conf/production.yaml b/conf/production.yaml
index fcbd937..a901947 100644
--- a/conf/production.yaml
+++ b/conf/production.yaml
@@ -60,7 +60,10 @@ log:
level: 'info' # debug/info/warning/error
search:
- remote_uri: # Add ability to search remote videos/actors by URI, that may not be federated with your instance
+# Add ability to fetch remote videos/actors by their URI, that may not be federated with your instance
+# If enabled, the associated group will be able to "escape" from the instance follows
+# That means they will be able to follow channels, watch videos, list videos of non followed instances
+ remote_uri:
users: true
anonymous: false
@@ -83,10 +86,10 @@ trending:
# strategy: 'trending' # Cache trending videos
# -
# size: '1GB'
- # Minimum time the video must remain in the cache. Only accept values > 10 hours (to not overload remote instances)
+# # Minimum time the video must remain in the cache. Only accept values > 10 hours (to not overload remote instances)
# min_lifetime: '48 hours'
# strategy: 'recently-added' # Cache recently added videos
-# minViews: 10 # Having at least x views
+# min_views: 10 # Having at least x views
###############################################################################
#
diff --git a/conf/systemd.service b/conf/systemd.service
index 8f5be9d..db0da40 100644
--- a/conf/systemd.service
+++ b/conf/systemd.service
@@ -16,5 +16,19 @@ StandardError=syslog
SyslogIdentifier=__APP__
Restart=always
+; Some security directives.
+; Use private /tmp and /var/tmp folders inside a new file system namespace,
+; which are discarded after the process stops.
+PrivateTmp=true
+; Mount /usr, /boot, and /etc as read-only for processes invoked by this service.
+ProtectSystem=full
+; Sets up a new /dev mount for the process and only adds API pseudo devices
+; like /dev/null, /dev/zero or /dev/random but not physical devices. Disabled
+; by default because it may not work on devices like the Raspberry Pi.
+PrivateDevices=false
+; Ensures that the service process and all its children can never gain new
+; privileges through execve().
+NoNewPrivileges=true
+
[Install]
WantedBy=multi-user.target
diff --git a/manifest.json b/manifest.json
index a4a0f9a..7d8d9c7 100644
--- a/manifest.json
+++ b/manifest.json
@@ -6,7 +6,7 @@
"en": "Video streaming platform using P2P directly in the web browser, connected to a federated network",
"fr": "Plateforme de diffusion vidéo par P2P directement dans le navigateur, et connectée à un réseau fédéralisé"
},
- "version": "1.0.1",
+ "version": "1.1.0",
"url": "https://github.com/Chocobozzz/PeerTube",
"license": "AGPL-3.0-only",
"maintainer": {