September 2017 - DC-Users - DuckCorp Mailing-Lists

Maintenance: Toushirou moving to PA3
by Marc Dequènes (duck) 19 Sep '17

19 Sep '17

Quack, 2017-09-21 early afternoon (CEST) Toushirou will be shutdown and moved in a new home. During this time various services will be unavailable, mainly: all websites except the webmail, secondary DNS and mail servers, DDNS, FTP. Godspeed Toushirou! \_o< -- Marc Dequènes

1 0

Subject: What happened while you were on the beach?
by DuckCorp Admin Team 04 Sep '17

04 Sep '17

Quack, === Backup Back Online === It took a while, but thanks to Pilou's hard work we have full backup coverage again. If you'd like some data to be excluded from backup, either because it's useless or because you prefer not, you just need to add an empty '.nobackup' file in the directory to ignore (recursively). It's the same behavior as before, so if you already setup things, nothing changed. === More Changes after Stretch Migration === Noone asked about the Webdesk, so we're going to remove it very soon. We have a new cute IRC on Web as previous one was unmaintained, and broken after migration, enjoy! Former stats using Awstats were utterly broken and noone noticed; Piwik has been working well since a while and was promoted instead. Please use webstats.dc.o (no more webstats-ng.dc.o). Ask if you need your website to be integrated into the new system. The photos website (using Gallery2) was utterly broken after migration; we have no replacement yet but we're looking into it, sorry. Blogs were never used and broken after migration; they were removed. === A few Security Changes === Users with shell access should review their SSH keys (both stored and authorized); DSS and low grade RSA will soon be removed (advice: use ed25519). Persons (not only users) managing a DNS zone should use DNS CAA RR to protect from domain hijacking (please read https://www.isc.org/blogs/certificate-authority-authorization-records/) This is far from a perfect solution but may still help. We can do that for you if the zone is hosted by DC, just ask us. We've activated HTTP2 support on all websites, and this comes with improved ciphers and web settings. Also we plan to ensure all websites, user ones included, are all redirected to HTTPS, no exceptions. === Mail Security when using the Webmail === There is now an option to PGP encrypt/decrypt mails using our webmail (Roundcube) using Mailvelope. It is a browser extension allowing to use your PGP key locally, so it stays stored on your computer and the encryption/decryption occurs on your computer too. Unfortunately it does not handle signatures but let's hope the support in Roundcube improves. You can have a look here: https://www.mailvelope.com/ === Quick NEWS === * 2017-07-29 around 09:00 CEST and for ~2h a DNSSEC problem broke all DNS resolution on duckcorp.org domain due to a bug in OpenDNSSEC; happily noone seem to have noticed \_o< -- Marc Dequènes (Duck)

1 0

What happened while you were on the beach?
by Marc Dequènes (duck) 04 Sep '17

04 Sep '17

Quack, === Backup Back Online === It took a while, but thanks to Pilou's hard work we have full backup coverage again. If you'd like some data to be excluded from backup, either because it's useless or because you prefer not, you just need to add an empty '.nobackup' file in the directory to ignore (recursively). It's the same behavior as before, so if you already setup things, nothing changed. === More Changes after Stretch Migration === Noone asked about the Webdesk, so we're going to remove it very soon. We have a new cute IRC on Web as previous one was unmaintained, and broken after migration, enjoy! Former stats using Awstats were utterly broken and noone noticed; Piwik has been working well since a while and was promoted instead. Please use webstats.dc.o (no more webstats-ng.dc.o). Ask if you need your website to be integrated into the new system. The photos website (using Gallery2) was utterly broken after migration; we have no replacement yet but we're looking into it, sorry. Blogs were never used and broken after migration; they were removed. === A few Security Changes === Users with shell access should review their SSH keys (both stored and authorized); DSS and low grade RSA will soon be removed (advice: use ed25519). Persons (not only users) managing a DNS zone should use DNS CAA RR to protect from domain hijacking (please read https://www.isc.org/blogs/certificate-authority-authorization-records/) This is far from a perfect solution but may still help. We can do that for you if the zone is hosted by DC, just ask us. We've activated HTTP2 support on all websites, and this comes with improved ciphers and web settings. Also we plan to ensure all websites, user ones included, are all redirected to HTTPS, no exceptions. === Mail Security when using the Webmail === There is now an option to PGP encrypt/decrypt mails using our webmail (Roundcube) using Mailvelope. It is a browser extension allowing to use your PGP key locally, so it stays stored on your computer and the encryption/decryption occurs on your computer too. Unfortunately it does not handle signatures but let's hope the support in Roundcube improves. You can have a look here: https://www.mailvelope.com/ === Quick NEWS === * 2017-07-29 around 09:00 CEST and for ~2h a DNSSEC problem broke all DNS resolution on duckcorp.org domain due to a bug in OpenDNSSEC; happily noone seem to have noticed \_o< -- Marc Dequènes

1 0