netbird/signal/README.md

73 lines
2.7 KiB
Markdown
Raw Permalink Normal View History

# netbird Signal Server
2021-06-15 05:08:06 +02:00
This is a netbird signal-exchange server and client library to exchange connection information between netbird peers
2021-05-01 12:45:37 +02:00
## Command Options
The CLI accepts the command **management** with the following options:
```shell
2022-05-22 18:53:47 +02:00
start Netbird Signal Server daemon
Usage:
2022-05-22 18:53:47 +02:00
netbird-signal run [flags]
Flags:
-h, --help help for run
--letsencrypt-domain string a domain to issue Let's Encrypt certificate for. Enables TLS using Let's Encrypt. Will fetch and renew certificate, and run the server with TLS
--port int Server port to listen on (e.g. 10000) (default 10000)
2022-05-22 18:53:47 +02:00
--ssl-dir string server ssl directory location. *Required only for Let's Encrypt certificates. (default "/var/lib/netbird/")
Global Flags:
2022-05-22 18:53:47 +02:00
--log-file string sets Netbird log path. If console is specified the the log will be output to stdout (default "/var/log/netbird/signal.log")
--log-level string (default "info")
```
## Running the Signal service (Docker)
We have packed the Signal server into docker image. You can pull the image from Docker Hub and execute it with the following commands:
````shell
2022-05-22 18:53:47 +02:00
docker pull netbirdio/signal:latest
docker run -d --name netbird-signal -p 10000:10000 netbirdio/signal:latest
````
The default log-level is set to INFO, if you need you can change it using by updating the docker cmd as followed:
````shell
2022-05-22 18:53:47 +02:00
docker run -d --name netbird-signal -p 10000:10000 netbirdio/signal:latest --log-level DEBUG
````
### Run with TLS (Let's Encrypt).
By specifying the **--letsencrypt-domain** the daemon will handle SSL certificate request and configuration.
In the following example ```10000``` is the signal service **default** port, and ```443``` will be used as port for Let's Encrypt challenge and HTTP API.
> The server where you are running a container has to have a public IP (for Let's Encrypt certificate challenge).
Replace <YOUR-DOMAIN> with your server's public domain (e.g. mydomain.com or subdomain sub.mydomain.com).
```bash
# create a volume
docker volume create wiretrustee-signal
# run the docker container
2022-05-22 18:53:47 +02:00
docker run -d --name netbird-signal \
-p 10000:10000 \
-p 443:443 \
2022-05-22 18:53:47 +02:00
-v netbird-signal:/var/lib/netbird \
netbirdio/signal:latest \
--letsencrypt-domain <YOUR-DOMAIN>
```
## For development purposes:
The project uses gRpc library and defines service in protobuf file located in:
```proto/signalexchange.proto```
2021-06-15 05:08:06 +02:00
To build the project you have to do the following things.
2021-06-15 05:08:06 +02:00
Install golang gRpc tools:
2021-06-15 05:08:06 +02:00
```bash
#!/bin/bash
go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.26
go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.1
2021-06-15 05:08:06 +02:00
```
Generate gRpc code:
2021-05-01 12:45:37 +02:00
2021-06-15 05:08:06 +02:00
```bash
#!/bin/bash
protoc -I proto/ proto/signalexchange.proto --go_out=. --go-grpc_out=.
2021-06-15 05:08:06 +02:00
```