Floating Cloud Servers on AWS. Imagine

Set Windows Scheduler to reset mongoDB password on first boot

This task is run at every boot, password reset is set before boot, by reset-password-to-prep-mongo-AMI.ps1 Go Windows Scheduler Trigger at startup, the password is only reset if it isn’t already the Instance ID. I have been doing this Windows Scheduler task for Windows Server 2019, Apparently something has changed. DO NOT set the bottom field Read more about Set Windows Scheduler to reset mongoDB password on first boot[…]

Windows Firewall Powershell Command to open ports for Hmailserver

Powershell Command Here is the Powershellcommand to open the ports needed by HmailServer on Windows Server 2019 and others.  Open the Powershell as Administrator. New-NetFirewallRule -DisplayName “Mail Ports HMS” -Direction inbound -Profile Any -Action Allow -LocalPort 25,110,143,587 -Protocol TCP You will see the rule in the Firewall UI under inbound rules.

Certbot Letsencrypt Certificate for HmailServer Windows svr 2019

Install hmailserver, don’t add your domain name. install winacme Run the following script or as commands in Powershell, maybe as admin. BE SURE to put your OWN DOMAIN name!!!! Change the value of $NEWPASS  to your password that you set when you installed hamilserver. $maildomain = “mail.float.i.ng”  ## ask question what domain ? $mailaddress = Read more about Certbot Letsencrypt Certificate for HmailServer Windows svr 2019[…]

Install Fastcgi php 8 for Windows Server 2019

In Windows there are always multiple ways to install stuff like CGI I will follow the installation steps of the PHP 8 Non Thread Safe version on a Windows Server 2019 Standard Evaluation (Desktop Experience) operating system what needs IIS and CGI to be installed. Install first the IIS (Internet Information Services) by opening Server Manager where we have Manage, Tools, View and Help Read more about Install Fastcgi php 8 for Windows Server 2019[…]

Install Maria DB on Windows

Install Maria DB on Windows Maria DB started as a fork from MySql, when MySQL was aquired by Oracle. Fears that Oracle would throttle Mysql have not happened and Oracle continues to develop MySql. However it is very UN-fun to login to Oracle and sign their incredibly long “I agree” before downloading. Download MariaDB Products Read more about Install Maria DB on Windows[…]

Postfix Logs

Confusion About Postfix Logs There is a lot of confusion around how to read and manage Postfix logs, these can include Dovecot or other Mail Transfer Apps. You should be using the Automated Docker Compose installation of Postfix, Roundcube Webmail, Dovecot and Certbot that makes https certificates Simplest Way to view Postfix Logs To see Read more about Postfix Logs[…]

Postfix Hardening Guide for Security and Privacy

Postfix Hardening for Security and Privacy Harden Your Postfix Email Server Postfix Hardening Guide for Security and Privacy – Linux Audit for GDPR, HIPAA , ITAR . Don’t use gmail Gsuite, get your own corporate server. Start Hardening postfix by installing a new Postfix Email Server with Webmail, Https Cert, Easy User Admin following this you will Read more about Postfix Hardening Guide for Security and Privacy[…]

Hmail server – DKIM hmailserver

sometimes you  cannot use SES, But the users still want their messages delivered. so here is some info. I hope that it is helpful. I’ve been trying to setup my hmailserver with DKIM. Unfortunatly our Windows HmailServer is now depricated. To start installing the replacement with Postfix, Dovecot, Postgres, Letsencrypt certificate and Roundcube, launch the Complete Read more about Hmail server – DKIM hmailserver[…]

Setup Amazon SES with Postfix

BE SURE!!! to back up your ec2 as an image  from in the AWS Web UI console. The Best way to have a completely secure Postfix server tnat can use ses, is to install our simple to install EC2 including Roundcube WebMail. Check it out AWS Marketplace: Mail Server on Linux Postfix using MySQL for Read more about Setup Amazon SES with Postfix[…]

Harden Your Postfix

Postfix Hardening Guide for Security and Privacy Postfix Security and Privacy Postfix is one of the most used components on a server that needs to receive or send emails. With all its options available, it is easy to have a weak configuration. This security guide looks into Postfix hardening, to increase the defenses against spam, abuse, Read more about Harden Your Postfix[…]

