about summary refs log tree commit diff stats
path: root/hosts/by-name/server2/secrets/nextcloud (unfollow)
Commit message (Collapse)Author
4 hourszones/vhack.eu: Actually set the `sharkey.vhack.eu` subdomainBenedikt Peetz
8 hoursmodules/stalwart-mail: Add recommended proxy settings for stalwarts-proxyBenedikt Peetz
This includes setting things, like setting the `X-Forwarded-For` header.
8 hoursmodules/constants: Also add a user to each group, so that duplicated gids ↵Benedikt Peetz
are avoided
8 hourstests/email-http: Use the factored out DNS serverBenedikt Peetz
9 hourshosts/server2: Use the internal stalwart directoryBenedikt Peetz
9 hourstests/email-http: Test the http self-service availabilityBenedikt Peetz
9 hoursmodules/stalwart-mail: Don't restart the systemd serviceBenedikt Peetz
Restarting might be useful, if stalwart is actually _running_ in prod, but currently the constant restart makes it very difficult to debug (or even stop) the service.
9 hoursmodules/stalwart-mail: Enable the http self-service interfaceBenedikt Peetz
9 hoursmodules/nginx: Set the "acme" group as group of the "acme" userBenedikt Peetz
For some reason, this is not done already. Setting this prevents an assertion being thrown, that the "acme" user does not have a group.
9 hoursmodules/stalwart-mail: Allow both nginx and stalwart-mail access to the certBenedikt Peetz
This is needed for the http challenge (and for the potential to use nginx as a proxy in the future.)
9 hoursmodules/stalwart-mail: Explicitly list out valid password hashesBenedikt Peetz
If a password hash does not match stalwart's know ones, it will just treat it as plaintext. This is obviously very bad, and should be avoided.
9 hoursmodules/stalwart-mail: Make `cfg.principals` nullableBenedikt Peetz
This makes it possible to use the internal storage
9 hoursmodules/stalwart-mail: Use correct group name for `redis-stalwart-mail`Benedikt Peetz
11 hourspkgs/stalwart-mail-free: Update package hash, as it changedBenedikt Peetz
This has to do with the underlying stalwart-mail update.
23 hourshosts/server2: Setup sharkeyBenedikt Peetz
Server2 is currently not so much under load, as such it seems better to split the load. # server2 ## Virtual Hosts etebase.vhack.eu: dav.vhack.eu gallery.s-schoeffel.de git.foss-syndicate.org invidious-router.vhack.eu: video.fosswelt.org invidious-router.sils.li issues.foss-syndicate.org libreddit.vhack.eu nextcloud.vhack.eu # <-- This redlib.vhack.eu sharkey.vhack.eu # <-- And this are the “only” really heavy services here. source.foss-syndicate.org source.vhack.eu ## Open ports TCP 22: ssh TCP 25: mail-smtp TCP 53: dns TCP 80: http TCP 443: https TCP 465: mail-smtp-tls TCP 993: mail-imap-tls TCP 995: mail-pop3-tls TCP 10222: taskchampion-sync UDP 53: dns # server3 ## Virtual Hosts b-peetz.de mail.vhack.eu mastodon.vhack.eu matrix.vhack.eu miniflux.foss-syndicate.org: rss.foss-syndicate.org rss.vhack.eu miniflux.vhack.eu openpgpkey.b-peetz.de openpgpkey.s-schoeffel.de openpgpkey.sils.li openpgpkey.vhack.eu peertube.vhack.eu trinitrix.vhack.eu vhack.eu ## Open ports TCP 22: ssh TCP 25: <port is 'mail-smtp' but service 'vhack.mail' is not enabled.> TCP 53: dns TCP 80: http TCP 443: https TCP 465: <port is 'mail-smtp-tls' but service 'vhack.mail' is not enabled.> TCP 993: <port is 'mail-im