Browse Source

Various tweakings

Bob Mottram 11 years ago
parent
commit
d7e18235ed
1 changed files with 26 additions and 20 deletions
  1. 26
    20
      beaglebone.txt

+ 26
- 20
beaglebone.txt View File

1360
 
1360
 
1361
 IP addresses to listen on: blank
1361
 IP addresses to listen on: blank
1362
 
1362
 
1363
-Destinations: mydomainname.com
1363
+Destinations: mydomainname.com (and any other domains that you own)
1364
 
1364
 
1365
-Domains to relay mail: blank
1365
+Domains to relay mail: mydomainname.com (and any other domains that you own)
1366
 
1366
 
1367
 Smarthost Relay: 192.168.1.0/24 (the range of addresses on your LAN)
1367
 Smarthost Relay: 192.168.1.0/24 (the range of addresses on your LAN)
1368
 
1368
 
2719
  * Select settings/account settings
2719
  * Select settings/account settings
2720
  * Select Sending mail/outgoing server
2720
  * Select Sending mail/outgoing server
2721
  * Set SMTP server to your domain name
2721
  * Set SMTP server to your domain name
2722
- * Set Security to SSL/TLS (always)
2723
- * Set port to 465
2724
- * Set authentication to PLAIN
2725
- * Enter your username and password
2726
- * Accept the SSL certificate
2722
+ * Set Security to None
2723
+ * Set port to 587
2724
+ * Set password to None
2727
 **** Folders
2725
 **** Folders
2728
 To view any new folders which you may have created using the /mailinglistrule/ script from your inbox press the *K9 icon* at the top left to access folders, then press the *menu button* and select *refresh folder list*.
2726
 To view any new folders which you may have created using the /mailinglistrule/ script from your inbox press the *K9 icon* at the top left to access folders, then press the *menu button* and select *refresh folder list*.
2729
 
2727
 
2895
 The settings should be as follows, substituting /mydomainname.com/ for your domain name and /myusername/ for the username given previously in [[Add a user]].
2893
 The settings should be as follows, substituting /mydomainname.com/ for your domain name and /myusername/ for the username given previously in [[Add a user]].
2896
 
2894
 
2897
   * Incoming: IMAP, mydomainname.com, 993, SSL/TLS, Normal Password
2895
   * Incoming: IMAP, mydomainname.com, 993, SSL/TLS, Normal Password
2898
-  * Outgoing: SMTP, mydomainname.com, 465, SSL/TLS, Normal Password
2896
+  * Outgoing: SMTP, mydomainname.com, 587, None, No Password
2899
   * Username: myusername
2897
   * Username: myusername
2900
 
2898
 
2901
 Click *Done*.
2899
 Click *Done*.
4150
 
4148
 
4151
 Under the *site* section give your Friendica node a name other than "/my friend network/", you can change the icon and banner text and set the default mobile theme typically to /frost-mobile/.  If you don't want your node to host a lot of accounts for people you don't know then you may want to set the register policy to "/requires approval/".  For security it's probably a good idea only to host accounts for people who you actually know, rather than random strangers.  Also be aware that the Beaglebone does not have a great deal of computational power or bandwidth and will not function well if there are hundreds of users using your node.  If you're not federating with Diaspora or other sites then you may wish to select "/only allow Friendica contacts/".  That improves the security of the system, since communication between Friendica nodes is always encrypted separately and in addition to the usual SSL encryption layer - which makes life interesting for the Surveillance State and at least keeps those cryptanalysts employed.
4149
 Under the *site* section give your Friendica node a name other than "/my friend network/", you can change the icon and banner text and set the default mobile theme typically to /frost-mobile/.  If you don't want your node to host a lot of accounts for people you don't know then you may want to set the register policy to "/requires approval/".  For security it's probably a good idea only to host accounts for people who you actually know, rather than random strangers.  Also be aware that the Beaglebone does not have a great deal of computational power or bandwidth and will not function well if there are hundreds of users using your node.  If you're not federating with Diaspora or other sites then you may wish to select "/only allow Friendica contacts/".  That improves the security of the system, since communication between Friendica nodes is always encrypted separately and in addition to the usual SSL encryption layer - which makes life interesting for the Surveillance State and at least keeps those cryptanalysts employed.
4152
 
4150
 
4151
+If you also wish to publish your public posts to a Diaspora node then within the *site* settings select *enable Diaspora support*.
4152
+
4153
 It's probably a good idea to enable "/private posts by default for new users/" and also "/don't include post content in email notifications/". Since traditional email isn't a secure system and is easily vulnerable to attack by systems such as [[https://en.wikipedia.org/wiki/XKeyscore][Xkeyscore]].
4153
 It's probably a good idea to enable "/private posts by default for new users/" and also "/don't include post content in email notifications/". Since traditional email isn't a secure system and is easily vulnerable to attack by systems such as [[https://en.wikipedia.org/wiki/XKeyscore][Xkeyscore]].
4154
 
