diff options
Diffstat (limited to 'content')
| -rw-r--r-- | content/auth.md | 2 | ||||
| -rw-r--r-- | content/basic/nginx.md | 4 | ||||
| -rw-r--r-- | content/basic/server.md | 3 | ||||
| -rw-r--r-- | content/coturn.md | 3 | ||||
| -rw-r--r-- | content/fosspay.md | 73 | ||||
| -rw-r--r-- | content/gitea.md | 2 | ||||
| -rw-r--r-- | content/nginx-tweaks.md | 33 | ||||
| -rw-r--r-- | content/radicale.md | 2 | ||||
| -rw-r--r-- | content/searxng.md | 6 | ||||
| -rw-r--r-- | content/tor.md | 2 |
10 files changed, 57 insertions, 73 deletions
diff --git a/content/auth.md b/content/auth.md index 3f88a90..88a5fee 100644 --- a/content/auth.md +++ b/content/auth.md @@ -133,4 +133,4 @@ Now check your configuration with `nginx -t` Reload nginx and you\'re good to go! -**Contributor** - [tomfasano.co](https://tomfasano.co){target="_blank"} +**Contributor** - [tomfasano.net](https://tomfasano.net) diff --git a/content/basic/nginx.md b/content/basic/nginx.md index 47a08c1..fb8f15a 100644 --- a/content/basic/nginx.md +++ b/content/basic/nginx.md @@ -20,7 +20,7 @@ Now on Vultr\'s site, you can click on your VPS and you will see that there is an area that shows you the password for your server at the bottom here. - +{{< img alt="Find your password" src="/pix/nginx-password.png" link="/pix/nginx-password.png" >}} Now pull up a terminal and type: @@ -206,7 +206,7 @@ date](maintenance.html#update) to get the latest security fixes! At this point you can now type in your website in your browser and this webpage will appear! - +{{< img alt="The webpage as it appears." src="/pix/nginx-website.png" link="/pix/nginx-website.png" >}} Note the \"Not secure\" notification. The next brief step is securing encrypted connections to your website. diff --git a/content/basic/server.md b/content/basic/server.md index e68af8f..6b6e233 100644 --- a/content/basic/server.md +++ b/content/basic/server.md @@ -47,8 +47,7 @@ your audience might be, but if you host a server in Singapore for an American audience, they won\'t have to be waiting a perceptibly longer time to load the site. -[](pix/server-location.png) +{{< img alt="Pick your servers's location" src="/pix/server-location.png" link="/pix/server-location.png" >}} **Some locations might have different abilities and plans than others. For example, in Vultr, their New York location has optional DDOS diff --git a/content/coturn.md b/content/coturn.md index 25c1a34..5dd60b3 100644 --- a/content/coturn.md +++ b/content/coturn.md @@ -1,13 +1,14 @@ --- title: "Coturn" date: 2022-03-29 +short_desc: 'A STUN and TURN server that allows users to perform WebRTC calls while being behind NATs.' icon: "webrtc.svg" img: "webrtc.svg" tags: ['service'] --- [Coturn](https://github.com/coturn/coturn) is a libre **STUN** and -**TURN** server software that allows users of chat protcols (Such as +**TURN** server software that allows users of chat protocols (Such as [XMPP](/prosody) and [Matrix](/matrix)) to perform WebRTC **voice and video calls** despite them being behind NATs. diff --git a/content/fosspay.md b/content/fosspay.md index 9414179..f7e3ae9 100644 --- a/content/fosspay.md +++ b/content/fosspay.md @@ -3,8 +3,9 @@ title: "Fosspay" tags: ['service'] icon: 'devault.jpg' short_desc: "A self-hosted payment and donation gateway interfaced with Stripe." -draft: true +date: 2022-06-30 --- + [Fosspay](https://sr.ht/~sircmpwn/fosspay/) is a free-software web frontend for receiving donations and subscriptions, similar to Patreon or Liberapay, but which can be hosted on your own server. It can also interface with Patreon or Github @@ -12,35 +13,21 @@ Sponsors to aggregate all your donations. ## Stripe Setup -Fosspay uses [Stripe](https://stripe.com) as a payment processor, which -is a less annoying and more serious and extensible equivalent of PayPal. -You must set up an account with them to be able to receive card payments -through Fosspay. - -Note that with Stripe, these payments can be arranged to go directly to -a bank account within a day or so. +Fosspay uses [Stripe](https://stripe.com) as a payment processor. You first must go to [their website](https://stripe.com) and create an account. -Be sure to check out or configure all the Stripe settings you want -before hand. For example, Stripe will automatically include your phone -number on invoices by default, so you might want to change that if you -are not using a dummy number. +Once you set everything up, you can go to [https://dashboard.stripe.com/account/apikeys](https://dashboard.stripe.com/account/apikeys) and