ITSquad/Mumble - Revision history

Vanecx: corrected mumble download link

2022-01-27T14:28:23Z

corrected mumble download link

← Older revision		Revision as of 16:28, 27 January 2022
Line 13:		Line 13:
	Since March 2020, the PPBe is hosting a Mumble server together with a web client on https://talk.parley.be or https://mumble.parley.be		Since March 2020, the PPBe is hosting a Mumble server together with a web client on https://talk.parley.be or https://mumble.parley.be

	It is also possible to connect through [https://www.mumble.~~com~~/~~mumble-download.php~~ another Mumble client] either at <code>mumble.parley.be</code> or <code>talk.parley.be</code> with port <code>64738</code>.		It is also possible to connect through [https://www.mumble.info/downloads/ another Mumble client] either at <code>mumble.parley.be</code> or <code>talk.parley.be</code> with port <code>64738</code>.

	To connect you can give the username you wish. No password is needed, although we could decide to setup a password if we see that there are too much spam.		To connect you can give the username you wish. No password is needed, although we could decide to setup a password if we see that there are too much spam.

HgO: ansible role

2020-12-27T17:49:24Z

ansible role

← Older revision		Revision as of 19:49, 27 December 2020
Line 11:		Line 11:
	Mumble is a server for holding audio conferences.		Mumble is a server for holding audio conferences.

	Since March 2020, the PPBe is hosting a Mumble server together with a web client on https://talk.parley.be.		Since March 2020, the PPBe is hosting a Mumble server together with a web client on https://talk.parley.be or https://mumble.parley.be

	It is also possible to connect through [https://www.mumble.com/mumble-download.php another Mumble client] at <code>mumble.parley.be</code> with port <code>64738</code>.		It is also possible to connect through [https://www.mumble.com/mumble-download.php another Mumble client] either at <code>mumble.parley.be</code> or <code>talk.parley.be</code> with port <code>64738</code>.

	To connect you can give the username you wish. No password is needed, although we could decide to setup a password if we see that there are too much spam.		To connect you can give the username you wish. No password is needed, although we could decide to setup a password if we see that there are too much spam.

	~~As we~~ are ~~using [https://umurmur~~.~~net/ umurmur]~~, a ~~lightweight~~ Mumble server~~, there are some limitations~~. ~~For instance~~, the ~~number of rooms is fixed~~ on ~~server startup~~, and ~~we cannot grant permissions for certain users. There is only one admin password~~, ~~which gives~~ the ~~right to silent people~~.		== Install ==

			'''Note:''' We are setting two domain names. However, you can as well use a single domain name for both applications, or a domain name for the web client and another for the Mumble server. Indeed, the Mumble server listens on port 64738, while the client listens on ports 80 and 443, so they won't conflict ;) Just reuse the same certificate for both applications and you should be fine.

	~~== Install ==~~		Since December 2020, we are using our Ansible role to install both the web client and the Mumble server: https://github.com/L-P/ansible-role-murmur Therefore, the below install procedure won't be updated anymore.

	~~'''Note~~:~~''' We are using two separate domain names, one for the mumble server and another for the web interface~~. ~~However, you can as well use a single domain name for both applications~~. ~~Indeed, the mumble server listens on port 64738, while the client listens on ports 80 and 443, so they won't conflict ;) Just reuse the same certificate for both applications and you should~~ be ~~fine.~~		You can see how we configured our instance here: https://dev.parley.be/PPBe/ansible-infra

	=== Server ===		=== Server ===

			'''Note''' This install procedure is for the umurmur server, which is a lightweight Mumble server. However, we switched to the official murmur server, as the latest umurmur release is becoming old and outdated.

	Install dependencies:		Install dependencies:

HgO: /* Web client */

2020-03-29T16:45:02Z

Web client

← Older revision		Revision as of 18:45, 29 March 2020
Line 130:		Line 130:
	npm run build		npm run build

	Edit the configuration file at <code>./dist/config.local.js</code>. ~~Change~~ the following options in ~~<code>connectDialog</code> section~~:		Edit the configuration file at <code>./dist/config.local.js</code>. Add the following options in the config file:

	<nowiki>		<nowiki>

HgO: /* Web client */

2020-03-26T16:08:41Z

Web client

← Older revision		Revision as of 18:08, 26 March 2020
Line 126:		Line 126:
	npm audit fix		npm audit fix

