Skip to content

Latest commit

 

History

History
104 lines (104 loc) · 4.08 KB

TODO.md

File metadata and controls

104 lines (104 loc) · 4.08 KB
  • Install WordPress (4.6.1) from jessie-backports
    • It wants to install Apache packages though
      • And PHP, obviously
  • Dokuwiki
    • Version included in Debian Jessie is old (20140505)
      • No newer version available in jessie-backports
      • Install by hand
    • Could we just convert everything (including history) to Middleman or Hugo?
    • Make sure to require logins to edit anything
  • Move all web sites over
    • BoochTek wiki
    • BoochTek blog
    • Personal blog
    • Personal site
  • Delete sites from old server
  • Disable RPC ports
  • Configure root emails to get forwarded somewhere useful
  • Backups
  • Monitoring
  • Fail2ban
  • Check log rotation
  • Web metrics
  • Try http://wallabag.org for saving web pages to read later
  • Ansible stuff
    • Use blockinfile in some places instead of lineinfile
      • Useful for when we want blank lines separating and comments
    • Combine some tasks using with_items
      • We can use - { x: 'val', y: 'val' } then use {{ item.x }} and {{ item.y }}
    • Use includes and variables to pull out tasks common to every web site config.
    • Could we write Ansible modules to do if/case statements? Multiple commands?
  • Postfix fixes
    • "Configure Postfix networks allowed to relay through us" is showing as changed every time.
    • Had some problem restarting the service
    • Do we need any of the stuff from https://github.com/debops/ansible-postfix?
    • Should we just copy the whole config file instead of using lineinfile?
    • Enable MSA (Mail Submission Agent) on port 587 for outbound emails from our domains.
      • Don't forget to open the firewall
      • What's the difference between that and LMTP?
    • STARTTLS
      • What do we do about SSL certificates? Will letsencrypt work?
      • Could we use HAProxy or Nginx in front of Postfix to do TLS?
  • Middleman or Hugo
  • Move all web sites over
    • Boochtek
    • Boochtek wiki
    • Boochtek blog
    • Personal blog
    • Personal site
  • GitLab
    • Private config files
  • Email
  • Local email delivery
    • Use maildir format
  • IMAPD
    • Can get newer Dovecot and SpamAssassin from jessie-backports
  • Receive emails through Postfix
    • Don't forget to bind to 0.0.0.0
    • Don't forget to open the firewall
    • Add spam filtering
      • SpamAssassin
      • ClamAV
    • Add greylisting
    • Add SPF records
      • DNSimple supports SPF records
      • SPF records are deprecated, but the TXT record variant is still viable
    • Add DMARC records
      • May require setting up SPF and DKIM
  • What else can we learn from https://github.com/debops?
  • Test server configs using ServerSpec
  • iTunes server
  • Replace NTP server with openntpd?
  • Webmail
    • Can get newer roundcube from jessie-backports
  • Nginx fixes
    • Make sure it works when building a server from scratch
    • Make sure it starts on boot
    • Test against SSL Labs
      • Only thing we're missing is DNS Certification Authority Authorization
        • DNSimple supports CAA records
    • Add custom 404 and 50x error pages
    • Configure to run in a chroot jail, if we can
    • Figure out where to put log files
    • Rotate log files daily (for privacy of users)
      • Gather web stats before we rotate log files
    • Compile NAXSI and/or mod_security module
      • Enable some security filtering
  • CASino for authentication.
  • Something that uses CASino.
    • Retro temperature metrics
      • Try with and without a proxy in front.
      • Proxy to make it appear as 1 app.
  • OwnCloud or something similar
    • File server
    • Calendar
    • Contacts
  • RSS Feed reader?