Setting up Radicale – LandChad.net

Radicale is an open source calDAV server. CalDAV is a widely supported internet standard for calendars, todo-lists and contacts. Hosting your own calDAV server allows sharing calendars between mutliple devices.

More information can be found on the projects offical website: radicale.org.

Installing Radicale

Firstly, we have to install radicale on our system, luckily for us radicale is packaged for the most used distros.

apt install radicale apache2-utils

Next we need to configure Radicale. We configure radicale to be accessible from other machines, how Radicale and where the files should be stored. Open /etc/radicale/config with your favourite editor and add this configuration.

[server]
+# Bind all addresses
+hosts = 0.0.0.0:5232, [::]:5232
+
+[auth]
+type = htpasswd
+htpasswd_filename = /etc/radicale/users
+htpasswd_encryption = md5
+
+[storage]
+filesystem_folder = /var/lib/radicale/collections

+ +

As you can see under [auth] we use htpasswd to manage the users. Execute the following command to add a new user to Radicale.

htpasswd -c /etc/radicale/users username

As Radicale stands now it is fully functional and after starting it by executing its binary, can be accessed under example.org:5232. But there are two additional things we can do to make using and managing Radicale way easier.

Setting up a Nginx reverse proxy

Because the URL of your Radicale server is an URL you will have to remember and enter it on any device you want to use your calendar on it is advised to set up a reverse proxy.

server {
+	listen 443 ssl;
+	listen [::]:443 ssl;
+	server_name cal.example.org;
+	location / {
+		proxy_pass http://localhost:5232/; # The / is important!
+	}
+	# You can also leave these two lines out and use certbot
+	ssl_certificate /etc/ssl/nginx/cal.example.com/fullchain.pem;
+	ssl_certificate_key /etc/ssl/nginx/cal.example.com/privkey.pem;
+}

Run as a service

Running Radicale as a service makes managing it much easier. Add this config to /etc/systemd/system/radicale.service.

[Unit]
+Description=A simple CalDAV (calendar) and CardDAV (contact) server
+
+[Service]
+ExecStart=/usr/bin/env python3 -m radicale
+Restart=on-failure
+
+[Install]
+WantedBy=default.target

After creating the config load, start and enable the service with the following commands.

systemctl daemon-reload
+systemctl enable --now radicale

Contribution

Author: Jocomol – jocomol.ch -- XMR: 41kLv68Nk4N3zvTRFYtHZfRRFMgXkxK2FcXDeCSa4yNwBGTBa1WQ8HtXL8cCAcoZ2iSLBCS6HQqdpRSf56ecMBgWTkn2ARt +

Firstly, we have to install radicale on our system, luckily for us radicale is packaged for the most used distros.

Next we need to configure Radicale. We configure radicale to be accessible from other machines, how Radicale handles users and where the files should be stored. Open /etc/radicale/config with your favourite editor and add this configuration.

When you create a video chatroom, its address will appear as meet.example.org/yourvideochatname and can be shared as such.

Security

+ The default Jitsi configuration will allow anyone accessing your site to create a video chatroom. If you want to only allow certain people to create rooms, you can check out how to add authentication here in the original documentation. +

More info

-- cgit v1.2.3 From 12dd046d2b84a7a2e66feaa00beb1d3a4ad4cfad Mon Sep 17 00:00:00 2001 From: Charbel Abi Daher Date: Tue, 3 May 2022 00:30:50 +0300 Subject: Added Security section to article --- jitsi.html | 56 +++++++++++++++++++++++++++++++++++++++++++++++++++++--- 1 file changed, 53 insertions(+), 3 deletions(-) diff --git a/jitsi.html b/jitsi.html index 442f6fd..ad15404 100644 --- a/jitsi.html +++ b/jitsi.html @@ -113,11 +113,61 @@ ufw enable

When you create a video chatroom, its address will appear as meet.example.org/yourvideochatname and can be shared as such.

Security

+ By default, anyone who has access to meet.example.org will be able to create a chatroom. You probably don't want that, so you'll need to set up some authentication. The simplest option is to handle authentication through the local Prosody user database. +

Prosody configuration

+ First, we need to enable password authentication in Prosody. Edit /etc/prosody/conf.avail/meet.example.org.cfg.lua, and locate this block: +

+ Then, to enable guests to login and join your chatrooms, add the following block after the one you just edited: +

Jitsi Meet configuration

- The default Jitsi configuration will allow anyone accessing your site to create a video chatroom. If you want to only allow certain people to create rooms, you can check out how to add authentication here in the original documentation. + Next, in /etc/jitsi/meet/meet.example.org-config.js, uncomment the following line: +

