Server - Software

Arch Linux 64 Bit / Arch Linux ARM (Raspberry image)

 

Arch Linux operating system …

is known as a leading/bleeding/cutting edge (Wikipedia link) and as a rolling release (Wikipedia link) distro (Wikipedia link). This means that you will receive the updated software very quickly. You don’t have to “jump” to another version like Windows 7 to Windows 10 or Ubuntu 16.04 to Ubuntu 18.04 etc. which can be painful sometimes. Three other good reasons for Arch are:

  1. The security patches will be fixed very fast, because you’re always up to date.
  2. You only have software on your system, what you have installed. No bloatware (Wikipedia link).
  3. Arch wiki is huge and very helpful.

The downside can be an unstable system because the new software is not tested properly. For this reason, we recommend that you follow our update interval, which is on the 20th each month (PwOSS link). But we’ve been using Arch for a while and never had any major problems.

The disadvantage of number 2: If you are unfamiliar with Linux, you should not use Arch for your desktop/laptop PC. It can be very time consuming to get a running system, because nothing is installed (Manjaro is fine – user friendly distro based on Arch). That’s why we chose Manjaro Linux in our desktop/laptop PC “Guideline”, which is very easy to install. You can follow the guideline to install Arch Linux if you want to learn more about it.

 

Seafile

Seafile is a cloud server like Dropbox, Google Drive etc. (Wikipedia link).

Seafile is focused on synchronized files only. Seafile is very solid without any major problems. No missing data, no corrupt data… . It’s doing what’s made for. The synchronization between your Devices is just working great. That’s the reason we chose it.

 

Radicale

Radicale is a server to sync your calendar, contacts and todo list (Radicale link). Same like Seafile. It’s just doing what’s made for.

 

OpenVPN

OpenVPN is to reach all your services (server) and to get an encrypted connection all the time (Wikipedia link).

 

LUKS

(Linux Unified Key Setup)

LUKS is to encrypt your externalHD/HardDrive or USB Stick. If a burglar steals the Hard Drive or anyone else wants to get access to your personal data. The only way to use the Hard Drive without the key or password is to format/delete the whole device. So, keep the key or password safe.

 

pikaur

pikaur is a AUR-Helper. What is AUR (Archlinux.org link)? The Helper is needed for a few dependencies which are necessary to get the Seafile server running and for the downgrade software.

 

Downgrade

Sometimes it is necessary to downgrade a software because of a unstable system. The software “downgrade” makes it very simple. Github link

 

MariaDB

MariaDB is a database management tool. Which is necessary for example to safe your login data for your Seafile server (Wikipedia link).

 

DDClient

DDClient is needed for your Dynamic DNS (archlinux.org link) – noip.com account. Mostly every Internet Service Provider (ISP) is changing your ip address (daily, weekly or monthly).

So, you’ll need actually a static IP address (which can be expensive) otherwise your VPN connection doesn’t work and your servers aren’t reachable. DDClient is sending your IP address to your Dynamic DNS Account.

 

Cronie

This software is needed for DDClient. A time schedule possibility to send commands to your system on time. The “cronjob” for your DDClient runs at 4:45 am every day (archlinux.org link).

 

UFW

(Uncomplicated Firewall)

UFW is your firewall (Wikipedia link).

 

New Software Included: 20.01.2019

 

Pi-Hole

Pi-Hole (Wikipedia link) is very useful to block ADS on and tracking domains for all your devices. In combination with VPN you're even able to block ADS on a Iphone, Smart-TVs and other IoT-Infrastructure. It's very interesting to see what every single device is doing in the background on your network.

 

Nginx

Nginx (Wikipedia link) is your web server (Wikipedia link) to serve software like Pi-Hole. Nginx is low resource consumption and is well known for its stability.

 

PHP

PHP (Wikipedia link) is a popular general-purpose scripting language that is especially suited to web development.

Fast, flexible and pragmatic, PHP powers everything from your blog to the most popular websites in the world. Needed for Pi-Hole and Adminer.

 

Adminer

Adminer (Wikipedia link) is like phpMyAdmin. Adminer is a tool for managing content in MariaDB databases. Adminer is light and low resource consumption.

 

raspiBackup

raspiBackup (GitHub link) is a tool to backup your whole operating system/Raspberry - SD Card. Your system gets backed up every morning at 5 am.

 

Samba

Samba (Wikipedia link) is necessary if you need access to your externalHD. Easy access for Windows, Linux, Android etc. Quick solution to save some data from your Android phone for example.

 

FreshRSS

FreshRSS (GitHub link) is a self-hosted RSS feed aggregator. It is lightweight, easy to work with, powerful, and customizable. If you tired of reading "everything". Just set up your own RSS feeds on your own server.

 

FireFox Sync Server

If you followed the steps from privacytools.io and from archlinux.org then the Firefox sync server will complete your data leaking issue of your browser. Every history, open tab, closed tab, and all your bookmarks are synchronized at your own server. (Wikipedia link)

 

Fail2Ban

Fail2Ban (Wikipedia link) is an intrusion prevention software framework that protects computer servers from brute-force attacks.

 

msmtp

msmtp (marlam.de link) is a very simple and easy to use SMTP client. That's necessary, to get some information about your system per email. Like, "raspiBackup completed"

 

Unbound

Your local DNS (Wikipedia) server.

   

Next Steps:

  • SSL Certificate (self-signed)
  • change services to port 443 (Nginx Proxy)
  • Email Server - to download all emails (other Email-Provider as a relay)
  • DNSCrypt-2.0
  • script:
    • instead of Documentation-Files (Copy & Paste)
    • changing all default passwords