nixos-server/hosts/by-name/server2, branch stalwart

hosts/server2: Setup sharkey

2025-04-22T19:42:48+00:00

Server2 is currently not so much under load, as such it seems better to split the load. # server2 ## Virtual Hosts etebase.vhack.eu: dav.vhack.eu gallery.s-schoeffel.de git.foss-syndicate.org invidious-router.vhack.eu: video.fosswelt.org invidious-router.sils.li issues.foss-syndicate.org libreddit.vhack.eu nextcloud.vhack.eu # <-- This redlib.vhack.eu sharkey.vhack.eu # <-- And this are the “only” really heavy services here. source.foss-syndicate.org source.vhack.eu ## Open ports TCP 22: ssh TCP 25: mail-smtp TCP 53: dns TCP 80: http TCP 443: https TCP 465: mail-smtp-tls TCP 993: mail-imap-tls TCP 995: mail-pop3-tls TCP 10222: taskchampion-sync UDP 53: dns # server3 ## Virtual Hosts b-peetz.de mail.vhack.eu mastodon.vhack.eu matrix.vhack.eu miniflux.foss-syndicate.org: rss.foss-syndicate.org rss.vhack.eu miniflux.vhack.eu openpgpkey.b-peetz.de openpgpkey.s-schoeffel.de openpgpkey.sils.li openpgpkey.vhack.eu peertube.vhack.eu trinitrix.vhack.eu vhack.eu ## Open ports TCP 22: ssh TCP 25: TCP 53: dns TCP 80: http TCP 443: https TCP 465: TCP 993: TCP 4190: ??? TCP 64738: ??? UDP 53: dns UDP 64738: ???

hosts/server2: Enable taskwarrior-sync

2025-04-11T11:31:13+00:00

nextcloud: init on server2

2025-04-07T13:30:01+00:00

hosts/server2: Format

2025-04-01T15:08:05+00:00

{hosts/server3,zones/vhack.eu}: Activate stalwart-mail on server3 for soispha

2025-04-01T14:13:51+00:00

zones/vhack.eu: Make it obvious, that the serial number must be changed

2025-04-01T13:00:03+00:00

The comment alone would probably suffice, but having a convenient function that makes it obvious *what* part of the serial number you are actually supposed to change seems quite useful, when trying to reduce the possibilities of forgetting it.

{hosts/server2,modules/mail}: Re-active the old mail server

2025-03-30T14:14:11+00:00

Running two mail-servers on one system is a total /mess/. Both try to bind to the same ports, the old stack consists of **5** different systemd services whilst stalwart-mail's systemd service simply refuses to stop, etc. I'm confident that it can work, but it would probably be best to deploy the new mail-server on server3.

hosts/server2: Use the correct path to the DKIM keys

2025-03-29T14:13:28+00:00

hosts/server2: Setup stalwalt-mail on mail.vhack.eu for soispha@vhack.eu

2025-03-29T14:13:15+00:00

We need to actually test stalwart out in the real world, because the test can never actually capture all the weird things people do with their mail setup. Refs: #6ea08aa

zones: Provide a single entry point for all zones

2025-03-11T16:47:26+00:00