Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
tamiwiki:internal:procedures:todo [2023/03/05 23:46] – 444b | tamiwiki:internal:procedures:todo [2023/05/27 03:09] (current) – removed corshunov | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== TODO ====== | ||
- | |||
- | all the things we need to get done currently | ||
- | ---- | ||
- | Old wiki link | ||
- | https:// | ||
- | |||
- | - We need to address the Diagnosis results of Yunohost | ||
- | - | ||
- | https:// | ||
- | |||
- | The full output: | ||
- | ================================= | ||
- | Base system (basesystem) | ||
- | ================================= | ||
- | |||
- | [INFO] Server hardware architecture is kvm amd64 | ||
- | - Server model is QEMU Standard PC (i440FX + PIIX, 1996) | ||
- | |||
- | [INFO] Server is running Linux kernel 5.10.0-21-amd64 | ||
- | |||
- | [INFO] Server is running Debian 11.6 | ||
- | |||
- | [INFO] Server is running YunoHost 11.1.12.2 (stable) | ||
- | - yunohost version: 11.1.12.2 (stable) | ||
- | - yunohost-admin version: 11.1.6 (stable) | ||
- | - moulinette version: 11.1.4 (stable) | ||
- | - ssowat version: 11.1.4 (stable) | ||
- | |||
- | |||
- | |||
- | ================================= | ||
- | Internet connectivity (ip) | ||
- | ================================= | ||
- | |||
- | [WARNING] DNS resolution seems to be working, but it looks like you're using a custom / | ||
- | - The file / | ||
- | |||
- | [SUCCESS] The server is connected to the Internet through IPv4! | ||
- | - Global IP: xx.xx.xx.xx | ||
- | - Local IP: 10.81.2.235 | ||
- | |||
- | |||
- | |||
- | ================================= | ||
- | DNS records (dnsrecords) | ||
- | ================================= | ||
- | |||
- | [ERROR] Some DNS records are missing or incorrect for domain domain2.tld (category basic) | ||
- | - Please check the documentation at https:// | ||
- | - The following DNS record does not seem to follow the recommended configuration: | ||
- | Type: A | ||
- | Name: @ | ||
- | Current value: 178.62.253.232 | ||
- | Expected value: xx.xx.xx.xx | ||
- | |||
- | [WARNING] Some DNS records are missing or incorrect for domain domain2.tld (category mail) | ||
- | - Please check the documentation at https:// | ||
- | - The following DNS record does not seem to follow the recommended configuration: | ||
- | Type: MX | ||
- | Name: @ | ||
- | Current value: 50 mail.telavivmakers.org. | ||
- | Expected value: 10 domain2.tld. | ||
- | - According to the recommended DNS configuration, | ||
- | Type: TXT | ||
- | Name: mail._domainkey | ||
- | Value: " | ||
- | - According to the recommended DNS configuration, | ||
- | Type: TXT | ||
- | Name: _dmarc | ||
- | Value: " | ||
- | |||
- | [WARNING] Some DNS records are missing or incorrect for domain domain2.tld (category extra) | ||
- | - Please check the documentation at https:// | ||
- | - According to the recommended DNS configuration, | ||
- | Type: A | ||
- | Name: * | ||
- | Value: xx.xx.xx.xx | ||
- | - According to the recommended DNS configuration, | ||
- | Type: CAA | ||
- | Name: @ | ||
- | Value: 0 issue " | ||
- | |||
- | [SUCCESS] DNS records are correctly configured for domain domain3.tld (category basic) | ||
- | |||
- | [WARNING] Some DNS records are missing or incorrect for domain domain3.tld (category mail) | ||
- | - Please check the documentation at https:// | ||
- | - According to the recommended DNS configuration, | ||
- | Type: MX | ||
- | Name: space | ||
- | Value: 10 domain3.tld. | ||
- | - According to the recommended DNS configuration, | ||
- | Type: TXT | ||
- | Name: space | ||
- | Value: " | ||
- | - According to the recommended DNS configuration, | ||
- | Type: TXT | ||
- | Name: mail._domainkey.space | ||
- | Value: " | ||
- | - According to the recommended DNS configuration, | ||
- | Type: TXT | ||
- | Name: _dmarc.space | ||
- | Value: " | ||
- | |||
- | [WARNING] Some DNS records are missing or incorrect for domain domain3.tld (category extra) | ||
- | - Please check the documentation at https:// | ||
- | - According to the recommended DNS configuration, | ||
- | Type: A | ||
- | Name: *.space | ||
- | Value: xx.xx.xx.xx | ||
- | - According to the recommended DNS configuration, | ||
- | Type: CAA | ||
- | Name: space | ||
- | Value: 0 issue " | ||
- | |||
- | [SUCCESS] DNS records are correctly configured for domain maindomain.tld (category basic) | ||
- | |||
- | [SUCCESS] DNS records are correctly configured for domain maindomain.tld (category mail) | ||
- | |||
- | [WARNING] Some DNS records are missing or incorrect for domain maindomain.tld (category xmpp) | ||