Setup MX Record in Route 53 with a domain that you registered with AWS

Register a domain with Route 53 Many people get stuck setting up an EC2 Instance as a  mail server. Did you send a test message to your new instance and never receive the email ? To set up a mail server you first need the MX record to be properly setup in Route 53 or Read more about Setup MX Record in Route 53 with a domain that you registered with AWS[…]

Web Linux Console for EC2 – Session Manager – ssm Quick Connect

Using AWS Session Manager you can connect to your instances via Web Console instead of SSH. This is similar to what was always offered by Azure and Google Cloud. Then Select Session Manager If you see that its greyed out, you need to still configure it. So instead go to ssm manager  Quick Start  Now Read more about Web Linux Console for EC2 – Session Manager – ssm Quick Connect[…]

Prepare AMI for AWS Marketplace – Reset Linux ec2 Image – delete public keys, etc

When preparing a public AMI for AWS EC2, you need to delete lots of security stuff, like public keys, hosts and history. sudo rm ~/.ssh/authorized_keys /home/ec2-user/.ssh/authorized_keys /root/.ssh/authorized_keys /root/.ssh/known_hosts ~/.ssh/known_hosts /home/ec2-user/.ssh/known_hosts sudo shred -u /etc/ssh/*_key /etc/ssh/*_key.pub sudo shred -u ~/.*history Also see from our Blog: Reset AWS AMI Windows 2016 and 2019 Password for use in Read more about Prepare AMI for AWS Marketplace – Reset Linux ec2 Image – delete public keys, etc[…]

Gmail is bounced as spam

I am installing my easy to install floating cloud email server in AWS Marketplace:  I am in the Final test stages. I have implimented only a small amoiunt of spam protection, however this is enough to block the biggest spammer in the multiverse. The blocked ip address is owned my google and used to send Read more about Gmail is bounced as spam[…]

Postfix Containerized Version 1 is out

HATE Gmail?   Update Nov 4, 2021 This opensource project now works. You can easily install it. To start installing, launch the Complete Email Server with Webmail in the AWS Cloud. Everyone hates Gmail and some put up with hotmail. A personal email server is best to have. We have helped people to install a great email Read more about Postfix Containerized Version 1 is out[…]

DevOps consultant VS. DevOps Employee | ProdOps

Will read later https://www.prodops.io/blog/devops-consultant-vs-devops-employee

Containerizing WordPress.

I would like to containerize my sites, especially this FloatingCloud.io site. Here are some links that I will use for guidance, wish me luck. https://blog.kontena.io/running-your-wordpress-site-in-containers/ – This uses Docker build instead of the official image from Docker Hub http://roycornelissen.com/walking-the-talk/ https://stephenafamo.com/blog/moving-wordpress-docker-container/ – Uses NginX reverse proxy https://www.sitepoint.com/how-to-use-the-official-docker-wordpress-image/ https://stackoverflow.com/questions/45714456/how-to-migrate-docker-volume-between-hosts https://docs.docker.com/storage/volumes/#backup-a-container https://medium.com/@pybrarian/mysql-databases-that-dont-retain-data-293bc2ed7f02 https://hub.docker.com/_/wordpress/ https://www.wpexplorer.com/migrating-wordpress-website/ – uses initdb.d create Read more about Containerizing WordPress.[…]

MongoDB Replica Set in Docker Swarm Quick Installation Guide

MongoDB Replica Set in Docker Swarm These scripts Use Docker Swarm with the Community Edition of the official MongoDB container. This MongoDB Replica set can be spread throughout the World. The first script is an AWS Cloudformation that asks a few questions. This creates an EC2 instance which serves as the Docker Swarm Manager.  A Read more about MongoDB Replica Set in Docker Swarm Quick Installation Guide[…]

make xfs failed, “mkfs.xfs: No such file or directory” How to format XFS

mkfs.xfs no such file or directory Amazon Linux does not come with mkfs to format a volume with xfs , as MongoDB likes. The simplest way to create a multi region MongoDB Replica set using Docker Swarm is to use our scripts that are already written. They launch a CloudFormation and the scripts written below. In Read more about make xfs failed, “mkfs.xfs: No such file or directory” How to format XFS[…]

