FSCI Wiki - User contributions [en]

Palakkad/GEC Sreekrishnapuram/Free software day

2022-05-16T19:02:29Z

Ranjithsiji: fix links

Free software Day is the program conducted by the students of GEC Sreekrishnapuram, Palakkad, Kerala as their first step to the free software community

A talk on the idea of free software will be presented by '''Hiran Venugopalan''' and '''Sujith H''' will take a workshop + class on debian GNU/Linux and how to be a Free software user.

[[Category:Events|2007/03/31]]

Palakkad/GEC Sreekrishnapuram/Free software day

2022-05-16T19:00:18Z

Ranjithsiji: fix typo

Free software Day is the program conducted by the students of GEC Sreekrishnapuram, Palakkad, Kerala as their first step to the free software community.

A talk on the idea of free software will be presented by [[Hiran Venugopalan]] and [[Sujith H]] will take a workshop + class on debian GNU/Linux and how to be a Free software user.

[[Category:Events|2007/03/31]]

List of Free Softwares in Desktop

2020-11-03T16:59:05Z

Ranjithsiji: update description

This is the basic list of Free Software available in a GNU/Linux Distribution.

* Complete [https://wiki.gnome.org/Apps Gnome App List] from GNOME Website
* Complete [https://apps.kde.org/ KDE App List] from KDE Website

== '''Basic Text Editor''' ==

* Gedit - This is the editor comes with GNOME. It can be configured as a programmers editor using plugins
* Kate - This is the editor comes with KDE. It is basicaly provide an editor framework for multiple editors
* KWrite - Basic text editor with KDE. This editor uses Kate Framework.
* Leafpad - Light weight text editor.

== '''Image Viewers''' ==

* Image Viewer aka The GNOME image viewer (Eye of Gnome). - this is the image viewer comes with GNOME. Website
* Gwenview - Image viewer comes with KDE.
* Shotwell - Features rich image viewer which allows basic photo editing.
* gThumb - Image viewer and editor. Website

== '''Web Browsers''' ==

* Firefox - The default web browser for most GNU/Linux Distros. [[/fsfi/camp/-/wikis/firefox.com|website]]
* Web aka Gnome web - A Web browser from GNOME team based on Webkit. website
* Midori - Light weight web browser. website
* Chromium - Open Source project by google.

== '''Video Players''' ==

* VLC - The complete video player for Linux. Can handle almost all video formats.
* SMplayer - A GUI for Mplayer
* Videos - Gnome Video player
* MPV Media Player - Media player using MPV framework
* Parole - A Light weight media player from XFCE.

== '''Music Players''' ==

* Elisa - Music Player for KDE
* Rhythmbox - Music Player for Gnome
* Audacious - A minimalistic music player
* Lollypop - Music Album manager and player

== '''Office Software''' ==

* Libreoffice - Fork of Open Office. Complete Office package. Text Editor, Spread Sheet Editor, Presentation Maker, Database Editor, Drawing, Math Formula Editor etc.
* Onlyoffice - free software office suite developed by Ascensio System SIA, a company headquartered in Riga, Latvia.
* Calligra - Office suite from KDE
* Abiword - Wordprocessing Software
* Gnumeric - Spreadsheet processing software

== '''Document Viewers''' ==

* Evince - Document viewer for gnome. Website
* Okular - Document viewer from KDE
* Foliate - A simple and modern eBook viewer
* Calibre - Advanced ebook reader.
* GNOME Books - Gnome based Book Manager and reader.

== '''File Manager''' ==

* Nautilus aka files - Filemanager from Gnome
* Dolphin aka files - Filemanager from KDE
* Thunar - File Manager from XFCE
* PCMan File Manager - File manager from LXDE
* XFE - Light weight fast file manager

== '''Download Managers''' ==

* Gwget
* Kget

== '''Torrent Clients''' ==

* Qbittorrent
* Transmission

== '''Screen Shot tools''' ==

* Flameshot
* Spectacle

== '''Screen Recorder and Webcam''' ==

* Peek - Screen recorder produce gif files. Website
* Simple Screen Recorder
* Cheese - Webcam player for GNOME
* Kamoso - Webcam player for KDE

== '''Note Taking App''' ==

* Gnote - Gnome Note Taking App
* KNotes - KDE Note Taking App
* Notes - Gnome Note App
* Zim - Desktop Wiki

== '''Email App''' ==

* Thunderbird
* Evolution
* Geary
* KMail - Mail client for KDE

== '''Communication Softwares''' ==

* Element - Matrix Client with end to end encryption
* Nheko - Matrix client written in Qt.

== '''Mobile Remote Control''' ==

* KDE Connect - Connect from Android Phone in KDE
* GSConnect - Connect from Android Phone in Gnome
* KORE - Remote Control for Kodi.

== '''Calendar''' ==

* Calendar - Gnome Calendar App
* Planner - Calendar App

== '''RSS Reader''' ==

* Feeds - Gnome Feed Reader App
* Liferea - Rss Reader
* Akregrator - Rss Reader from KDE
* NewsFlash - Rss Reader for Gnome
* FeedReader - RSS Reader

== '''Terminal Emulator''' ==

* Gnome Terminal - Terminal app for Gnome
* Konsole - Terminal app for KDE
* Tilix - Tiling terminal app

== '''Photo Editors''' ==

* Darktable - RAW Image editor and photo cleaner.
* Rawtherapee - RAW Image editor.
* GIMP - Advanced Photo and Image editor
* Krita - Photo Editor and Digital Painting software

== '''Vector Graphics Editors''' ==

* Inkscape
* Karbon
* Libreoffice Draw

== '''Video Editor''' ==

* KDENlive
* Flowblade

== '''Audio Editors''' ==

* Audacity
* Hydrogen

== '''DTP Software''' ==

* Scribus

== '''3D''' ==

* Blender

== '''2D Animation''' ==

* Synfig Studio
* Blender
* OpenToonz

== '''VFX''' ==

* Blender
* Natron

== '''Text Editor''' ==

* Geany
* Atom
* Codelite
* KomodoEdit
* Gnome Builder

== '''IDE''' ==

* Emacs - Spacemacs
* QT Creator
* Kdevelop
* Neovim

List of Free Softwares in Desktop

2020-11-03T13:13:19Z

Ranjithsiji: Created page with "This is the basic list of Free Software available in a GNU/Linux Distribution. * Complete [https://wiki.gnome.org/Apps Gnome App List] from GNOME Website * Complete [https://..."

This is the basic list of Free Software available in a GNU/Linux Distribution.

* Complete [https://wiki.gnome.org/Apps Gnome App List] from GNOME Website
* Complete [https://apps.kde.org/ KDE App List] from KDE Website

== '''Basic Text Editor''' ==

* Gedit - This is the editor comes with GNOME. It can be configured as a programmers editor using plugins
* Kate - This is the editor comes with KDE. It is basicaly provide an editor framework for multiple editors
* KWrite - Basic text editor with KDE. This editor uses Kate Framework.
* Leafpad - Light weight text editor.

== '''Image Viewers''' ==

* Image Viewer aka The GNOME image viewer (Eye of Gnome). - this is the image viewer comes with GNOME. Website
* Gwenview - Image viewer comes with KDE.
* Shotwell - Features rich image viewer which allows basic photo editing.
* gThumb - Image viewer and editor. Website

== '''Web Browsers''' ==

* Firefox - The default web browser for most GNU/Linux Distros. [[/fsfi/camp/-/wikis/firefox.com|website]]
* Web aka Gnome web - A Web browser from GNOME team based on Webkit. website
* Midori - Light weight web browser. website
* Chromium - Open Source project by google.

== '''Video Players''' ==

* VLC - The complete video player for Linux. Can handle almost all video formats.
* SMplayer - A GUI for Mplayer
* Videos - Gnome Video player
* MPV Media Player - Media player using MPV framework
* Parole - A Light weight media player from XFCE.

== '''Music Players''' ==

* Elisa - Music Player for KDE
* Rhythmbox - Music Player for Gnome
* Audacious - A minimalistic music player
* Lollypop - Music Album manager and player

== '''Office Software''' ==

* Libreoffice - Fork of Open Office. Complete Office package. Text Editor, Spread Sheet Editor, Presentation Maker, Database Editor, Drawing, Math Formula Editor etc.
* Onlyoffice - free software office suite developed by Ascensio System SIA, a company headquartered in Riga, Latvia.
* Calligra - Office suite from KDE
* Abiword - Wordprocessing Software
* Gnumeric - Spreadsheet processing software

== '''Document Viewers''' ==

* Evince - Document viewer for gnome. Website
* Okular - Document viewer from KDE
* Foliate - A simple and modern eBook viewer
* Calibre - Advanced ebook reader.
* GNOME Books - Gnome based Book Manager and reader.

== '''File Manager''' ==

* Nautilus aka files - Filemanager from Gnome
* Dolphin aka files - Filemanager from KDE
* Thunar - File Manager from XFCE
* PCMan File Manager - File manager from LXDE
* XFE - Light weight fast file manager

== '''Download Managers''' ==

* Gwget
* Kget
* Transmission

== '''Torrent Clients''' ==

* Qbittorrent
* Transmission

== '''Screen Shot tools''' ==

* Flameshot
* Spectacle

== '''Screen Recorder and Webcam''' ==

* Peek - Screen recorder produce gif files. Website
* Simple Screen Recorder
* Cheese - Webcam player for GNOME
* Kamoso - Webcam player for KDE

== '''Note Taking App''' ==

* Gnote - Gnome Note Taking App
* KNotes - KDE Note Taking App
* Notes - Gnome Note App
* Zim - Desktop Wiki

== '''Email App''' ==

* Thunderbird
* Evolution
* Geary
* KMail - Mail client for KDE

== '''Communication Softwares''' ==

* Element - Matrix Client with end to end encryption
* Nheko - Client for Closed source Telegram Server

== '''Mobile Remote Control''' ==

* KDE Connect - Connect from Android Phone in KDE
* GSConnect - Connect from Android Phone in Gnome
* KORE - Remote Control for Kodi.