4154
 
4155
 ***** Settings
4155
 ***** Settings
4366
 
4366
 
4367
 #+BEGIN_SRC: bash
4367
 #+BEGIN_SRC: bash
4368
 export HOSTNAME=mydomainname.com
4368
 export HOSTNAME=mydomainname.com
4369
+mkdir /var/www/$HOSTNAME
4369
 cd /var/www/$HOSTNAME
4370
 cd /var/www/$HOSTNAME
4370
 rm -rf htdocs
4371
 rm -rf htdocs
4371
 git clone https://github.com/friendica/red.git htdocs
4372
 git clone https://github.com/friendica/red.git htdocs
4503
 For a pump.io site you will need a separate domain/subdomain, so see [[Setting up a web site]] for details of how to create an Apache configuration for your site.  If you're using freedns then you will need to create a new subdomain.
4504
 For a pump.io site you will need a separate domain/subdomain, so see [[Setting up a web site]] for details of how to create an Apache configuration for your site.  If you're using freedns then you will need to create a new subdomain.
4504
 
4505
 
4505
 #+BEGIN_SRC: bash
4506
 #+BEGIN_SRC: bash
4506
-apt-get update && apt-get install nodejs-legacy build-essential openssl libssl-dev redis-server imagemagick graphicsmagick git-core screen
4507
+apt-get update
4508
+apt-get install build-essential openssl libssl-dev redis-server imagemagick graphicsmagick git-core screen
4507
 #+END_SRC
4509
 #+END_SRC
4508
 
4510
 
4509
-Now install nodejs.
4511
+Download nodejs
4510
 
4512
 
4511
 #+BEGIN_SRC: bash
4513
 #+BEGIN_SRC: bash
4512
 cd /tmp
4514
 cd /tmp
4513
-git clone https://github.com/joyent/node.git
4514
-cd /tmp/node
4515
-git checkout v0.10.28
4516
-./configure --openssl-libpath=/usr/lib/ssl --without-snapshot
4517
-make
4515
+wget http://freedombone.uk.to/node_0.10.28-1_armhf.deb
4518
 #+END_SRC
4516
 #+END_SRC
4519
 
4517
 
4520
-Compiling may take approximately 45 minutes, so go and do something else for a while.
4518
+Verify it.
4521
 
4519
 
4522
 #+BEGIN_SRC: bash
4520
 #+BEGIN_SRC: bash
4523
-make install
4521
+sha256sum node_0.10.28-1_armhf.deb
4522
+42000a475d3397f295fe76998e79af999eebb8324ac9bb4981e931fabd9297aa
4523
+#+END_SRC
4524
+
4525
+Install it.
4526
+
4527
+#+BEGIN_SRC: bash
4528
+dpkg -i node_0.10.28-1_armhf.deb
4524
 #+END_SRC
4529
 #+END_SRC
4525
 
4530
 
4526
 Install pump.io
4531
 Install pump.io
4556
     "address":  "localhost",
4561
     "address":  "localhost",
4557
     "nologger":  true,
4562
     "nologger":  true,
4558
     "serverUser":  "pumpio",
4563
     "serverUser":  "pumpio",
4559
-	"rejectUnauthorized": false,
4564
+    "rejectUnauthorized": false,
4560
     "key":  "/var/local/pump.io/keys/mypumpiodomainname.com.key",
4565
     "key":  "/var/local/pump.io/keys/mypumpiodomainname.com.key",
4561
     "cert":  "/var/local/pump.io/keys/mypumpiodomainname.com.crt",
4566
     "cert":  "/var/local/pump.io/keys/mypumpiodomainname.com.crt",
4562
     "uploaddir": "/var/local/pump.io/uploads",
4567
     "uploaddir": "/var/local/pump.io/uploads",
4563
     "debugClient": false,
4568
     "debugClient": false,
4564
     "firehose": "ofirehose.example",
4569
     "firehose": "ofirehose.example",
4565
-	"logfile": "/dev/null",
4570
+    "logfile": "/var/local/pump.io/pump.log",
4566
     "disableRegistration": false
4571
     "disableRegistration": false
4567
 }
4572
 }
4568
 #+END_SRC
4573
 #+END_SRC
4579
 useradd -s /bin/bash -d /var/local/pump.io pumpio
4584
 useradd -s /bin/bash -d /var/local/pump.io pumpio
4580
 chown -R pumpio:pumpio /var/local/pump.io
4585
 chown -R pumpio:pumpio /var/local/pump.io
4581
 chmod 400 /var/local/pump.io/keys/*
4586
 chmod 400 /var/local/pump.io/keys/*
4587
+chmod -R 777 /opt
4582
 #+END_SRC
4588
 #+END_SRC
4583
 
4589
 
4584
 Patch the version of Apache.
4590
 Patch the version of Apache.
4678
 SERVICE='pumpio'
4684
 SERVICE='pumpio'
4679
 COMMAND="forever /opt/pump.io/bin/pump > /var/local/pump.io/daemon.log"
4685
 COMMAND="forever /opt/pump.io/bin/pump > /var/local/pump.io/daemon.log"
4680
 USERNAME='pumpio'
4686
 USERNAME='pumpio'
4681
-NICELEVEL=19 # from 0-19 the bigger the number, the less the impact on system resources
4687
+NICELEVEL=19 # from 0-19 the bigger the number, the less the impact on system OAresources
4682
 HISTORY=1024
4688
 HISTORY=1024
4683
 INVOCATION="nice -n ${NICELEVEL} ${COMMAND}"
4689
 INVOCATION="nice -n ${NICELEVEL} ${COMMAND}"
4684
 PATH='/usr/local/sbin:/usr/local/bin:/usr/bin:/sbin:/usr/sbin:/bin:/var/local/pump.io'
4690
 PATH='/usr/local/sbin:/usr/local/bin:/usr/bin:/sbin:/usr/sbin:/bin:/var/local/pump.io'