SovereignAnsible 常用腳本集合

Sovereign是一套Ansible腳本，可用于完全基于開源軟件來(lái)構(gòu)建和維護(hù)自己的個(gè)人云，因此您可以控制一切。如果您以前從未使用過(guò)Ansible，您可能會(huì)發(fā)現(xiàn)這些腳本很有用，因?yàn)樗鼈冋故玖嗽摴ぞ叩墓δ堋?/p>

Sovereign在提供合理的安全性和低維護(hù)成本的同時(shí)提供有用的云服務(wù)。 每隔幾周使用它來(lái)設(shè)置服務(wù)器，SSH，但大多數(shù)情況下都不會(huì)使用它。

目前提供的服務(wù)：

• IMAP over SSL via Dovecot, complete with full text search provided by Solr.
• POP3 over SSL, also via Dovecot
• SMTP over SSL via Postfix, including a nice set of DNSBLs to discard spam before it ever hits your filters.
• Virtual domains for your email, backed by PostgreSQL.
• Spam fighting via Rspamd.
• Mail server verification using DKIM and DMARC so the Internet knows your mailserver is legit.
• Secure on-disk storage for email and more via EncFS.
• Webmail via Roundcube.
• Mobile push notifications via Z-Push.
• Email client automatic configuration.
• Jabber/XMPP instant messaging via Prosody.
• An RSS Reader via Selfoss.
• CalDAV and CardDAV to keep your calendars and contacts in sync, via ownCloud.
• Your own private storage cloud via ownCloud.
• Your own VPN server via OpenVPN.
• An IRC bouncer via ZNC.
• Monit to keep everything running smoothly (and alert you when it’s not).
• collectd to collect system statistics.
• Web hosting (ex: for your blog) via Apache.
• Firewall management via Uncomplicated Firewall (ufw).
• Intrusion prevention via fail2ban and rootkit detection via rkhunter.
• SSH configuration preventing root login and insecure password authentication
• RFC6238 two-factor authentication compatible with Google Authenticator and various hardware tokens
• Nightly backups to Tarsnap.
• Git hosting via cgit and gitolite.
• Read-it-later via Wallabag