Obsidian/05.02 Networks/Server Alias.md

Alias	Tag	Date	DocType	Hierarchy	location	Performance	Characteristics	Disk	CollapseMetaTable
Email Alias	🖥️ 📲 📧 🕵🏼 🛡️ 🌐	2021-08-28	Server	NonRoot	48.8570517 2.3677354	CPU RAM Bandwidth Speed 1Core 2GB 2TB 100MBps	OS Domiciliation Host IPv4 Hostname SubDomain Ubuntu 20.04 NL Hostigger 5.181.166.123 1630136610 emailalias	Capa Type UsedSpace TimeStamp 20GB SSD 50% 2021-11-13	true

Parent:: mfxm Website Scope, Email & Communication

---

^Top

 

name Edit Server parameters
type command
action MetaEdit: Run MetaEdit
id EditMetaData

^button-EAServerEdit

name Save
type command
action Save current file
id Save

^button-EAServerSave

 

Email Alias Server

 

title: Summary
collapse: open
Quick note to centralise all relevant info on the server hosting the email aliasing service.

 

style: number

 

---

 

Server parameters

#^Top  

title: Dashboard access
[https://clients.hostiger.com/clientarea](https://clients.hostiger.com/clientarea)

 

title: Address
The service will be located under **[emailalias.mfxm.fr](https://emailalias.mfxm.fr)** .

 

---

 

Service

#^Top  

title: Service description
The Email Alias service itself is called [SimpleLogin](https://simplelogin.io/) and is an open-source software enabling to create email aliases.

 

Installed dependencies

#^Top All dependencies for running the alias service.

 

Security

Program name	Type	Description
Configuring Fail2ban	Deamon	Blocks suspicious attempts to login
unattended-upgrades	Program	Enables automatic updates of installed programs and OS
logwatch	Deamon	Monitors activity on server and sends activity logs

 

fail2ban

#^Top Classic Configuring Fail2ban installation with a dedicated configuration:

~~~bash
sudo nano /etc/fail2ban/jail.d/sshd.local
~~~

With the following parameters:

~~~yaml
[sshd]
enabled = true
port=2227
maxretry = 10
bantime = 1m
~~~

 

Please refer to the Configuring Fail2ban for a detailed description.

 

UFW

Firewall management, see Configuring UFW for more details.

 

Docker

title: Docker for non root users
[[Docker config|docker]] predominantly works for the root user. In order to let non-root users instruct Docker, users need to be added to the Docker group:

~~~bash
sudo usermod -aG docker (username)
~~~

Potentially, the Docker group needs to be defined:

~~~bash
sudo groupadd docker
~~~

Currently running Configuring Docker containers

title: sl-network
7c0268d5066a4bda05abb193772b0c0bcb480a0a55cf8772bca76272b74e8148

title: sl-db
e4335360528e6f091efda49e75a27ab638277dc8107e45062780119d19a530cd

title: sl-app
d4d7fefc710670312ae5e529d39537a6b93d58ff1af63219054c209d4b1179a6

title: sl-email
39dbdb260763fec2a2b138d000f2ded9fe61c8ed5857cc9ef2823b0f7fb62913

 

Nginx

#^Top Webserver. No particular setup apart from Certificate & pointing towards the sub-domain.

 

CertBot

All documentation in this link.

 

Postfix

Mail Transfer Agent. Configuring Postfix is tailor-made by SimpleLogin to fit their needs.

 

Server-side Monitoring

#^Top Refer to the Configuring Monit for further information on installation and configuration.

List of monitored services:

• System
• SSH
• Configuring Fail2ban
• cron
• Postfix
• nginx
• docker
  • Postgres
  • sl-app
  • sl-email

 

Configuring Telegram bots are also being implemented to receive logs from logwatch & Configuring Monit.

 

Troubleshooting

#^Top  

DNS issues

title: Server pointing
The Email Alias service itself is called [SimpleLogin](https://simplelogin.io/) and is an open-source software enabling to create email aliases.

 

Documentation for SimpleLogin

title: Troubleshooting SimpleLogin
Troubleshooting for [SimpleLogin](https://github.com/simple-login/app) and its parametrisation can be found [here](https://github.com/simple-login/app/blob/master/docs/troubleshooting.md) and [here](https://github.com/simple-login/app/blob/master/example.env)

 

CertBot

#^Top

title: Troubleshooting CertBot
Running and troubleshooting for CertBot can be found [here](https://certbot.eff.org/docs/install.html)

 

Service management

The service itself does not require particular management as all features are embedded in the client interface running from the docker container 'sl-app', including user management. Parameters can only be amended through the config file under the root user:

sudo vim ~/simplelogin.env

Sample configs can be found here

Once the change is made, restart the app container:

~~~bash
docker restart sl-app
~~~

 

Force premium subscription for users

#^Top Users will be defaulted to the 'Free' plan and asked to subscribe to the premium plan. In order to force users onto the Premium plan, please update the database:

~~~bash
docker exec -it sl-db psql -U (dbusername) simplelogin
~~~

And then run:

~~~bash
UPDATE users SET lifetime = 'TRUE' WHERE EMAIL = '(emailaddress)';
~~~

And \q to exit the db.

 

---

 

Pricing

#^Top  

Alias Server	One-off cost	Recurring subscription p.a.

**Server hosting**

|   | *$20* ^AliasServerCost

 

---

 

Tasks & Further steps

 

• 📧 Selfhosting, Server Alias: Upgrader & Health checks %%done_del%% 🔁 every 4 months 📅 2023-03-31

• Selfhosting, Server Alias: Upgrader & Health checks 🔁 every 4 months 📅 2022-07-31 ✅ 2022-08-02

• Selfhosting, Server Alias: Upgrader & Health checks 🔁 every 4 months 📅 2022-03-31 ✅ 2022-03-31

• 📧 Server Alias: Backup server %%done_del%% 🔁 every 6 months on the 1st Tuesday 📅 2023-03-07

• 📧 Server Alias: Backup server %%done_del%% 🔁 every 6 months on the 1st Tuesday 📅 2022-09-06 ✅ 2022-09-06

• Server Alias: Backup server 🔁 every 6 months on the 1st Tuesday 📅 2022-03-11 ✅ 2022-03-11

• Server Alias: Backup server 🔁 every 6 months on the 1st Tuesday 📅 2021-09-15 ✅ 2022-01-08

• Server Alias: Backup server 🔁 every 6 months on the 1st Tuesday ✅ 2021-09-14

• Understand why Gmail does not work

#^Top