- | - Please check the documentation at https:// | ||
- | - According to the recommended DNS configuration, | ||
- | Type: SRV | ||
- | Name: _xmpp-client._tcp | ||
- | Value: 0 5 5222 maindomain.tld. | ||
- | - According to the recommended DNS configuration, | ||
- | Type: SRV | ||
- | Name: _xmpp-server._tcp | ||
- | Value: 0 5 5269 maindomain.tld. | ||
- | - According to the recommended DNS configuration, | ||
- | Type: CNAME | ||
- | Name: muc | ||
- | Value: maindomain.tld. | ||
- | - According to the recommended DNS configuration, | ||
- | Type: CNAME | ||
- | Name: pubsub | ||
- | Value: maindomain.tld. | ||
- | - According to the recommended DNS configuration, | ||
- | Type: CNAME | ||
- | Name: vjud | ||
- | Value: maindomain.tld. | ||
- | - According to the recommended DNS configuration, | ||
- | Type: CNAME | ||
- | Name: xmpp-upload | ||
- | Value: maindomain.tld. | ||
- | |||
- | [WARNING] Some DNS records are missing or incorrect for domain maindomain.tld (category extra) | ||
- | - Please check the documentation at https:// | ||
- | - According to the recommended DNS configuration, | ||
- | Type: CAA | ||
- | Name: @ | ||
- | Value: 0 issue " | ||
- | |||
- | [SUCCESS] Your domains are registered and not going to expire anytime soon. | ||
- | - telavivmakers.org expires in 716 days. | ||
- | - maindomain.tld expires in 355 days. | ||
- | |||
- | |||
- | |||
- | ================================= | ||
- | Ports exposure (ports) | ||
- | ================================= | ||
- | |||
- | [SUCCESS] Port 22 is reachable from the outside. | ||
- | - Exposing this port is needed for admin features (service ssh) | ||
- | |||
- | [SUCCESS] Port 25 is reachable from the outside. | ||
- | - Exposing this port is needed for email features (service postfix) | ||
- | |||
- | [ERROR] Port 53 is not reachable from the outside. | ||
- | - Exposing this port is needed for [?] features (service adguardhome) | ||
- | - To fix this issue, you most probably need to configure port forwarding on your internet router as described in https:// | ||
- | |||
- | [SUCCESS] Port 80 is reachable from the outside. | ||
- | - Exposing this port is needed for web features (service nginx) | ||
- | |||
- | [SUCCESS] Port 443 is reachable from the outside. | ||
- | - Exposing this port is needed for web features (service nginx) | ||
- | |||
- | [SUCCESS] Port 587 is reachable from the outside. | ||
- | - Exposing this port is needed for email features (service postfix) | ||
- | |||
- | [SUCCESS] Port 993 is reachable from the outside. | ||
- | - Exposing this port is needed for email features (service dovecot) | ||
- | |||
- | [SUCCESS] Port 5222 is reachable from the outside. | ||
- | - Exposing this port is needed for xmpp features (service metronome) | ||
- | |||
- | [SUCCESS] Port 5269 is reachable from the outside. | ||
- | - Exposing this port is needed for xmpp features (service metronome) | ||
- | |||
- | [ERROR] Port 5349 is not reachable from the outside. | ||
- | - Exposing this port is needed for [?] features (service coturn-synapse) | ||
- | - To fix this issue, you most probably need to configure port forwarding on your internet router as described in https:// | ||
- | |||
- | [SUCCESS] Port 8448 is reachable from the outside. | ||
- | - Exposing this port is needed for [?] features (service matrix-synapse) | ||
- | |||
- | |||
- | |||
- | ================================= | ||
- | Web (web) | ||
- | ================================= | ||
- | |||
- | [SUCCESS] Domain domain2.tld is reachable through HTTP from outside the local network. | ||
- | |||
- | [SUCCESS] Domain domain3.tld is reachable through HTTP from outside the local network. | ||
- | |||
- | [SUCCESS] Domain maindomain.tld is reachable through HTTP from outside the local network. | ||
- | |||
- | [SUCCESS] Domain docs.maindomain.tld is reachable through HTTP from outside the local network. | ||
- | |||
- | [SUCCESS] Domain element.maindomain.tld is reachable through HTTP from outside the local network. | ||
- | |||
- | [SUCCESS] Domain git.maindomain.tld is reachable through HTTP from outside the local network. | ||
- | |||
- | [SUCCESS] Domain hass.maindomain.tld is reachable through HTTP from outside the local network. | ||
- | |||
- | [SUCCESS] Domain matrix.maindomain.tld is reachable through HTTP from outside the local network. | ||
- | |||
- | [SUCCESS] Domain nextcloud.maindomain.tld is reachable through HTTP from outside the local network. | ||
- | |||
- | [SUCCESS] Domain pad.maindomain.tld is reachable through HTTP from outside the local network. | ||
- | |||
- | [SUCCESS] Domain sandbox-pad.maindomain.tld is reachable through HTTP from outside the local network. | ||
