6.9 KiB
Alias | Tag | Date | DocType | Hierarchy | location | Performance | Characteristics | Disk | CollapseMetaTable | |||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|
2021-08-28 | Server | NonRoot |
|
|
|
|
yes |
Parent:: mfxm Website Scope, Email & Communication
^Top
name Edit Server parameters
type command
action MetaEdit: Run MetaEdit
id EditMetaData
^button-EAServerEdit
name Save
type command
action Save current file
id Save
^button-EAServerSave
Email Alias Server
title: Summary
collapse: open
Quick note to centralise all relevant info on the server hosting the email aliasing service.
style: number
Server parameters
title: Dashboard access
[https://clients.hostiger.com/clientarea](https://clients.hostiger.com/clientarea)
title: Address
The service will be located under **[emailalias.mfxm.fr](https://emailalias.mfxm.fr)** .
Service
title: Service description
The Email Alias service itself is called [SimpleLogin](https://simplelogin.io/) and is an open-source software enabling to create email aliases.
Installed dependencies
#^Top All dependencies for running the alias service.
Security
Program name | Type | Description |
---|---|---|
Configuring Fail2ban | Deamon | Blocks suspicious attempts to login |
unattended-upgrades | Program | Enables automatic updates of installed programs and OS |
logwatch | Deamon | Monitors activity on server and sends activity logs |
fail2ban
#^Top Classic Configuring Fail2ban installation with a dedicated configuration:
~~~bash
sudo nano /etc/fail2ban/jail.d/sshd.local
~~~
With the following parameters:
~~~yaml
[sshd]
enabled = true
port=2227
maxretry = 10
bantime = 1m
~~~
Please refer to the Configuring Fail2ban for a detailed description.
UFW
Firewall management, see Configuring UFW for more details.
Docker
title: Docker for non root users
[[Docker config|docker]] predominantly works for the root user. In order to let non-root users instruct Docker, users need to be added to the Docker group:
~~~bash
sudo usermod -aG docker (username)
~~~
Potentially, the Docker group needs to be defined:
~~~bash
sudo groupadd docker
~~~
Currently running Configuring Docker containers
title: sl-network
7c0268d5066a4bda05abb193772b0c0bcb480a0a55cf8772bca76272b74e8148
title: sl-db
e4335360528e6f091efda49e75a27ab638277dc8107e45062780119d19a530cd
title: sl-app
d4d7fefc710670312ae5e529d39537a6b93d58ff1af63219054c209d4b1179a6
title: sl-email
39dbdb260763fec2a2b138d000f2ded9fe61c8ed5857cc9ef2823b0f7fb62913
Nginx
#^Top Webserver. No particular setup apart from Certificate & pointing towards the sub-domain.
CertBot
All documentation in this link.
Postfix
Mail Transfer Agent. Configuring Postfix is tailor-made by SimpleLogin to fit their needs.
Server-side Monitoring
#^Top Refer to the Configuring Monit for further information on installation and configuration.
List of monitored services:
- System
- SSH
- Configuring Fail2ban
- cron
- Postfix
- nginx
- docker
- Postgres
- sl-app
- sl-email
Configuring Telegram bots are also being implemented to receive logs from logwatch & Configuring Monit.
Troubleshooting
DNS issues
title: Server pointing
The Email Alias service itself is called [SimpleLogin](https://simplelogin.io/) and is an open-source software enabling to create email aliases.
Documentation for SimpleLogin
title: Troubleshooting SimpleLogin
Troubleshooting for [SimpleLogin](https://github.com/simple-login/app) and its parametrisation can be found [here](https://github.com/simple-login/app/blob/master/docs/troubleshooting.md) and [here](https://github.com/simple-login/app/blob/master/example.env)
CertBot
title: Troubleshooting CertBot
Running and troubleshooting for CertBot can be found [here](https://certbot.eff.org/docs/install.html)
Service management
The service itself does not require particular management as all features are embedded in the client interface running from the docker container 'sl-app', including user management. Parameters can only be amended through the config file under the root user:
sudo vim ~/simplelogin.env
Sample configs can be found here
Once the change is made, restart the app container:
~~~bash
docker restart sl-app
~~~
Force premium subscription for users
#^Top Users will be defaulted to the 'Free' plan and asked to subscribe to the premium plan. In order to force users onto the Premium plan, please update the database:
~~~bash
docker exec -it sl-db psql -U (dbusername) simplelogin
~~~
And then run:
~~~bash
UPDATE users SET lifetime = 'TRUE' WHERE EMAIL = '(emailaddress)';
~~~
And \q
to exit the db.
Pricing
Alias Server | One-off cost | Recurring subscription p.a. |
---|
**Server hosting**
| | *$20* ^AliasServerCost
Tasks & Further steps
-
Selfhosting, Server Alias: Upgrader & Health checks %%done_del%% 🔁 every 4 months 📅 2023-03-31
-
Selfhosting, Server Alias: Upgrader & Health checks 🔁 every 4 months 📅 2022-07-31 ✅ 2022-08-02
-
Selfhosting, Server Alias: Upgrader & Health checks 🔁 every 4 months 📅 2022-03-31 ✅ 2022-03-31
-
Server Alias: Backup server %%done_del%% 🔁 every 6 months on the 1st Tuesday 📅 2022-09-06
-
Server Alias: Backup server 🔁 every 6 months on the 1st Tuesday 📅 2022-03-11 ✅ 2022-03-11
-
Server Alias: Backup server 🔁 every 6 months on the 1st Tuesday 📅 2021-09-15 ✅ 2022-01-08
-
Server Alias: Backup server 🔁 every 6 months on the 1st Tuesday ✅ 2021-09-14
-
Understand why Gmail does not work