Sr-IOV network-environment settings for TripleO Openstack installation

  ComputeOvsDpdkParameters: KernelArgs: “default_hugepagesz=1GB hugepagesz=1G hugepages=120 intel_iommu=on iommu=pt” OvsPmdCoreList: “17,53,35,71” OvsDpdkCoreList: “0,36,18,54” ## OvsDpdkMemoryChannels should be 4 (default), refer to Hardware Manual or run dmidecode -t memory OvsDpdkMemoryChannels: “4” ## OvsDpdkSocketMemory: “1024,1024” is the recommended setting without dpdk nic OvsDpdkSocketMemory: “1024,4096” TunedProfileName: “cpu-partitioning” NovaReservedHostMemory: 4096 OvsEnableDpdk: true ## IsolCpusList A set of CPU cores isolated Read more about Sr-IOV network-environment settings for TripleO Openstack installation[…]

Upgrade MongoDB 3.4 to 3.6 on Windows Server 2016

Perfect MongoDB upgrade instructions from 3.4 to 3.6     Run these instructions on each Windows Server with MongoDB 3.4   First Backup each server with an image. In case something breaks an image can be launched like the original. Snapshots are very hard to recover an OS from, so be sure to do an Read more about Upgrade MongoDB 3.4 to 3.6 on Windows Server 2016[…]

Install Docker-Compose on CoreOS Container Linux

CoreOS Container Linux is more secure and compact than others.  I installed docker-compose with the following script from https://gist.github.com/sourcec0de/5cf7d36a5f696c2ffc68   #!/bin/bash mkdir -p /opt/bin LATEST_URL=`curl -Ls -o /dev/null -w %{url_effective} https://github.com/docker/compose/releases/latest` COMPOSE_VERSION=${LATEST_URL##*/} DOWNLOAD_URL=https://github.com/docker/compose/releases/download/${COMPOSE_VERSION}/docker-compose-`uname -s`-`uname -m` curl -L ${DOWNLOAD_URL} -o /opt/bin/docker-compose chmod +x /opt/bin/docker-compose

How to remove a user in mongodb

db.removeUser() On this page Definition Deprecated since version 2.6: Use db.dropUser() instead of db.removeUser() Definition db.removeUser(username) Removes the specified username from the database. The db.removeUser() method has the following parameter: Parameter Type Description username string The database username.

Change User name in MongoDB

I need to change a username in mongodb 3.4 due to re-branding to floatingcloud.io   db.system.users.update({“user”:”oldname”}, {$set:{“user”:”newname”}}) From: https://stackoverflow.com/questions/35265277/how-to-rename-a-user-in-mongodb  

Reset AWS AMI Windows 2016 and 2019 Password for use in Marketplace

In Windows PowerShell, run the following command to schedule the script to run as a Windows Scheduled Task. The script runs one time during the next boot and then disables these tasks from running again. PS C:\> C:\ProgramData\Amazon\EC2-Windows\Launch\Scripts\InitializeInstance.ps1 -Schedule   Also see from our Blog: Prepare AMI for AWS Marketplace – Reset Linux ec2 Image Read more about Reset AWS AMI Windows 2016 and 2019 Password for use in Marketplace[…]

I’ll give it a try mailcow

https://blog.zerosector.io/2018/04/04/mailcow/amp/ https://mailcow.email

HowTo: Install MongoDB Replica Set with Docker Swarm in Multiple Regions

Running your MongoDB in replica set is a really great idea, using Docker is a quick way to deploy it. The simplest way to create a multi region MongoDB Replica set using Docker Swarm is to use our scripts that are already written. They launch a CloudFormation and the scripts written below. Please leave a comment Read more about HowTo: Install MongoDB Replica Set with Docker Swarm in Multiple Regions[…]

