aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEuAndreh <eu@euandre.org>2019-06-16 17:42:50 -0300
committerEuAndreh <eu@euandre.org>2019-06-16 17:42:50 -0300
commitf45be0048bdab3fb642063f6ed99a04af4cd1170 (patch)
treeb68fa3eb28ba66bcfe347348198ebdd158b42fda
parentChage $TLD! :tada: (diff)
downloadserver-f45be0048bdab3fb642063f6ed99a04af4cd1170.tar.gz
server-f45be0048bdab3fb642063f6ed99a04af4cd1170.tar.xz
TODOs.org
-rw-r--r--TODOs.org14
1 files changed, 12 insertions, 2 deletions
diff --git a/TODOs.org b/TODOs.org
index 061e095..a8f97ce 100644
--- a/TODOs.org
+++ b/TODOs.org
@@ -138,11 +138,14 @@ One can't destroy a Droplet without destroying associated snapshots, even with s
** TODO Rotate git crypt key
Same in =vps-state= repo.
** TODO Change builds.sr.ht SSH keys
+** TODO Deactivate Wallabag
** TODO Harden the server
*** TODO [#C] [[https://www.reddit.com/r/selfhosted/comments/bw8hqq/top_3_measures_to_secure_your_virtual_private/][Top 3 measures to secure your Virtual Private Server? (VPS)]]
*** TODO [#A] [[https://docs.nextcloud.com/server/stable/admin_manual/installation/harden_server.html][Nextcloud: Hardening and security guidance]]
*** TODO [#A] [[https://ownyourbits.com/2017/03/25/nextcloud-a-security-analysis/][NextCloud, a security analysis]]
*** TODO [#B] [[https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/HTTP_Strict_Transport_Security_Cheat_Sheet.md][Check for HSTS header configuration]]
+** TODO Settle on TLD
+Change virtual card to avoid charging.
** CANCELLED Use git-remote-gcrypt instead of git-crypt for vps-state
Also put all of the content of =secrets/*= into vps-state? Maybe rename it to vps-secret?
@@ -177,7 +180,8 @@ It's working fine like this right now, and I'll gain nothing from this change.
* Tasks - v2
** TODO Settle on TLD
** TODO Upgrade =docker-compose.yaml= file from version 2 to version 3
-** TODO =euandreh.org= as =$tld=
+** DONE =euandreh.org= as =$tld=
+CLOSED: [2019-06-16 Sun 17:42]
** TODO Improve rotation of SSH port
Remove need for manual intervention
** TODO README with setup instructions
@@ -188,12 +192,13 @@ The =file= package is imported in =shell.nix= but =~/.buildenv= is sourced befor
* Services
** DONE =$tld=: Static webhosting
CLOSED: [2019-05-26 Sun 10:17]
+Use IPFS? What about Dat?
** DONE =wallabag.$tld=: Wallabag
CLOSED: [2019-05-25 Sat 18:02]
A bookmark application must:
- allow me to save and read articles on Android and Firefox;
- allow me to have tags for links;
-** NEXT =nextcloud.$tld=: Nextcloud: storage, calendar, contacts, notes
+** NEXT =cloud.$tld=: Nextcloud: storage, calendar, contacts, notes
https://github.com/nextcloud/docker
Do I need to configure =NEXTCLOUD_TRUSTED_DOMAINS= or it should work without it?
@@ -223,6 +228,8 @@ I'd like to release both pre-compiled binaries and Docker images.
Only an static file server, with folders for individual assets.
** TODO =pi-hole.$tld=: Pi-hole
** TODO =pwk.$tld=: Piwik
+** TODO =sentry.$tld=: Sentry
+** TODO =ipfs.$tld=: IPFS pinning service
** TODO =git.$tld=: CGit or GitWeb
https://github.com/iconoeugen/docker-gitweb
** TODO =songbooks.$tld=: Songbooks demo application
@@ -249,6 +256,8 @@ Also from https://matrix.org/blog/2015/06/22/the-matrix-org-irc-bridge-now-bridg
Should continue to consider doing as I continue to use IRC.
Test the Emacs Matrix client along with the server installation.
+
+Use =eu@$tld= for identity server, =chat.$tld= for Riot.
** WAITING =search.$tld=: Searx instance
Would it be actually more private?
* Questions
@@ -287,6 +296,7 @@ Provision it using Terraform, and use it's path as the =$VOLUME_HOME= variable f
This was I can compartimentalize the data storage to easily backup and duplicate, but also destroy a running droplet and create a new one.
* Nice to have
+** TODO =ETag= on static files
** Nix Terraform provisioning
Revive NixOps.