|
@@ -8,9 +8,9 @@ h2. Background/Motivations
|
8
|
8
|
|
9
|
9
|
I had been a paying Google Apps customer for personal and corporate use since the service was in beta. Until several weeks ago, that is. I was about to set up another Google Apps account for a new project when I stopped to consider what I would be funding with my USD $50 per user per year:
|
10
|
10
|
|
11
|
|
-# A "seriously questionable privacy track record":https://en.wikipedia.org/wiki/Criticism_of_Google#Privacy.
|
12
|
|
-# A "dwindling commitment to open standards":https://www.eff.org/deeplinks/2013/05/google-abandons-open-standards-instant-messaging.
|
13
|
|
-# A "lack of long-term commitment to products":http://www.quora.com/Google-Products/What-are-all-the-Google-products-that-have-been-shut-down.
|
|
11
|
+# "A seriously questionable privacy track record":https://en.wikipedia.org/wiki/Criticism_of_Google#Privacy.
|
|
12
|
+# "A dwindling commitment to open standards":https://www.eff.org/deeplinks/2013/05/google-abandons-open-standards-instant-messaging.
|
|
13
|
+# "A lack of long-term commitment to products":http://www.quora.com/Google-Products/What-are-all-the-Google-products-that-have-been-shut-down.
|
14
|
14
|
# Development of Google+: a cynical and "unimaginative Facebook ripoff":http://gigaom.com/2012/03/15/google-plus-the-problem-isnt-design-its-a-lack-of-demand/ that's "intruding into progressively more Google products":http://bits.blogs.nytimes.com/2012/03/06/google-defending-google-plus-shares-usage-numbers/?_r=0.
|
15
|
15
|
|
16
|
16
|
To each her/his own, but personally I saw little reason to continue participating in the Google ecosystem. It had been years since I last ran my own server for email and such, but it's only gotten cheaper and easier to do so. Plus, none of the commercial alternatives I looked at provided all the services I was looking for.
|
|
@@ -106,11 +106,13 @@ This account should be set up for passwordless sudo. Use @visudo@ and add this l
|
106
|
106
|
|
107
|
107
|
bc. deploy ALL=(ALL) NOPASSWD: ALL
|
108
|
108
|
|
109
|
|
-h3. 4. Run the ansible scripts
|
|
109
|
+h3. 4. Configure your installation
|
110
|
110
|
|
111
|
|
-First, make sure you've "got Ansible installed":http://ansibleworks.com/docs/gettingstarted.html#getting-ansible.
|
|
111
|
+Modify the settings in @vars/user.yml@ to your liking. If you want to see how they're used in context, just search for the corresponding string.
|
|
112
|
+
|
|
113
|
+h3. 5. Run the Ansible Playbooks
|
112
|
114
|
|
113
|
|
-Now, the time-consuming part: grep through the files for the string @TODO@ and replace as necessary. You'll probably want to check out all the files in the respective @vars/@ sub-directories in each playbook directory.
|
|
115
|
+First, make sure you've "got Ansible installed":http://ansibleworks.com/docs/gettingstarted.html#getting-ansible.
|
114
|
116
|
|
115
|
117
|
To run the whole dang thing:
|
116
|
118
|
|
|
@@ -122,7 +124,7 @@ bc. ansible-playbook -i ./hosts --tags=ferm site.yml
|
122
|
124
|
|
123
|
125
|
You might find that it fails at one point or another. This is probably because something needs to be done manually, usually because there's no good way of automating it. Fortunately, all the tasks are clearly named so you should be able to find out where it stopped. I've tried to add comments where manual intervention is necessary. OpenVPN in particular requires a bunch of manual command line stuff to get running.
|
124
|
126
|
|
125
|
|
-h3. 5. Set up DNS
|
|
127
|
+h3. 6. Set up DNS
|
126
|
128
|
|
127
|
129
|
If you've just bought a new domain name, point it at "Linode's DNS Manager":https://library.linode.com/dns-manager or similar. Most VPS services (and even some domain registrars) offer a managed DNS service that you can use for this at no charge. If you're using an existing domain that's already managed elsewhere, you can probably just modify a few records.
|
128
|
130
|
|
|
@@ -130,30 +132,13 @@ Create an @A@ record for @example.com@ as well as @mail.example.com@ which point
|
130
|
132
|
|
131
|
133
|
Set up SPF and reverse DNS "as per the inspirational post":http://sealedabstract.com/code/nsa-proof-your-e-mail-in-2-hours/. Make sure to validate that it's all working, for example by sending an email to <a href="mailto:check-auth@verifier.port25.com">check-auth@verifier.port25.com</a> and reviewing the report that will be emailed back to you.
|
132
|
134
|
|
133
|
|
-h3. 6. Miscellaneous Configuration
|
|
135
|
+h3. 7. Miscellaneous Configuration
|
134
|
136
|
|
135
|
137
|
Sign in to the ZNC web interface and set things up to your liking.
|
136
|
138
|
|
|
139
|
+h2. How To Use Your New Personal Cloud
|
137
|
140
|
|
138
|
|
-h2. How I Use It
|
139
|
|
-
|
140
|
|
-First, I moved all my email off Google with "larch":https://github.com/rgrove/larch/. It worked like a charm. Calendars and contacts were even easier: just export and then import the standard formats with your clients of choice; no issues with Calendar.app and Contacts.app.
|
141
|
|
-
|
142
|
|
-I use this setup from my Mac like this:
|
143
|
|
-
|
144
|
|
-* I read email in "Airmail":https://itunes.apple.com/us/app/airmail/id573171375?mt=12.
|
145
|
|
-* I manage my calendar and contacts via the Apple-provided Calendar.app and Contacts.app. See "ownCloud's docs":http://doc.owncloud.com/server/5.0EE/user_manual/pim/index.html to get it set up.
|
146
|
|
-* I connect to the VPS via "Viscosity":http://www.sparklabs.com/viscosity/. It has some dumb DNS bug right now so I have to point my machine to "OpenDNS":https://use.opendns.com/ in order to resolve names. Despite that, it's better than the "alternative":https://code.google.com/p/tunnelblick/.
|
147
|
|
-* I connect to the IRC bouncer with "Textual":http://www.codeux.com/textual/.
|
148
|
|
-* I run the "ownCloud sync client":https://owncloud.com/download for Dropbox-like file sync.
|
149
|
|
-* I manage my blog and other sites with "Jekyll":http://jekyllrb.com/ locally, then push the resulting builds up to the server via "rsync":https://rsync.samba.org/ over SSH.
|
150
|
|
-
|
151
|
|
-... and from my iPhone like this:
|
152
|
|
-
|
153
|
|
-* I read email in the Apple-provided Mail app and check it quickly in "Triage":http://www.triage.cc/.
|
154
|
|
-* I manage my calendar and contacts with the built-in apps. Boring, effective. See the "ownCloud docs":http://doc.owncloud.com/server/5.0EE/user_manual/pim/index.html for setup instructions.
|
155
|
|
-* I access files stored in my ownCloud instance via "their app":https://itunes.apple.com/us/app/owncloud/id543672169?mt=8.
|
156
|
|
-* I connect to my IRC bouncer with "Palaver":https://itunes.apple.com/us/app/id538073623?mt=8.
|
|
141
|
+We're collecting known-good client setups [on our wiki](https://github.com/al3x/sovereign/wiki/Usage).
|
157
|
142
|
|
158
|
143
|
h1. Contributing
|
159
|
144
|
|