So I see I was exploring this last August! Then I got awfully busy and now am at the point I need to finish this up.
I don't think I can use let's encrypt because I'm not (yet) hosting my web domains on the same server, and from what I'm reading, I would need to. No biggie for me, I can pay $15 a year for the domains I need to support to get my certs signed.
I'm interested in your reverse proxy setup. In your proxy, you have, say, mail.example1.com and mail.example2.com certificates. When the proxy forwards to Citadel, how does it resolve, say, joe@example1.com from joe@example2.com? In other words, let's say I have example1.com and example2.com listed in my local hosts in Citadel. Of course, then I have a user "joe". When an email arrives at my proxy as "joe@example1.com" and is forwarded to Citadel, does it just use the propagated headers to file it to the proper mail box?
it would CERT-ainly be the easiest way, as afaik citadel was made for small use cases and only takes one cert.. so you'd have to combine them. easiest way to combine them and keep them up to date is lets encrypt.. and the mail server should be visible at least at mail.example1.com and mail.example2.com if you set it up right with multidomains.. and when you request mail.example1.com and mail.example2.com it SHOULD also grant example1.com and example2.com by default... so even if your mail server isn't the main website on the domain, it should work. for me, i have an nginx reverse proxy on my domain.tld and mail is mail.domain.tld and all my certs are handled by the reverse proxy which then just has a cron that rsyncs them to all the other web-facing servers in my network daily, so every system always has up to date certs and if a system fails, i get notified about it via the cron email thingy and i just have the rsync directory be the one that citadel takes its certs from and then just forget about it. of course, make sure you can only log into whatever user via SSH certs and not passwords, because that's safer.
TRANSLATE withx
EnglishTRANSLATE withEnable collaborative features and customize widget: Bing Webmaster PortalDiese Seite ist auf FranzösischAuf Deutsch übersetzen
- Afrikaans
- Albanisch
- Amharisch
- Arabisch
- Armenisch
- Aserbaidschanisch
- Bengalisch
- Birmanisch
- Bulgarisch
- Chinesisch (traditionell)
- Chinesisch (vereinfacht)
- Deutsch
- Dänisch
- Englisch
- Estnisch
- Finnisch
- Französisch
- Griechisch
- Gujarati
- Haitianisch
- Hebräisch
- Hindi
- Indonesisch
- Isländisch
- Italienisch
- Japanisch
- Kannada
- Kasachisch
- Katalanisch
- Khmer
- Koreanisch
- Kroatisch
- Kurdisch (kurmandschi)
- Lao
- Lettisch
- Litauisch
- Malagasy
- Malayalam
- Malaysisch
- Maltesisch
- Maori
- Marathi
- Nepalesisch
- Niederländisch
- Norwegisch
- Paschtu
- Persisch
- Polnisch
- Portugiesisch
- Punjabi
- Rumänisch
- Russisch
- Samoanisch
- Schwedisch
- Slowakisch
- Slowenisch
- Spanisch
- Tamil
- Telugu
- Thailändisch
- Tschechisch
- Türkisch
- Ukrainisch
- Ungarisch
- Urdu
- Vietnamesisch
- Walisisch
Just got a new server and migrated all data over. 4.5GB total 150000 objects
there is one issue and its been going for a day now writing to disk.
Can anyone give details how this function works or if this is normal operation
Subject: biggest oversight in the Cita Solar System
True fact: I spend most of my work day playing a game, I think it's called "Forgot My Password" and its a clickable link on almost every website invented since geocities. I click that game and it invariably although somewhat different per site, gives me clues as to how to reset a forgotten password. I know passwords should never be written down and post-it noted near the computer, so I go a step further and not only refuse to write passwords down, but also I refuse to commit them to my own memory.
I tried (without success, probably due to my ADD or Alcoholism or both) to implement a "Forgot my Password" routine in webcit for citadel.smashbot.com. I think IRRC the problem I ran into, if I remember correctly, sans repeating myself was that webcit uses Berkeley DB, noSql... I guess I am too stupid to figure out how to do it.
SO- can anyone talk about solving the biggest oversight in the citadel solar system? Forgot My Password! I am tired of being someone else. I started to talk about this very topic and, no...wait, that wasn't me.
Subject: Re: biggest oversight in the Cita Solar System
One way is to implement U2F authentication with hardware keys that you treat the same as every other important key on a physical keyring.
Subject: Re: How works the automatic message eraser in webcit?
