diff options
Diffstat (limited to 'TODOs.org')
| -rw-r--r-- | TODOs.org | 74 |
1 files changed, 52 insertions, 22 deletions
@@ -1,4 +1,42 @@ * Tasks - v4 +** DONE Prosody in localhost +CLOSED: [2020-08-14 ven. 09:29] +** CANCELLED Prosody in NixOS with NGINX +https://www.reddit.com/r/linuxadmin/comments/7z0ahv/prosody_behind_reverse_proxy/dunbdmv/: +#+BEGIN_SRC nginx +server { + listen 80; + listen [::]:80; + server_name xmpp.domain.com + + return 301 https://$host$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + + ssl on; + ssl_certificate /path/to/cert; + ssl_certificate_key /path/to/key; + + location / { + proxy_pass http://192.168.2.101:5222; + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection 'upgrade'; + proxy_set_header Host $host; + proxy_cache_bypass $http_upgrade; + } +} +#+END_SRC +Use Prosody as a server itself +** DONE Prosody TLS +CLOSED: [2020-08-16 dim. 18:52] +** DONE matterbridge +CLOSED: [2020-08-16 dim. 21:58] +** DONE Converse +CLOSED: [2020-08-16 dim. 21:58] ** DONE cgit CLOSED: [2020-08-14 ven. 09:29] ** TODO cgit: show README in about section @@ -34,6 +72,7 @@ resource "vultr_block_storage" "vps_storage" { live = "yes" } #+END_SRC +** TODO Stop doing chmod to share certificates * Tasks - v5 ** TODO Run cgit from nginx instead of using lighttpd ** TODO EteSync? @@ -41,11 +80,21 @@ resource "vultr_block_storage" "vps_storage" { * Services - v2 ** DONE =cloud.$tld=: Nextcloud: storage, calendar, contacts, notes and talk CLOSED: [2020-08-14 ven. 09:29] +** DONE =chat.$tld=: [[https://conversejs.org/][Converse]] interface to Prosody server +CLOSED: [2020-08-16 dim. 21:58] +Setup under Prosody server, and bridge it with Telegram and WhatsApp using matterbridge. +#+BEGIN_SRC nix +muc = [{ + domain = envsubstConfiguration.prosodyMUCTLD; +}]; +uploadHttp = { + domain = envsubstConfiguration.prosodyHTTPUploadTLD; +}; +#+END_SRC ** DONE =git.$tld=: cgit server with repositories from ~/dev/libre/ CLOSED: [2020-08-14 ven. 09:29] ** DONE =boneco.$tld=: [[https://git.sr.ht/~euandreh/boneco][boneco]] deployment CLOSED: [2020-08-15 sam. 18:17] -** CANCELLED =chat.$tld=: [[https://conversejs.org/][Converse]] interface to Prosody server ** TODO =mail.$tld=: postfix, dovecot, spamassasin, opendkim, etc No need for roundcube, Nextcloud has a web interface client. ** TODO =$tld=: current Jekyll blog @@ -108,27 +157,8 @@ Instead, explicitly call =ansible-playbook= after =terraform apply= finished run This way we test the DNS A record -> Floating IP -> Droplet IP path. We can't do that inside Terraform declaration because the =local-exec= provisioning command runs before the =digitalocean_floating_ip_assignment= is created, and we can't create a cyclic dependency between the two resources. We could use the raw Droplet IP instead of the DNS A record, but I prefer calling it later in order to always test the full DNS resolution. -** On shutting down Prosody and matterbridge -Only after having a fully working configuration between Prosody, matterbridge -and the gateways, I realized that matterbridge only support private groups for a -few of their integrations. I should have read the whole documentation instead of -just jumping in and start configuring. - -Instead of finishing the desired setup (missing things listed below), I'll -remove the existing configuration. - -I do like XMPP over everything else, but I see little point in maintaining it if -nobody I want to talk to wants to use it. - -I'll have to search for other solutions, or other ways to approach this problem. -*** XMPP tasks -**** Setup MUC on Prosody -**** Setup DNS =SRV= records -**** =xmpp.$tld=: Prosody server -**** =chat.$tld=: [[https://conversejs.org/][Converse]] interface to Prosody server -=proxyPass= from =chat.$tld= to =xmpp.$tld/conversejs=. -**** Stop doing chmod to share certificates * Questions ** How to best handle IP changes when the server changes? How does this affect the email sending IP reputation? ** Enable 2FA for Nextcloud? -* Scratch +Do XMPP support that too? +* Scrath |