Jicofo configuration

+ Finally, we configure Jicofo to only allow the creation of conferences when the request is coming from an authenticated user. To do so, add the following authentication section to /etc/jitsi/jicofo/jicofo.conf: +

Create users in Prosody and restart the services

+ You now need to register some users in Prosody, you can do so manually using prosodyctl: +

More info

-- cgit v1.2.3 From ad1473870278334e59360eccfa9b520f4c00149b Mon Sep 17 00:00:00 2001 From: Adam Lawson Date: Mon, 16 May 2022 16:45:28 +0100 Subject: Added SearXNG Tutorial --- index.html | 1 + pix/searxng.svg | 19 ++++++++ searxng.html | 143 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 163 insertions(+) create mode 100644 pix/searxng.svg create mode 100644 searxng.html diff --git a/index.html b/index.html index 090f204..368847a 100644 --- a/index.html +++ b/index.html @@ -84,6 +84,7 @@ img { border: none ;}

Accepting Cryptocurrency Tips

+ SearXNG is a free internet metasearch engine which aggregates results from more than 70 search services. + This guide sets up a working instance that can be accessed using a domain over HTTPS. + Features include: +

Self hosted
No user tracking
No user profiling
About 70 supported search engines
Easy integration with any search engine
Cookies are not used by default
Secure, encrypted connections (HTTPS/SSL)

+ +

Installation

+ +

Install the required packages.

+ +

apt install git nginx -y

+ +

Open http and https ports.

+ +

iptables -I INPUT 6 -m state --state NEW -p tcp --dport 80 -j ACCEPT
+iptables -I INPUT 6 -m state --state NEW -p tcp --dport 443 -j ACCEPT
+netfilter-persistent save
+ufw allow 80
+ufw allow 443

+ +

Clone the SearXNG Repository.

+ +

git clone https://github.com/searxng/searxng searxng
+cd searxng

+ +

Installing SearXNG, Filtron and Morty.

+ +

./utils/searx.sh install all
+./utils/filtron.sh install all
+./utils/morty.sh install all

+ +

Check that both filtron and morty are running.

+ +

systemctl status filtron
+systemctl status morty

+ +

Configure Nginx

+ +

Delete the default site.

+ +

rm /etc/nginx/sites-enabled/default

+ +

Create a new file /etc/nginx/sites-available/searxng.conf and add the following:

+ +


+server {
+
+    # Listens on http
+    listen 80;
+    listen [::]:80;
+
+    # Your server name
+    server_name searx.example.org;
+     
+    # If you want to log user activity, comment these
+    access_log /dev/null;
+    error_log  /dev/null;
+                
+    # Searx reverse proxy
+    location / {
+            proxy_pass         http://127.0.0.1:4004/;
+                
+            proxy_set_header   Host             $host;
+            proxy_set_header   Connection       $http_connection;
+            proxy_set_header   X-Real-IP        $remote_addr;
+            proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
+            proxy_set_header   X-Scheme         $scheme;
+            proxy_set_header   X-Script-Name    /searx;
+    }
+        
+    location /searx/static {
+            alias /usr/local/searx/searx-src/searx/static;
+    }
+        
+    # Morty reverse proxy
+    location /morty {
+            proxy_pass         http://127.0.0.1:3000/;
+               
+            proxy_set_header   Host             $host;
+            proxy_set_header   Connection       $http_connection;
+            proxy_set_header   X-Real-IP        $remote_addr;
+            proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
+            proxy_set_header   X-Scheme         $scheme;
+    }
+}
+

+ +

Now create a symbolic link to enable this site.

+ +

ln -s /etc/nginx/sites-available/searxng.conf /etc/nginx/sites-enabled/searxng.conf

+ +

Restart Nginx and SearXNG.

+ +

systemctl restart nginx
+service uwsgi restart searx

+ +

Configure HTTPS with Certbot

+ +

Install certbot.

+ +

apt install python3-certbot-nginx

+ +

Install a Let's Encrypt SSL certificate to Nginx and optionally let it configure HTTPS for you. + Detailed instructions and additional information.

+ +

certbot --nginx

+ +

SearXNG should now be available from your domain.

+ +

Configuration

+ +

You can change settings by editing /etc/searxng/settings.yml.

+ +

Contribution

Author: goshawk22 – website

Setting up a calDAV server - Radicale

Installing Radicale

Setting up a Nginx reverse proxy

Run as a service

Contribution

Installing Radicale

Security

More info

Security

Security

Prosody configuration

Jitsi Meet configuration

Jicofo configuration

Create users in Prosody and restart the services

More info

Accepting Cryptocurrency Tips

Setting up a public SearXNG instance

Installation

Configure Nginx

Configure HTTPS with Certbot

Configuration

Contribution

Setting up a Nginx reverse proxy