	~~Edit~~ the ~~configuration file at <code>./app/~~config~~.js</code>. Change the following options in <code>connectDialog</code> section~~:		Build the assets and config:

	~~'address': false~~		npm run build
	~~'port': false~~
	~~'token': false~~

	~~It will tell~~ the ~~client to only ask for an username and password~~. ~~If you didn't setup a password, you can also set it to false~~.		Edit the configuration file at <code>./dist/config.local.js</code>. Change the following options in <code>connectDialog</code> section:

	~~Change address in the~~ <~~code~~>~~defaults<~~/~~code> section:~~		<nowiki>
			// Which fields to show on the Connect to Server dialog
			config.connectDialog.address = false
			config.connectDialog.port = false
			config.connectDialog.token = false
			config.connectDialog.password = false

	'~~address~~'~~: "talk.parley.be/mumble"~~		// Default values for user settings
			config.settings.pttKey = 'shift'

	~~Build~~ the ~~assets and~~ config:		// Default values (can be changed by passing a query parameter of the same name)
			config.defaults.address = 'talk.parley.be/mumble'</nowiki>

			This will tell the client to only ask for an username. If you setup a password for the server, you can set it to true.

	~~npm run build~~		The config also indicates to which address the client should connect. The <code>/mumble</code> path will be defined later in the Nginx section, but basically we will create a websocket proxy to the mumble server.

	Create the systemd service unit (just copy paste this block):		Create the systemd service unit (just copy paste this block):

HgO: /* Install */

2020-03-26T16:00:58Z

Install

← Older revision		Revision as of 18:00, 26 March 2020
Line 20:		Line 20:

	== Install ==		== Install ==

			'''Note:''' We are using two separate domain names, one for the mumble server and another for the web interface. However, you can as well use a single domain name for both applications. Indeed, the mumble server listens on port 64738, while the client listens on ports 80 and 443, so they won't conflict ;) Just reuse the same certificate for both applications and you should be fine.

	=== Server ===		=== Server ===

HgO: /* Server */ typos

2020-03-23T21:32:07Z

Server: typos

← Older revision		Revision as of 23:32, 23 March 2020
Line 25:		Line 25:
	Install dependencies:		Install dependencies:

	apt install git build-essential cmake libconfig-dev libprotobuf-c-dev libmbedtls-dev ssl-~~certs~~		apt install git build-essential cmake libconfig-dev libprotobuf-c-dev libmbedtls-dev ssl-cert

	Create the directory for the server sources:		Create the directory for the server sources:
Line 47:		Line 47:
	Build the sources:		Build the sources:

	cmake .. -DSSL=~~libmbedtls~~		cmake .. -DSSL=mbedtls
	make		make

HgO at 14:15, 22 March 2020

2020-03-22T14:15:25Z

← Older revision		Revision as of 16:15, 22 March 2020
Line 62:		Line 62:
	And copy/paste this password to the umurmur config file.		And copy/paste this password to the umurmur config file.

	Create the systemd service unit:		Create the systemd service unit (just copy/paste this block):

	<nowiki>		<nowiki>
Line 140:		Line 140:
	npm run build		npm run build

	Create the systemd service unit (just copy ~~past~~ this):		Create the systemd service unit (just copy paste this block):

	<nowiki>		<nowiki>
Line 182:		Line 182:
	apt install nginx		apt install nginx

	Create the config for your web client (just copy/paste this):		Create the config for your web client (just copy/paste this block):

	<nowiki>		<nowiki>

HgO: /* Server */ remove sudo

2020-03-22T14:14:18Z

Server: remove sudo

← Older revision		Revision as of 16:14, 22 March 2020
Line 25:		Line 25:
	Install dependencies:		Install dependencies:

	~~sudo~~ apt install git build-essential cmake libconfig-dev libprotobuf-c-dev libmbedtls-dev ssl-certs		apt install git build-essential cmake libconfig-dev libprotobuf-c-dev libmbedtls-dev ssl-certs

	Create the directory for the server sources:		Create the directory for the server sources:

HgO: fix links

2020-03-22T14:11:27Z

fix links

← Older revision		Revision as of 16:11, 22 March 2020
Line 13:		Line 13:
	Since March 2020, the PPBe is hosting a Mumble server together with a web client on https://talk.parley.be.		Since March 2020, the PPBe is hosting a Mumble server together with a web client on https://talk.parley.be.