== '''Calendar''' ==

* Calendar - Gnome Calendar App
* Planner - Calendar App

== '''RSS Reader''' ==

* Feeds - Gnome Feed Reader App
* Liferea - Rss Reader
* Akregrator - Rss Reader from KDE
* NewsFlash - Rss Reader for Gnome
* FeedReader - RSS Reader

== '''Terminal Emulator''' ==

* Gnome Terminal - Terminal app for Gnome
* Konsole - Terminal app for KDE
* Tilix - Tiling terminal app

== '''Photo Editors''' ==

* Darktable - RAW Image editor and photo cleaner.
* Rawtherapee - RAW Image editor.
* GIMP - Advanced Photo and Image editor
* Krita - Photo Editor and Digital Painting software

== '''Vector Graphics Editors''' ==

* Inkscape
* Karbon
* Libreoffice Draw

== '''Video Editor''' ==

* KDENlive
* Flowblade

== '''Audio Editors''' ==

* Audacity
* Hydrogen

== '''DTP Software''' ==

* Scribus

== '''3D''' ==

* Blender

== '''2D Animation''' ==

* Synfig Studio
* Blender
* OpenToonz

== '''VFX''' ==

* Blender
* Natron

== '''Text Editor''' ==

* Geany
* Atom
* Codelite
* KomodoEdit
* Gnome Builder

== '''IDE''' ==

* Emacs - Spacemacs
* QT Creator
* Kdevelop
* Neovim

User:Ranjithsiji

2020-09-22T17:42:52Z

Ranjithsiji: add a quote

<div style="border:1px solid blue; background:#fffecb; text-align:center;font-weight:bold;">
"Imagine a world in which every single person on the planet is given free access to the sum of all human knowledge. That's what we're doing." - Jimmy Wales
</div>
Ranjithsiji

PHP Developer

Wikipedia Admin

From Cochin

Contact

2020-03-01T10:41:07Z

Ranjithsiji: add contact us page

Contact Us in the following channels

*[http://lists.fosscommunity.in/listinfo.cgi/community-fosscommunity.in Mailing list]
*[https://www.loomio.org/g/esPoQ4S0/fosscommunity-in Loomio]
*[https://matrix.to/#/#wiki.fsci.org.in:poddery.com any matrix chat client]

Main Page

2020-03-01T10:30:36Z

Ranjithsiji: Updating main page

{{Header1}}
{{MainMessage}}
{{BoxLinks}}
{{TextBoxes}}
<center>
{{box1 start}}
[https://lists.fsci.org.in/postorius/lists/fsci-discuss.lists.fsci.org.in/ Mailing List]
[[Image:mailman.png|centre|140px|100px]]
{{box2 start}}
[https://www.loomio.org/g/esPoQ4S0/fosscommunity-in Collaborate]
[[Image:loomio.png|centre|140px|100px]]
{{boxes end}}
</center>
{{MoreLinks}}

Template:MainMessage

2020-02-28T16:47:18Z

Ranjithsiji:

<div style="text-align:center;border:1px solid #333;padding:15px;font-weight:bold;border-radius:4px;margin-top:10px;marign-bottom:15px;">
[[An_Open_Letter_to_Ministry_of_Communications_and_Information_Technology_India|An open letter to Government of India to enforce Free Software.]]
</div>

Template:Header1

2020-02-28T16:45:38Z

Ranjithsiji:

<div style="width:100%; background:#fff; margin-top:5em; border:0px solid #BBBBBB; text-align:center; margin-bottom:2em;">
<div style="font-size:2.8em; border:none; margin:0; color:#CE3A3A;padding-top:20px;" id="mf-featuredpicture" title="Welcome to Free software Community of India">'''Welcome to Free software Community of India'''</div>
<div style="padding-top:10px; font-size:15pt;">Free Software Community of India co-ordinates the free software (also open source) related activities in India. </div><div id="pagecount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFARTICLES}}]]''' Articles are here in English and other languages Arranged in ''[[Special:Categories|Categories]]''</div>
<div id="usercount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFUSERS}}]]''' Users registered here</div>
<div id="more" style="width:100%; text-align:center; font-size:13pt;margin-top:15px;">'''[[About|Read More]]'''</div>
</div>

{{Header1Links}}

Template:Header1

2020-02-28T16:44:55Z

Ranjithsiji:

<div style="width:100%; background:#fff; margin-top:3em; border:0px solid #BBBBBB; text-align:center; margin-bottom:1em;">
<div style="font-size:2.8em; border:none; margin:0; color:#CE3A3A;padding-top:20px;" id="mf-featuredpicture" title="Welcome to Free software Community of India">'''Welcome to Free software Community of India'''</div>
<div style="padding-top:10px; font-size:15pt;">Free Software Community of India co-ordinates the free software (also open source) related activities in India. </div><div id="pagecount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFARTICLES}}]]''' Articles are here in English and other languages Arranged in ''[[Special:Categories|Categories]]''</div>
<div id="usercount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFUSERS}}]]''' Users registered here</div>
<div id="more" style="width:100%; text-align:center; font-size:13pt;margin-top:15px;">'''[[About|Read More]]'''</div>
</div>

{{Header1Links}}

Template:MoreLinks

2020-02-28T16:42:31Z

Ranjithsiji: Created page with " {|style="width:100%;margin-top:+.7em;background-color:#fcfcfc;border:1px solid #ccc" |style="width:56%;color:#000"| *GNU Labs *Challenges|Challenges to Indian FOSS Cont..."

{|style="width:100%;margin-top:+.7em;background-color:#fcfcfc;border:1px solid #ccc"
|style="width:56%;color:#000"|
*[[GNU Labs]]
*[[Challenges|Challenges to Indian FOSS Contributors]]
|style="width:56%;|
*[[Contributors|List of Indian FOSS Contributors]]
*[[Hackers|Hacker Community]]

|}

TestMain

2020-02-28T16:42:17Z

Ranjithsiji:

Template:TextBoxes

2020-02-28T16:40:46Z

Ranjithsiji:

<div style="clear: left;"><hr/></div>

{{box1 start}}
=== [[IfYouAre|If you are ]] ===

Whatever be your role in the society, you can do your bit to build a good society where sharing knowledge becomes a virtue and not a vice. We are living in a society where sharing is discouraged, often called by derogatory names, such as for example 'piracy'. This campaign is to create a ready reckoner for any person who intends to promote free knowledge and free software. [[IfYouAre|Here]] you have some tips.
{{box2 start}}
=== [[Contribute|I want to contribute, tell me how to start?]] ===

I like Free Software, I use it regularly and I want to contribute. I don't know where to start.

* [[Contribute|Learn More]]
{{boxes end}}

Template:TextBoxes

2020-02-28T16:40:27Z

Ranjithsiji: Created page with "<div style="clear: left;">...</div> {{box1 start}} === If you are === Whatever be your role in the society, you can do your bit to build a good society where s..."

<div style="clear: left;">...</div>

{{box1 start}}
=== [[IfYouAre|If you are ]] ===

Whatever be your role in the society, you can do your bit to build a good society where sharing knowledge becomes a virtue and not a vice. We are living in a society where sharing is discouraged, often called by derogatory names, such as for example 'piracy'. This campaign is to create a ready reckoner for any person who intends to promote free knowledge and free software. [[IfYouAre|Here]] you have some tips.
{{box2 start}}
=== [[Contribute|I want to contribute, tell me how to start?]] ===

I like Free Software, I use it regularly and I want to contribute. I don't know where to start.

* [[Contribute|Learn More]]
{{boxes end}}

TestMain

2020-02-28T16:40:15Z

Ranjithsiji:

TestMain

2020-02-28T16:39:19Z

Ranjithsiji:

{{Header1}}
{{MainMessage}}
{{BoxLinks}}
<div style="clear: left;">...</div>

{{box1 start}}
=== [[IfYouAre|If you are ]] ===

Whatever be your role in the society, you can do your bit to build a good society where sharing knowledge becomes a virtue and not a vice. We are living in a society where sharing is discouraged, often called by derogatory names, such as for example 'piracy'. This campaign is to create a ready reckoner for any person who intends to promote free knowledge and free software. [[IfYouAre|Here]] you have some tips.
{{box2 start}}
=== [[Contribute|I want to contribute, tell me how to start?]] ===

I like Free Software, I use it regularly and I want to contribute. I don't know where to start.

* [[Contribute|Learn More]]
{{boxes end}}
<center>
{{box1 start}}
[https://lists.fsci.org.in/postorius/lists/fsci-discuss.lists.fsci.org.in/ Mailing List]
[[Image:mailman.png|centre|140px|100px]]
{{box2 start}}
[https://www.loomio.org/g/esPoQ4S0/fosscommunity-in Collaborate]
[[Image:loomio.png|centre|140px|100px]]
{{boxes end}}
</center>

TestMain

2020-02-28T16:37:37Z

Ranjithsiji:

{{Header1}}
{{MainMessage}}
{{BoxLinks}}
<div style="clear: left;">...</div>
<center>
{{box1 start}}
=== [[IfYouAre|If you are ]] ===

Whatever be your role in the society, you can do your bit to build a good society where sharing knowledge becomes a virtue and not a vice. We are living in a society where sharing is discouraged, often called by derogatory names, such as for example 'piracy'. This campaign is to create a ready reckoner for any person who intends to promote free knowledge and free software. [[IfYouAre|Here]] you have some tips.
{{box2 start}}
=== [[Contribute|I want to contribute, tell me how to start?]] ===

I like Free Software, I use it regularly and I want to contribute. I don't know where to start.

* [[Contribute|Learn More]]
{{boxes end}}
</center>

TestMain

2020-02-28T16:36:41Z

Ranjithsiji:

{{Header1}}
{{MainMessage}}
{{BoxLinks}}
<center>
{{box1 start}}
=== [[IfYouAre|If you are ]] ===

Whatever be your role in the society, you can do your bit to build a good society where sharing knowledge becomes a virtue and not a vice. We are living in a society where sharing is discouraged, often called by derogatory names, such as for example 'piracy'. This campaign is to create a ready reckoner for any person who intends to promote free knowledge and free software. [[IfYouAre|Here]] you have some tips.
{{box2 start}}
=== [[Contribute|I want to contribute, tell me how to start?]] ===

I like Free Software, I use it regularly and I want to contribute. I don't know where to start.

* [[Contribute|Learn More]]
{{boxes end}}
</center>

TestMain

2020-02-28T16:36:17Z

Ranjithsiji:

{{Header1}}
{{MainMessage}}
<center>
{{box1 start}}
=== [[IfYouAre|If you are ]] ===

Whatever be your role in the society, you can do your bit to build a good society where sharing knowledge becomes a virtue and not a vice. We are living in a society where sharing is discouraged, often called by derogatory names, such as for example 'piracy'. This campaign is to create a ready reckoner for any person who intends to promote free knowledge and free software. [[IfYouAre|Here]] you have some tips.
{{box2 start}}
=== [[Contribute|I want to contribute, tell me how to start?]] ===

I like Free Software, I use it regularly and I want to contribute. I don't know where to start.

