Chère de Prince

https://help.ubuntu.com/community/AutomaticSecurityUpdates

It seems mandatory in order that synapse federation works properly.

The livebox may block some ports with its firewall.

• Find the largest files in a folder

find /mnt/pellicule/ -type f -printf "%s\t%p\n" | sort -n | tail

• List the extensions of files in a directory

find /mnt/super8/films/ -type f | perl -ne 'print $1 if m/\.([^.\/]+)$/' | sort -u

• find the total size of the files created during the last month :

find /data/youtube-dl-archives/ -type f -ctime -30 -print0 | du -shc --files0-from - | tail -n1

• find the total size of the files accessed during the last month :

find /data/youtube-dl-archives/ -type f -atime -30 -print0 | du -shc --files0-from - | tail -n1

• find the most recent file in a directory:

  find /mnt/super8/ -type f -printf "%T@ %p\n" | sort -n | cut -d' ' -f 2- | tail -n 1
  

I follow this tutorial.

There are two main backup storages:

1. The backup cheredeprince server is a daily backup of:
   • /mnt/pellicule movies hard drive (3To full)
   • /mnt/super8 video hard drive (3To)
   • important directories of the server

/etc 
/home 
/root 
/opt 
/var 
/data/music 
/data/owncloud 
/data/piwigo 
/data/youtube-dl-archives 
/data/backup-db # dumps of databases 

1. An external encrypted hard drive called coffre (3To) saving:
   • version of images of the root hard drive of the server
   • an archive of the hard drive /data

The *machine uses the following hardware:

• motherboard

I use this repository for installation on client and server side: https://launchpad.net/~costamagnagianfranco/+archive/ubuntu/borgbackup

In order to be sure that passwords and others vital information are safely saved, we have to print it.

I use qrencode to encode text in a qrcode, install it with:

sudo apt-get install libqrencode3 

and SecScanQR to decode using an android smartphone: https://f-droid.org/en/packages/de.t_dankworth.secscanqr/

To encode some text:

qrencode "text" -o qrcode.png

print qrcode.png and delete it.

L'adresse ip local du serveur est 192.168.1.21. L'accès local des partitions est fait par NFS avec la configuration :

# /etc/exports
/mnt/pellicule 192.168.1.0/24(ro,sync,all_squash,anonuid=1000,anongid=1000,subtree_check)
/mnt/super8    192.168.1.0/24(ro,sync,all_squash,anonuid=1000,anongid=1000,subtree_check)

D'après cette documentation, il faut utiliser un certificat signé (comme ceux fournis par letsencrypt) pour les connections de fédération. Vu que le nom de domaine du serveur matrix est "cheredeprince.net", je peux utiliser le certificat que j'utilise pour ce domaine. Et ça marche !

Testeur pour la fédération

Matrix registration is a project aiming at allow people to register to a matrix server using web page link.

The installation command is:

pip3 install matrix-registration

Then we create an user for the daemon

useradd -M --shell /bin/false matrix-registration
usermod -L matrix-registration

then we create working directory:

mkdir /etc/matrix-registration
chown matrix-registration /etc/matrix-registration
chmod 770 /etc/matrix-registration

copy the following file to /etc/matrix-registration/config.yaml

server_location: 'https://cheredeprince.net
server_name: 'cheredeprince.net
shared_secret: 'copy here the registration_shared_secret value from homeserver.yaml of matrix-synapse'
admin_secret: ''
base_url: ''
riot_instance: 'https://riot.im/app/'
db: 'db.sqlite3'
host: 'localhost'
port: 5000
rate_limit: ["100 per day", "10 per minute"]
allow_cors: false
logging:
  disable_existing_loggers: False
  version: 1
  root:
    level: DEBUG
    handlers: [console, file]
  formatters:
    brief:
      format: '%(name)s - %(levelname)s - %(message)s'
    precise:
      format: '%(asctime)s - %(name)s - %(levelname)s - %(message)s'
  handlers:
    console:
      class: logging.StreamHandler
      level: INFO
      formatter: brief
      stream: ext://sys.stdout
    file:
      class: logging.handlers.RotatingFileHandler
      formatter: precise
      level: INFO
      filename: m_reg.log
      maxBytes: 10485760 # 10MB
      backupCount: 3
      encoding: utf8
# password requirements
password:
  min_length: 8

and create a service file /etc/systemd/system/matrix-registration.service:

[Unit]
Description=Matrix Registration

[Service]
WorkingDirectory=/etc/matrix-registration/
Type=simple
User=matrix-registration
ExecStart=/usr/bin/python3 /usr/local/bin/matrix-registration serve
Restart=always
RestartSec=10

[Install]
WantedBy=default.target

enable and start the service

systemctl enable matrix-registration
systemctl start matrix-registration

list the tokens with:

curl -X POST -H "Authorization: SharedSecret shared_secret" http://localhost:5000/token

25/11/2020 j'active l'accès guest sur synapse : https://github.com/vector-im/element-web/issues/9264#issuecomment-699536161

Most of the time, the update are resumed by the following lines:

# as root 
systemctl stop writefreelyburon.service
# backup the databases
mysqldump -u root -p<pass> --all-databases > backup.db
# as becasse
cd /var/www/buron.coffee/
# backup the folder 
cp -r writefreely ~/
# download and install the update
wget path to tar.gz build
tar -xvzf downloaded file
# migrate the database
cd writefreely
./writefreely -migrate
# as root 
systemctl start writefreelyburon.service

Le 14/12/2020, je constate que rss bridge est utilisé à plus de 50% pour Instagram:

tail /var/log/nginx/cheredeprince.net/rss-bridge.access.log  -n 100000 | grep "Instagram" | wc -l
# 53713

Le problème est multiple:

1. depuis plusieurs mois, il y a une erreur sur le bridge, qui n'est plus maintenu : https://github.com/RSS-Bridge/rss-bridge/issues/1891
2. le nombre de requête vers Instagram provenant de mon serveur est sûrement trop important et son IP a dû être blacklistée.

Le 14/12/2020, je décide de désactiver le brigde pour quelque jours histoire de voir, s'il marchera mieux plus tard.

J'ai essayé de ne permettre que les requêtes locales avec nginx, par example celles de FreshRSS, mais ça ne marche pas:

if ($args ~ "bridge=Instagram") {
  # disabled the bridge for external requests !!!!
  # allow anyone in 192.168.1.0/24
  allow   192.168.1.0/24;
  allow  86.247.20.120;
  allow  2a01:cb04:751:b600::/56;
  # drop rest of the world
  deny    all;
}

For forcing shared videos player to be not larger than the window, I have to add into /var/www/cheredeprince.net/owncloud/core/css/styles.css:

video {
max-width: 100% !important;
}

J'ai découvert qu'il y avait cette erreur:

tail /var/log/php7.2-fpm.log
[14-Jul-2020 13:34:02] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it

J'ai passé max_children de 5 à 10, suivant ces conseils.