aboutsummaryrefslogtreecommitdiff
path: root/TODOs.org
diff options
context:
space:
mode:
authorEuAndreh <eu@euandre.org>2020-08-18 08:56:26 -0300
committerEuAndreh <eu@euandre.org>2020-08-19 06:59:53 -0300
commit21ebd9be57a8dcdc97d333c6cf2ba19d2642f405 (patch)
treeb3e56b88f10beacc42c7aa5f87f6261c8e87e082 /TODOs.org
parentCheckpoint: working matterbridge server (diff)
downloadserver-21ebd9be57a8dcdc97d333c6cf2ba19d2642f405.tar.gz
server-21ebd9be57a8dcdc97d333c6cf2ba19d2642f405.tar.xz
Checkpoint: Shut down Prosody and matterbridge
Full reasoning under "Decisions" section inside TODOs.org.
Diffstat (limited to 'TODOs.org')
-rw-r--r--TODOs.org74
1 files changed, 22 insertions, 52 deletions
diff --git a/TODOs.org b/TODOs.org
index 5416791..6c5e744 100644
--- a/TODOs.org
+++ b/TODOs.org
@@ -1,42 +1,4 @@
* Tasks - v4
-** DONE Prosody in localhost
-CLOSED: [2020-08-14 ven. 09:29]
-** CANCELLED Prosody in NixOS with NGINX
-https://www.reddit.com/r/linuxadmin/comments/7z0ahv/prosody_behind_reverse_proxy/dunbdmv/:
-#+BEGIN_SRC nginx
-server {
- listen 80;
- listen [::]:80;
- server_name xmpp.domain.com
-
- return 301 https://$host$request_uri;
-}
-
-server {
- listen 443 ssl;
- listen [::]:443 ssl;
-
- ssl on;
- ssl_certificate /path/to/cert;
- ssl_certificate_key /path/to/key;
-
- location / {
- proxy_pass http://192.168.2.101:5222;
- proxy_http_version 1.1;
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection 'upgrade';
- proxy_set_header Host $host;
- proxy_cache_bypass $http_upgrade;
- }
-}
-#+END_SRC
-Use Prosody as a server itself
-** DONE Prosody TLS
-CLOSED: [2020-08-16 dim. 18:52]
-** DONE matterbridge
-CLOSED: [2020-08-16 dim. 21:58]
-** DONE Converse
-CLOSED: [2020-08-16 dim. 21:58]
** DONE cgit
CLOSED: [2020-08-14 ven. 09:29]
** TODO Terraform restore from backup when provisioning
@@ -70,7 +32,6 @@ resource "vultr_block_storage" "vps_storage" {
live = "yes"
}
#+END_SRC
-** TODO Stop doing chmod to share certificates
* Tasks - v5
** TODO Run cgit from nginx instead of using lighttpd
** TODO EteSync?
@@ -78,21 +39,11 @@ resource "vultr_block_storage" "vps_storage" {
* Services - v2
** DONE =cloud.$tld=: Nextcloud: storage, calendar, contacts, notes and talk
CLOSED: [2020-08-14 ven. 09:29]
-** DONE =chat.$tld=: [[https://conversejs.org/][Converse]] interface to Prosody server
-CLOSED: [2020-08-16 dim. 21:58]
-Setup under Prosody server, and bridge it with Telegram and WhatsApp using matterbridge.
-#+BEGIN_SRC nix
-muc = [{
- domain = envsubstConfiguration.prosodyMUCTLD;
-}];
-uploadHttp = {
- domain = envsubstConfiguration.prosodyHTTPUploadTLD;
-};
-#+END_SRC
** DONE =git.$tld=: cgit server with repositories from ~/dev/libre/
CLOSED: [2020-08-14 ven. 09:29]
** DONE =boneco.$tld=: [[https://git.sr.ht/~euandreh/boneco][boneco]] deployment
CLOSED: [2020-08-15 sam. 18:17]
+** CANCELLED =chat.$tld=: [[https://conversejs.org/][Converse]] interface to Prosody server
** TODO =mail.$tld=: postfix, dovecot, spamassasin, opendkim, etc
No need for roundcube, Nextcloud has a web interface client.
** TODO =$tld=: current Jekyll blog
@@ -155,8 +106,27 @@ Instead, explicitly call =ansible-playbook= after =terraform apply= finished run
This way we test the DNS A record -> Floating IP -> Droplet IP path. We can't do that inside Terraform declaration because the =local-exec= provisioning command runs before the =digitalocean_floating_ip_assignment= is created, and we can't create a cyclic dependency between the two resources.
We could use the raw Droplet IP instead of the DNS A record, but I prefer calling it later in order to always test the full DNS resolution.
+** On shutting down Prosody and matterbridge
+Only after having a fully working configuration between Prosody, matterbridge
+and the gateways, I realized that matterbridge only support private groups for a
+few of their integrations. I should have read the whole documentation instead of
+just jumping in and start configuring.
+
+Instead of finishing the desired setup (missing things listed below), I'll
+remove the existing configuration.
+
+I do like XMPP over everything else, but I see little point in maintaining it if
+nobody I want to talk to wants to use it.
+
+I'll have to search for other solutions, or other ways to approach this problem.
+*** XMPP tasks
+**** Setup MUC on Prosody
+**** Setup DNS =SRV= records
+**** =xmpp.$tld=: Prosody server
+**** =chat.$tld=: [[https://conversejs.org/][Converse]] interface to Prosody server
+=proxyPass= from =chat.$tld= to =xmpp.$tld/conversejs=.
+**** Stop doing chmod to share certificates
* Questions
** How to best handle IP changes when the server changes? How does this affect the email sending IP reputation?
** Enable 2FA for Nextcloud?
-Do XMPP support that too?
-* Scrath
+* Scratch