Essun - Revision history

B01: /* Update Collabora */

2026-02-11T00:53:53Z

Update Collabora

← Older revision		Revision as of 00:53, 11 February 2026
Line 168:		Line 168:
	==== Update Collabora ====		==== Update Collabora ====
	See [https://docs.nextcloud.com/server/latest/admin_manual/office/example-docker.html#updating this documentation to update, replace and restart the container]		See [https://docs.nextcloud.com/server/latest/admin_manual/office/example-docker.html#updating this documentation to update, replace and restart the container]

			docker pull collabora/code
			docker ps \|grep colla
			docker stop idcontainer
			docker rm idcontainer
			docker run -t -d -p 127.0.0.1:9980:9980 -e 'aliasgroup1=https://nuvol.calafou.org:443' --restart always --cap-add MKNOD collabora/code

			docker logs idcontainer

	=== OLD Nextcloud config ===		=== OLD Nextcloud config ===

B01: /* Set https certificate on each subdomain.calafou.org with a certbot wildcard */

2025-12-29T20:39:37Z

Set https certificate on each subdomain.calafou.org with a certbot wildcard

← Older revision		Revision as of 20:39, 29 December 2025
Line 242:		Line 242:
	== Set https certificate on each subdomain.calafou.org with a certbot wildcard ==		== Set https certificate on each subdomain.calafou.org with a certbot wildcard ==
	One certificate for all the subdomains		One certificate for all the subdomains
	* Certbot wildcard tab : https://certbot.eff.org/~~lets-encrypt/debianbuster-~~apache		* Certbot wildcard tab : https://certbot.eff.org/instructions?ws=apache&os=pip&tab=wildcard
			** Install CErtbot following the instructions, remove all previous certbot
			whereis certbot
	* Plug in Gandi for automatic renew https://github.com/obynio/certbot-plugin-gandi		* Plug in Gandi for automatic renew https://github.com/obynio/certbot-plugin-gandi
	* In 2026, we need to use [https://admin.gandi.net/organizations/d05aad4a-3b8a-11e8-a2b5-00163ee24379/account/pat Personal Access Tokens] (PATs) generated in gandi !!! it has to be renewed each year !!!		* In 2026, we need to use [https://admin.gandi.net/organizations/d05aad4a-3b8a-11e8-a2b5-00163ee24379/account/pat Personal Access Tokens] (PATs) generated in gandi !!! it has to be renewed each year !!!
	Install Gandi plug-in following the instructions here https://github.com/obynio/certbot-plugin-gandi		** Install Gandi plug-in following the instructions here https://github.com/obynio/certbot-plugin-gandi
			** Generate a Personal Access Tokens (PATs) in [https://admin.gandi.net/organizations/d05aad4a-3b8a-11e8-a2b5-00163ee24379/account/pat gandi interface]
			** Add this Personal Access Tokens (PATs) in /etc/letsencrypt/gandi/gandi.ini

	Activate mod ssl for Apache		Activate mod ssl for Apache
Line 272:		Line 276:
	Renew auto in /etc/crontab		Renew auto in /etc/crontab
	0 0,12 * * * root /opt/certbot/bin/python -c 'import random; import time; time.sleep(random.random() * 3600)' && sudo certbot renew -q && systemctl restart apache2		0 0,12 * * * root /opt/certbot/bin/python -c 'import random; import time; time.sleep(random.random() * 3600)' && sudo certbot renew -q && systemctl restart apache2


	~~New method 2022 to create a certificate for a subdomain (as the previous one seems to cause trouble while renewing)~~
	~~certbot certonly -d subdomain.calafou.org -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials /etc/letsencrypt/gandi/gandi.ini --server https://acme-v02.api.letsencrypt.org/directory~~

	==LXC container por Libretime y umap ==		==LXC container por Libretime y umap ==

B01: /* Set https certificate on each subdomain.calafou.org with a certbot wildcard */

2025-12-29T20:27:22Z

Set https certificate on each subdomain.calafou.org with a certbot wildcard

← Older revision		Revision as of 20:27, 29 December 2025
Line 244:		Line 244:
	* Certbot wildcard tab : https://certbot.eff.org/lets-encrypt/debianbuster-apache		* Certbot wildcard tab : https://certbot.eff.org/lets-encrypt/debianbuster-apache
	* Plug in Gandi for automatic renew https://github.com/obynio/certbot-plugin-gandi		* Plug in Gandi for automatic renew https://github.com/obynio/certbot-plugin-gandi
	* ~~How~~ to ~~get the Gandi API key~~ https://~~doc.livedns~~.gandi.net/		* In 2026, we need to use [https://admin.gandi.net/organizations/d05aad4a-3b8a-11e8-a2b5-00163ee24379/account/pat Personal Access Tokens] (PATs) generated in gandi !!! it has to be renewed each year !!!
	~~Install Gandi plug~~-in		Install Gandi plug-in following the instructions here https://github.com/obynio/certbot-plugin-gandi
	~~apt remove python~~-~~cryptography~~
	~~pip install cryptography~~
	~~pip install certbot~~-~~plugin~~-gandi
	~~certbot certonly~~ -~~a certbot-plugin-gandi~~:~~dns --~~certbot-plugin-gandi~~:dns-credentials gandi.ini -d \*.calafou.org --server https://acme-v02.api.letsencrypt.org/directory~~
	Activate mod ssl for Apache		Activate mod ssl for Apache
	a2enmod ssl		a2enmod ssl
Line 273:		Line 270:
	</<IfModule mod_ssl.c>		</<IfModule mod_ssl.c>

