Differences

This shows you the differences between two versions of the page.

--- projectinsanity:services [2021/01/17 16:28] – [vpn] 2.205.177.241
+++ projectinsanity:services [2021/10/31 10:42] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
+===== FDroid repository (Gplay mirror) =====
+  * URL: https://onny.project-insanity.org/fdroid/repo
+  * Doku: [[projectinsanity:server_setup#fdroid_repo_gplay_mirror]]
+===== ArchLinux repository =====
+Usage
+<file - /etc/pacman.conf>
+...
+[projectinsanity]
+SigLevel = PackageOptional
+Server = https://onny.project-insanity.org/archlinux
+</file>
+Doku: [[projectinsanity:server_setup#pi_archlinux_repository]]
+===== mail =====
+==== dasalte ====
+  * url: project-insanity.org
+  * imap: 4422
+  * smtp: 25
+  * normal password
+  * starttls (accept all certs)
+  * user: user@domain.com
+==== neu ====
+  * url: mail.project-insanity.org
+  * imap: 143
+  * smtp: 587
+  * normal password
+  * startls (both)
+  * user: user@domain.com
+===== nextcloud =====
+  * url: https://nextcloud.project-insanity.org
+  * webdav access:
+<code>davs://nextcloud.project-insanity.org/remote.php/dav/files/onny/</code>
+===== git =====
+  * url: git.project-insanity.org
+===== office.project-insanity.org =====
+===== bitcoind =====
+run bitcoin-qt like this
+<code bash>
+bitcoin-qt -connect 10.25.0.105 -prune 600
+</code>
+(10.25.0.105 is the internal ipv4 of storage.pi) some recent parts of the blockchains will be still saved locally (~600mb) but full verification is done via the full node installation on storage.pi. for security reasons, connections to ''bitcoin-qt'' are only allowed from the internal (vpn) network.
+it could be possible that you have to remove your old local blockchain and start resyncing.
+===== invoiceplane =====
+  * url: http://http.pi/invoiceplane
+===== transmission =====
+  * url: http://http.pi/transmission
+===== zabbix =====
+  * url: http://http.pi/zabbix
+===== vpn =====
+preparations (archlinux but also works on obongo)
+<code bash>
+pacman -S wireguard-tools
+cd /etc/wireguard
+wg genkey | tee privatekey | wg pubkey > publickey
+chmod 600 privatekey
+chown root:root privatekey
+</code>
+==== archlinux (systemd-networkd) ====
+put pubkey into server config
+<file - /etc/systemd/network/99-client.netdev>
+[NetDev]
+Name = wg0
+Kind = wireguard
+Description = Wireguard
+[WireGuard]
+PrivateKey = [ONNY's PRIVATE KEY]
+[WireGuardPeer]
+PublicKey = [SERVER PUBLICKEY]
+AllowedIPs = 10.25.0.0/16
+Endpoint = 2a01:4f8:191:327::2:51820
+Endpoint = 144.76.16.40:51820
+PersistentKeepalive = 25
+</file>
+<file - /etc/systemd/network/99-client.network>
+[Match]
+Name = wg0
+[Network]
+Address = 10.25.40.2/16
+</file>
+<code bash>
+systemctl restart systemd-networkd
+</code>
+==== obongo / ubuntu ====
+<file - /etc/wireguard/wg0.conf>
+[Interface]
+Address = 10.25.40.3/16
+PrivateKey = [YOUR_PRIVATE_KEY]
+DNS = 10.25.0.1
+MTU = 1500
+ListenPort = 51820
+[Peer]
+# Name = Project-Insanity Wireguard VPN
+PublicKey = [PI_SERVER_PUB_KEY]
+AllowedIPs = 10.25.0.0/16
+Endpoint = 144.76.16.40:51820
+PersistentKeepalive = 25
+</file>
+<code>
+nmcli connection import type wireguard file /etc/wireguard/wg0.conf
+nmcli connection up wg0
+</code>
+===== smaller web services =====
+  * feed
+  * la boum deluxe podcast feed
+  * bounce podcast feed
+  * pishare
+  * getmetadata (radio-browser.info)
+  * arch-upstream
+  * music-id.xyz
+  * archbox.icu
+  * 106fm archive radio
+  * picloud homeserver
+  * https://podcasttune.turbotux.de