server.ts 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376
  1. import { registerOpentelemetryTracing } from '@server/lib/opentelemetry/tracing.js'
  2. await registerOpentelemetryTracing()
  3. process.title = 'peertube'
  4. // ----------- Core checker -----------
  5. import { checkMissedConfig, checkFFmpeg, checkNodeVersion } from './core/initializers/checker-before-init.js'
  6. // Do not use barrels because we don't want to load all modules here (we need to initialize database first)
  7. import { CONFIG } from './core/initializers/config.js'
  8. import { API_VERSION, WEBSERVER, loadLanguages } from './core/initializers/constants.js'
  9. import { logger } from './core/helpers/logger.js'
  10. const missed = checkMissedConfig()
  11. if (missed.length !== 0) {
  12. logger.error('Your configuration files miss keys: ' + missed)
  13. process.exit(-1)
  14. }
  15. checkFFmpeg(CONFIG)
  16. .catch(err => {
  17. logger.error('Error in ffmpeg check.', { err })
  18. process.exit(-1)
  19. })
  20. try {
  21. checkNodeVersion()
  22. } catch (err) {
  23. logger.error('Error in NodeJS check.', { err })
  24. process.exit(-1)
  25. }
  26. import { checkConfig, checkActivityPubUrls, checkFFmpegVersion } from './core/initializers/checker-after-init.js'
  27. try {
  28. checkConfig()
  29. } catch (err) {
  30. logger.error('Config error.', { err })
  31. process.exit(-1)
  32. }
  33. // ----------- Database -----------
  34. // Initialize database and models
  35. import { initDatabaseModels, checkDatabaseConnectionOrDie } from './core/initializers/database.js'
  36. checkDatabaseConnectionOrDie()
  37. import { migrate } from './core/initializers/migrator.js'
  38. migrate()
  39. .then(() => initDatabaseModels(false))
  40. .then(() => startApplication())
  41. .catch(err => {
  42. logger.error('Cannot start application.', { err })
  43. process.exit(-1)
  44. })
  45. // ----------- Initialize -----------
  46. loadLanguages()
  47. .catch(err => logger.error('Cannot load languages', { err }))
  48. // Express configuration
  49. import express from 'express'
  50. import morgan, { token } from 'morgan'
  51. import cors from 'cors'
  52. import cookieParser from 'cookie-parser'
  53. import { frameguard } from 'helmet'
  54. import { parse } from 'useragent'
  55. import anonymize from 'ip-anonymize'
  56. import { program as cli } from 'commander'
  57. const app = express().disable('x-powered-by')
  58. // Trust our proxy (IP forwarding...)
  59. app.set('trust proxy', CONFIG.TRUST_PROXY)
  60. app.use((_req, res, next) => {
  61. // OpenTelemetry
  62. res.locals.requestStart = Date.now()
  63. if (CONFIG.SECURITY.POWERED_BY_HEADER.ENABLED === true) {
  64. res.setHeader('x-powered-by', 'PeerTube')
  65. }
  66. return next()
  67. })
  68. // Security middleware
  69. import { baseCSP } from './core/middlewares/csp.js'
  70. if (CONFIG.CSP.ENABLED) {
  71. app.use(baseCSP)
  72. }
  73. if (CONFIG.SECURITY.FRAMEGUARD.ENABLED) {
  74. app.use(frameguard({
  75. action: 'deny' // we only allow it for /videos/embed, see server/controllers/client.ts
  76. }))
  77. }
  78. // ----------- PeerTube modules -----------
  79. import { installApplication } from './core/initializers/installer.js'
  80. import { Emailer } from './core/lib/emailer.js'
  81. import { JobQueue } from './core/lib/job-queue/index.js'
  82. import {
  83. activityPubRouter,
  84. apiRouter,
  85. miscRouter,
  86. clientsRouter,
  87. feedsRouter,
  88. staticRouter,
  89. wellKnownRouter,
  90. lazyStaticRouter,
  91. servicesRouter,
  92. objectStorageProxyRouter,
  93. pluginsRouter,
  94. trackerRouter,
  95. createWebsocketTrackerServer,
  96. sitemapRouter,
  97. downloadRouter
  98. } from './core/controllers/index.js'
  99. import { advertiseDoNotTrack } from './core/middlewares/dnt.js'
  100. import { apiFailMiddleware } from './core/middlewares/error.js'
  101. import { Redis } from './core/lib/redis.js'
  102. import { ActorFollowScheduler } from './core/lib/schedulers/actor-follow-scheduler.js'
  103. import { RemoveOldViewsScheduler } from './core/lib/schedulers/remove-old-views-scheduler.js'
  104. import { UpdateVideosScheduler } from './core/lib/schedulers/update-videos-scheduler.js'
  105. import { YoutubeDlUpdateScheduler } from './core/lib/schedulers/youtube-dl-update-scheduler.js'
  106. import { VideosRedundancyScheduler } from './core/lib/schedulers/videos-redundancy-scheduler.js'
  107. import { RemoveOldHistoryScheduler } from './core/lib/schedulers/remove-old-history-scheduler.js'
