blob: 1ca39252ac831921dc2b0cd36f0579afc6428270 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
= Station
== Libvirt
virsh start station
virsh console station
'e' on grub menu
add `console=tty0 console=ttyS0,115200` to the cmdline
add ipv6 to default network
virsh net-edit default
---
<ip family='ipv6' address='6014:aa3:efbb:1245:fe::2' prefix='96'>
<dhcp>
<range start='6014:aa3:efbb:1245:fe::1000' end='6014:aa3:efbb:1245:fe::2000'/>
</dhcp>
</ip>
---
virsh net-destroy default
virsh net-start default
== Debian
apt install rsync
disable sudo mail_badpass
=== Wireguard
apt install wireguard wireguard-tools
cp wg-rod.conf /etc/wireguard/
cp nftables.conf /etc/nftables.conf
sudo systemctl enable wg-quick@wg-rod
-apt install resolvconf-
apt install systemd-resolved
various things rely on resolv.conf
spamassassin has an issue with dns, systemd-resolved seems to avoid it.
=== SSL
apt install nginx python3-certbox-nginx fcgiwrap
cp letsencrypt.zip /etc/letsencrypt
unzip letsencrypt.zip
cp akoncity /etc/nginx/sites-available
ln -s /etc/nginx/sites-available/akoncity /etc/nginx/sites
-enabled/
sudo usermod --append --groups www-data git
sudo usermod --append --groups git www-data
=== fail2ban
cp fail2ban.d/station.local /etc/fail2ban/fail2ban.d/
cp jail.d/station.local /etc/fail2ban/jail.d/
filter.d/dovecot-pop3imap.conf
https://doc.dovecot.org/main/howto/fail2ban.html
=== email
apt install postfix postfix-pcre dovecot-imapd dovecot-pop3d dovecot-sieve opendkim opendkim-tools spamassassin spamc net-tools bind9-host
apt install pflogsumm
sudo postaliases /etc/aliases
sudo postmap [hash: files]
sievec default.sieve
chown dovecot:dovecot /var/lib/dovecot
sudo chown -R root:opendkim /etc/postfix/dkim
sudo groupadd -g 1001 vmail
sudo useradd -m -d /var/vmail -s /bin/false -u 1001 -g vmail vmail
sudo chown vmail:vmail /var/vmail
sudo chmod 2770 /var/vmail/
=== git
sudo groupadd git
sudo useradd -m -d /var/git -s /bin/bash -g git git
sudo chmod 755 /var/git
sudo cp git-config /var/git/.git-config
sudo unzip git-template.zip -d /var/git/.git-template
add .ssh/authorized_keys
sudo apt install asciidoctor python3-pygments ruby-pygments.rb
=== cgit
git clone --recursive https://git.zx2c4.com/cgit
git apply ../../denpa/cgit/readme_in_summary_no_about.diff
apt install build-essential libcurl4-openssl-dev
make NO_LUA=1
sudo make NO_LUA=1 install
cp custom.css /var/www/htdocs/cgit/
cp cgitrc /etc/cgitrc
cp email-libravatar.py /usr/local/lib/cgit/filters/
|