From 3301e1f7c82d28171b4823636bbe704d57e89ee9 Mon Sep 17 00:00:00 2001
From: Matt Birkholz
+| = _|||_ @@ -144,8 +144,8 @@ with Apache2, spooling email with Postfix and serving it with Dovecot-IMAPd, and hosting a VPN with OpenVPN. --3.1. Install Emacs
++3.1. Install Emacs
@@ -711,7 +714,7 @@ certificate is a terminal session affair (with prompts and lines entered as shown below). -The monks of the abbey are masters of the staff (bo) and Emacs. @@ -660,9 +660,7 @@ needed because Postfix does not provide an emulation of
mail(1)
and some translation tosendmail(1)
was required. Since then the script has learned to compute the date-dependent file name, compress the log, convert it to base64, and encapsulate it in MIME format, before -sending it on tosendmail
. Note that there is no encryption (yet). -This is a low priority because much of the data is available to -Droplet's ISP's Mom, the NSA/CIA/NWO. +encrypting and sending tosendmail
.@@ -681,22 +679,27 @@ Droplet's ISP's Mom, the NSA/CIA/NWO. fi ( echo "Subject: $2" - echo "Content-Type: multipart/mixed; boundary=\"boundary\"" - echo "MIME-Version: 1.0" - echo "" - echo "--boundary" - echo "Content-Type: text/plain" - echo "Content-Transfer-Encoding: 8bit" - echo "" - echo "$F" - echo "--boundary" - echo "Content-Type: application/gzip; name=\"$F\"" - echo "Content-Disposition: attachment; filename=\"$F\"" - echo "Content-Transfer-Encoding: base64" - echo "" - gzip | base64 echo "" - echo "--boundary--" ) | sendmail "$3" + ( echo "Content-Type: multipart/mixed; boundary=\"boundary\"" + echo "MIME-Version: 1.0" + echo "" + echo "--boundary" + echo "Content-Type: text/plain" + echo "Content-Transfer-Encoding: 8bit" + echo "" + echo "$F" + echo "--boundary" + echo "Content-Type: application/gzip; name=\"$F\"" + echo "Content-Disposition: attachment; filename=\"$F\"" + echo "Content-Transfer-Encoding: base64" + echo "" + gzip | base64 + echo "" + echo "--boundary--" ) \ + | gpg --encrypt --armor \ + --trust-model always --recipient root@core ) \ +| sendmail root \ +|| exit $?+$ sudo apt install python3-certbot-apache $ sudo certbot --apache -d birchwood-abbey.net ... @@ -855,7 +858,7 @@ The following task arranges to rotate Certbot's logs files.-A backup copy of Let's Encrypt's data (
@@ -930,8 +933,8 @@ with Postfix and Dovecot, and providing essential localnet services: NTP, DNS and DHCP./etc/letsencrypt/) is sent to -root@core
in S/MIME encrypted email every time it changes. Changes +root@core
in OpenPGP encrypted email every time it changes. Changes are detected by keeping a copy in/etc/letsencrypt~/for comparison.--4.1. Include Abbey Variables
++4.1. Include Abbey Variables
In this abbey specific document, most abbey particulars are not @@ -1127,8 +1130,8 @@ The abbey uses the Apt-Cacher:TNG package cache on Core. The
-4.8. Use Cloister Apt Cache
++4.8. Use Cloister Apt Cache
-Core itself will benefit from using the package cache, but should @@ -1938,8 +1941,8 @@ hosts never roam, are not associated with a member, and so are ./abbey client campus new-host-name
--6.1. Use Cloister Apt Cache
++6.1. Use Cloister Apt Cache
The Apt-Cacher:TNG program does not work well on the frontier, so is @@ -2061,8 +2064,8 @@ them.
--- 2.25.1 -6.4. Install Emacs
++-6.4. Install Emacs
The monks of the abbey are masters of the staff and Emacs. @@ -2536,8 +2539,8 @@ machine simply by adding it to the
tvrs
group.-@@ -4584,7 +4605,7 @@ to9.3. Include Abbey Variables
++9.3. Include Abbey Variables
Private variables in
-private/vars-abbey.ymlare needed, as in the @@ -3083,7 +3086,7 @@ the list of "inputs" available in a postal code typically ends with the OTA (over the air) broadcasts.+$ tv_grab_zz_sdjson --configure --config-file .mythtv/Mr.Antenna.xml Cache file for lineups, schedules and programs. Cache file: [/home/mythtv/.xmltv/tv_grab_zz_sdjson.cache] @@ -3372,6 +3375,24 @@ program as usermythtv
. The program will prompt for the zip code and offer a list of "inputs" available in that area, as described in Configure XMLTV. + ++Then the administrator can re-start the backend. +
+ +++ +sudo systemctl start mythtv-backend +++And the
+ +mythtv
account can runmythfilldatabase
. ++mythfilldatabase ++private/db.campus_vpn.)