  108. import { AutoFollowIndexInstances } from './core/lib/schedulers/auto-follow-index-instances.js'
  109. import { RemoveDanglingResumableUploadsScheduler } from './core/lib/schedulers/remove-dangling-resumable-uploads-scheduler.js'
  110. import { VideoViewsBufferScheduler } from './core/lib/schedulers/video-views-buffer-scheduler.js'
  111. import { GeoIPUpdateScheduler } from './core/lib/schedulers/geo-ip-update-scheduler.js'
  112. import { RunnerJobWatchDogScheduler } from './core/lib/schedulers/runner-job-watch-dog-scheduler.js'
  113. import { isHTTPSignatureDigestValid } from './core/helpers/peertube-crypto.js'
  114. import { PeerTubeSocket } from './core/lib/peertube-socket.js'
  115. import { updateStreamingPlaylistsInfohashesIfNeeded } from './core/lib/hls.js'
  116. import { PluginsCheckScheduler } from './core/lib/schedulers/plugins-check-scheduler.js'
  117. import { PeerTubeVersionCheckScheduler } from './core/lib/schedulers/peertube-version-check-scheduler.js'
  118. import { Hooks } from './core/lib/plugins/hooks.js'
  119. import { PluginManager } from './core/lib/plugins/plugin-manager.js'
  120. import { LiveManager } from './core/lib/live/index.js'
  121. import { HttpStatusCode } from '@peertube/peertube-models'
  122. import { ServerConfigManager } from '@server/lib/server-config-manager.js'
  123. import { VideoViewsManager } from '@server/lib/views/video-views-manager.js'
  124. import { isTestOrDevInstance } from '@peertube/peertube-node-utils'
  125. import { OpenTelemetryMetrics } from '@server/lib/opentelemetry/metrics.js'
  126. import { ApplicationModel } from '@server/models/application/application.js'
  127. import { VideoChannelSyncLatestScheduler } from '@server/lib/schedulers/video-channel-sync-latest-scheduler.js'
  128. // ----------- Command line -----------
  129. cli
  130. .option('--no-client', 'Start PeerTube without client interface')
  131. .option('--no-plugins', 'Start PeerTube without plugins/themes enabled')
  132. .option('--benchmark-startup', 'Automatically stop server when initialized')
  133. .parse(process.argv)
  134. // ----------- App -----------
  135. // Enable CORS for develop
  136. if (isTestOrDevInstance()) {
  137. app.use(cors({
  138. origin: '*',
  139. exposedHeaders: 'Retry-After',
  140. credentials: true
  141. }))
  142. }
  143. // For the logger
  144. token('remote-addr', (req: express.Request) => {
  145. if (CONFIG.LOG.ANONYMIZE_IP === true || req.get('DNT') === '1') {
  146. return anonymize(req.ip, 16, 16)
  147. }
  148. return req.ip
  149. })
  150. token('user-agent', (req: express.Request) => {
  151. if (req.get('DNT') === '1') {
  152. return parse(req.get('user-agent')).family
  153. }
  154. return req.get('user-agent')
  155. })
  156. app.use(morgan('combined', {
  157. stream: {
  158. write: (str: string) => logger.info(str.trim(), { tags: [ 'http' ] })
  159. },
  160. skip: req => CONFIG.LOG.LOG_PING_REQUESTS === false && req.originalUrl === '/api/v1/ping'
  161. }))
  162. // Add .fail() helper to response
  163. app.use(apiFailMiddleware)
  164. // For body requests
  165. app.use(express.urlencoded({ extended: false }))
  166. app.use(express.json({
  167. type: [ 'application/json', 'application/*+json' ],
  168. limit: '500kb',
  169. verify: (req: express.Request, res: express.Response, buf: Buffer) => {
  170. const valid = isHTTPSignatureDigestValid(buf, req)
  171. if (valid !== true) {
  172. res.fail({
  173. status: HttpStatusCode.FORBIDDEN_403,
  174. message: 'Invalid digest'
  175. })
  176. }
  177. }
  178. }))
  179. // Cookies
  180. app.use(cookieParser())
  181. // W3C DNT Tracking Status
  182. app.use(advertiseDoNotTrack)
  183. // ----------- Open Telemetry -----------
  184. OpenTelemetryMetrics.Instance.init(app)
  185. // ----------- Views, routes and static files -----------
  186. app.use('/api/' + API_VERSION, apiRouter)
  187. // Services (oembed...)
  188. app.use('/services', servicesRouter)
  189. // Plugins & themes
  190. app.use('/', pluginsRouter)
  191. app.use('/', activityPubRouter)
  192. app.use('/', feedsRouter)
  193. app.use('/', trackerRouter)
  194. app.use('/', sitemapRouter)
  195. // Static files
  196. app.use('/', staticRouter)
  197. app.use('/', wellKnownRouter)
  198. app.use('/', miscRouter)
  199. app.use('/', downloadRouter)
  200. app.use('/', lazyStaticRouter)
  201. app.use('/', objectStorageProxyRouter)
  202. // Client files, last valid routes!
