SovereignAnsible 常用脚本集合

Sovereign是一套Ansible脚本，可用于完全基于开源软件来构建和维护自己的个人云，因此您可以控制一切。如果您以前从未使用过Ansible，您可能会发现这些脚本很有用，因为它们展示了该工具的功能。

Sovereign在提供合理的安全性和低维护成本的同时提供有用的云服务。 每隔几周使用它来设置服务器，SSH，但大多数情况下都不会使用它。

目前提供的服务：

• IMAP over SSL via Dovecot, complete with full text search provided by Solr.
• POP3 over SSL, also via Dovecot
• SMTP over SSL via Postfix, including a nice set of DNSBLs to discard spam before it ever hits your filters.
• Virtual domains for your email, backed by PostgreSQL.
• Spam fighting via Rspamd.
• Mail server verification using DKIM and DMARC so the Internet knows your mailserver is legit.
• Secure on-disk storage for email and more via EncFS.
• Webmail via Roundcube.
• Mobile push notifications via Z-Push.
• Email client automatic configuration.
• Jabber/XMPP instant messaging via Prosody.
• An RSS Reader via Selfoss.
• CalDAV and CardDAV to keep your calendars and contacts in sync, via ownCloud.
• Your own private storage cloud via ownCloud.
• Your own VPN server via OpenVPN.
• An IRC bouncer via ZNC.
• Monit to keep everything running smoothly (and alert you when it’s not).
• collectd to collect system statistics.
• Web hosting (ex: for your blog) via Apache.
• Firewall management via Uncomplicated Firewall (ufw).
• Intrusion prevention via fail2ban and rootkit detection via rkhunter.
• SSH configuration preventing root login and insecure password authentication
• RFC6238 two-factor authentication compatible with Google Authenticator and various hardware tokens
• Nightly backups to Tarsnap.
• Git hosting via cgit and gitolite.
• Read-it-later via Wallabag