#caesonia — Public Fediverse posts

Updated #caesonia daily.local to check packages, thanks to -stable pkg updates 🔗 https://github.com/vedetta-com/caesonia/commit/ed3dd9994f9c018414f87f195ec70358dbaf9120
```
next_part "Checking packages:"
pkg_add -su
```

Fixed login-class for users _dovecot and _rspamd in #caesonia "Makefile" 🔗 https://github.com/vedetta-com/caesonia/commit/e7bd5c4f7480f2aad4d321cc584b913533b9d250

# doas.conf
permit persist keepenv :wheel

Removing default wheel "persist" from #caesonia doas.conf 🔗 https://github.com/vedetta-com/caesonia/pull/236

> not convenience nor best practice 🔗 https://marc.info/?l=openbsd-tech&m=156043721616466&w=2

Replaced /usr/bin/env with "setenv" in #caesonia doas.conf 🔗 https://github.com/vedetta-com/caesonia/blob/master/src/etc/doas.conf

(example) -stable pkg repository for #caesonia 🔗 https://www.vedetta.com/pub/OpenBSD/6.5/packages/amd64/

:flan_think:​ everyone should create their own repo

@pamela I'm trying out #caesonia :)

"ProtonMail voluntarily offers assistance for real-time surveillance by secret services, police authorities and public prosecutors" -- 🔗 https://steigerlegal.ch/2019/05/23/protonmail-real-time-surveillance/

Time to #selfhost #email try #caesonia 🔗 https://github.com/vedetta-com/caesonia

Added fw_update(1) to root crontab 🔗 https://github.com/vedetta-com/dithematic/commit/4c99ce8557401ba7dfd54a87661d00971f961675
#vedetta #caesonia #dithematic

#DNS zone template for healthy #email service 🔗 https://github.com/vedetta-com/dithematic/blob/master/src/usr/local/share/examples/dithematic/example.com.zone

All required Resource Records explained in #caesonia #selfhosting guide 🔗 https://github.com/vedetta-com/caesonia

I cleaned up some newbie fiction from #caesonia configuration and guide. It wasn't affecting functionality, but idk why it was there to begin with ;)

(wip) upgrading #caesonia to OpenBSD 6.5 🔗 https://github.com/vedetta-com/caesonia/pull/198/files

❶ Gmail blocked one #caesonia IP address for ❝unusual rate of unsolicited mail❞ (no logs) https://www.vedetta.com/tmp/gmail.txt
❷ No information from Postmaster Tools, because there isn't enough volume. I send maybe 10 messages per hour ❝on a good day❞ (mostly replies)

DNS template for #caesonia zone 🔗 https://github.com/vedetta-com/dithematic/blob/master/src/var/nsd/zones/master/example.com.zone

#caesonia gently reloads httpd and dovecot, when certificate updates 🔗 https://github.com/vedetta-com/caesonia/commit/3961f8ef6fe3387965fc76ffcc03596398a89ab1

Updated #caesonia to use more defaults 🔗 https://github.com/vedetta-com/caesonia/commit/de7962aa8e4ef83b1673571fd0d8a135157b6969

#caesonia is not rfc8463 compliant: A New Cryptographic Signature Method for DomainKeys Identified Mail (DKIM) 🔗 https://tools.ietf.org/html/rfc8463

Fixed wasteful SPF resource records for #caesonia 🔗 https://github.com/vedetta-com/caesonia/commit/b6a45abab7c893dcd7866f56d7e405d685a88e1e

Added (regular) disklabel for #caesonia 🔗 https://github.com/vedetta-com/caesonia/commit/0ed02c0c5df336918f860aaa2c20993feebe811c

Enabled https://openphish.com for #caesonia https://github.com/vedetta-com/caesonia/commit/405ad4ee6edf373068a4332b96e7f5e55e9e9c53

@franz thank you very much for your contribution to #caesonia on https://opencollective.com/caesonia

#caesonia is hosted by Open Source Collective 501c6 💳 https://opencollective.com/caesonia

Updated #caesonia sysctl.conf to not permit console CTRL-ALT-DEL to do a nice halt (default) 🔗 https://github.com/vedetta-com/caesonia/commit/427c066d64373b846c39f682055ba29924334c5a

Updated #caesonia to ask for the superuser password in single-user mode, may be a good idea 🔗 https://github.com/vedetta-com/caesonia/pull/177/files

#caesonia pkg repo (-current backported to -stable)

cd /etc/signify
ftp https://www.vedetta.com/pub/OpenBSD/6.4/packages/amd64/vedetta-pkg.pub
pkg_add -n https://www.vedetta.com/pub/OpenBSD/6.4/packages/amd64/gnupg-2.2.12.tgz

🔗 https://www.vedetta.com/pub/OpenBSD/6.4/packages/amd64/

@mindnmotion python interface to OpenSMTPD APIs (e.g. for making a bridge in other lang) https://github.com/poolpOrg/py-opensmtpd + https://github.com/poolpOrg/py-opensmtpd-rspamd 😄

@lvdd e.g. #caesonia depends on rspamd

⬆️ at #caesonia startup, #unbound fetches the trust anchor with the HTTPS method from RFC7958, followed by automatic root.key updates with the DNS method from RFC5011 🆕

/cc #vedetta

Removed "unbound-anchor" from #caesonia crontab, no longer needed (RFC7958 start + RFC5011 update) 🔗 https://github.com/vedetta-com/caesonia/commit/5ee86da807a2029b256015849663517204497558

/cc #vedetta

Removed "root-hints" from #caesonia unbound.conf (using XFR) 🔗 https://github.com/vedetta-com/caesonia/commit/2b9f1d85e8fb743c5553a0f9965bd5214997768d

/cc #vedetta

Updated #caesonia unbound.conf "get off my lawn" 🔗 https://github.com/vedetta-com/caesonia/blob/master/src/var/unbound/etc/unbound.conf

Updated #caesonia dkimproxy_out.conf to use IPv4 only relay 🔗 https://github.com/vedetta-com/caesonia/commit/46e3c729002c1b5ccbbaf01e4560bbd19ee1544b