1,084
edits
FeministWiki:Technical documentation: Difference between revisions
no edit summary
Technician (talk | contribs) (→Certs) |
Technician (talk | contribs) No edit summary |
||
| (14 intermediate revisions by the same user not shown) | |||
| Line 6: | Line 6: | ||
{| class="wikitable" | {| class="wikitable" | ||
!IP !! FQDN !! Host !! Purpose | !IP !! FQDN !! Host !! Purpose !! Ports | ||
|- | |- | ||
|85.214.101.34 || feministwiki.org || || Wiki | |85.214.101.34 || feministwiki.org || || Wiki || 80, 443 | ||
|- | |- | ||
|85.214.101.34 || www.feministwiki.org || www || Wiki | |85.214.101.34 || www.feministwiki.org || www || Wiki || 80, 443 | ||
|- | |- | ||
|85.214.101.34 || ldap.feministwiki.org || ldap || LDAP | |85.214.101.34 || ldap.feministwiki.org || ldap || LDAP || - | ||
|- | |- | ||
|85.214.101.34 || | |85.214.101.34 || blogs.feministwiki.org || blogs || Blogging || 80, 443 | ||
|- | |- | ||
|85.214.101.34 || | |85.214.101.34 || chat.feministwiki.org || chat || Web-client for XMPP || 80, 443 | ||
|- | |- | ||
|85.214.101.34 || | |85.214.101.34 || forum.feministwiki.org || forum || BBS Forum || 80, 443 | ||
|- | |- | ||
|85.214.101.34 || | |85.214.101.34 || mail.feministwiki.org || mail || Web-client for Mail || 80, 443 | ||
|- | |- | ||
|85.214.101.34 || | |85.214.101.34 || files.feministwiki.org || files || File storage || 80, 443 | ||
|- | |- | ||
|85.214.101.34 || | |85.214.101.34 || imap.feministwiki.org || imap || IMAP || 993 | ||
|- | |- | ||
|85.214.101.34 || | |85.214.101.34 || pop3.feministwiki.org || pop3 || POP3 || 995 | ||
|- | |- | ||
|85.214.101.34 || | |85.214.101.34 || smtp.feministwiki.org || smtp || SMTP || 25, 465, 587 | ||
|- | |- | ||
|85.214.101.34 || | |85.214.101.34 || xmpp.feministwiki.org || xmpp || XMPP || 5222, 5269, 5280 | ||
|- | |- | ||
|85.214.101.34 || add-member.feministwiki.org || add-member || Add a member | |85.214.101.34 || irc.feministwiki.org || irc || IRC || 6697 | ||
|- | |||
|85.214.101.34 || add-member.feministwiki.org || add-member || Add a member || 80, 443 | |||
|} | |} | ||
As you can see, all services are on the same server for now. However, it should be kept as an open possibility that the hosts are split across different IPs. When done so, the <code>ldap</code> host should listen on 636 for LDAPS connections. | |||
== Firewall == | |||
The simple <code>ufw</code> firewall-frontend is used to trivially limit all network I/O to the ports you can see in the host table above, plus port 22 for ssh and scp. | |||
== Special DNS entries == | == Special DNS entries == | ||
| Line 117: | Line 123: | ||
The above can be used not only to refresh a cert that's running out, but also to add a new domain to the cert. Just add the domain to <code>/root/etc/domains</code> and run the commands. | The above can be used not only to refresh a cert that's running out, but also to add a new domain to the cert. Just add the domain to <code>/root/etc/domains</code> and run the commands. | ||
Note that the letsencrypt command | Note that the letsencrypt command may not work well on a "dumb" terminal such as an Emacs shell buffer. If in doubt, run it from within a proper terminal emulator. | ||
=== Readability of the key files === | === Readability of the key files === | ||
| Line 178: | Line 184: | ||
The wiki uses the SQL database called "feministwiki" and the SQL user of the same name. | The wiki uses the SQL database called "feministwiki" and the SQL user of the same name. | ||
=== Blogs === | |||
Host: blogs.feministwiki.org <br/> | |||
Software: WordPress (multisite) | |||
This is an installation of WordPress in <code>/var/www/blogs</code>, with the "multisite network" feature enabled on a path-basis, so users can have their own blogs on URLs like <code>blogs.feministwiki.org/janedoe</code>. LDAP authentication is enabled via the AD/LDAP plugin from miniOrange. | |||
Users from LDAP who log in for the first time are automatically registered as "Subscriber" accounts, and the admin can change their WordPress role "Author" to allow publishing. | |||
This WordPress installation uses the SQL database called "blogs" and an SQL user of the same name. | |||
=== Chat (web interface) === | === Chat (web interface) === | ||