Aluminum is the application server. It will host XMPP, the PGP keyserver, the Debian repo, and so on.
Dell Poweredge 1850, dual Xeon 3.2GHz, 8GB RAM, 2x 150GB drives.
- App server
gogs is super easy. We just grab the binary and slap it in, using sqlite because that's good enough for now.
We need to set the daemon to be systemdfied, so we drop the gogs.service file in /etc/systemd/system folder, then enable it with
sudo systemctl enable gogs.ervice
We config the root address to be https:// to our frontend webserver, but the actual connection protocol is just http. The frontend server proxies the connection and serves it to the world as https.
Auth is done through ldap simple auth and is straightforward. There is no config file for this. It's just done in the web interface
We'll use varnish to serve cache stuff from the outside and maybe shine up some internal services (tho we don't have any lame-ass backends like rails that are slow as af).
for now look at https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=749272 and like yeah
doc this shit a little bit more
self service varnish