Mail server
Jump to navigation
Jump to search
The production mail server is a Debian 10 LXD container administered by SAC, hosted on osgeo9.
See SAC#Communication in case of troubles or quick questions
Services hosted on the mail container
Postfix SMTP server
Handles outgoing and incoming email
Mailman
- SAC:Mailing Lists - mailman configuration for lists.osgeo.org.
Websites
All websites are served by Apache
TODO: review
| site | path | contact | backup | comments |
|---|---|---|---|---|
| /var/www/grass/grass-cms | admined by User:Neteler, martinL | BackupOg6 bacula job | based on CMSMS; GRASS GIS infrastructure explained here, also enabled LetsEncrypt | |
| /var/www/grass/grass-wiki | admined by User:Neteler, martinL | BackupOg6 bacula job | own MediaWiki, also enabled LetsEncrypt | |
| /var/www/featureserver/website | admined by User:Warmerda | BackupOg6 bacula job | DEAD project. Not yet active, pending Python/GEOS issues | |
| www.tilecache.org | /var/www/tilecache/docs | SAC !? | BackupOg6 bacula job | |
| /var/www/gdal/gdal-web/ | admined by User:Warmerda | BackupOg6 bacula job | CRON-job migrated as well, also enabled LetsEncrypt | |
| /var/www/mapserver.org/ | admined by Jeff McKenna | BackupOg6 bacula job | moved to OSGeo7 on 2025-08-01 (ticket) | |
| /var/www/drone.osgeo.org | admined by User:Strk | Continuous Integration for Gitea | reverse-proxy to Drone server server, also enabled LetsEncrypt | |
| https://lists.osgeo.org | admin | Web interface for managing Mailman | also enabled LetsEncypt |
MySQL server
TODO: review
used for GRASS GIS Wiki (maintained by Martin Landa and Markus Neteler)
* used for GRASS CMS and GRASS Wiki ? </devl> now on grass on osgeo7 and grass-wiki on osgeo3
- backed up via bacula in BackupOg6 job (see /osgeo/backup)
- admin user credentials found in ~root/.my.cnf
SSL certificates
- LetsEncrypt was configured by Jeff McKenna on 2018-07-27 for mapserver.org, gdal.org, grass.osgeo.org, grasswiki.osgeo.org, drone.osgeo.org, and lists.osgeo.org using certbot-auto
- careful: check the conf files in /etc/apache2/sites-enabled/ to make sure that the VirtualHost settings do not include something like <VirtualHost _default_:443> and instead should point to the IP such as <VirtualHost 140.211.15.3:443> or else the certificate loaded will always default to mapserver.org
- certbot-auto lives in /usr/local/sbin.
- to add more sites, run the command:
certbot-auto --apache -d mapserver.org -d www.mapserver.org
- a cronjob (certbot-auto renew) was created to check for renewal twice a day
- also enabled for geos.osgeo.org on by Jeff McKenna on 2018-10-01
Backup strategy
See SAC:Backups for general info about backup strategies for containers.
A dump of each mysql database is also stored as a separate file under /osgeo (created during the backup phase).