Sovereign是一套Ansible脚本,可用于完全基于开源软件来构建和维护自己的个人云,因此您可以控制一切。如果您以前从未使用过Ansible,您可能会发现这些脚本很有用,因为它们展示了该工具的功能。
Sovereign在提供合理的安全性和低维护成本的同时提供有用的云服务。 每隔几周使用它来设置服务器,SSH,但大多数情况下都不会使用它。
目前提供的服务:
- IMAP over SSL via Dovecot, complete with full text search provided by Solr.
- POP3 over SSL, also via Dovecot
- SMTP over SSL via Postfix, including a nice set of DNSBLs to discard spam before it ever hits your filters.
- Virtual domains for your email, backed by PostgreSQL.
- Spam fighting via Rspamd.
- Mail server verification using DKIM and DMARC so the Internet knows your mailserver is legit.
- Secure on-disk storage for email and more via EncFS.
- Webmail via Roundcube.
- Mobile push notifications via Z-Push.
- Email client automatic configuration.
- Jabber/XMPP instant messaging via Prosody.
- An RSS Reader via Selfoss.
- CalDAV and CardDAV to keep your calendars and contacts in sync, via ownCloud.
- Your own private storage cloud via ownCloud.
- Your own VPN server via OpenVPN.
- An IRC bouncer via ZNC.
- Monit to keep everything running smoothly (and alert you when it’s not).
- collectd to collect system statistics.
- Web hosting (ex: for your blog) via Apache.
- Firewall management via Uncomplicated Firewall (ufw).
- Intrusion prevention via fail2ban and rootkit detection via rkhunter.
- SSH configuration preventing root login and insecure password authentication
- RFC6238 two-factor authentication compatible with Google Authenticator and various hardware tokens
- Nightly backups to Tarsnap.
- Git hosting via cgit and gitolite.
- Read-it-later via Wallabag