get your "Publishable Key" and "Secret Key" which will be all you need to set up Fosspay. -### Note +<aside> -LandChad.net strives for free software, privacy and internet -independence. Using Stripe is better than using companies with a bad -reputation like PayPal, but it is still a large company with can -compromise the privacy of you and others and ban people. +### Note on Free Software -Stripe does do a good job making payments very easy for you: you do not -have to do legally difficult things like storing credit card numbers -(they are sent directly to Stripe via Javascript code). They are also good at -catching fraudulent transactions and other issues that might arise. +Stripe is perhaps the best way to transact in the legacy financial system +online, but you are still not using free and privacy respecting software. +Fosspay is an open source payment gateway, but it still connects to Stripe. +The only way to transact value over the internet on all free software is +[crypto-currency](/monero/). -But if you want a truly and fully free and open source monetary system -and will not compromise for less, please use Bitcoin or Monero -exclusively. Compared to any other fiat service, Stripe is about the -best, and Fosspay is a great way to self-host a payment gateway. +</aside> ## Dependencies @@ -70,11 +57,6 @@ cd /var/www/fosspay pip install -r requirements.txt ``` -The `install` command, at the time of this writing, *might* produce many -errors related to the `psycopg2` package. If it does, you can ignore -them, let the command complete and run `apt install python3-psycopg2` to -get the package globally. - Be sure you are still in `/var/www/fosspay`, then we will build the package and create the configuration file. @@ -85,7 +67,7 @@ cp config.ini.example config.ini ## Create a Database -Fosspay uses a postgresql database to store donation information, so +Fosspay uses a PostgreSQL database to store donation information, so let\'s create a database and user for it. First, become the `postgres` user and run the `psql` command: @@ -114,20 +96,21 @@ whatever reason, change them in the command above, but also in the Now open up `/var/www/fosspay/config.ini` and we will set things up. Here are a list of things to edit. -- `domain` should be set to `donate.example.org`, with your domain. -- `protocol` can be set to `https`. -- Get or create an email account to use as a mailer and add the - account/server information to the email settings. -- Add your public and secret Stripe keys to the information. -- Change the `connection-string` to - `postgresql://fosspay:fosspay@localhost/fosspay` as set up above. - -**An important note:** mail ports *must* be opened on the server you\'re -using, or else Fosspay will silently fail to send mails when someone -tries to donate or reset their password. You do not have to run a mail -server on the same server as Fosspay, but either way, mail submission -ports must be opened. This usually requires contacting your VPS provider -and requesting it from them. +- `domain` should be set to `donate.example.org`, with your domain. +- `protocol` can be set to `https`. +- Get or create an email account to use as a mailer and add the account/server + information to the email settings. +- Add your public and secret Stripe keys to the information. +- Change the `connection-string` to + `postgresql://fosspay:fosspay@localhost/fosspay` as set up above. + +**An important note:** mail ports *must* be opened on the server you\'re using, +or else Fosspay will silently fail to send mails when someone tries to donate +or reset their password. You do not have to run a mail server on the same +server as Fosspay, but either way, mail submission ports must be opened. This +usually requires contacting your VPS provider and requesting it from them. +Aside from this, any error in the email setup will cause Fosspay to crash +silently. ### Optional Integration with Patreon, Github, Liberapay diff --git a/content/gitea.md b/content/gitea.md index 685c8cb..e09b6c0 100644 --- a/content/gitea.md +++ b/content/gitea.md @@ -41,7 +41,7 @@ curl -sL -o /etc/apt/trusted.gpg.d/morph027-gitea.asc https://packaging.gitlab.i Then add the actual repository to apt: ```sh -echo "deb [arch=amd64] https://packaging.gitlab.io/gitea gitea main" > /etc/apt/sources.list.d/morph027-gitea.list +echo "deb [arch=$(dpkg --print-architecture)] https://packaging.gitlab.io/gitea gitea