Mail server

The production mail server is a Debian 10 LXD container administered by SAC, hosted on osgeo9.

See SAC#Communication in case of troubles or quick questions

Services hosted on the mail container

Postfix SMTP server

Handles outgoing and incoming email

Mailman

• SAC:Mailing Lists - mailman configuration for lists.osgeo.org.

Websites

All websites are served by Apache

site	path	contact	backup	comments
www.tilecache.org	/var/www/tilecache/docs	SAC !?	BackupOg6 bacula job
lists.osgeo.org		admin		Web interface for managing Mailman

MySQL server

TODO: review/cleanup

• backed up via bacula in BackupOg6 job (see /osgeo/backup)
• admin user credentials found in ~root/.my.cnf

SSL certificates

• LetsEncrypt was configured by Jeff McKenna on 2018-07-27 for mapserver.org, gdal.org, grass.osgeo.org, grasswiki.osgeo.org, drone.osgeo.org, and lists.osgeo.org using certbot-auto
  • careful: check the conf files in /etc/apache2/sites-enabled/ to make sure that the VirtualHost settings do not include something like <VirtualHost _default_:443> and instead should point to the IP such as <VirtualHost 140.211.15.3:443> or else the certificate loaded will always default to mapserver.org
  • certbot-auto lives in /usr/local/sbin.
  • to add more sites, run the command:

    certbot-auto --apache -d mapserver.org -d www.mapserver.org

  • a cronjob (certbot-auto renew) was created to check for renewal twice a day
  • also enabled for geos.osgeo.org on by Jeff McKenna on 2018-10-01

Backup strategy

See SAC:Backups for general info about backup strategies for containers.

A dump of each mysql database is also stored as a separate file under /osgeo (created during the backup phase).