Mail server - Revision history

Strk: /* SSL certificates */

2025-10-02T17:39:55Z

SSL certificates

Strk: /* MySQL server */

2025-10-02T17:38:06Z

MySQL server

Strk: /* Websites */

2025-10-02T17:37:22Z

Websites

Strk: /* Websites */

2025-10-02T17:36:33Z

Websites

Strk: Undo revision 134553 by Strk (talk)

2025-10-02T17:34:58Z

Undo revision 134553 by Strk (talk)

Strk: Reverted edits by Strk (talk) to last revision by Jmckenna

2025-10-02T17:34:18Z

Reverted edits by Strk (talk) to last revision by Jmckenna

Strk: /* Websites */

2025-10-02T17:33:58Z

Websites

Strk at 17:33, 2 October 2025

2025-10-02T17:33:02Z

Strk: Strk moved page Osgeo6 to Mail server: host moved to a cointainer

2025-10-02T09:43:38Z

Strk moved page Osgeo6 to Mail server: host moved to a cointainer

Strk: /* Postfix SMTP server */

2025-09-17T08:32:48Z

Postfix SMTP server

@@ Line 48: / Line 48: @@
 = SSL certificates =
-* LetsEncrypt was configured by [[Jeff McKenna]] on 2018-07-27 for mapserver.org, gdal.org, grass.osgeo.org, grasswiki.osgeo.org, drone.osgeo.org, and lists.osgeo.org using certbot-auto
+* LetsEncrypt is configured using certbot-auto
-** careful: check the conf files in /etc/apache2/sites-enabled/ to make sure that the VirtualHost settings do not include something like ''<VirtualHost _default_:443>'' and instead should point to the IP such as ''<VirtualHost 140.211.15.3:443>'' or else the certificate loaded will always default to mapserver.org
+** careful: check the conf files in /etc/apache2/sites-enabled/ to make sure that the VirtualHost settings do not include something like ''<VirtualHost _default_:443>'' and instead should point to the IP such as ''<VirtualHost 140.211.15.14:443>'' or else the certificate loaded will always default to mapserver.org
 ** certbot-auto lives in /usr/local/sbin.
 ** to add more sites, run the command:<blockquote>certbot-auto --apache -d mapserver.org -d www.mapserver.org</blockquote>

@@ Line 41: / Line 41: @@
 == MySQL server ==
-'''TODO''': review
+'''TODO''': review/cleanup
 * backed up via [[SAC:Backups|bacula]] in BackupOg6 job (see /osgeo/backup)
 * admin user credentials found in ~root/.my.cnf

@@ Line 31: / Line 31: @@
+|
 |-
-| https://lists.osgeo.org
+| lists.osgeo.org
 | admin
 | Web interface for managing Mailman
 |-

@@ Line 18: / Line 18: @@
 {| border="1" class="wikitable"
 |-
 | www.tilecache.org

@@ Line 1: / Line 1: @@
-'''Osgeo6''' is a Debian 10 machine administered by [[SAC]], hosted on [[SAC_Service_Status#Servers_at_OSL|OSU OSL servers]] since August 2015 (see also [[Infrastructure Transition Plan 2014#Hardware|Hardware plan 2014]]).
+The production mail server is a Debian 10 LXD container administered by [[SAC]], hosted on [[osgeo9]].
-It hosts several '''critical resources''', projects web sites mail-transport and -lists, it is the successor of the [[ProjectsVM]] and the [[MailVM]] (this machine runs NO VMs instead).
+See [[SAC#Communication]] in case of troubles or quick questions
-The host is reachable by ssh at '''osgeo6.osgeo.osuosl.org'''.
+= Services hosted on the mail container =
-= Shell access =
+== Postfix SMTP server ==
-Anyone in the https://www.osgeo.org/cgi-bin/auth/ldap_shell.py has ssh access, and anyone in this group can add new people via the link. Sudo access can be provided by existing sudoer's by adding folks to the sudoers group in /etc/group, though it is normal practice to try and only extend sudo access to one user per project.
+Handles [[SAC:Message Submission Agent|outgoing]] and [[SAC:Message Transport Agent|incoming]] email
-It is a shared environment and it is important that folks making changes on the system be aware of the impact they might have on other hosted services. Apache changes should be made carefully and needfully. Think about '''security'''!
+== Mailman ==
-See [[SAC#Communication]] in case of troubles or quick questions
+* [[SAC:Mailing Lists]] - mailman configuration for lists.osgeo.org.
 == Websites ==
@@ Line 20: / Line 18: @@
 {| border="1" class="wikitable"
 |-
 | www.tilecache.org
@@ Line 50: / Line 24: @@
 | BackupOg6 bacula job
+|
 |-
 | https://lists.osgeo.org
 | admin
 | Web interface for managing Mailman
 |-
 |}
 == MySQL server ==
 * <del>used for GRASS GIS Wiki (maintained by Martin Landa and Markus Neteler)</del>
 <del>* used for GRASS CMS and GRASS Wiki ? </devl> now on grass on osgeo7 and grass-wiki on osgeo3
 * backed up via [[SAC:Backups|bacula]] in BackupOg6 job (see /osgeo/backup)
 * admin user credentials found in ~root/.my.cnf
 = SSL certificates =
@@ Line 121: / Line 51: @@
 = Backup strategy =
-As of Feb 2017 backup is performed by bacula, with the BackupOg6 job,
+See [[SAC:Backups]] for general info about backup strategies for containers.
 A dump of each mysql database is also stored as a separate file under /osgeo
 (created during the backup phase).

← Older revision	Revision as of 09:43, 2 October 2025
(No difference)