aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEuAndreh <eu@euandre.org>2021-01-15 23:53:48 -0300
committerEuAndreh <eu@euandre.org>2021-01-15 23:53:48 -0300
commit9aa89214ff6a52c5618b179453b0f7829607da99 (patch)
treea94e1845a0d63c40dba9d9709c88552c8bddc537
parentvps.scm: Uncomment services (diff)
downloadserver-9aa89214ff6a52c5618b179453b0f7829607da99.tar.gz
server-9aa89214ff6a52c5618b179453b0f7829607da99.tar.xz
TODOs.rst: Format beyond automatic conversion
-rw-r--r--TODOs.rst158
1 files changed, 56 insertions, 102 deletions
diff --git a/TODOs.rst b/TODOs.rst
index 48f819b..c5741b8 100644
--- a/TODOs.rst
+++ b/TODOs.rst
@@ -7,53 +7,49 @@ TODO Try running on the Raspberry Pi
------------------------------------
- TODO in 2020-01-12
- a b c
-
-- DONE in 2020-01-02
-
- xu pliuw
-
-nest
-~~~~
-
-#. woeifj
+----
- #. woeifj
.. _ac19877b-55e3-48c8-8c3a-071124d23cd2:
TODO Use custom README converter
--------------------------------
-
- TODO in 2021-01-12
----
Convert ``README`` file using markdown instead of plain text.
+
.. _92d8ad8d-df93-49c1-8393-eb7147326c29:
DONE Add index.html on built website
------------------------------------
+- DONE in 2020-12-02
-- State "DONE" from [2020-12-02 mer. 15:47]
- Generate index.html from README.md. Done in
- :commit:6d95acf144a4f2e48cb603af3a8032c172ceb53e .
-- State "TODO" from [2020-12-02 mer. 15:41]
+ Generate index.html from README.md. Done in
+ :commit:`6d95acf144a4f2e48cb603af3a8032c172ceb53e` .
+
+- TODO in 2020-12-02
+
+----
.. _dee378cd-9e41-402b-9018-e9ebb05ef75d:
TODO Test Guix deploy
---------------------
+- TODO in 2020-12-02
+
+----
-- State "TODO" from [2020-12-02 mer. 17:21]
.. _d76d4d2c-f07e-420b-8f30-28eb258494a6:
TODO External volume
--------------------
+- TODO in 2020-11-30
-- State "TODO" from [2020-11-30 lun. 01:19]
+----
.. code:: hcl
@@ -74,8 +70,9 @@ TODO External volume
TODO Backups
------------
+- TODO in 2020-11-30
-- State "TODO" from [2020-11-30 lun. 01:19]
+----
If possible, put every data subfolder under the same folder, and just
backup the top-level folder. This also allows me to put it on an
@@ -87,37 +84,18 @@ useful to have if available.
The certificates should be backed up, so that restoring doesn't involve
re-creating everything from scratch.
-.. _email:
-
-TODO Email
-~~~~~~~~~~
-
-- State "TODO" from [2020-11-30 lun. 01:20]
-
-.. _matrix:
-
-TODO Matrix
-~~~~~~~~~~~
-
-- State "TODO" from [2020-11-30 lun. 01:19]
-
-.. _certificates:
-
-TODO Certificates
-~~~~~~~~~~~~~~~~~
-
-- State "TODO" from [2020-11-30 lun. 01:19]
-
-::
-
- /etc/letsencrypt
+- [ ] Email
+- [ ] XMPP
+- [ ] Matrix
+- [ ] Certificates
.. _5f0457af-49dc-4122-83ff-a0604e3c6a02:
TODO Monitoring
---------------
+- TODO in 2020-11-30
-- State "TODO" from [2020-11-30 lun. 01:20]
+----
- https://mmonit.com/monit/
@@ -125,57 +103,61 @@ TODO Monitoring
Reports via email.
