= Station

== Libvirt
virsh start station
virsh console station
'e' on grub menu
add `console=tty0 console=ttyS0,115200` to the cmdline
add ipv6 to default network
virsh net-edit default
---
<ip family='ipv6' address='6014:aa3:efbb:1245:fe::2' prefix='96'>
  <dhcp>
    <range start='6014:aa3:efbb:1245:fe::1000' end='6014:aa3:efbb:1245:fe::2000'/>
  </dhcp>
</ip>
---
virsh net-destroy default
virsh net-start default

== Debian
apt install rsync
disable sudo mail_badpass

=== Wireguard
apt install wireguard wireguard-tools
cp wg-rod.conf /etc/wireguard/
cp nftables.conf /etc/nftables.conf
sudo systemctl enable wg-quick@wg-rod
-apt install resolvconf-
apt install systemd-resolved
various things rely on resolv.conf
spamassassin has an issue with dns, systemd-resolved seems to avoid it.

=== SSL
apt install nginx python3-certbox-nginx fcgiwrap
cp letsencrypt.zip /etc/letsencrypt
unzip letsencrypt.zip
cp akoncity /etc/nginx/sites-available
ln -s /etc/nginx/sites-available/akoncity /etc/nginx/sites
-enabled/
sudo usermod --append --groups www-data git
sudo usermod --append --groups git www-data

=== fail2ban
cp fail2ban.d/station.local /etc/fail2ban/fail2ban.d/
cp jail.d/station.local /etc/fail2ban/jail.d/
filter.d/dovecot-pop3imap.conf
https://doc.dovecot.org/main/howto/fail2ban.html

=== email
apt install postfix postfix-pcre dovecot-imapd dovecot-pop3d dovecot-sieve opendkim opendkim-tools spamassassin spamc net-tools bind9-host
apt install pflogsumm
sudo postaliases /etc/aliases
sudo postmap [hash: files]
sievec default.sieve
chown dovecot:dovecot /var/lib/dovecot
sudo chown -R root:opendkim /etc/postfix/dkim
sudo groupadd -g 1001 vmail
sudo useradd -m -d /var/vmail -s /bin/false -u 1001 -g vmail vmail
sudo chown vmail:vmail /var/vmail
sudo chmod 2770 /var/vmail/

=== git
sudo groupadd git
sudo useradd -m -d /var/git -s /bin/bash -g git git
sudo chmod 755 /var/git
sudo cp git-config /var/git/.git-config
sudo unzip git-template.zip -d /var/git/.git-template
add .ssh/authorized_keys
sudo apt install asciidoctor python3-pygments ruby-pygments.rb

=== cgit
git clone --recursive https://git.zx2c4.com/cgit
git apply ../../denpa/cgit/readme_in_summary_no_about.diff
apt install build-essential libcurl4-openssl-dev
make NO_LUA=1
sudo make NO_LUA=1 install
cp custom.css /var/www/htdocs/cgit/
cp cgitrc /etc/cgitrc
cp email-libravatar.py /usr/local/lib/cgit/filters/