Postfix Spam Solutions with Dovecot imap

Postfix Email Servers can filter or Reject Spam Open Source spam solution This is the simplest solution for rejecting 90% of spam with no false positives For your Postfix Email Server. smtpd_recipient_restrictions = permit_sasl_authenticated, reject_non_fqdn_recipient, reject_unknown_recipient_domain, permit_mynetworks, reject_unauth_destination, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net This makes your Postfix email server reject mail from servers that are known Read more about Postfix Spam Solutions with Dovecot imap[…]

install horde for dovecot webmail with imp

Install Horde Web Mail to check your email Configuring Horde for IMP [OPTIONAL]If you would prefer that your users authenticate directly with IMP, without having to authenticate through Horde first, load Roundcube with full postfix email server is also extremely easy to intall theAdministration/Configuration/Authentication page and from the What backend should we use for authenticating users to Read more about install horde for dovecot webmail with imp[…]

Automating deployments on Windows with Jenkins and PsExec

I went looking for a way to be able to remotely restart a Windows service from the Jenkins server. After googling for a bit I came across PsExec which is small utility program to run remote scripts on Windows machines which would me restart the Windows service from our remote Jenkins server. After downloading this Read more about Automating deployments on Windows with Jenkins and PsExec[…]

Jenkins integration on Windows

if you have even one server that requires any .Net compilation… well, life is not easy. You need this MSBuild plugin that needs the MSBuild dll. Surprisingly, Microsoft does not actually make a linux distribution of this tool (haha). If you rolled Jenkins on Debian or CentOS, well, you’re in a sticky place where you Read more about Jenkins integration on Windows[…]

Reset Windows password to random EC2

For our Floating Cloud images the proccess is to run the password reset scripts copy the config.xml file to C:\Program Files\Amazon\Ec2ConfigService\Settings directory: Create AMI without power off or reboot [Windows Server 2016 and later] Configure settings using EC2Launch. To generate a random password at launch time, use the adminPasswordType setting. For more information, see Configuring EC2Launch. Read more about Reset Windows password to random EC2[…]

Using API to send emails with HmailServer

COM API Overview The hMailServer COM API lets you write your own scripts and applications that integrate with hMailServer. Almost all objects in hMailServer are accessible using the COM library. As an example, both hMailServer Administrator and the PHP WebAdmin is entirely based upon the COM library. Besides writing application like theese two, you can Read more about Using API to send emails with HmailServer[…]

How to get reverse DNS for your EC2 instance as well as to raise email sending limit. Amazon Web Services

Request to Remove Email Sending Limitations In order to maintain the quality of Amazon EC2 addresses for sending email, we enforce default limits on the amount of email that can be sent from EC2 accounts. If you wish to send larger amounts of email from EC2, you can apply to have these limits removed from Read more about How to get reverse DNS for your EC2 instance as well as to raise email sending limit. Amazon Web Services[…]

HmailServer with SES

HmailServer is mostly for receiving email to @yourdomain . SES is for sending email. Over the last year or so SES added the ability to receive emails but this is very complicated and confusing which is why I install Hmailserver to receive the email.Beware: In the SES panel there are DNS settings that AWS give Read more about HmailServer with SES[…]

SQL SERVER – How to Get Started with Docker Containers with Latest SQL Server? – SQL Authority with Pinal Dave

This sql server in docker is right up our alley! https://blog.sqlauthority.com/2019/03/06/sql-server-how-to-get-started-with-docker-containers-with-latest-sql-server/

New

Set WordPress all of your pages to private so that you can un-publish them

Just set them to private in the database, using the following query: This would set all posts to private, I guess you won’t really use that query. Instead, to only set articles to ‘private’ use: and to only disable pages, use: Post-revisions have the status ‘inherit’ and thus get the right inherited from the parent page or Read more about Set WordPress all of your pages to private so that you can un-publish them[…]

Upgrade Php 5.6 for Windows WAMP server

Within your Windows Server, Download the latest version of Php 5.6 of VC11 x86 Non Thread Safe 5.6 from https://windows.php.net/download/   Download the Zip File. the open it, It should be in your Downloads Folder. and select extract all, then extract them to a new sub-directory in downloads Copy the new sub-directory to C:\Program Files (x86)\PHP Read more about Upgrade Php 5.6 for Windows WAMP server[…]