Artem Boldariev arbv

Postfix Installer

Following script may be used for configuring complete and secure email server on fresh install of Debian 7. It will probably work on other distributions using apt-get. After minor changes you'll be able to use it on other Linux distros.

Usage

Run postfix.sh script.
Configure postgres to allow connections.
Configure postfix admin. Remember to set these:

rsync daemon mode over ssh

There are several common ways to do rsync backups of hosts over ssh:

As a non-root user. Upsides: very secure. Downside: cannot back up sensitive files.
As root, with a public key. Downsides: Whoever has the private key has full root access to the host being backed up.
As root, with a public key and a "forced command". Upsides: Restricts access to the server. Downsides: Requires either careful matching of rsync options (which might change over time), or "validator" scripts. Neither idea sounds very appealing to me.
Running rsync in daemon mode on the host being backed up. Upsides: Lots of useful options, like read-only mode, running as a different user if required, server-side excludes/includes, etc. Downsides: Opens up a TCP port that has full filesystem read access and is hard to secure (Ideally you could make the rsync daemon use a unix socket instead, that could be secured by filesystem permissions, but I haven't found a way to do that).

Here is another option t

Nginx Reverse Proxy for homelab services using SSO

NOTE: This document has now been added to the nginx-sso wiki, here. Any further updates will be made there.

Using:

Docker
Nginx
nginx-sso

	#include <stdio.h>
	#include <fcntl.h>
	#include <unistd.h>
	#include <string.h>
	#include <errno.h>
	#include <stdlib.h>
	#include <sys/epoll.h>
	#include <sys/types.h>

	int main(int argc, char** argv) {

	##
	## Please make sure to change this according to your own needs/configuration
	## Some values won't be helpful for some configurations (like routers or firewalls)
	## If you have a normal server, these settings should work fine
	##
	## Tested on Dell PowerEdge/PowerVault servers with gigabit, iSCSI, multipathing with Citrix XenServer clients
	## Large performance improvement on the default settings!
	##
	## Carefull selected values!
	##

	# /etc/systemd/network/50-wifi.link
	[Match]
	MACAddress=f8:d1:11:18:81:c3
	Type=wlan

	[Link]
	NamePolicy=mac

	# Nix skeleton for compiler, cmake, boost.
	# Dependencies (boost and others you specify) are getting built with selectec compiler (for ABI compatibility).
	# Examples:
	# nix-shell --argstr compiler gcc5 --run 'mkdir build && cd build && cmake .. && cmake --build .'
	# nix-shell --argstr compiler gcc6 --run 'mkdir build && cd build && cmake .. && cmake --build .'
	# nix-shell --argstr compiler clang_38 --run 'mkdir build && cd build && cmake .. && cmake --build .'

	{ nixpkgs ? import <nixpkgs> {}, compiler ? "gcc6" }:

	let

	[Match]
	Name=host*

	[Network]
	DHCP=yes

	pki example.com key "/etc/letsencrypt/live/example.com/privkey.pem"
	pki example.com certificate "/etc/letsencrypt/live/example.com/fullchain.pem"

	listen on lo mask-source
	listen on 1.2.3.4 port 25 tls pki example.com auth-optional hostname example.com
	listen on 1.2.3.4 port 465 smtps pki example.com auth hostname example.com mask-source
	listen on 1.2.3.4 port 587 tls-require pki example.com auth hostname example.com mask-source

	table aliases file:/etc/mail/aliases
	table domains file:/etc/mail/domains

	auth_username_format = %n
	imap_idle_notify_interval = 29 mins
	lda_mailbox_autocreate = yes
	mail_location = maildir:~/mail
	mail_plugins = " fts fts_lucene"
	plugin {
	fts = lucene
	fts_autoindex = yes
	fts_lucene = whitespace_chars=@.
	imapsieve_mailbox1_before = file:/etc/mail/imapsieve/report-spam.sieve