* [[Contribute|Learn More]]
{{boxes end}}
</center>
{{BoxLinks}}

Template:MainMessage

2020-02-28T16:36:13Z

Ranjithsiji:

<div style="text-align:center;border:1px solid #333;padding:15px;font-weight:bold;border-radius:4px;margin-top:10px;marign-bottom:15px;">
[[An_Open_Letter_to_Ministry_of_Communications_and_Information_Technology_India|An open letter]] to Government of India to enforce Free Software.
</div>

Template:MainMessage

2020-02-28T16:31:12Z

Ranjithsiji:

<div style="text-align:center;border:1px solid #333;padding:15px;font-weight:bold;border-radius:4px;margin-top:10px;marign-bottom:5px;">
[[An_Open_Letter_to_Ministry_of_Communications_and_Information_Technology_India|An open letter]] to Government of India to enforce Free Software.
</div>

TestMain

2020-02-28T16:30:51Z

Ranjithsiji:

Template:MainMessage

2020-02-28T16:30:36Z

Ranjithsiji: Created page with "<div style="text-align:center;border:1px solid #333;padding:15px;font-weight:bold;border-radius:4px;"> An_Open_Letter_to_Ministry_of_Communications_and_Information_Technolog..."

<div style="text-align:center;border:1px solid #333;padding:15px;font-weight:bold;border-radius:4px;">
[[An_Open_Letter_to_Ministry_of_Communications_and_Information_Technology_India|An open letter]] to Government of India to enforce Free Software.
</div>

TestMain

2020-02-28T16:27:58Z

Ranjithsiji: Created page with "{{Header1}} {{BoxLinks}}"

Template:BoxLinks

2020-02-28T16:27:09Z

Ranjithsiji:

<div id="mf-featuredpicture" title="-" style="width:100%;text-align:center;">
<div class="sqBox">
[[File:High.png|link=High Priority Projects|alt=High Priority Projects]]<br/>[[High Priority Projects]]
</div>
<div class="sqBox">
[[File:DBD eliminate.Small.jpg|link=Anti-DRM-Campaign|alt=Anti-DRM-Campaign]]<br/>[[Anti-DRM-Campaign]]
</div>
<div class="sqBox">
[[File:140px-Liberate.svg.png|link=Campaign for Document Freedom|alt=Campaign for Document Freedom]]<br/>[[Campaign for Document Freedom]]
</div>

</div>

Template:BoxLinks

2020-02-28T16:25:59Z

Ranjithsiji:

<div id="mf-featuredpicture" title="-" style="width:100%;text-align:center;">
<div class="sqBox">
[[File:High.png|link=High Priority Projects|alt=High Priority Projects]]<br/>[[High Priority Projects]]
</div>
<div class="sqBox">
[[File:High.png|link=High Priority Projects|alt=High Priority Projects]]<br/>[[High Priority Projects]]
</div>
<div class="sqBox">
[[File:140px-Liberate.svg.png|link=Campaign for Document Freedom|alt=Campaign for Document Freedom]]<br/>[[Campaign for Document Freedom]]
</div>

</div>

MediaWiki:Common.css

2020-02-28T16:24:06Z

Ranjithsiji:

/* CSS placed here will be applied to all skins */

/*Total Website Font control*/
html, body {font-size:1.05em !important;}

/* To remove Main page title */
.page-Main_Page .firstHeading {
display: none !important;
}

.home-flex-container {
display: flex;
flex-flow: row wrap;
justify-content: space-around;
padding: 12px 0px;
margin: 0;
list-style: none;
background:#f1fcff;
box-shadow:2px 2px 4px #ccc;
border-radius:4px;
}

.home-flex-container .flex-item {
padding: 5px;
width: 250px;
margin-top: 10px;
color: white;
font-weight: bold;
font-size: 1em;
text-align: left;

}

.home-flex-container .flex-item li{
line-height:2.2;
}

div.sqBox {font-size:1.6em;margin:0.5em 0;text-align:center;font-weight:bold;width:30%;float:left;}

Template:BoxLinks

2020-02-28T16:23:32Z

Ranjithsiji: Created page with "<div id="mf-featuredpicture" title="-" style="width:100%;text-align:center;"> <div class="sqBox"> alt=High Priority Projects<br/>..."

MediaWiki:Common.css

2020-02-28T11:37:29Z

Ranjithsiji:

MediaWiki:Common.css

2020-02-28T11:36:16Z

Ranjithsiji:

/* CSS placed here will be applied to all skins */

/*Total Website Font control*/
html, body {font-size:1.05em !important;}

/* To remove Main page title */
.page-Main_Page .firstHeading {
display: none !important;
}

.home-flex-container {
display: flex;
flex-flow: row wrap;
justify-content: space-around;
padding: 0;
margin: 0;
list-style: none;
background:#f1fcff;
box-shadow:2px 2px 4px #ccc;
border-radius:4px;
}

.home-flex-container .flex-item {
padding: 5px;
width: 250px;
margin-top: 10px;
color: white;
font-weight: bold;
font-size: 1em;
text-align: left;

}

.home-flex-container .flex-item li{
line-height:2.2;
}

MediaWiki:Common.css

2020-02-28T11:35:49Z

Ranjithsiji:

/* CSS placed here will be applied to all skins */

/*Total Website Font control*/
html, body {font-size:1.05em !important;}

/* To remove Main page title */
.page-Main_Page .firstHeading {
display: none !important;
}

.home-flex-container {
display: flex;
flex-flow: row wrap;
justify-content: space-around;
padding: 0;
margin: 0;
list-style: none;
}

.home-flex-container .flex-item {
padding: 5px;
width: 250px;
margin-top: 10px;
color: white;
font-weight: bold;
font-size: 1em;
text-align: left;
background:#f1fcff;
box-shadow:2px 2px 4px #ccc;
border-radius:4px;
}

.home-flex-container .flex-item li{
line-height:2.2;
}

Template:Header1

2020-02-28T11:32:58Z

Ranjithsiji:

<div style="width:100%; background:#fff; margin-top:2.5em; border:0px solid #BBBBBB; text-align:center; margin-bottom:1em;">
<div style="font-size:2.8em; border:none; margin:0; color:#CE3A3A;padding-top:20px;" id="mf-featuredpicture" title="Welcome to Free software Community of India">'''Welcome to Free software Community of India'''</div>
<div style="padding-top:10px; font-size:15pt;">Free Software Community of India co-ordinates the free software (also open source) related activities in India. </div><div id="pagecount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFARTICLES}}]]''' Articles are here in English and other languages Arranged in ''[[Special:Categories|Categories]]''</div>
<div id="usercount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFUSERS}}]]''' Users registered here</div>
<div id="more" style="width:100%; text-align:center; font-size:13pt;margin-top:15px;">'''[[About|Read More]]'''</div>
</div>

{{Header1Links}}

Template:Header1

2020-02-28T11:29:58Z

Ranjithsiji:

<div style="width:100%; background:#fff; margin-top:2.5em; border:0px solid #BBBBBB; text-align:center; margin-bottom:1em;">
<div style="font-size:2.8em; border:none; margin:0; color:#004EC3;padding-top:20px;" id="mf-featuredpicture" title="Welcome to Free software Community of India">'''Welcome to Free software Community of India'''</div>
<div style="padding-top:10px; font-size:15pt;">Free Software Community of India co-ordinates the free software (also open source) related activities in India. </div><div id="pagecount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFARTICLES}}]]''' Articles are here in English and other languages Arranged in ''[[Special:Categories|Categories]]''</div>
<div id="usercount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFUSERS}}]]''' Users registered here</div>
<div id="more" style="width:100%; text-align:center; font-size:13pt;margin-top:15px;">'''[[About|Read More]]'''</div>
</div>

{{Header1Links}}

MediaWiki:Common.css

2020-02-28T11:29:38Z

Ranjithsiji:

/* CSS placed here will be applied to all skins */

/*Total Website Font control*/
html, body {font-size:1.05em !important;}

/* To remove Main page title */
.page-Main_Page .firstHeading {
display: none !important;
}

.home-flex-container {
display: flex;
flex-flow: row wrap;
justify-content: space-around;
padding: 0;
margin: 0;
list-style: none;
}

.home-flex-container .flex-item {
padding: 5px;
width: 250px;
margin-top: 10px;
color: white;
font-weight: bold;
font-size: 1em;
text-align: left;
}

.home-flex-container .flex-item li{
line-height:2.2;
}

MediaWiki:Common.css

2020-02-28T11:28:07Z

Ranjithsiji:

/* CSS placed here will be applied to all skins */

/*Total Website Font control*/
html, body {font-size:1.05em !important;}

/* To remove Main page title */
.page-Main_Page .firstHeading {
display: none !important;
}

.home-flex-container {
display: flex;
flex-flow: row wrap;
justify-content: space-around;
padding: 0;
margin: 0;
list-style: none;
}

.home-flex-container .flex-item {
background: tomato;
padding: 5px;
width: 250px;
margin-top: 10px;
color: white;
font-weight: bold;
font-size: 1em;
text-align: center;
}

.home-flex-container .flex-item li{
line-height:2.2;
}

MediaWiki:Common.css

2020-02-28T11:27:05Z

Ranjithsiji:

/* CSS placed here will be applied to all skins */

/*Total Website Font control*/
html, body {font-size:1.05em !important;}

/* To remove Main page title */
.page-Main_Page .firstHeading {
display: none !important;
}

.home-flex-container {
display: flex;
flex-flow: row wrap;
justify-content: space-around;
padding: 0;
margin: 0;
list-style: none;
}

.home-flex-container .flex-item {
background: tomato;
padding: 5px;
width: 200px;
height: 150px;
margin-top: 10px;
line-height: 150px;
color: white;
font-weight: bold;
font-size: 3em;
text-align: center;
}

.home-flex-container .flex-item li{
line-height:2.2;
}

Template:Header1Links

2020-02-28T11:23:48Z

Ranjithsiji:

<div class="home-flex-container">
<div class="flex-item">
*[[:Category:Services| Services]]
*[[Projects]]
*[[:Category:Events| Events]]
*[[Infrastructure]]
*[[BoFs]]
</div>
<div class="flex-item">
*[[:Category:Communities|Communities]]
*[[:Category:Campaigns|Campaigns]]
*[[SFD|SFD Teams]]
*[[l10n| L10N Teams]]
</div>
<div class="flex-item">
*[[Email Lists]]
*[[IRC]]
*[[Stuffs]]
*'''[[FAQ]]'''
</div>
</div>

MediaWiki:Common.css

2020-02-28T11:22:31Z

Ranjithsiji:

/* CSS placed here will be applied to all skins */

/*Total Website Font control*/
html, body {font-size:1.05em !important;}

/* To remove Main page title */
.page-Main_Page .firstHeading {
display: none !important;
}

.home-flex-container {
display: flex;
flex-flow: row wrap;
justify-content: space-around;
padding: 0;
margin: 0;
list-style: none;
}

.home-flex-container .flex-item {
background: tomato;
padding: 5px;
width: 200px;
height: 150px;
margin-top: 10px;
line-height: 150px;
color: white;
font-weight: bold;
font-size: 3em;
text-align: center;
}

MediaWiki:Common.css

2020-02-28T11:20:34Z

Ranjithsiji:

MediaWiki:Common.css

2020-02-28T11:20:07Z

Ranjithsiji: Created page with "/* CSS placed here will be applied to all skins */ /*Total Website Font control*/ html, body {font-size:1.1em !important;} /* To remove Main page title */ .page-Main_Page .f..."