main" > /etc/apt/sources.list.d/morph027-gitea.list ``` Now we can install Gitea: diff --git a/content/nginx-tweaks.md b/content/nginx-tweaks.md index 8d4dcb8..8e85af5 100644 --- a/content/nginx-tweaks.md +++ b/content/nginx-tweaks.md @@ -2,19 +2,19 @@ title: "Nginx Tweaks" date: 2022-06-16 --- -The point of this article is to show you how to do some commonly-desired -tweaks in Nginx while in the meantime helping you understand how it -works. + +The point of this article is to show you how to do some commonly-desired tweaks +in Nginx while in the meantime helping you understand how it works. ## Do not require `.html` in URLs If your website is using lots of `.html` files for pages, it\'s sort of -overkill to make people type that in for every page they are looking -for. We can remove that requirement with Nginx. +overkill to make people type that in for every page they are looking for. We +can remove that requirement with Nginx. -Open your site\'s configuration file in `/etc/nginx/sites-enabled/` and -within the `server` block, there should be a `location` block that looks -something like this if you have followed [the guide here](/basic/nginx). +Open your site\'s configuration file in `/etc/nginx/sites-enabled/` and within +the `server` block, there should be a `location` block that looks something +like this if you have followed [the guide here](/basic/nginx). ```nginx location / { @@ -23,15 +23,14 @@ location / { ``` What this means is that in the file location of `/`, i.e. anywhere and -everywhere in the root file system, We will look for the three things -listed in `try_files` in that order: +everywhere in the root file system, We will look for the three things listed in +`try_files` in that order: -1. `$uri`: a file that directly matches the content added after the +1. `$uri`: a file that directly matches the content added after the domain. +2. `$uri/`: a *directory* that directly matches the content added after the domain. -2. `$uri/`: a *directory* that directly matches the content added after - the domain. -3. `=404`: if neither of those is found, we give a 404 error, which as - you probably know, signified \"Page not found.\" +3. `=404`: if neither of those is found, we give a 404 error, which as you + probably know, signified \"Page not found.\" We will now change the content inside the `location` block to the below: @@ -42,5 +41,5 @@ location / { } ``` -`$1` here refers to the first content in the parentheses `()` in the -preceeding regular expression. +`$1` here refers to the first content in the parentheses `()` in the preceeding +regular expression. diff --git a/content/radicale.md b/content/radicale.md index 56d3b0f..b24f8ef 100644 --- a/content/radicale.md +++ b/content/radicale.md @@ -46,7 +46,7 @@ As you can see under \[auth\] we use htpasswd to manage the users. Execute the following command to add a new user to Radicale. ```sh -htpasswd -c /etc/radicale/users username +htpasswd -B -c /etc/radicale/users username ``` As Radicale stands now it is fully functional and after starting it by diff --git a/content/searxng.md b/content/searxng.md index 4797b69..7e0c570 100644 --- a/content/searxng.md +++ b/content/searxng.md @@ -20,6 +20,8 @@ that can be accessed using a domain over HTTPS. Features include: ## Installation +"For the installation procedure, use a sudoer login to run the scripts. If you install from root, take into account that the scripts are creating a searx, a filtron and a morty user. In the installation procedure these new created users do need read access to the clone of searx, which is not the case if you clone into a folder below /root." - SearXNG Docs + Install the required packages. ```sh @@ -29,8 +31,8 @@ apt install git nginx -y Open http and https ports. ```sh -iptables -I INPUT 6 -m state --state NEW -p tcp --dport 80 -j ACCEPT -iptables -I INPUT 6 -m state --state NEW -p tcp --dport 443 -j ACCEPT +iptables -I INPUT -m state --state NEW -p tcp --dport 80 -j ACCEPT +iptables -I INPUT -m state --state NEW -p tcp --dport 443 -j ACCEPT netfilter-persistent save ufw allow 80 ufw allow 443 diff --git a/content/tor.md b/content/tor.md index d4fa9fb..c12fa92 100644 --- a/content/tor.md +++ b/content/tor.md @@ -116,4 +116,4 @@ Make sure to update Tor on a regular basis by running: You do [not]{.underline} need to run certbot for an ssl certificate. HTTP over tor is plenty secure! -**Contributor** - [tomfasano.co](https://tomfasano.co){target="_blank"} +**Contributor** - [tomfasano.net](https://tomfasano.net) |