	Renew auto		Renew auto in /etc/crontab
	crontab -e		0 0,12 * * * root /opt/certbot/bin/python -c 'import random; import time; time.sleep(random.random() * 3600)' && sudo certbot renew -q && systemctl restart apache2
	0 0 * * ~~0 certbot renew -q -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials~~ /~~etc~~/~~letsencrypt/gandi/gandi.ini --server https:~~//~~acme~~-~~v02~~.~~api~~.~~letsencrypt.org/directory~~

	New method 2022 to create a certificate for a subdomain (as the previous one seems to cause trouble while renewing)		New method 2022 to create a certificate for a subdomain (as the previous one seems to cause trouble while renewing)

B01: /* NextCloud */

2025-01-09T23:27:12Z

NextCloud

← Older revision		Revision as of 23:27, 9 January 2025
Line 159:		Line 159:

	== NextCloud ==		== NextCloud ==
			Now (10.01.2025) there is Nextcloud Hub 8 (29.0.10) installed, [https://docs.nextcloud.com/server/latest/admin_manual/installation/source_installation.html see installation docs here]

	~~We could try~~ to ~~install it like~~ this:		=== Collabora online ===
			To allow a rich editor inside Nextcloud (like libreoffice doc and spreadsheet), Collabora online has been installed on bandrui serveur next to NExtcloud [https://docs.nextcloud.com/server/latest/admin_manual/office/example-docker.html following this documentation]

	~~<code>https://docs~~.~~nextcloud~~.~~com/server~~/17/~~admin_manual~~/~~installation~~/~~source_installation~~.~~html#example~~-~~installation~~-~~on-ubuntu-18-04-lts-server</code>~~		So the installation has been done with docker, a proxy server has been installed on apache on coffice.calafou.org subdomain with a ssl certificate using the wild card one (/etc/letsencrypt/live/calafou.org-0002) managed via certbot and the gandi plug-in

	~~We tried with this :~~ https://~~www~~.~~howtoforge~~.com/~~tutorial~~/~~how~~-to~~-install-nextcloud-on-debian-10/ it seems to work (change~~ the ~~version of nextcloud to download)~~		==== Update Collabora ====
			See [https://docs.nextcloud.com/server/latest/admin_manual/office/example-docker.html#updating this documentation to update, replace and restart the container]

	=== ~~More~~ Nextcloud config ===		=== OLD Nextcloud config ===
	* To make the visio application Talk work : you have to use https for the website (see below) but it is limited to 5-6 persons at the same time, see https://github.com/nextcloud/spreed/issues/2515#issuecomment-598808719
	* To make the ONLY OFFICE application work : you have to change the url > https of the ONLY OFFICE server in the settings (as an admin of the nextcloud)
	* To integrate external storage as part of Nextcloud files		* To integrate external storage as part of Nextcloud files
	** Possible to use the "Local Storage" application : activate it > then see as an admin in the settings the local storage		** Possible to use the "Local Storage" application : activate it > then see as an admin in the settings the local storage
Line 204:		Line 205:
	chown -R www-data: MEDIATECA/		chown -R www-data: MEDIATECA/

	=== Even more config to optimize things ===		=== OLD Even more config to optimize things ===
	As seen in https://nuvol.calafou.org/index.php/settings/admin/overview there were things that needed to be optimized :		As seen in https://nuvol.calafou.org/index.php/settings/admin/overview there were things that needed to be optimized :
	cd /var/www/html/nextcloud		cd /var/www/html/nextcloud

B01 at 12:17, 8 January 2025

2025-01-08T12:17:14Z

← Older revision		Revision as of 12:17, 8 January 2025
Line 1:		Line 1:
	= Essun =		= Essun > Bandrui =

	Essun is the mediaserver of Calafou local network. It is running Debian, the Universal Operating System. It is providing services for the people who are on the territory of Calafou. It is 8Gb ram and has 4 discs in it: 160Gb for system, 1Tb mirror discs, 3T for mediateca. You can connect here http://essun.calafou.org/		Essun > now Bandrui is the mediaserver of Calafou local network. It is running Debian, the Universal Operating System. It is providing services for the people who are on the territory of Calafou. It is 8Gb ram and has 4 discs in it: 160Gb for system, 1Tb mirror discs, 3T for mediateca. You can connect here http://essun.calafou.org/ http://bandrui.calafou.org/