+
.. _ee160451-cfe8-49b2-a71f-6f1dca02cb9d:
TODO Intrusion prevention and detection
---------------------------------------
+- TODO in 2020-11-30
-- State "TODO" from [2020-11-30 lun. 01:20]
+----
- http://www.fail2ban.org/wiki/index.php/Main_Page
-
- http://rkhunter.sourceforge.net/
.. _f8a54acf-a417-4957-ac13-21df9a57ed4c:
TODO Security review
--------------------
+- TODO in 2020-11-30
-- State "TODO" from [2020-11-30 lun. 01:20]
+----
https://cheatsheetseries.owasp.org/Glossary.html
+
.. _7d57aa50-597e-4a86-b9d7-c2d84f53e1c6:
TODO Build new Guix image and document the steps
------------------------------------------------
+- TODO in 2020-11-29
-- State "TODO" from [2020-11-29 dim. 02:10]
+----
Instead of syncing the ``.bashrc`` file, I should put my aliases in the
base image.
Setup custom SSH port in the base image itself.
+
.. _43a7a634-84ec-41de-b243-c27fd4a44c25:
TODO Setup cgit
---------------
+- TODO in 2020-11-30
-- State "TODO" from [2020-11-30 lun. 01:20]
-
-- setup ``README`` file rendering
+----
-- force redirect HTTPS
+- setup ``README`` file rendering
+- force redirect HTTPS
+- permanent redirect www and everything else to non-www
-- permanent redirect www and everything else to non-www
.. _dd3f2bc7-8d6d-4bab-9a5e-d3211115e4f4:
TODO Add email mcron job report
-------------------------------
-
-- State "TODO" from [2020-11-29 dim. 20:21]
+- TODO in 2020-11-29
Bugs
====
@@ -186,42 +168,16 @@ Improvements
Services
========
-.. _git.tld-cgit:
+- ``git.$tld``: cgit
+- ``$project.$tld``: static documentation for projects
+- ``ci.$tld``: single static HTML CI page
+- ``mail.$tld``: email
+- ``chat.$tld``: Matrix/XMPP
-TODO ``git.$tld``: cgit
------------------------
+ https://news.ycombinator.com/item?id=25669864
-.. _project.tld-static-documentation-for-projects:
-
-TODO ``$project.$tld``: static documentation for projects
----------------------------------------------------------
-
-.. _ci.tld-single-static-html-ci-page:
-
-TODO ``ci.$tld``: single static HTML CI page
---------------------------------------------
-
-.. _mail.tld-email:
-
-TODO ``mail.$tld``: email
--------------------------
-
-.. _chat.tld-matrixxmpp:
-
-TODO ``chat.$tld``: Matrix/XMPP
--------------------------------
-
-https://news.ycombinator.com/item?id=25669864
-
-.. _meet.tld-jitsinextcloud-talk:
-
-TODO ``meet.$tld``: Jitsi/Nextcloud Talk
-----------------------------------------
-
-.. _tld-jekyll-blog:
-
-TODO ``$tld``: Jekyll blog
---------------------------
+- ``meet.$tld``: Jitsi/Nextcloud Talk
+- ``$tld``: Jekyll blog
Decisions
=========
@@ -230,10 +186,9 @@ Decisions
DONE On public SSH key leakage
------------------------------
+- DONE in 2020-09-06
-CLOSED: [2020-11-29 dim. 00:27]
-
-- State "DONE" from [2020-09-06 dim. 00:00]
+----
As described in "`Public SSH keys can leak your private
infrastructure <https://rushter.com/blog/public-ssh-keys/>`__", public
@@ -246,14 +201,14 @@ SSH port away from the default: it doesn't accomplish the same thing,
but it prevents simple detections. It is still possible to find this out
via a script, but is orders of magnitute harder for the attacker.
+
.. _de89fc4e-5c36-4f6b-9227-221b70e9f321:
DONE Matrix over XMPP
---------------------
+- DONE in 2020-11-29
-CLOSED: [2020-11-29 dim. 00:29]
-
-- State "DONE" from [2020-11-29 dim. 00:29]
+----
I'm picking Matrix. Not because of the protocol or anything else, but
because it has the two relevant double-puppeting bridges:
@@ -269,14 +224,11 @@ client to talk with Telegram and WhatsApp chats.
Resources
=========
-https://framagit.org/tyreunom/system-configuration/
----------------------------------------------------
-
-https://framagit.org/Jeko/guix-machine-os-ynm/
-----------------------------------------------
+- https://framagit.org/tyreunom/system-configuration/
+- https://framagit.org/Jeko/guix-machine-os-ynm/
-Scrath
-======
+Scratch
+=======
Server requiremets:
@@ -303,3 +255,5 @@ use guix deploy over ssh sysrem reconfigure
FIXME: provenance warning
+is activation service the thing i want?
+