/* CSS placed here will be applied to all skins */

/*Total Website Font control*/
html, body {font-size:1.1em !important;}

/* To remove Main page title */
.page-Main_Page .firstHeading {
display: none !important;
}

Template:Header1Links

2020-02-28T11:17:21Z

Ranjithsiji: Created page with "<div class="home-flex-container"> <div class="flex-item"> * Services *Projects * Events *Infrastructure *BoFs </div>..."

<div class="home-flex-container">
<div class="flex-item">
*[[:Category:Services| Services]]
*[[Projects]]
*[[:Category:Events| Events]]
*[[Infrastructure]]
*[[BoFs]]
</div>

</div>

Template:Header1

2020-02-28T11:15:02Z

Ranjithsiji:

<div style="width:100%; background:#fff; margin-top:2.5em; border:0px solid #BBBBBB; text-align:center; margin-bottom:1em;">
<div style="font-size:2.8em; border:none; margin:0; color:#004EC3;padding-top:20px;" id="mf-featuredpicture" title="Welcome to Free software Community of India">'''Welcome to Free software Community of India'''</div>
<div style="padding-top:10px; font-size:15pt;">Free Software Community of India co-ordinates the free software (also open source) related activities in India. </div><div id="pagecount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFARTICLES}}]]''' Articles are here in English and other languages Arranged in ''[[Special:Categories|Categories]]''</div>
<div id="usercount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFUSERS}}]]''' Users registered here</div>
<div id="more" style="width:100%; text-align:center; font-size:13pt;margin-top:15px;">'''[[About|Read More]]'''</div>
</div>

Template:Header1

2019-11-26T14:04:30Z

Ranjithsiji:

{|id="mp-topbanner" style="width:100%; background:#fff; margin-top:20px; border:0px solid #BBBBBB; text-align:center; margin-bottom:1em;"
|
{| style="width:100%;text-align:center;"|
<div style="font-size:28pt; border:none; margin:0; padding:.1em; color:#004EC3;padding-top:18px;" id="mf-featuredpicture" title="Welcome to Free software Community of India">'''Welcome to Free software Community of India'''</div>
<div style="padding-top:24px; font-size:15pt;">Free Software Community of India co-ordinates the free software (also open source) related activities in India. </div><div id="pagecount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFARTICLES}}]]''' Articles are here in English and other languages Arranged in ''[[Special:Categories|Categories]]''</div>
<div id="usercount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFUSERS}}]]''' Users registered here</div>
<div id="more" style="width:100%; text-align:center; font-size:13pt;">'''[[About|Read More]]'''</div>
|}
|}

FSCI Wiki:Administrators

2019-11-26T14:02:13Z

Ranjithsiji:

FSCI Wiki:Administrators

2019-11-26T14:00:50Z

Ranjithsiji:

Template:Header1

2019-11-26T13:59:50Z

Ranjithsiji:

{|id="mp-topbanner" style="width:100%; background:#fff; margin-top:20px; border:0px solid #BBBBBB; text-align:center; margin-bottom:1em;"
|
{| style="width:100%;text-align:center;"|
<div style="font-size:28pt; border:none; margin:0; padding:.1em; color:#004EC3;padding-top:18px;" id="mf-featuredpicture" title="Welcome to Free software Community of India">'''Welcome to Free software Community of India'''</div>
<div style="padding-top:24px; font-size:15pt;">Free Software Community of India co-ordinates the free software (also open source) related activities in India. </div><div id="pagecount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFARTICLES}}]]''' Articles are here in English and other languages</div>
<div id="usercount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFUSERS}}]]''' Users registered here</div>
<div id="more" style="width:100%; text-align:center; font-size:13pt;">'''[[About|Read More]]'''</div>
|}
|}

Template:Header1

2019-11-26T13:57:31Z

Ranjithsiji: create template 1

{|id="mp-topbanner" style="width:100%; background:#fff; margin-top:20px; border:0px solid #BBBBBB; text-align:center; margin-bottom:1em;"
|
{| style="width:100%;text-align:center;"|
<div style="font-size:28pt; border:none; margin:0; padding:.1em; color:#004EC3;padding-top:18px;" id="mf-featuredpicture" title="Welcome to Free software Community of India">'''Welcome to Free software Community of India'''</div>
<div style="width:100%;text-align:center;border:none; margin:0; color:#004EC3;padding-top:10px;">[[File:Bannerimage3.jpg|600px]]</div>
<div style="padding-top:24px; font-size:15pt;">Free Software Community of India co-ordinates the free software (also open source) related activities in India. </div><div id="pagecount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFARTICLES}}]]''' Articles are here in English and other languages</div>
<div id="usercount" style="width:100%; text-align:center; font-size:13pt;">'''[[Special:Statistics|{{NUMBEROFUSERS}}]]''' Users registered here</div>
|}
|}

Main Page

2019-11-26T13:47:50Z

Ranjithsiji: comment the contributor segment

{|style="width:100%;margin-top:+.7em;background-color:#fcfcfc;border:1px solid #ccc"
|style="width:56%;color:#000"|
{|style="width:280px;border:solid 0px;background:none"
|-
|style="width:280px;text-align:center;white-space:nowrap;color:#000" |
<div style="font-size:162%;border:none;margin: 0;padding:.1em;color:#000">Welcome to Free Software Community of India,</div>
<div style="top:+0.2em;font-size: 95%">meeting point of Indian FOSS Communities.</div>
<div id="articlecount" style="width:100%;text-align:center;font-size:85%;">[[Special:Statistics|{{NUMBEROFARTICLES}}]] articles in English and other Indian Languages. Arranged in ''[[Special:Categories|Categories]]''</div>
|}
|style="width:11%;font-size:95%;color:#000"|
*[[:Category:Services| Services]]
*[[Projects]]
*[[:Category:Events| Events]]
*[[Infrastructure]]
*[[BoFs]]
|style="width:11%;font-size:95%"|
*[[:Category:Communities|Communities]]
*[[:Category:Campaigns|Campaigns]]
*[[SFD|SFD Teams]]
*[[l10n| L10N Teams]]
|style="width:11%;font-size:95%"|
*[[Email Lists]]
*[[IRC]]
*[[Stuffs]]
*'''[[FAQ]]'''
|}
Free Software Community of India co-ordinates the free software (also open source) related activities in India. Regular meeting are happening locally. Campaigns in colleges and schools to spread the awareness of Free Software are ongoing. [[About|More about FSCI]]

'''Note: Currently new registrations are closed, if you want an account contact us via our mailing list or contact any of the admins listed [[FOSS_Community_India:Administrators|here]].''' You can also reach us via [https://matrix.to/#/#wiki.fsci.org.in:poddery.com any matrix chat client].

'''This wiki has been down for months because of huge spam attacks, so if anyone is volunteering to fight spam, we can open up registrations again.'''

''If you are an admin, then click [[Special:UserLogin/signup|here]] to create a new account.''

[https://wiki.fsci.org.in/index.php?title=An_Open_Letter_to_Ministry_of_Communications_and_Information_Technology_India An open letter] to Government of India to enforce Free Software.

<center>
{{box1 start}}
[https://lists.fsci.org.in/postorius/lists/fsci-discuss.lists.fsci.org.in/ Mailing List]
[[Image:mailman.png|centre|140px|100px]]
{{box2 start}}
[https://www.loomio.org/g/esPoQ4S0/fosscommunity-in Collaborate]
[[Image:loomio.png|centre|140px|100px]]
{{boxes end}}
</center>
{{box1 start}}

=== [[IfYouAre|If you are ]] ===

Whatever be your role in the society, you can do your bit to build a good society where sharing knowledge becomes a virtue and not a vice. We are living in a society where sharing is discouraged, often called by derogatory names, such as for example 'piracy'. This campaign is to create a ready reckoner for any person who intends to promote free knowledge and free software. [[IfYouAre|Here]] you have some tips.

=== [[Contribute|I want to contribute, tell me how to start?]] ===

I like Free Software, I use it regularly and I want to contribute. I don't know where to start.

* [[Contribute|Learn More]]

{{box2 start}}

==[[High Priority Projects]]==
[[Image:High.png|centre|140px]]

We need to provide Free Software replacements to proprietary communication services which can match feature to feature with their proprietary counterparts.

* List of [[High Priority Projects]]

==[[Campaign for Document Freedom]]==

[[Image:140px-Liberate.svg.png|centre|140px]]

* [http://www.noooxml.org/ Say NO to Microsoft Office broken standard]
* [http://fsfeurope.org/documents/msooxml-questions MSOOXML-QUESTIONS]

==[[Anti-DRM-Campaign|DRM elimination crew]]==

[[Image:DBD_eliminate.Small.jpg|centre|140px]]
Join the [[Anti-DRM-Campaign|DRM elimination crew]] which is determined to study the effects of DRM and educate the public. So if you wanna join this campaign, just sign your name on the crew list.