	=== What does "Essun" mean? ===		=== What does "Essun" mean? ===

B01: /* Essun backup */

2022-10-21T01:24:11Z

Essun backup

← Older revision		Revision as of 01:24, 21 October 2022
Line 369:		Line 369:

	It runs as often as configured in `/etc/cron.d/backup`		It runs as often as configured in `/etc/cron.d/backup`

			Also a pre-script is run to mount /var/www on the piweb server as a directory /mnt/ynh via sshfs to backup also the var/www folder on this small machine. For this a backupmirror user was created on the pi/yunohost machine to allow sshfs from essun via an authorized_key indicated in /etc/fstab in Essun

B01: /* Set https certificate on each subdomain.calafou.org with a certbot wildcard */

2022-02-09T23:09:30Z

Set https certificate on each subdomain.calafou.org with a certbot wildcard

← Older revision		Revision as of 23:09, 9 February 2022
Line 275:		Line 275:
	crontab -e		crontab -e
	0 0 * * 0 certbot renew -q -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials /etc/letsencrypt/gandi/gandi.ini --server https://acme-v02.api.letsencrypt.org/directory		0 0 * * 0 certbot renew -q -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials /etc/letsencrypt/gandi/gandi.ini --server https://acme-v02.api.letsencrypt.org/directory

			New method 2022 to create a certificate for a subdomain (as the previous one seems to cause trouble while renewing)
			certbot certonly -d subdomain.calafou.org -a certbot-plugin-gandi:dns --certbot-plugin-gandi:dns-credentials /etc/letsencrypt/gandi/gandi.ini --server https://acme-v02.api.letsencrypt.org/directory

	==LXC container por Libretime y umap ==		==LXC container por Libretime y umap ==

Lalali: Add calaflix, change domain for calibre

2021-10-10T20:44:41Z

Add calaflix, change domain for calibre

← Older revision		Revision as of 20:44, 10 October 2021
Line 80:		Line 80:
	== Libros ==		== Libros ==

	Los libros en la antigua mediateca se pueden visualizar a traves de [https://~~essun~~.calafou.org/~~calibre-web~~ calibre-web].		Los libros en la antigua mediateca se pueden visualizar a traves de [https://libros.calafou.org/ calibre-web].

	Se pueden subir libros desde el enlace anterior o a traves del [https://nuvol.calafou.org/index.php/apps/files?dir=/MEDIATECA/libros directorio mediateca en nuvol].		Se pueden subir libros desde el enlace anterior o a traves del [https://nuvol.calafou.org/index.php/apps/files?dir=/MEDIATECA/libros directorio mediateca en nuvol].

	El indice y los metadatos de los libros se actualizan cada noche.		El indice y los metadatos de los libros se actualizan cada noche.

			== Peliculas, Musica, Fotos... ==

			Las peliculas, musica, fotos, etc.. se pueden visualizar a traves de [https://calaflix.calafou.org/ jellyfin] (calaflix).

	== File server ==		== File server ==

Lalali: /* Libros */

2021-08-19T05:32:11Z

Libros

← Older revision		Revision as of 05:32, 19 August 2021
Line 82:		Line 82:
	Los libros en la antigua mediateca se pueden visualizar a traves de [https://essun.calafou.org/calibre-web calibre-web].		Los libros en la antigua mediateca se pueden visualizar a traves de [https://essun.calafou.org/calibre-web calibre-web].

	~~Para~~ subir ~~nuevos~~ libros~~, hazlo~~ a traves de [https://nuvol.calafou.org/index.php/apps/files?dir=/MEDIATECA/libros nuvol].		Se pueden subir libros desde el enlace anterior o a traves del [https://nuvol.calafou.org/index.php/apps/files?dir=/MEDIATECA/libros directorio mediateca en nuvol].

	El indice y los metadatos de los libros se actualizan cada noche.		El indice y los metadatos de los libros se actualizan cada noche.

B01: /* Even more config to optimize things */

2021-08-07T14:22:40Z

Even more config to optimize things

← Older revision		Revision as of 14:22, 7 August 2021
Line 233:		Line 233:
	then this command shoud work		then this command shoud work
	root@essun:/var/www/html/nextcloud# sudo -u www-data php occ db:add-missing-indices		root@essun:/var/www/html/nextcloud# sudo -u www-data php occ db:add-missing-indices
			cf https://github.com/nextcloud/vm/issues/2039#issuecomment-876833425

	== Set https certificate on each subdomain.calafou.org with a certbot wildcard ==		== Set https certificate on each subdomain.calafou.org with a certbot wildcard ==