TODO

Because there could be so many other exciting things to do right now.

agnesbaxter

• Move GS out of the way from lurk.org to gs.lurk.org or something like that
• make account for rra
• convert Prosody internal db to MySQL
• Make simple static homepage about LURK
• automate certbot
• setup backupninja (reuired: backup machine)
• install icecast with an nginx proxy to serve radio.lurk.org
• startup/init script for mailman3
• make ssh access via keys only
• install/configure fail2ban
• install tinc
• setup log rotation for mm3 (see discussion on mm3 list)
• check if postfix is up to date with all SPF/DKIM nonsense
• configure iptable with GOTO10/bleu255 script
• investigate why free.fr sees email (so far the ones from douglas) as spam (X-ProXaD-SC: state=SPAM score=150)
• run https://observatory.mozilla.org on server and improve + document how to make the improvements

douglas

• Install mastodon
• automate certbot
• try matrix/riot to make sure rocket.chat is not the next GS
• make ssh access via keys only
• install/configure fail2ban
• install tinc
• configure iptable with GOTO10/bleu255 script

$INSERT_NAME

• Setup a backup machine
• install tinc

Run Your Own documentation

• Make a page with a detailed list of services/ports/servers
• howto restart GS
• howto restart mailman3
• howto mastodon
• try to modify the certbot gandi plugin to handle the shared-id API parameter