Mon May 01 2023 23:16:25 EDT from IGnatius T Foobar Subject: Re: How works the automatic message eraser in webcit?I want to erase all old messages after a year. How do it works? I try itin
webcit, but it dosnt save these settings?!
Remember that you can apply these settings on an individual room, a floor, or the whole system. Check to see if you're applying it in the correct place.
I want to use this settings for the whole system. I must do it with webcit.
I login as admin, go to the system settings and there is a tab "automatic eraser" and there I can set ph to erase all messages being older than 365 days. I save this but when I open this site the next time, the old standard is shown. No automatic eraser!!
I just installed citadel through easyinstall, how to I get to web client?
Subject: Re: New user trying to navigate around
I just installed citadel through easyinstall, how to I get to web
client?
With a web browser.
Hello all,
I just got Citadel running (installed using Easy-Install on a raspi 0w) and am trying to add an attachment to a post in the lobby. When drafting the message, I added the attachment by clicking on the Attachments tab, but I cannot find the attachment after posting. What am I doing wrong here?
Thanks for your help
After looking through settings a bit deeper, I found it. Thanks to the developers for this awesome tool.
Hello all,
I just got Citadel running (installed using Easy-Install on a raspi 0w) and am trying to add an attachment to a post in the lobby. When drafting the message, I added the attachment by clicking on the Attachments tab, but I cannot find the attachment after posting. What am I doing wrong here?
Thanks for your help
The documentation says there is no alias limit for a user, but I hit a limit. I have 50 alias of ~20 characters each. There appears to be a character limit for the alias field on the Admin window. There is a row entry limit on the user address card.
How can I (more directly?) enter all my aliases? I look forward to your reply.
hi,
I have a working citadel set up that seems to be working ok (Citadel Server 972 with WebCit 974)
I would like to upgrade to the latest version of both server and webcit. what is the easiest way of doing this without having to follow the compilation process "make upgrade" etc?
Is there a way I can use the "easy install" method that will upgrade my system without losing data?
thanks
Craig.
Subject: Re: easy installed system - upgrade?
If you performed the original installation using Easy Install, you can also upgrade using Easy Install.
It will detect that you have an existing installation and automatically perform an upgrade.
If you built it manually, just take a good backup, then delete everything except the following directories:
/usr/local/citadel/data
/usr/local/citadel/keys
/usr/local/citadel/files
/usr/local/citadel/messages
And then either run Easy Install or deploy the Docker container version.
Again, your existing data will be detected and it will perform an upgrade.
Excellent! So, my interpretation is those are mutually exclusive, but mutually applicable fields. In other words: no overlap and they both apply.
After that is done, it looks up individual recipients (and/or rooms) using their own aliases.
thanks :)
If you performed the original installation using Easy Install, you can also upgrade using Easy Install.
It will detect that you have an existing installation and automatically perform an upgrade.
If you built it manually, just take a good backup, then delete everything except the following directories:
/usr/local/citadel/data
/usr/local/citadel/keys
/usr/local/citadel/files
/usr/local/citadel/messages
And then either run Easy Install or deploy the Docker container version.
Again, your existing data will be detected and it will perform an upgrade.
Hi Team,
I'm hoping someone can help with some advice. I've recently installed citadel via easyinstall script but I'm struggling with outbound email. I'm running the server on a residential connections which blocks port 25 so I've setup a smart host in the format username:password@smtp_relay:port . I've also made sure my SSL certs are valid and I can receive emails. Outbound, the smart host keeps throwing an authentication error 535. There are no smart host logs unfortunately but I've turned debugging on the citadel server with the following output
I've run a packet capture but the traffic is SSL encrypted so I can see why its throwing an error. I have tested the smart host connection via telnet and I can connect and send emails.
Is there anyway I can see what username and password is being sent to the smart host? I'd greatly appreciate any advice or suggestions you have.
Thanks,
Jonathan
Is there anyway I can see what username and password is being sent to
the smart host? I'd greatly appreciate any advice or suggestions you
have.
I don't think so, but you might try putting smtp:// in front of your username and password.
Hint: it's using libcurl to send mail, so what you're sending it is an SMTP URL that is valid for curl. If you want to troubleshoot it from the command line, you can test using something like [
[ https://everything.curl.dev/usingcurl/smtp ]
and when you've got the correct SMTP URL for your setup, you can drop that back into Citadel.
Understood. :) I can work with that.
Any plans to update the input fields so they are no longer the restriction to taking full advantage of truly unlimited aliases as per the documentation? Time frame?