{{boxes end}}

{|style="width:100%;margin-top:+.7em;background-color:#fcfcfc;border:1px solid #ccc"
|style="width:56%;color:#000"|
*[[GNU Labs]]
*[[Challenges|Challenges to Indian FOSS Contributors]]
|style="width:56%;|
*[[Contributors|List of Indian FOSS Contributors]]
*[[Hackers|Hacker Community]]

|}
'''IRC channel for Free Software Community of India is #fci on freenode. You can access this through the [http://irc.wikicities.com Wikia IRC Gateway] ([[Wikia:Wikia IRC channel|help]])
'''

'''Comment about the FCI logo [http://fci.wikia.com/wiki/Image_talk:Wiki.png here]'''


== See also ==
*[http://lists.fosscommunity.in/listinfo.cgi/community-fosscommunity.in Mailing list]
*[https://www.loomio.org/g/esPoQ4S0/fosscommunity-in Loomio]

== Initiatives Planned ==
#[[Free Software Contribution 101 with j4v4m4n]]
#[[FOSS in Schools]] - to discuss and implment FOSS in schools.
#[[Unsupported Hardware]] - to collect data on unsupported hardware and offer them as projects to college students.
#[[Supported Hardware Configurations Database]] - to collect Hardware configuration details for Laptops, Desktops and other accessories which fully support Free Software
#[[FOSS project identification and indexing]] by Swathanthra Software users Group, [[Malappuram]]
#[[Campaign to promote free software in Karnataka]]
#Foss Community of India is celebrating [http://www.softwarefreedomday.org Software Freedom Day] on September 16. [[SFD | List of participating communities]]
#Celebrate February as [[Bangalore/FOSS_Month-2006|FOSS Month 2006]] (Feb 17th at [[Bangalore/MCC|MCC]] and 20th at [[Bangalore/SCE| Saptagiri]])
#Initiation of Student projects at various institutions in association with RedHat India. More focus on to make students comfortable in handling FOSS projects
#Formation of [[KDE|KDE Developer Community]] in India to be known as kde.in in association with Sirtaj Singh Kang

------------------------------------------------------------

Poddery - Diaspora, Matrix and XMPP

2018-03-25T12:08:17Z

Ranjithsiji: /* Set Nginx Conf for BOSH URLS */

We run Diaspora, XMPP and Matrix services at [https://poddery.com poddery.com]. Diaspora username and password can be used to access XMPP and Matrix services. [https://chat.poddery.com chat.poddery.com] provides Riot client (accessed by a web browser), which can be used to connect to any Matrix server without installing a Riot app/client.

= Environment =
== Hosting ==
We are on a [https://www.scaleway.com/baremetal-cloud-servers/ C2S instance of scaleway.com bare metal cloud server].

* 4 Dedicated x86 64bit Cores
* 8GB Memory
* 50GB SSD Disk
* 1 Flexible Public IPv4
* 300Mbit/s Unmetered bandwidth
* 2.5Gbit/s Internal bandwidth
* €11.99 Per Month

Due to performance issues we are migrating to a new server ([https://www.scaleway.com/baremetal-cloud-servers/ C2M instance of scaleway.com]) with the following specs:

* '''8''' Dedicated x86 64bit Cores
* '''16GB''' Memory
* 50GB SSD Disk
* 1 Flexible Public IPv4
* '''500Mbit/s''' Unmeterd bandwidth
* '''5Gbit/s''' Internal bandwidth
* '''€17.99''' Per Month
* Extra '''150GB''' SSD
* Total '''€20.99''' Per Month

== Operating System ==

We run Debian 9 Stretch image provided by Scaleway, with latest security updates applied.

=== Hardening checklist ===
* SSH password login disabled (allow only key based logins)
* root SSH login disabled (use a normal user with sudo)
'''/etc/ssh/sshd_config:'''
...
PermitRootLogin no
...
PasswordAuthentication no
...
* Firewall enabled with only the ports we need opened ([https://fxdata.cloud/tutorials/set-up-a-firewall-with-ufw-on-ubuntu-16-04 ufw tutorial])
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow ssh
sudo ufw enable
Currently ufw is disabled as it is crashing the server.

* fail2ban configured against brute force attacks
'''/etc/ssh/sshd_config:'''
...
LogLevel VERBOSE
...

sudo systemctl restart ssh
sudo systemctl enable fail2ban
sudo systemctl start fail2ban

Check '''/var/log/fail2ban.log''' for logs

Unban an IP:
sudo fail2ban-client set sshd unbanip <banned_ip>

Here sshd is the defaut jail name, change it if you are using a different jail.

=== System health check ===

* There should be a data disk attached (added from cloud.scaleway.com)
* The attached disk (/dev/nbdX) should be an lvm physical volume. We cannot use it directly for encryption, so we use lvm.
# Make sure '''lvm2''' and '''udev''' packages are installed
sudo apt-get install lvm2 udev

# Replace X with valid number according to '''lsblk'''
sudo pvcreate /dev/nbdX
* /dev/data is an lvm volume group created from /dev/nbdX
sudo vgcreate data /dev/nbdX
* /dev/data/diaspora is an lvm logical volume
sudo lvcreate -n diaspora /dev/data -L <size_of_disk>
* /dev/mapper/diaspora is an encrypted device
# Make sure '''cryptsetup''' package is installed
sudo apt-get install cryptsetup

# Give disk encryption password as specified in the [[#Server_Access|access repo]]
sudo cryptsetup luksFormat /dev/data/diaspora
sudo cryptsetup luksOpen /dev/data/diaspora diaspora
* /dev/mapper/diaspora is an ext4 file system
sudo mkfs.ext4 /dev/mapper/diaspora
* /var/lib/diaspora should be mounted. All [[#Handling_critical_data|critical data]] should be on /var/lib/diaspora.
sudo mkdir /var/lib/diaspora
sudo mount /dev/mapper/diaspora /var/lib/diaspora

== User Visible Services ==
=== Diaspora ===

* We use diaspora-installer-mysql package from https://people.debian.org/~praveen/diaspora/README
* See [https://salsa.debian.org/ruby-team/diaspora-installer/blob/debian/0.6.6.0+debian1/README /usr/share/doc/diaspora-common/README] for package specific configuration.
* [https://poddery.com/statistics live statistics]

=== Chat/XMPP ===

* We use Prosody and steps for setting up Prosody is given at -> https://wiki.debian.org/Diaspora/XMPP
# Follow steps 1 to 6 from https://wiki.debian.org/Diaspora/XMPP
sudo mysql -u root -p # Enter password from the access repo

CREATE USER 'prosody'@'localhost' IDENTIFIED BY '<passwd_in_repo>';
GRANT ALL PRIVILEGES ON diaspora_production.* TO 'prosody'@'localhost';
FLUSH PRIVILEGES;

sudo chown -R root:ssl-cert /etc/letsencrypt
sudo chmod g+r -R /etc/letsencrypt
sudo chmod g+x /etc/letsencrypt/{archive,live}

sudo systemctl restart prosody
* We have enabled all XEPs conversations expect. We use sslh to multiplex Diaspora and Prosody on port 443. See [https://wiki.debian.org/InstallingProsody#XMPP_over_HTTPS XMPP over HTTPS] section of the Installing Prosody article in Debian Wiki for sample sslh configuration.

==== Set Nginx Conf for BOSH URLS ====

* Add this configuration in nginx configuration file to enable the BOSH url to make JSXC Working.

'''Nginx'''

upstream chat_cluster {
server localhost:5280;
}

location /http-bind {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-Proto https;
proxy_redirect off;
proxy_connect_timeout 5;
proxy_buffering off;
proxy_read_timeout 70;
keepalive_timeout 70;
send_timeout 70;
client_max_body_size 4M;
client_body_buffer_size 128K;
proxy_pass http://chat_cluster;
}

Plz look [https://wiki.diasporafoundation.org/Integration/Chat#Nginx here] for more details. And apache settings [https://github.com/jsxc/jsxc/wiki/Prepare-apache here] :)

=== Chat/Matrix ===

* We use Synapse server for setting up the Matrix server.
* We will be using https://github.com/matrix-org/synapse/#synapse-installation for setting up this instance
* We use nginx reverse proxy to send requests that has ''/_matrix/*'' in url to synapse on 8008. See /etc/nginx/sites-enabled/diaspora
* We use https://git.fosscommunity.in/necessary129/synapse-diaspora-auth to authenticate synapse with Diaspora database (Note: PyPi package is outdated, hence install from git)

=== Homepage ===

Homepage and other static pages are maintained in our Gitlab instance. You can change it directly in the master branch or send pull requests. You can edit it via web as well.

* poddery.com -> https://git.fosscommunity.in/community/poddery.com
# Make sure '''git''' and '''acl''' packages are installed
sudo apt-get install git acl

# Grant rwx permissions for the ssh user to /usr/share/diaspora/public
sudo setfacl -m "u:<ssh_user>:rwx" /usr/share/diaspora/public

# Clone poddery.com repo
cd /usr/share/diaspora/public
git clone https://git.fosscommunity.in/community/poddery.com.git
cd poddery.com && mv * .[^.]* .. #Give yes for all files when prompted
cd .. && rmdir poddery.com

* save.poddery.com -> https://git.fosscommunity.in/community/save.poddery.com
cd /usr/share/diaspora/public/save
git submodule init
git submodule update
save.poddery.com repo is maintained as a sub module in poddery.com repo. See this tutorial -> https://chrisjean.com/git-submodules-adding-using-removing-and-updating/ for working with git submodules.

== Backend Services ==
=== nginx ===

Front-end for Diaspora and Matrix.

=== PostgreSQL ===

Backend for Matrix.

=== MySQL ===

Backend for Diaspora.

'''TODO''': Consider migrating to PostgreSQL to optimize resources (We can reduce one service and RAM usage).

=== exim ===

For sending emails.
sudo dpkg-reconfigure exim4-config

=== sslh ===

Port multiplexer to allow XMPP and Diaspora to share 443 port. This allows us to fool stupid firewalls which blocks all ports except 80 and 443 (hence XMPP).

=== SSL/TLS certificates ===

# letsencrypt certonly --webroot -w /usr/share/diaspora/public -d poddery.com -d www.poddery.com -d test.poddery.com -d groups.poddery.com -w /usr/share/diaspora/public/save -d save.poddery.com -w /var/www/riot -d chat.poddery.com

# cp -L /etc/letsencrypt/live/poddery.com/fullchain.pem /etc/diaspora/ssl/poddery.com-bundle.pem
# cp -L /etc/letsencrypt/live/poddery.com/privkey.pem /etc/diaspora/ssl/poddery.com.key
# chown -R root:ssl-cert /etc/letsencrypt
# chmod g+r -R /etc/letsencrypt
# chmod g+x /etc/letsencrypt/*

Make sure the certificates used by prosody are symbolic links to letsencrypt default location.

