Skip to content

Commit

Permalink
Ajustes
Browse files Browse the repository at this point in the history
  • Loading branch information
djoven89 committed Apr 11, 2023
1 parent 89ee1cf commit 93ee340
Show file tree
Hide file tree
Showing 14 changed files with 33 additions and 21 deletions.
Binary file modified docs/assets/aws/aws-19-ec2_network-1.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/assets/aws/backup-dlm-mail_schedule.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/assets/aws/backup-dlm-shares_schedule.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/assets/aws/backup-dlm-shares_snapshot.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
5 changes: 3 additions & 2 deletions docs/aws-configuration.en.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ tags:
On this page, we will explain how to configure the AWS cloud provider environment to deploy the Zentyal server.
Requirements

## Requirements

To follow this document, you will need the following:

1. An AWS account.
Expand All @@ -19,7 +21,7 @@ To follow this document, you will need the following:
* KMS
* EC2

# Region
## Region

Before starting to create resources, we need to know which is the best region to use. To do this, we will use [this] website, where we can see which region has better latency from our location.

Expand Down Expand Up @@ -64,7 +66,6 @@ Once we have our VPC created, we will proceed to create a public [subnet], which

[subnet]: https://docs.aws.amazon.com/vpc/latest/userguide/configure-subnets.html


The subnet configuration will be:

* **Name:** SUB-Prod-Public-1
Expand Down
4 changes: 3 additions & 1 deletion docs/recovery.en.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,9 @@ tags:

# Recovery

On this page, we will explain the three possible scenarios regarding recoveries, from the "most" probable to the "least". In all three cases, we will use the DLM backup policies defined on the backup page.
On this page, we will explain the three possible scenarios regarding recoveries, from the "most" probable to the "least". In all three cases, we will use the DLM backup policies defined on the [backup] page.

[backup]: https://zentyal-aws.projects.djoven.es/en/backup/#aws-dlm

## Shared resources

Expand Down
4 changes: 3 additions & 1 deletion docs/recovery.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,9 @@ tags:

# Recovery

En esta página se explicarán las tres casuísticas relativas a recoveries que pueden darse, desde la 'más' probable hasta la 'menos'. En los tres casos se harán uso de las políticas de copias de seguridad DLM definidas en la página de backup.
En esta página se explicarán las tres casuísticas relativas a recoveries que pueden darse, desde la 'más' probable hasta la 'menos'. En los tres casos se harán uso de las políticas de copias de seguridad DLM definidas en la página de [backup].

[backup]: https://zentyal-aws.projects.djoven.es/backup/#aws-dlm

## Recursos compartidos

Expand Down
2 changes: 1 addition & 1 deletion docs/zentyal-bug-fixing.en.md
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,7 @@ There are several solutions to this problem:
1. We can modify the configuration parameter to allow insecure certificate connections on localhost.
2. We can temporarily enable the `IMAP` protocol from `Mail -> General`.
3. We can use a recognized certificate in the Webmail (Sogo) module, as explained on the `Certificates` page.
3. We can use a recognized certificate in the Webmail (Sogo) module, as explained on the [Certificates](https://zentyal-aws.projects.djoven.es/en/zentyal-certificates/) page.
If we want to apply the first option, we need to perform the following actions:
Expand Down
2 changes: 1 addition & 1 deletion docs/zentyal-bug-fixing.md
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ Hay varias soluciones a este problema:

1. Podemos modificar el parámetro de configuración para que permita conexiones certificados inseguros en localhost.
2. Podemos habilitar temporalmente el protocolo `IMAP` desde `Mail -> General`.
3. Podemos usar un certificado reconocido en el módulo de Webmail (Sogo) como se explica en la página `Certificados`.
3. Podemos usar un certificado reconocido en el módulo de Webmail (Sogo) como se explica en la página [Certificates](https://zentyal-aws.projects.djoven.es/zentyal-certificates/).
En caso de que queramos aplicar la primera opción, tendremos que realizar las siguientes acciones:

