diff options
author | EuAndreh <eu@euandre.org> | 2019-06-16 17:42:50 -0300 |
---|---|---|
committer | EuAndreh <eu@euandre.org> | 2019-06-16 17:42:50 -0300 |
commit | f45be0048bdab3fb642063f6ed99a04af4cd1170 (patch) | |
tree | b68fa3eb28ba66bcfe347348198ebdd158b42fda | |
parent | Chage $TLD! :tada: (diff) | |
download | server-f45be0048bdab3fb642063f6ed99a04af4cd1170.tar.gz server-f45be0048bdab3fb642063f6ed99a04af4cd1170.tar.xz |
TODOs.org
-rw-r--r-- | TODOs.org | 14 |
1 files changed, 12 insertions, 2 deletions
@@ -138,11 +138,14 @@ One can't destroy a Droplet without destroying associated snapshots, even with s ** TODO Rotate git crypt key Same in =vps-state= repo. ** TODO Change builds.sr.ht SSH keys +** TODO Deactivate Wallabag ** TODO Harden the server *** TODO [#C] [[https://www.reddit.com/r/selfhosted/comments/bw8hqq/top_3_measures_to_secure_your_virtual_private/][Top 3 measures to secure your Virtual Private Server? (VPS)]] *** TODO [#A] [[https://docs.nextcloud.com/server/stable/admin_manual/installation/harden_server.html][Nextcloud: Hardening and security guidance]] *** TODO [#A] [[https://ownyourbits.com/2017/03/25/nextcloud-a-security-analysis/][NextCloud, a security analysis]] *** TODO [#B] [[https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/HTTP_Strict_Transport_Security_Cheat_Sheet.md][Check for HSTS header configuration]] +** TODO Settle on TLD +Change virtual card to avoid charging. ** CANCELLED Use git-remote-gcrypt instead of git-crypt for vps-state Also put all of the content of =secrets/*= into vps-state? Maybe rename it to vps-secret? @@ -177,7 +180,8 @@ It's working fine like this right now, and I'll gain nothing from this change. * Tasks - v2 ** TODO Settle on TLD ** TODO Upgrade =docker-compose.yaml= file from version 2 to version 3 -** TODO =euandreh.org= as =$tld= +** DONE =euandreh.org= as =$tld= +CLOSED: [2019-06-16 Sun 17:42] ** TODO Improve rotation of SSH port Remove need for manual intervention ** TODO README with setup instructions @@ -188,12 +192,13 @@ The =file= package is imported in =shell.nix= but =~/.buildenv= is sourced befor * Services ** DONE =$tld=: Static webhosting CLOSED: [2019-05-26 Sun 10:17] +Use IPFS? What about Dat? ** DONE =wallabag.$tld=: Wallabag CLOSED: [2019-05-25 Sat 18:02] A bookmark application must: - allow me to save and read articles on Android and Firefox; - allow me to have tags for links; -** NEXT =nextcloud.$tld=: Nextcloud: storage, calendar, contacts, notes +** NEXT =cloud.$tld=: Nextcloud: storage, calendar, contacts, notes https://github.com/nextcloud/docker Do I need to configure =NEXTCLOUD_TRUSTED_DOMAINS= or it should work without it? @@ -223,6 +228,8 @@ I'd like to release both pre-compiled binaries and Docker images. Only an static file server, with folders for individual assets. ** TODO =pi-hole.$tld=: Pi-hole ** TODO =pwk.$tld=: Piwik +** TODO =sentry.$tld=: Sentry +** TODO =ipfs.$tld=: IPFS pinning service ** TODO =git.$tld=: CGit or GitWeb https://github.com/iconoeugen/docker-gitweb ** TODO =songbooks.$tld=: Songbooks demo application @@ -249,6 +256,8 @@ Also from https://matrix.org/blog/2015/06/22/the-matrix-org-irc-bridge-now-bridg Should continue to consider doing as I continue to use IRC. Test the Emacs Matrix client along with the server installation. + +Use =eu@$tld= for identity server, =chat.$tld= for Riot. ** WAITING =search.$tld=: Searx instance Would it be actually more private? * Questions @@ -287,6 +296,7 @@ Provision it using Terraform, and use it's path as the =$VOLUME_HOME= variable f This was I can compartimentalize the data storage to easily backup and duplicate, but also destroy a running droplet and create a new one. * Nice to have +** TODO =ETag= on static files ** Nix Terraform provisioning Revive NixOps. |