# ls -l /etc/prosody/certs/
total 0
lrwxrwxrwx 1 root root 40 Mar 28 01:16 poddery.com.crt -> /etc/letsencrypt/live/poddery.com/fullchain.pem
lrwxrwxrwx 1 root root 33 Mar 28 01:16 poddery.com.key -> /etc/letsencrypt/live/poddery.com/privkey.pem

# crontab -e
30 2 * * 1 letsencrypt renew >> /var/log/le-renew.log
32 2 * * 1 /etc/init.d/nginx reload
34 2 * * 1 /etc/init.d/prosody reload

=== Handling critical data ===
sudo /etc/init.d/mysql stop
sudo mv /var/lib/mysql /var/lib/diaspora
sudo ln /var/lib/diaspora/mysql /var/lib/mysql
sudo mkdir /var/lib/diaspora/uploads
sudo chown -R diaspora: /var/lib/diaspora/uploads
sudo ln -s /var/lib/diaspora/uploads /usr/share/diaspora/public/uploads

=== Services health check ===

Sample output - Look for "Active: active (running)"

systemctl status nginx # Our web server front-end for Diaspora, XMPP and Matrix
nginx.service - A high performance web server and a reverse proxy server
Loaded: loaded (/lib/systemd/system/nginx.service; enabled)
Active: active (running) since Fri 2018-01-05 07:17:02 UTC; 4 weeks 1 days ago
Process: 5063 ExecStop=/sbin/start-stop-daemon --quiet --stop --retry QUIT/5 --pidfile /run/nginx.pid (code=exited, status=0/SUCCESS)
Process: 13140 ExecReload=/usr/sbin/nginx -g daemon on; master_process on; -s reload (code=exited, status=0/SUCCESS)
Process: 5071 ExecStart=/usr/sbin/nginx -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
Process: 5067 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
Main PID: 5072 (nginx)
CGroup: /system.slice/nginx.service
├─ 5072 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
├─13149 nginx: worker process
├─13150 nginx: worker process
├─13151 nginx: worker process
└─13153 nginx: worker process

systemctl status diaspora # Diaspora service
diaspora.service - LSB: Diaspora application server
Loaded: loaded (/etc/init.d/diaspora)
Active: active (running) since Fri 2018-01-05 07:21:29 UTC; 4 weeks 1 days ago
Process: 5146 ExecStop=/etc/init.d/diaspora stop (code=exited, status=0/SUCCESS)
Process: 5167 ExecStart=/etc/init.d/diaspora start (code=exited, status=0/SUCCESS)
CGroup: /system.slice/diaspora.service
├─ 850 unicorn worker[0] -c config/unicorn.rb -D
├─ 5174 sudo -u diaspora -E -H ./script/server
├─ 5175 eye monitoring v0.9.1 [diaspora] (in /usr/share/diaspora)
├─ 5211 sidekiq 4.2.9 diaspora [0 of 25 busy]
├─ 5222 unicorn master -c config/unicorn.rb -D
└─31717 unicorn worker[1] -c config/unicorn.rb -D

systemctl status matrix-synapse.service # Synapse Matrix Server
matrix-synapse.service - Synapse Matrix homeserver
Loaded: loaded (/lib/systemd/system/matrix-synapse.service; enabled)
Active: active (running) since Sat 2018-01-13 05:38:55 UTC; 3 weeks 1 days ago
Process: 15800 ExecStartPre=/var/lib/matrix-synapse/synapse/bin/python2.7 -m synapse.app.homeserver --config-path=/etc/matrix-synapse/homeserver.yaml --config-path=/etc/matrix-synapse/conf.d/ --generate-keys (code=exited, status=0/SUCCESS)
Main PID: 15808 (python2.7)
CGroup: /system.slice/matrix-synapse.service
└─15808 /var/lib/matrix-synapse/synapse/bin/python2.7 -m synapse.app.homeserver --config-path=/etc/matrix-synapse/homeserver.yaml --config-path=/etc/matrix-synapse/conf.d/

systemctl status prosody # Prosody XMPP Server
prosody.service - LSB: Prosody XMPP Server
Loaded: loaded (/etc/init.d/prosody)
Active: active (running) since Fri 2018-01-05 07:35:41 UTC; 4 weeks 1 days ago
Process: 6218 ExecStop=/etc/init.d/prosody stop (code=exited, status=0/SUCCESS)
Process: 6483 ExecReload=/etc/init.d/prosody reload (code=exited, status=0/SUCCESS)
Process: 6223 ExecStart=/etc/init.d/prosody start (code=exited, status=0/SUCCESS)
CGroup: /system.slice/prosody.service
└─6231 /usr/bin/lua5.1 /usr/bin/prosody

systemctl status sslh # SSL/SSH multiplexer which allow us to provide multiple services via 443 port (to bypass stupid firewalls)
sslh.service - SSL/SSH multiplexer
Loaded: loaded (/lib/systemd/system/sslh.service; enabled)
Active: active (running) since Fri 2018-01-05 07:29:27 UTC; 4 weeks 1 days ago
Docs: man:sslh(8)
Main PID: 5444 (sslh)
CGroup: /system.slice/sslh.service
├─ 713 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 830 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 1672 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 1673 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 3514 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 3875 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 3876 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 3896 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 4965 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 5395 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 5444 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 5445 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 5963 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 6617 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 6774 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 6957 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 7063 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 7083 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─25613 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
└─27481 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg

= Coordination =

*[https://www.loomio.org/g/2bjVXqAu/fosscommunity-in-poddery-com-maintainer-s-group loomio group] - we use this for decision making.
* Hangout with us in our Matrix room [https://matrix.to/#/#poddery:poddery.com #poddery:poddery.com]

=== Contact ===

Email: poddery at autistici.org (alias that reaches Akhilan, Abhijith Balan, Fayad, Balasankar, Julius, Praveen, Prasobh, Sruthi, Shirish, Vamsee and Manukrishnan)

The following people have their GPG keys in the password file.

Praveen Arimbrathodiyil (piratepin) (ID: 0xCE1F9C674512), Balasankar C (ID: 0x96EDAB9B2E6B7171), Manu Krishnan T V (ID: 0x5D0064186AF037D9), Fayad Fami (fayad) (ID: 0x51C954405D432381), Abhijith PA (ID: 0x863D4DF2ED9C28EF), Syam G Krishnan (sgk) (ID: 0x6EF48CCD865A1FFC), Sagar Ippalpalli (ID: 0xFD49D0BC6FEAECDA), Pirate Bady (piratesin) (ID: 0x92FDAB42A95FF20C), Kannan (ID: 0x0B1955F40C691CCE)

We recommend you setup [http://www.vim.org/scripts/script.php?script_id=3645 Vim GPG Plugin] for transparent editing. If you are new to GPG, then follow [https://www.madboa.com/geek/gpg-quickstart/ this guide].

=== Server Access ===

Maintained in a private git repo at -> https://git.fosscommunity.in/community/access

= Setting up Backup =

Backup was setup on a Scaleway C1 VPS (4 core ARM processor with 2GB RAM). '''TODO: C1 server was crashing frequently and we need to setup backup again on VPS provided by Manu'''.

Hostname (IP): backup.poddery.com (No public ip, access via scaleway.com web console). If you restart this machine, you may want to add poddery.com private ip in /etc/hosts

# apt-get install lvm2 cryptsetup

Directly creating luks volume on /dev/nbd1 is not working, so we use a logical volume

# pvcreate /dev/nbd1
# vgcreate data /dev/nbd1
# lvcreate -n diaspora -L 46.5G /dev/data

# cryptsetup luksFormat /dev/data/diaspora
# cryptsetup luksOpen /dev/data/diaspora diaspora

and update /etc/crypttab
# <target name> <source device> <key file> <options>
diaspora /dev/data/diaspora none luks

# mkfs.ext4 /dev/mapper/diaspora
# mkdir /var/lib/diaspora
and update /etc/fstab
# UNCONFIGURED FSTAB FOR BASE SYSTEM
/dev/mapper/diaspora /var/lib/diaspora ext4 defaults 0 2

# mount -a
# apt-get install mysql-server

Move MySQL data directory to encrypted volume
# /etc/init.d/mysql stop
# mv /var/lib/mysql /var/lib/diaspora/
# ln -s /var/lib/diaspora/mysql /var/lib/mysql

Follow steps in https://dev.mysql.com/doc/refman/5.5/en/replication-howto-masterbaseconfig.html for replication

Follow steps in https://www.howtoforge.com/how-to-set-up-mysql-database-replication-with-ssl-encryption-on-centos-5.4 for ssl (but ssl support is disabled in debian)

Follow steps in http://www.networkcomputing.com/storage/how-set-ssh-encrypted-mysql-replication/1111882674 to use ssh port forwarding to have encrypted replication

# adduser sshtunnel --disabled-login
# su sshtunnel

Generate SSH key pair and copy public key to target system
$ ssh-keygen -t rsa
$ ssh -f sshtunnel@poddery.com -L 7777:127.0.0.1:3306 -N

Test the connectivity
# mysql -u poddery_backup -p -P 7777 -h 127.0.0.1

Uploads are rsynced every hour

# crontab -e
# m h dom mon dow command
0 * * * * pgrep rsync || rsync -av --delete root@poddery.com:/var/lib/diaspora/uploads/ /var/lib/diaspora/uploads/ >/var/lib/diaspora/rsync-uploads.log

'''Note:''' Since we are not using a public ip (saves us money), backup.poddery.com connects to poddery.com via private ip. So if poddery.com is rebooted, the new ip address should be updated in /etc/hosts file of backup.poddery.com. To connect, use the web console from scaleway.com

= Add more disk space =

# Power off the machine with "ARCHIVE" option. It may take upto an hour for shutdown to complete on backup.poddery.com and poddery.com
# Add more disk from scaleway.com control panel . Volumes -> CREATE VOLUME
# Attach the newly created volume to server from Server page
# Power on the server
# Create physical volume (pvcreate /dev/nbdN)
# Expand volume group (vgextend data /dev/nbdN)
# Expand logical volume (lvresize --size=186G data/diaspora)
# Expand encrypted partition (cryptsetup resize diaspora)
# Resize file system (resize2fs /dev/mapper/diaspora)

= Maintenance history =
This section holds maintenance/issue history for future tracking.

'''When updating diaspora-installer-mysql packages, remember to recreate /usr/share/diaspora/public/uploads symlink to /var/lib/diaspora/uploads'''.

1. Prosody error - Failed to load private key

certmanager error SSL/TLS: Failed to load '/etc/letsencrypt/live/poddery.com/privkey.pem': Previous error (see logs), or other system error. (for poddery.com)
tls error Unable to initialize TLS: error loading private key (system lib)
certmanager error SSL/TLS: Failed to load '/etc/letsencrypt/live/poddery.com/privkey.pem': Check that the permissions allow Prosody to read this file.