	It is also possible to connect through [~~another Mumble client](~~https://www.mumble.com/mumble-download.php) at <code>mumble.parley.be</code> with port <code>64738</code>.		It is also possible to connect through [https://www.mumble.com/mumble-download.php another Mumble client] at <code>mumble.parley.be</code> with port <code>64738</code>.

	To connect you can give the username you wish. No password is needed, although we could decide to setup a password if we see that there are too much spam.		To connect you can give the username you wish. No password is needed, although we could decide to setup a password if we see that there are too much spam.

	As we are using [~~umurmur](~~https://umurmur.net/), a lightweight Mumble server, there are some limitations. For instance, the number of rooms is fixed on server startup, and we cannot grant permissions for certain users. There is only one admin password, which gives the right to silent people.		As we are using [https://umurmur.net/ umurmur], a lightweight Mumble server, there are some limitations. For instance, the number of rooms is fixed on server startup, and we cannot grant permissions for certain users. There is only one admin password, which gives the right to silent people.

	== Install ==		== Install ==
Line 36:		Line 36:
	git clone https://github.com/umurmur/umurmur.git .		git clone https://github.com/umurmur/umurmur.git .

	Checkout to the latest version (see the [~~releases list](~~https://github.com/umurmur/umurmur/releases)):		Checkout to the latest version (see the [https://github.com/umurmur/umurmur/releases releases list]):

	git checkout 0.2.17		git checkout 0.2.17
Line 230:		Line 230:
	EOF</nowiki>		EOF</nowiki>

	Install certbot for managing the certificates ([~~check on their website](~~https://certbot.eff.org) if you need to install the certbot repository):		Install certbot for managing the certificates ([https://certbot.eff.org check on their website] if you need to install the certbot repository):

	apt install certbot python-certbot-nginx		apt install certbot python-certbot-nginx

HgO: Created page with "{{ProjectSidebar | title = Mumble | start = 2020/03/22 | status = doing | workgroup = ITSquad | contact = it [at] pirateparty (point) be }} == Description == Mumble is a ser..."

2020-03-22T14:05:08Z

Created page with "{{ProjectSidebar | title = Mumble | start = 2020/03/22 | status = doing | workgroup = ITSquad | contact = it [at] pirateparty (point) be }} == Description == Mumble is a ser..."

New page

{{ProjectSidebar
| title = Mumble
| start = 2020/03/22
| status = doing
| workgroup = ITSquad
| contact = it [at] pirateparty (point) be
}}

== Description ==

Mumble is a server for holding audio conferences.

Since March 2020, the PPBe is hosting a Mumble server together with a web client on https://talk.parley.be.

It is also possible to connect through [another Mumble client](https://www.mumble.com/mumble-download.php) at <code>mumble.parley.be</code> with port <code>64738</code>.

To connect you can give the username you wish. No password is needed, although we could decide to setup a password if we see that there are too much spam.

As we are using [umurmur](https://umurmur.net/), a lightweight Mumble server, there are some limitations. For instance, the number of rooms is fixed on server startup, and we cannot grant permissions for certain users. There is only one admin password, which gives the right to silent people.

== Install ==

=== Server ===

Install dependencies:

sudo apt install git build-essential cmake libconfig-dev libprotobuf-c-dev libmbedtls-dev ssl-certs

Create the directory for the server sources:

mkdir /opt/umurmur
cd /opt/umurmur

Clone the umurmur git repository:

git clone https://github.com/umurmur/umurmur.git .

Checkout to the latest version (see the [releases list](https://github.com/umurmur/umurmur/releases)):

git checkout 0.2.17

Create the build directory:

mkdir ./build
cd ./build

Build the sources:

cmake .. -DSSL=libmbedtls
make

Install the umurmur binary on the system:

make install

You can now edit the configuration file at <code>/usr/local/etc/umurmur.conf</code>. Check the doc for an example. We will define the certificates later on. You can setup a password if you wish.

Generate a random password for the admin:

pwgen -s 42 1

And copy/paste this password to the umurmur config file.