  203. const cliOptions = cli.opts<{ client: boolean, plugins: boolean }>()
  204. if (cliOptions.client) app.use('/', clientsRouter)
  205. // ----------- Errors -----------
  206. // Catch unmatched routes
  207. app.use((_req, res: express.Response) => {
  208. res.status(HttpStatusCode.NOT_FOUND_404).end()
  209. })
  210. // Catch thrown errors
  211. app.use((err, _req, res: express.Response, _next) => {
  212. // Format error to be logged
  213. let error = 'Unknown error.'
  214. if (err) {
  215. error = err.stack || err.message || err
  216. }
  217. // Handling Sequelize error traces
  218. const sql = err?.parent ? err.parent.sql : undefined
  219. // Help us to debug SequelizeConnectionAcquireTimeoutError errors
  220. const activeRequests = err?.name === 'SequelizeConnectionAcquireTimeoutError' && typeof (process as any)._getActiveRequests !== 'function'
  221. ? (process as any)._getActiveRequests()
  222. : undefined
  223. logger.error('Error in controller.', { err: error, sql, activeRequests })
  224. return res.fail({
  225. status: err.status || HttpStatusCode.INTERNAL_SERVER_ERROR_500,
  226. message: err.message,
  227. type: err.name
  228. })
  229. })
  230. const { server, trackerServer } = createWebsocketTrackerServer(app)
  231. // ----------- Run -----------
  232. async function startApplication () {
  233. const port = CONFIG.LISTEN.PORT
  234. const hostname = CONFIG.LISTEN.HOSTNAME
  235. await installApplication()
  236. // Check activity pub urls are valid
  237. checkActivityPubUrls()
  238. .catch(err => {
  239. logger.error('Error in ActivityPub URLs checker.', { err })
  240. process.exit(-1)
  241. })
  242. checkFFmpegVersion()
  243. .catch(err => logger.error('Cannot check ffmpeg version', { err }))
  244. Redis.Instance.init()
  245. Emailer.Instance.init()
  246. await Promise.all([
  247. Emailer.Instance.checkConnection(),
  248. JobQueue.Instance.init(),
  249. ServerConfigManager.Instance.init()
  250. ])
  251. // Enable Schedulers
  252. ActorFollowScheduler.Instance.enable()
  253. UpdateVideosScheduler.Instance.enable()
  254. YoutubeDlUpdateScheduler.Instance.enable()
  255. VideosRedundancyScheduler.Instance.enable()
  256. RemoveOldHistoryScheduler.Instance.enable()
  257. RemoveOldViewsScheduler.Instance.enable()
  258. PluginsCheckScheduler.Instance.enable()
  259. PeerTubeVersionCheckScheduler.Instance.enable()
  260. AutoFollowIndexInstances.Instance.enable()
  261. RemoveDanglingResumableUploadsScheduler.Instance.enable()
  262. VideoChannelSyncLatestScheduler.Instance.enable()
  263. VideoViewsBufferScheduler.Instance.enable()
  264. GeoIPUpdateScheduler.Instance.enable()
  265. RunnerJobWatchDogScheduler.Instance.enable()
  266. OpenTelemetryMetrics.Instance.registerMetrics({ trackerServer })
  267. PluginManager.Instance.init(server)
  268. // Before PeerTubeSocket init
  269. PluginManager.Instance.registerWebSocketRouter()
  270. PeerTubeSocket.Instance.init(server)
  271. VideoViewsManager.Instance.init()
  272. updateStreamingPlaylistsInfohashesIfNeeded()
  273. .catch(err => logger.error('Cannot update streaming playlist infohashes.', { err }))
  274. LiveManager.Instance.init()
  275. if (CONFIG.LIVE.ENABLED) await LiveManager.Instance.run()
  276. // Make server listening
  277. server.listen(port, hostname, async () => {
  278. if (cliOptions.plugins) {
  279. try {
  280. await PluginManager.Instance.rebuildNativePluginsIfNeeded()
  281. await PluginManager.Instance.registerPluginsAndThemes()
  282. } catch (err) {
  283. logger.error('Cannot register plugins and themes.', { err })
  284. }
  285. }
  286. ApplicationModel.updateNodeVersions()
  287. .catch(err => logger.error('Cannot update node versions.', { err }))
  288. JobQueue.Instance.start()
  289. .catch(err => {
  290. logger.error('Cannot start job queue.', { err })
  291. process.exit(-1)
  292. })
  293. logger.info('HTTP server listening on %s:%d', hostname, port)
  294. logger.info('Web server: %s', WEBSERVER.URL)
  295. Hooks.runAction('action:application.listening')
  296. if (cliOptions['benchmarkStartup']) process.exit(0)
  297. })
  298. process.on('exit', () => {
  299. JobQueue.Instance.terminate()
  300. .catch(err => logger.error('Cannot terminate job queue.', { err }))
  301. })
  302. process.on('SIGINT', () => process.exit(0))
  303. }