- | |||
- | [SUCCESS] Domain tor.maindomain.tld is reachable through HTTP from outside the local network. | ||
- | |||
- | [SUCCESS] Domain vault.maindomain.tld is reachable through HTTP from outside the local network. | ||
- | |||
- | |||
- | |||
- | ================================= | ||
- | Email (mail) | ||
- | ================================= | ||
- | |||
- | [SUCCESS] The SMTP mail server is able to send emails (outgoing port 25 is not blocked). | ||
- | |||
- | [SUCCESS] The SMTP mail server is reachable from the outside and therefore is able to receive emails! | ||
- | |||
- | [ERROR] Reverse DNS is not correctly configured for IPv4. Some emails may fail to get delivered or be flagged as spam. | ||
- | - Current reverse DNS: domain3.tld | ||
- | Expected value: maindomain.tld | ||
- | - You should first try to configure reverse DNS with maindomain.tld in your internet router interface or your hosting provider interface. (Some hosting providers may require you to send them a support ticket for this). | ||
- | - Some providers won't let you configure your reverse DNS (or their feature might be broken...). If you are experiencing issues because of this, consider the following solutions: | ||
- | - Some ISP provide the alternative of using a mail server relay though it implies that the relay will be able to spy on your email traffic. | ||
- | - A privacy-friendly alternative is to use a VPN *with a dedicated public IP* to bypass this kind of limits. See https:// | ||
- | - Or it's possible to switch to a different provider | ||
- | |||
- | [SUCCESS] The IPs and domains used by this server do not appear to be blacklisted | ||
- | |||
- | [SUCCESS] 1 pending emails in the mail queues | ||
- | |||
- | |||
- | |||
- | ================================= | ||
- | Services status check (services) | ||
- | ================================= | ||
- | |||
- | [SUCCESS] Service adguardhome is running! | ||
- | |||
- | [ERROR] Service coturn-synapse is failed :( | ||
- | - You can try to restart the service, and if it doesn' | ||
- | |||
- | [SUCCESS] Service cryptpad is running! | ||
- | |||
- | [SUCCESS] Service dnsmasq is running! | ||
- | |||
- | [SUCCESS] Service dovecot is running! | ||
- | |||
- | [SUCCESS] Service fail2ban is running! | ||
- | |||
- | [SUCCESS] Service gitea is running! | ||
- | |||
- | [SUCCESS] Service homeassistant is running! | ||
- | |||
- | [SUCCESS] Service matrix-synapse is running! | ||
- | |||
- | [SUCCESS] Service mautrix_telegram is running! | ||
- | |||
- | [SUCCESS] Service metronome is running! | ||
- | |||
- | [SUCCESS] Service mysql is running! | ||
- | |||
- | [SUCCESS] Service nginx is running! | ||
- | |||
- | [SUCCESS] Service php7.4-fpm is running! | ||
- | |||
- | [SUCCESS] Service php8.1-fpm is running! | ||
- | |||
- | [SUCCESS] Service postfix is running! | ||
- | |||
- | [SUCCESS] Service postgresql is running! | ||
- | |||
- | [SUCCESS] Service redis-server is running! | ||
- | |||
- | [SUCCESS] Service rspamd is running! | ||
- | |||
- | [SUCCESS] Service slapd is running! | ||
- | |||
- | [SUCCESS] Service ssh is running! | ||
- | |||
- | [SUCCESS] Service vaultwarden is running! | ||
- | |||
- | [SUCCESS] Service yunohost-api is running! | ||
- | |||
- | [SUCCESS] Service yunohost-firewall is running! | ||
- | |||
- | [SUCCESS] Service yunomdns is running! | ||
- | |||
- | |||
- | |||
- | ================================= | ||
- | System resources (systemresources) | ||
- | ================================= | ||
- | |||
- | [SUCCESS] The system still has 18 GiB (93%) RAM available out of 20 GiB. | ||
- | |||
- | [SUCCESS] The system has 976 MiB of swap! | ||
- | - Please be careful and aware that if the server is hosting swap on an SD card or SSD storage, it may drastically reduce the life expectancy of the device. | ||
- | |||
- | [SUCCESS] Storage / (on device / | ||
- | |||
- | [SUCCESS] Storage /boot (on device /dev/sda1) still has 109 MiB (51%) space left (out of 213 MiB)! | ||
- | |||
- | |||
- | |||
- | ================================= | ||
- | System configurations (regenconf) | ||
- | ================================= | ||
- | |||
- | [SUCCESS] All configuration files are in line with the recommended configuration! | ||
- | |||
- | |||
- | |||
- | ================================= | ||
- | Applications (apps) | ||
- | ================================= | ||
- | |||
- | [SUCCESS] All installed apps respect basic packaging practices | ||
- | |||
- | |||
- | |||
- | |||
- | |||
- | ---- | ||
- | QR Code for page, do not delete | ||
- | |||
- | {{: | ||
- | |||
- | |||