Site Tools


Hotfix release available: 2024-02-06a "Kaos". upgrade now! [55.1] (what's this?)
New release available: 2024-02-06 "Kaos". upgrade now! [55] (what's this?)
projectinsanity:services

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

projectinsanity:services [2021/01/17 16:58] – [vpn] 2.205.177.241projectinsanity:services [2021/10/31 10:42] (current) – external edit 127.0.0.1
Line 1: Line 1:
 +===== FDroid repository (Gplay mirror) =====
 +  * URL: https://onny.project-insanity.org/fdroid/repo
 +  * Doku: [[projectinsanity:server_setup#fdroid_repo_gplay_mirror]]
 +
 +===== ArchLinux repository =====
 +Usage
 +<file - /etc/pacman.conf>
 +...
 +[projectinsanity]
 +SigLevel = PackageOptional
 +Server = https://onny.project-insanity.org/archlinux
 +</file>
 +Doku: [[projectinsanity:server_setup#pi_archlinux_repository]]
 +
 +
 +
 +===== mail =====
 +==== dasalte ====
 +  * url: project-insanity.org
 +  * imap: 4422
 +  * smtp: 25
 +  * normal password
 +  * starttls (accept all certs)
 +  * user: user@domain.com
 +==== neu ====
 +  * url: mail.project-insanity.org
 +  * imap: 143
 +  * smtp: 587
 +  * normal password
 +  * startls (both)
 +  * user: user@domain.com
 +
 +===== nextcloud =====
 +  * url: https://nextcloud.project-insanity.org
 +  * webdav access:
 +<code>davs://nextcloud.project-insanity.org/remote.php/dav/files/onny/</code>
 +===== git =====
 +  * url: git.project-insanity.org
 +
 +===== office.project-insanity.org =====
 +
 +===== bitcoind =====
 +run bitcoin-qt like this 
 +<code bash>
 +bitcoin-qt -connect 10.25.0.105 -prune 600
 +</code>
 +(10.25.0.105 is the internal ipv4 of storage.pi) some recent parts of the blockchains will be still saved locally (~600mb) but full verification is done via the full node installation on storage.pi. for security reasons, connections to ''bitcoin-qt'' are only allowed from the internal (vpn) network.
 +
 +it could be possible that you have to remove your old local blockchain and start resyncing.
 +===== invoiceplane =====
 +  * url: http://http.pi/invoiceplane
 +
 +===== transmission =====
 +  * url: http://http.pi/transmission
 +
 +===== zabbix =====
 +  * url: http://http.pi/zabbix
 +
 +===== vpn =====
 +preparations (archlinux but also works on obongo)
 +<code bash>
 +pacman -S wireguard-tools
 +cd /etc/wireguard
 +wg genkey | tee privatekey | wg pubkey > publickey
 +chmod 600 privatekey
 +chown root:root privatekey
 +</code>
 +==== archlinux (systemd-networkd) ====
 +put pubkey into server config
 +<file - /etc/systemd/network/99-client.netdev>
 +[NetDev]
 +Name = wg0
 +Kind = wireguard
 +Description = Wireguard
 +
 +[WireGuard]
 +PrivateKey = [ONNY's PRIVATE KEY]
 +
 +[WireGuardPeer]
 +PublicKey = [SERVER PUBLICKEY]
 +AllowedIPs = 10.25.0.0/16
 +Endpoint = 2a01:4f8:191:327::2:51820
 +Endpoint = 144.76.16.40:51820
 +PersistentKeepalive = 25
 +</file>
 +<file - /etc/systemd/network/99-client.network>
 +[Match]
 +Name = wg0
 +
 +[Network]
 +Address = 10.25.40.2/16
 +</file>
 +<code bash>
 +systemctl restart systemd-networkd
 +</code>
 +==== obongo / ubuntu ====
 +<file - /etc/wireguard/wg0.conf>
 +[Interface]
 +Address = 10.25.40.3/16
 +PrivateKey = [YOUR_PRIVATE_KEY]
 +DNS = 10.25.0.1
 +MTU = 1500
 +ListenPort = 51820
 +
 +[Peer]
 +# Name = Project-Insanity Wireguard VPN
 +PublicKey = [PI_SERVER_PUB_KEY]
 +AllowedIPs = 10.25.0.0/16
 +Endpoint = 144.76.16.40:51820
 +PersistentKeepalive = 25
 +</file>
 +<code>
 +nmcli connection import type wireguard file /etc/wireguard/wg0.conf
 +nmcli connection up wg0
 +</code>
 +===== smaller web services =====
 +  * feed
 +  * la boum deluxe podcast feed
 +  * bounce podcast feed
 +  * pishare
 +  * getmetadata (radio-browser.info)
 +  * arch-upstream
 +  * music-id.xyz
 +  * archbox.icu
 +  * 106fm archive radio
 +  * picloud homeserver
 +  * https://podcasttune.turbotux.de