This error is usually when ssl certificate in freshly installed or renewed. Prosody user is unable to access the key file due to lack of privileges.

Note that Poddery uses Letsencrypt for ssl.

Fix:

* Make sure that prosody user is in 'certs' group (this group may also be called ssl-certs as setup by Letencrypt)
* /etc/letsencrypt/ is the ssl directory.
* Prosody user should have permissions to all folders importantly archive and live folders in /etc/letsencrypt. Permissions to each folder must be 750.
* Troubleshoot by checking if you can switch to each folder in /etc/letsencrypt as prosody user and cat the files.

'''If replication fails, you can restart it following the instructions here'''

https://dba.stackexchange.com/questions/69394/mysql-replication-error-1594

[[Category:Services]]

Poddery - Diaspora, Matrix and XMPP

2018-03-25T12:07:13Z

Ranjithsiji: /* Set Nginx Conf for BOSH URLS */

We run Diaspora, XMPP and Matrix services at [https://poddery.com poddery.com]. Diaspora username and password can be used to access XMPP and Matrix services. [https://chat.poddery.com chat.poddery.com] provides Riot client (accessed by a web browser), which can be used to connect to any Matrix server without installing a Riot app/client.

= Environment =
== Hosting ==
We are on a [https://www.scaleway.com/baremetal-cloud-servers/ C2S instance of scaleway.com bare metal cloud server].

* 4 Dedicated x86 64bit Cores
* 8GB Memory
* 50GB SSD Disk
* 1 Flexible Public IPv4
* 300Mbit/s Unmetered bandwidth
* 2.5Gbit/s Internal bandwidth
* €11.99 Per Month

Due to performance issues we are migrating to a new server ([https://www.scaleway.com/baremetal-cloud-servers/ C2M instance of scaleway.com]) with the following specs:

* '''8''' Dedicated x86 64bit Cores
* '''16GB''' Memory
* 50GB SSD Disk
* 1 Flexible Public IPv4
* '''500Mbit/s''' Unmeterd bandwidth
* '''5Gbit/s''' Internal bandwidth
* '''€17.99''' Per Month
* Extra '''150GB''' SSD
* Total '''€20.99''' Per Month

== Operating System ==

We run Debian 9 Stretch image provided by Scaleway, with latest security updates applied.

=== Hardening checklist ===
* SSH password login disabled (allow only key based logins)
* root SSH login disabled (use a normal user with sudo)
'''/etc/ssh/sshd_config:'''
...
PermitRootLogin no
...
PasswordAuthentication no
...
* Firewall enabled with only the ports we need opened ([https://fxdata.cloud/tutorials/set-up-a-firewall-with-ufw-on-ubuntu-16-04 ufw tutorial])
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow ssh
sudo ufw enable
Currently ufw is disabled as it is crashing the server.

* fail2ban configured against brute force attacks
'''/etc/ssh/sshd_config:'''
...
LogLevel VERBOSE
...

sudo systemctl restart ssh
sudo systemctl enable fail2ban
sudo systemctl start fail2ban

Check '''/var/log/fail2ban.log''' for logs

Unban an IP:
sudo fail2ban-client set sshd unbanip <banned_ip>

Here sshd is the defaut jail name, change it if you are using a different jail.

=== System health check ===

* There should be a data disk attached (added from cloud.scaleway.com)
* The attached disk (/dev/nbdX) should be an lvm physical volume. We cannot use it directly for encryption, so we use lvm.
# Make sure '''lvm2''' and '''udev''' packages are installed
sudo apt-get install lvm2 udev

# Replace X with valid number according to '''lsblk'''
sudo pvcreate /dev/nbdX
* /dev/data is an lvm volume group created from /dev/nbdX
sudo vgcreate data /dev/nbdX
* /dev/data/diaspora is an lvm logical volume
sudo lvcreate -n diaspora /dev/data -L <size_of_disk>
* /dev/mapper/diaspora is an encrypted device
# Make sure '''cryptsetup''' package is installed
sudo apt-get install cryptsetup

# Give disk encryption password as specified in the [[#Server_Access|access repo]]
sudo cryptsetup luksFormat /dev/data/diaspora
sudo cryptsetup luksOpen /dev/data/diaspora diaspora
* /dev/mapper/diaspora is an ext4 file system
sudo mkfs.ext4 /dev/mapper/diaspora
* /var/lib/diaspora should be mounted. All [[#Handling_critical_data|critical data]] should be on /var/lib/diaspora.
sudo mkdir /var/lib/diaspora
sudo mount /dev/mapper/diaspora /var/lib/diaspora

== User Visible Services ==
=== Diaspora ===

* We use diaspora-installer-mysql package from https://people.debian.org/~praveen/diaspora/README
* See [https://salsa.debian.org/ruby-team/diaspora-installer/blob/debian/0.6.6.0+debian1/README /usr/share/doc/diaspora-common/README] for package specific configuration.
* [https://poddery.com/statistics live statistics]

=== Chat/XMPP ===

* We use Prosody and steps for setting up Prosody is given at -> https://wiki.debian.org/Diaspora/XMPP
# Follow steps 1 to 6 from https://wiki.debian.org/Diaspora/XMPP
sudo mysql -u root -p # Enter password from the access repo

CREATE USER 'prosody'@'localhost' IDENTIFIED BY '<passwd_in_repo>';
GRANT ALL PRIVILEGES ON diaspora_production.* TO 'prosody'@'localhost';
FLUSH PRIVILEGES;

sudo chown -R root:ssl-cert /etc/letsencrypt
sudo chmod g+r -R /etc/letsencrypt
sudo chmod g+x /etc/letsencrypt/{archive,live}

sudo systemctl restart prosody
* We have enabled all XEPs conversations expect. We use sslh to multiplex Diaspora and Prosody on port 443. See [https://wiki.debian.org/InstallingProsody#XMPP_over_HTTPS XMPP over HTTPS] section of the Installing Prosody article in Debian Wiki for sample sslh configuration.

==== Set Nginx Conf for BOSH URLS ====

* Add this configuration in nginx configuration file to enable the BOSH url to make JSXC Working.

'''Nginx'''

upstream chat_cluster {
server localhost:5280;
}

location /http-bind {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-Proto https;
proxy_redirect off;
proxy_connect_timeout 5;
proxy_buffering off;
proxy_read_timeout 70;
keepalive_timeout 70;
send_timeout 70;
client_max_body_size 4M;
client_body_buffer_size 128K;
proxy_pass http://chat_cluster;
}

Plz look [https://wiki.diasporafoundation.org/Integration/Chat#Nginx here] for more details :)

=== Chat/Matrix ===

* We use Synapse server for setting up the Matrix server.
* We will be using https://github.com/matrix-org/synapse/#synapse-installation for setting up this instance
* We use nginx reverse proxy to send requests that has ''/_matrix/*'' in url to synapse on 8008. See /etc/nginx/sites-enabled/diaspora
* We use https://git.fosscommunity.in/necessary129/synapse-diaspora-auth to authenticate synapse with Diaspora database (Note: PyPi package is outdated, hence install from git)

=== Homepage ===

Homepage and other static pages are maintained in our Gitlab instance. You can change it directly in the master branch or send pull requests. You can edit it via web as well.

* poddery.com -> https://git.fosscommunity.in/community/poddery.com
# Make sure '''git''' and '''acl''' packages are installed
sudo apt-get install git acl

# Grant rwx permissions for the ssh user to /usr/share/diaspora/public
sudo setfacl -m "u:<ssh_user>:rwx" /usr/share/diaspora/public

# Clone poddery.com repo
cd /usr/share/diaspora/public
git clone https://git.fosscommunity.in/community/poddery.com.git
cd poddery.com && mv * .[^.]* .. #Give yes for all files when prompted
cd .. && rmdir poddery.com

* save.poddery.com -> https://git.fosscommunity.in/community/save.poddery.com
cd /usr/share/diaspora/public/save
git submodule init
git submodule update
save.poddery.com repo is maintained as a sub module in poddery.com repo. See this tutorial -> https://chrisjean.com/git-submodules-adding-using-removing-and-updating/ for working with git submodules.

== Backend Services ==
=== nginx ===

Front-end for Diaspora and Matrix.

=== PostgreSQL ===

Backend for Matrix.

=== MySQL ===

Backend for Diaspora.

'''TODO''': Consider migrating to PostgreSQL to optimize resources (We can reduce one service and RAM usage).

=== exim ===

For sending emails.
sudo dpkg-reconfigure exim4-config

=== sslh ===

Port multiplexer to allow XMPP and Diaspora to share 443 port. This allows us to fool stupid firewalls which blocks all ports except 80 and 443 (hence XMPP).

=== SSL/TLS certificates ===

# letsencrypt certonly --webroot -w /usr/share/diaspora/public -d poddery.com -d www.poddery.com -d test.poddery.com -d groups.poddery.com -w /usr/share/diaspora/public/save -d save.poddery.com -w /var/www/riot -d chat.poddery.com

# cp -L /etc/letsencrypt/live/poddery.com/fullchain.pem /etc/diaspora/ssl/poddery.com-bundle.pem
# cp -L /etc/letsencrypt/live/poddery.com/privkey.pem /etc/diaspora/ssl/poddery.com.key
# chown -R root:ssl-cert /etc/letsencrypt
# chmod g+r -R /etc/letsencrypt
# chmod g+x /etc/letsencrypt/*

Make sure the certificates used by prosody are symbolic links to letsencrypt default location.

