Problem summary: We have a hosting node at Tilaa, being very underpowered and causing problems due to resource constraints. Back in 2022, we agreed on moving our digital assets to a new provider. However, due to several reasons, this project has been postponed. Recently we picked op the pace again, as we are currently paying twice for our hosting. This opportunity is also a great moment to simplify our setup and say goodbye to custom solutions requiring a lot of time to manage, troubleshoot and maintain.

A quick summary:

== The old server (corvus) ==

*40GB HDD (yes, not SSD) and 2GB RAM
*Runs mailu as the mailserver (basically a flask webapp managing postfix and dovecot), picked at the time because it was light on resources
*Mailman3, running the mailing list. There are problems as sqlite has been chosen, again, due to resouce constraints. Migrating this to mysql or postgres will be either a headache or next to impossible (within a reasonable timeframe).
*Docker, minus iptables
*A custom, completely manual firewall setup in nftables. At the time, docker's support for IPv6 was lackluster at best, which needed this solution. However, things have improved recently on that front.
*A BIND webserver handling LetsEncrypt wildcard challenges using a custom script and providing dynamic DNS updates for the space connection.
*Webhosting using php-fpm (7.3) and nginx

== The new server (altair) ==

*80GB SSD, 8GB RAM
*Uses Mailcow as it's email server, a well-maintained and widely used open source project backed by a German company. The support is excellent and updates very frequent.
*Mailman3 as the mailinglist. For the time being, the choice has been made to move the SQLite database to the new server and just move on. It works: if and how we migrate the contents to a new database system or simply start clean can be decided on later.
*Bog-standard Docker and iptables setup, nothing special.
*acme-dns to replace the custom authentication hook script for certbot. It is well thought-out and widely used, written in Go.
*BIND for dynamic updates of the space connection
*A proxy method delivering the DNS-traffic for the respective zones to the right server
*Webhosting using php-fpm (8.2) and nginx

== Trivia ==

* The new server hostname's FQDN is altair.hackerspacenijmegen.nl
* stichtinghackerspacenijmegen.nl was only used in the previous setup, meaning this domain could potentially be ditched
* hsnmgn.nl is also not (widely) known, meaning that we also might consider to ditch that one as well

At the time of writing, only the website part needs to be moved. The mail setup has already been synchronized; when the reverse DNS has been updated I will pull the plug.

If everything goes to plan, we can cancel the old server contract within 14 days.

Projects:Server Migration

2023-02-27T01:34:07Z

Uartist:

2019-02-05T21:41:51Z

Uartist:

MediaWiki:Sidebar

2019-02-05T21:34:13Z

Uartist:

MediaWiki:Sidebar

2019-02-05T21:34:02Z

Uartist:

MediaWiki:Sidebar

2019-02-05T21:33:34Z

Uartist: Nieuwe pagina aangemaakt met ' * navigation ** mainpage|mainpage-description ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help ** [https://github.com/hackerspace-n...'

HSNWiki:Account Approval

2019-02-05T21:14:11Z

Uartist: Nieuwe pagina aangemaakt met 'During the last meeting we reached consensus about the account creation policy. We decided that everyone should be allowed to create an account, but those accounts...'

During the last meeting we reached consensus about the account creation policy. We decided that everyone should be allowed to create an account, but those accounts need to be approved. As MediaWiki doesn't have things like email verification built in, we need to use an extension for it.

= Email Verification =

[This extension][https://www.mediawiki.org/wiki/Extension:ConfirmAccount] allows email verification upon account creation, but it doesn't fill the need for manual verification

= Account Invite (Proposed Solution) =

[This extension][https://www.mediawiki.org/wiki/Extension:InviteSignup] allows to signup for a account after an invitation. This fits the bill perfectly: someone could request an account. This can be done in person (the recommended way), via email, irc or even by phone. This way it is not that difficult to create a account, but not too easy either.

HSNWiki:Proposed Editors

2019-02-05T21:04:18Z

Uartist:

The default MediaWiki editor is somewhat limited. Creating things like tables requires specific knowledge of MediaWiki markup. To make editing easier, other editors are proposed.

= BlueSpice =

[BlueSpice][https://de.bluespice.com/download-bluespice/] is a wysiwyg editor with Project Gutenberg like capabilities. It also features a nice theme.

= TinyMCE =

[TinyMCE][https://www.mediawiki.org/wiki/Extension:TinyMCE] is a wysiwyg replacement for the default editor. It has lots of options along a nice instant preview.

HSNWiki:Proposed Editors

2019-02-05T21:03:51Z

Uartist: Nieuwe pagina aangemaakt met 'The default MediaWiki editor is somewhat limited. Creating things like tables requires specific knowledge of MediaWiki markup. To make editing easier, other editors...'

The default MediaWiki editor is somewhat limited. Creating things like tables requires specific knowledge of MediaWiki markup. To make editing easier, other editors are proposed.

= BlueSpice =

[BlueSpice:https://de.bluespice.com/download-bluespice/] is a wysiwyg editor with Project Gutenberg like capabilities. It also features a nice theme.

= TinyMCE =

[TinyMCE:https://www.mediawiki.org/wiki/Extension:TinyMCE] is a wysiwyg replacement for the default editor. It has lots of options along a nice instant preview.