Initial installation of Raspbian to the SD card

• Download Raspbian Jessie Lite image from https://www.raspberrypi.org/downloads/raspbian/ ( 2016-09-23-raspbian-jessie-lite.img )

• Copy the image to SD card:
  sudo dd if= Downloads/2016-09-23-raspbian-jessie-lite.img of= /dev/mmcblk0

• extend ext4 partition (for example with GParted).

Firmware update

• sudo apt update

• sudo apt dist-upgrade

• sudo apt install rpi-update

• sudo rpi-update

• sudo reboot

Change the user authorized to connect via SSH

• sudo adduser USER

• sudo adduser USER sudo

• Edit the following lines to /etc/ssh/sshd_config
  

  AllowUsers USER
  PermitRootLogin no

Yunohost on Debian

• sudo apt install git

• git clone https://github.com/YunoHost/install_script /tmp/install_script

• cd /tmp/install_script

• sudo ./install_yunohost

DynDNS: install IP update cron

• sudo yunohost dyndns installcron

DynDNS: change cron period to two(2) hours

• Edit /etc/cron.d/yunohost-dyndns to match the following
  0 */2 * * * root yunohost dyndns update >> /dev/null

Install Let's Encrypt certificates

• Add the following line to /etc/hosts
127.0.0.1 example.org

• Edit /etc/ssowat/conf.json.persistent

  {
      "redirected_urls": {
          "/": "example.org/yunohost/admin"
      },
      "unprotected_urls": [
          "example.org/.well-known/acme-challenge"
      ]
  }

• sudo yunohost domain cert-install

Opening ports

• TCP. 

  • 22 (SSH)

  • 25 (SMTP)

  • 53 (DNS)

  • 80 (HTTP)

  • 443 (HTTPS)

  • 465 (SMTPS)

  • 587 (SMTP)

  • 993 (IMAPS)

  • 5222 (XMPP client)

  • 5269 (XMPP serveur)

• UDP. 

  • 53 (DNS)

• Create /etc/cron.daily/check-system-update

  #!/bin/bash
  echo "#######################"
  echo "# CHECK SYSTEM UPDATE #"
  echo "#######################"
  
  echo "$(yunohost tools update --ignore-packages | \
    grep --extended-regexp --regexp=[[:space:]]+[[:digit:]]+\: --count) \
    apps can be upgraded."
  echo "$(yunohost tools update --ignore-apps | \
    grep --extended-regexp --regexp=[[:space:]]+[[:digit:]]+\: --count) \
    packages can be upgraded."
  yunohost tools update
  

• Create /etc/cron.daily/full-system-backup

  #!/bin/bash
  echo "######################"
  echo "# FULL SYSTEM BACKUP #"
  echo "######################"
  
  BACKUP_PATH=/home/yunohost.backup/archives/
  
  echo "*** YunoHost backup ***"
  yunohost backup create
  
  echo "*** MySQL backup ***"
  mysqldump -uroot -p"$(sudo cat /etc/yunohost/mysql)" mysql > \
    $BACKUP_PATH/$(date +%Y%m%d-%H%M%S).mysql
  
  echo "*** LDAP backup ***"
  slapcat > $BACKUP_PATH/$(date +%Y%m%d-%H%M%S).ldap
  

References

• Internet Cube / howto / daily_backup

Certbot for Nginx on Debian 8 (jessie)

• Add the following line to /etc/apt/sources.list
deb http://ftp.debian.org/debian jessie-backports main

• sudo apt update

• sudo apt install certbot -t jessie-backports

• sudo nginx -s stop

• sudo certbot certonly --standalone -d example.org

• sudo reboot

Renewing certificates

• sudo certbot renew --pre-hook "service nginx stop" --post-hook "service nginx start"

• # /etc/cron.d/certbot: crontab entries for the certbot package                                                                
  #                                                                                                                             
  # Upstream recommends attempting renewal twice a day                                                                          
  #                                                                                                                             
  # Eventually, this will be an opportunity to validate certificates                                                            
  # haven't been revoked, etc.  Renewal will only occur if expiration                                                           
  # is within 30 days.                                                                                                          
  SHELL=/bin/sh                                                                                                                 
  PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin                                                             
                                                                                                                                
  0 */12 * * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system &&\
  	perl -e 'sleep int(rand(3600))' &&\
  	certbot -q renew\
  		--pre-hook "service nginx stop"\
  		--post-hook "service nginx start"                                                            

Using PPA on Ubuntu

• sudo add-apt-repository ppa:ubuntu-desktop/ubuntu-make

• sudo apt update

• sudo apt install ubuntu-make

Using Backports on Debian

• Add the following line to /etc/apt/sources.list
deb http://ftp.debian.org/debian jessie-backports main

• sudo apt update

• sudo apt install flatpak -t jessie-backports

Using PPA on Ubuntu

• sudo add-apt-repository ppa:alexlarsson/flatpak

• sudo apt update

• sudo apt install flatpak

On Debian

• sudo apt install tahoe-lafs

Syncthing on Debian

• curl -s https://syncthing.net/release-key.txt | sudo apt-key add -

• echo "deb https://apt.syncthing.net/ syncthing stable" | sudo tee /etc/apt/sources.list.d/syncthing.list

• sudo apt install apt-transport-https

• sudo apt update

• sudo apt install syncthing

Using Ubuntu Make

• umake ide eclipse

On Debian

• sudo apt install glances

Remove Ubuntu modifications for Firefox

• sudo apt remove xul-ext-ubufox