# ls -l /etc/prosody/certs/
total 0
lrwxrwxrwx 1 root root 40 Mar 28 01:16 poddery.com.crt -> /etc/letsencrypt/live/poddery.com/fullchain.pem
lrwxrwxrwx 1 root root 33 Mar 28 01:16 poddery.com.key -> /etc/letsencrypt/live/poddery.com/privkey.pem

# crontab -e
30 2 * * 1 letsencrypt renew >> /var/log/le-renew.log
32 2 * * 1 /etc/init.d/nginx reload
34 2 * * 1 /etc/init.d/prosody reload

=== Handling critical data ===
sudo /etc/init.d/mysql stop
sudo mv /var/lib/mysql /var/lib/diaspora
sudo ln /var/lib/diaspora/mysql /var/lib/mysql
sudo mkdir /var/lib/diaspora/uploads
sudo chown -R diaspora: /var/lib/diaspora/uploads
sudo ln -s /var/lib/diaspora/uploads /usr/share/diaspora/public/uploads

=== Services health check ===

Sample output - Look for "Active: active (running)"

systemctl status nginx # Our web server front-end for Diaspora, XMPP and Matrix
nginx.service - A high performance web server and a reverse proxy server
Loaded: loaded (/lib/systemd/system/nginx.service; enabled)
Active: active (running) since Fri 2018-01-05 07:17:02 UTC; 4 weeks 1 days ago
Process: 5063 ExecStop=/sbin/start-stop-daemon --quiet --stop --retry QUIT/5 --pidfile /run/nginx.pid (code=exited, status=0/SUCCESS)
Process: 13140 ExecReload=/usr/sbin/nginx -g daemon on; master_process on; -s reload (code=exited, status=0/SUCCESS)
Process: 5071 ExecStart=/usr/sbin/nginx -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
Process: 5067 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
Main PID: 5072 (nginx)
CGroup: /system.slice/nginx.service
├─ 5072 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
├─13149 nginx: worker process
├─13150 nginx: worker process
├─13151 nginx: worker process
└─13153 nginx: worker process

systemctl status diaspora # Diaspora service
diaspora.service - LSB: Diaspora application server
Loaded: loaded (/etc/init.d/diaspora)
Active: active (running) since Fri 2018-01-05 07:21:29 UTC; 4 weeks 1 days ago
Process: 5146 ExecStop=/etc/init.d/diaspora stop (code=exited, status=0/SUCCESS)
Process: 5167 ExecStart=/etc/init.d/diaspora start (code=exited, status=0/SUCCESS)
CGroup: /system.slice/diaspora.service
├─ 850 unicorn worker[0] -c config/unicorn.rb -D
├─ 5174 sudo -u diaspora -E -H ./script/server
├─ 5175 eye monitoring v0.9.1 [diaspora] (in /usr/share/diaspora)
├─ 5211 sidekiq 4.2.9 diaspora [0 of 25 busy]
├─ 5222 unicorn master -c config/unicorn.rb -D
└─31717 unicorn worker[1] -c config/unicorn.rb -D

systemctl status matrix-synapse.service # Synapse Matrix Server
matrix-synapse.service - Synapse Matrix homeserver
Loaded: loaded (/lib/systemd/system/matrix-synapse.service; enabled)
Active: active (running) since Sat 2018-01-13 05:38:55 UTC; 3 weeks 1 days ago
Process: 15800 ExecStartPre=/var/lib/matrix-synapse/synapse/bin/python2.7 -m synapse.app.homeserver --config-path=/etc/matrix-synapse/homeserver.yaml --config-path=/etc/matrix-synapse/conf.d/ --generate-keys (code=exited, status=0/SUCCESS)
Main PID: 15808 (python2.7)
CGroup: /system.slice/matrix-synapse.service
└─15808 /var/lib/matrix-synapse/synapse/bin/python2.7 -m synapse.app.homeserver --config-path=/etc/matrix-synapse/homeserver.yaml --config-path=/etc/matrix-synapse/conf.d/

systemctl status prosody # Prosody XMPP Server
prosody.service - LSB: Prosody XMPP Server
Loaded: loaded (/etc/init.d/prosody)
Active: active (running) since Fri 2018-01-05 07:35:41 UTC; 4 weeks 1 days ago
Process: 6218 ExecStop=/etc/init.d/prosody stop (code=exited, status=0/SUCCESS)
Process: 6483 ExecReload=/etc/init.d/prosody reload (code=exited, status=0/SUCCESS)
Process: 6223 ExecStart=/etc/init.d/prosody start (code=exited, status=0/SUCCESS)
CGroup: /system.slice/prosody.service
└─6231 /usr/bin/lua5.1 /usr/bin/prosody

systemctl status sslh # SSL/SSH multiplexer which allow us to provide multiple services via 443 port (to bypass stupid firewalls)
sslh.service - SSL/SSH multiplexer
Loaded: loaded (/lib/systemd/system/sslh.service; enabled)
Active: active (running) since Fri 2018-01-05 07:29:27 UTC; 4 weeks 1 days ago
Docs: man:sslh(8)
Main PID: 5444 (sslh)
CGroup: /system.slice/sslh.service
├─ 713 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 830 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 1672 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 1673 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 3514 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 3875 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 3876 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 3896 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 4965 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 5395 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 5444 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 5445 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 5963 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 6617 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 6774 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 6957 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 7063 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─ 7083 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
├─25613 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg
└─27481 /usr/sbin/sslh --foreground -F /etc/sslh/sslh.cfg

= Coordination =

*[https://www.loomio.org/g/2bjVXqAu/fosscommunity-in-poddery-com-maintainer-s-group loomio group] - we use this for decision making.
* Hangout with us in our Matrix room [https://matrix.to/#/#poddery:poddery.com #poddery:poddery.com]

=== Contact ===

Email: poddery at autistici.org (alias that reaches Akhilan, Abhijith Balan, Fayad, Balasankar, Julius, Praveen, Prasobh, Sruthi, Shirish, Vamsee and Manukrishnan)

The following people have their GPG keys in the password file.

Praveen Arimbrathodiyil (piratepin) (ID: 0xCE1F9C674512), Balasankar C (ID: 0x96EDAB9B2E6B7171), Manu Krishnan T V (ID: 0x5D0064186AF037D9), Fayad Fami (fayad) (ID: 0x51C954405D432381), Abhijith PA (ID: 0x863D4DF2ED9C28EF), Syam G Krishnan (sgk) (ID: 0x6EF48CCD865A1FFC), Sagar Ippalpalli (ID: 0xFD49D0BC6FEAECDA), Pirate Bady (piratesin) (ID: 0x92FDAB42A95FF20C), Kannan (ID: 0x0B1955F40C691CCE)

We recommend you setup [http://www.vim.org/scripts/script.php?script_id=3645 Vim GPG Plugin] for transparent editing. If you are new to GPG, then follow [https://www.madboa.com/geek/gpg-quickstart/ this guide].

=== Server Access ===

Maintained in a private git repo at -> https://git.fosscommunity.in/community/access

= Setting up Backup =

Backup was setup on a Scaleway C1 VPS (4 core ARM processor with 2GB RAM). '''TODO: C1 server was crashing frequently and we need to setup backup again on VPS provided by Manu'''.

Hostname (IP): backup.poddery.com (No public ip, access via scaleway.com web console). If you restart this machine, you may want to add poddery.com private ip in /etc/hosts

# apt-get install lvm2 cryptsetup

Directly creating luks volume on /dev/nbd1 is not working, so we use a logical volume

# pvcreate /dev/nbd1
# vgcreate data /dev/nbd1
# lvcreate -n diaspora -L 46.5G /dev/data

# cryptsetup luksFormat /dev/data/diaspora
# cryptsetup luksOpen /dev/data/diaspora diaspora

and update /etc/crypttab
# <target name> <source device> <key file> <options>
diaspora /dev/data/diaspora none luks

# mkfs.ext4 /dev/mapper/diaspora
# mkdir /var/lib/diaspora
and update /etc/fstab
# UNCONFIGURED FSTAB FOR BASE SYSTEM
/dev/mapper/diaspora /var/lib/diaspora ext4 defaults 0 2

# mount -a
# apt-get install mysql-server

Move MySQL data directory to encrypted volume
# /etc/init.d/mysql stop
# mv /var/lib/mysql /var/lib/diaspora/
# ln -s /var/lib/diaspora/mysql /var/lib/mysql

Follow steps in https://dev.mysql.com/doc/refman/5.5/en/replication-howto-masterbaseconfig.html for replication

Follow steps in https://www.howtoforge.com/how-to-set-up-mysql-database-replication-with-ssl-encryption-on-centos-5.4 for ssl (but ssl support is disabled in debian)

Follow steps in http://www.networkcomputing.com/storage/how-set-ssh-encrypted-mysql-replication/1111882674 to use ssh port forwarding to have encrypted replication

# adduser sshtunnel --disabled-login
# su sshtunnel

Generate SSH key pair and copy public key to target system
$ ssh-keygen -t rsa
$ ssh -f sshtunnel@poddery.com -L 7777:127.0.0.1:3306 -N

Test the connectivity
# mysql -u poddery_backup -p -P 7777 -h 127.0.0.1

Uploads are rsynced every hour

# crontab -e
# m h dom mon dow command
0 * * * * pgrep rsync || rsync -av --delete root@poddery.com:/var/lib/diaspora/uploads/ /var/lib/diaspora/uploads/ >/var/lib/diaspora/rsync-uploads.log

'''Note:''' Since we are not using a public ip (saves us money), backup.poddery.com connects to poddery.com via private ip. So if poddery.com is rebooted, the new ip address should be updated in /etc/hosts file of backup.poddery.com. To connect, use the web console from scaleway.com

= Add more disk space =

# Power off the machine with "ARCHIVE" option. It may take upto an hour for shutdown to complete on backup.poddery.com and poddery.com
# Add more disk from scaleway.com control panel . Volumes -> CREATE VOLUME
# Attach the newly created volume to server from Server page
# Power on the server
# Create physical volume (pvcreate /dev/nbdN)
# Expand volume group (vgextend data /dev/nbdN)
# Expand logical volume (lvresize --size=186G data/diaspora)
# Expand encrypted partition (cryptsetup resize diaspora)
# Resize file system (resize2fs /dev/mapper/diaspora)

= Maintenance history =
This section holds maintenance/issue history for future tracking.

'''When updating diaspora-installer-mysql packages, remember to recreate /usr/share/diaspora/public/uploads symlink to /var/lib/diaspora/uploads'''.

1. Prosody error - Failed to load private key

certmanager error SSL/TLS: Failed to load '/etc/letsencrypt/live/poddery.com/privkey.pem': Previous error (see logs), or other system error. (for poddery.com)
tls error Unable to initialize TLS: error loading private key (system lib)
certmanager error SSL/TLS: Failed to load '/etc/letsencrypt/live/poddery.com/privkey.pem': Check that the permissions allow Prosody to read this file.

This error is usually when ssl certificate in freshly installed or renewed. Prosody user is unable to access the key file due to lack of privileges.

Note that Poddery uses Letsencrypt for ssl.

Fix:

* Make sure that prosody user is in 'certs' group (this group may also be called ssl-certs as setup by Letencrypt)
* /etc/letsencrypt/ is the ssl directory.
* Prosody user should have permissions to all folders importantly archive and live folders in /etc/letsencrypt. Permissions to each folder must be 750.
* Troubleshoot by checking if you can switch to each folder in /etc/letsencrypt as prosody user and cat the files.

'''If replication fails, you can restart it following the instructions here'''

https://dba.stackexchange.com/questions/69394/mysql-replication-error-1594

[[Category:Services]]