Create the systemd service unit:

<nowiki>
cat > /etc/systemd/system/umurmur.service << EOF
[Unit]
Description=Minimalistic Mumble server
After=network.target

[Service]
Type=simple
User=nobody
Group=ssl-cert
Restart=on-failure
RestartSec=3
PIDFile=/run/umurmurd.pid
ExecStartPre=/usr/local/bin/umurmurd -t -c /usr/local/etc/umurmur.conf
ExecStart=/usr/local/bin/umurmurd -d -r -c /usr/local/etc/umurmur.conf
ExecReload=/bin/kill -HUP $MAINPID
PrivateDevices=yes
PrivateTmp=yes
ProtectSystem=strict
ReadWriteDirectories=/usr/local/etc/
ProtectHome=yes
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
LockPersonality=yes
NoNewPrivileges=yes
LimitRTPRIO=1

[Install]
WantedBy=multi-user.target
EOF</nowiki>

Reload the systemd service unit config:

systemctl daemon-reload

=== Web client ===

Install nodejs repository (LTS is v0.12.x):

curl -sL https://deb.nodesource.com/setup_12.x | sudo -E bash -

Install nodejs and websockify:

apt install nodejs websockify

Create the directory for mumble-web:

mkdir /var/www/mumble-web
cd /var/www/mumble-web

Clone the mumble-web git repository:

git clone https://github.com/Johni0702/mumble-web.git .

Build the sources:

npm install
npm audit fix

Edit the configuration file at <code>./app/config.js</code>. Change the following options in <code>connectDialog</code> section:

'address': false
'port': false
'token': false

It will tell the client to only ask for an username and password. If you didn't setup a password, you can also set it to false.

Change address in the <code>defaults</code> section:

'address': "talk.parley.be/mumble"

Build the assets and config:

npm run build

Create the systemd service unit (just copy past this):

<nowiki>
cat > /etc/systemd/system/mumble-web.service << EOF
[Unit]
Description=Mumble web client using websockets
After=network.target

[Service]
Type=simple
User=nobody
Group=nogroup
Restart=on-failure
RestartSec=3
PIDFile=/run/mumble-web.pid
ExecStart=/usr/bin/websockify --ssl-target 64737 localhost:64738
ExecReload=/bin/kill -HUP $MAINPID
PrivateDevices=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
LockPersonality=yes
NoNewPrivileges=yes
LimitRTPRIO=1

[Install]
WantedBy=multi-user.target
EOF</nowiki>

Reload the systemd service unit config:

systemctl daemon-reload

=== Nginx ===

Install nginx:

apt install nginx

Create the config for your web client (just copy/paste this):

<nowiki>
cat > /etc/nginx/sites-available/mumble.conf << EOF
server {
listen 80;
listen [::]:80;
server_name talk.parley.be mumble.parley.be;

# Useful for Let's Encrypt
location /.well-known/acme-challenge/ {
allow all;
}

location / {
return 301 https://$host$request_uri;
}
}

server {
listen 443 ssl http2;
listen [::]:443 ssl http2;

server_name talk.parley.be;

ssl_certificate /etc/letsencrypt/live/talk.parley.be/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/talk.parley.be/privkey.pem;

include /etc/letsencrypt/options-ssl-nginx.conf;

location / {
root /var/www/mumble-web/dist/;
}

location /mumble {
proxy_pass http://127.0.0.1:64737;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
}
}

map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
EOF</nowiki>

Install certbot for managing the certificates ([check on their website](https://certbot.eff.org) if you need to install the certbot repository):

apt install certbot python-certbot-nginx

Add the following hook in <code>/etc/letsencrypt/cli.ini</code>:

post-hook = chmod 0640 /etc/letsencrypt/archive/*/privkey*.pem && chmod g+rx /etc/letsencrypt/live /etc/letsencrypt/archive && chown -R root:ssl-cert /etc/letsencrypt/live /etc/letsencrypt/archive

This will give the read permissions for the group <code>ssl-certs</code>. It is required for the umurmur server which will be run as member of that group.

Generate two certificates, one for the client and one for the server:

certbot certonly --nginx -d talk.parley.be
certbot certonly --nginx -d mumble.parley.be

Enable the nginx configuration:

ln -s /etc/nginx/sites-available/mumble.conf /etc/nginx/sites-enabled/

Check that everything is fine:

nginx -t

Reload the nginx server:

systemctl reload nginx

Change the certificates for umurmur in the config file <code>/usr/local/etc/umurmur.conf</code>. The paths should be something like:

certificate = "/etc/letsencrypt/live/mumble.parley.be/fullchain.pem";
private_key = "/etc/letsencrypt/live/mumble.parley.be/privkey.pem";

You can finally start the client and server:

systemctl start umurmur
systemctl start mumble-web

Don't forget to open the port <code>64738</code> of your firewall if you want to allow people connecting from the desktop Mumble client!

When everything looks good, enable the services:

systemctl enable umurmur mumble-web

Enjoy!