Expand Down
4 changes: 2 additions & 2 deletions docs/zentyal-certificates.en.md
Original file line number Diff line number Diff line change
Expand Up @@ -353,7 +353,7 @@ The actions to be performed are:
The result obtained in my case has been:
```text linenums="1"
## Para SMTP
## SMTP
CONNECTED(00000003)
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
Expand All @@ -367,7 +367,7 @@ The actions to be performed are:
i:C = US, O = Let's Encrypt, CN = R3
## Para IMAP
## IMAP
CONNECTED(00000003)
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
Expand Down
10 changes: 5 additions & 5 deletions docs/zentyal-configuration.en.md
Original file line number Diff line number Diff line change
Expand Up @@ -932,10 +932,9 @@ Finally, we will test with a mail client (Thunderbird in my case) that we can co
As can be seen, the status of both emails is `sent`.
At this point, the mail module should be fully functional. However, it is not yet secured, so it is advisable not to use it yet until at least the Mailfilter module has been configured and enabled. Additionally, there is another page in this project called [Hardening](https://zentyal-aws.projects.djoven.es/en/zentyal-hardening/#mail-module) where the module's security will be further increased.
At this point, the mail module should be fully functional. However, it is not yet secured, so it is advisable not to use it yet until at least the Mailfilter module has been configured and enabled. Additionally, there is another section in this project called 'hardening' where the module's security will be further increased.
Also, note that if the server is installed in the AWS cloud provider, sending emails is not allowed by default (check the last section of the 'AWS' section).
Also, note that if the server is installed in the AWS cloud provider, sending emails is not allowed by default (check the next to last section of the [AWS](https://zentyal-aws.projects.djoven.es/en/aws-configuration/#request-email-sending) page).
### Webmail Module
Expand Down Expand Up @@ -969,13 +968,14 @@ The next module to configure will be the [Webmail] (Sogo), which will allow us t
!!! warning
If we do not see the mailbox, it is possible that we are experiencing an existing bug, which occurs when the insecure mail protocols are not configured, and the certificate used is self-signed. To solve this, see the section 'Webmail -> IMAPS' on the 'bug fixing' page.
If we do not see the mailbox, it is possible that we are experiencing an existing bug, which occurs when the insecure mail protocols are not configured, and the certificate used is self-signed. To solve this, see the section `IMAPS` on the [bug fixing] page.
6. Finally, we try to send another email to ourselves to verify integration with the email module.
![Webmail sending an email](assets/zentyal/webmail-sending_email.png "Webmail sending an email")
[ActiveSync]: https://doc.zentyal.org/en/mail.html#activesync-support
[bug fixing]: https://zentyal-aws.projects.djoven.es/en/zentyal-bug-fixing/#imaps
At this point, the module is fully functional; however, I will set the following optional configurations:
Expand Down Expand Up @@ -1203,7 +1203,7 @@ Here are the steps to configure the module:
![Mail confirmation](assets/zentyal/mailfilter-confirmed_spam.png "Mail confirmation")
At this point, our email service is secure enough to be used in production. However, it is highly recommended to configure at least **SPF** and **DKIM**, and ideally, **DMARC**. These security configurations are discussed on the [Hardening](https://zentyal-aws.projects.djoven.es/en/zentyal-hardening/) page. Additionally, it is also recommended to establish certificates issued by recognized certification authorities such as Let's Encrypt. Again, this will be addressed on another page of the project, specifically in [Certificates](https://zentyal-aws.projects.djoven.es/en/zentyal-certificates/).
At this point, our email service is secure enough to be used in production. However, it is highly recommended to configure at least **SPF** and **DKIM**, and ideally, **DMARC**. These security configurations are discussed on the [Hardening](https://zentyal-aws.projects.djoven.es/en/zentyal-hardening/#mail-module) page. Additionally, it is also recommended to establish certificates issued by recognized certification authorities such as Let's Encrypt. Again, this will be addressed on another page of the project, specifically in [Certificates](https://zentyal-aws.projects.djoven.es/en/zentyal-certificates/).
### CA module
Expand Down
9 changes: 5 additions & 4 deletions docs/zentyal-configuration.md
Original file line number Diff line number Diff line change
Expand Up @@ -967,9 +967,9 @@ Finalmente, probaremos con un cliente de correo (Thunderbird en mi caso) a que p
Como se puede ver, el status de ambos emails es `sent`.
Llegados a este punto, el módulo de correo debería ser totalmente funcional, no obstante, todavía está sin securizar, por lo que es conveniente no usarlo todavía hasta al menos, haber configurado y habilitado el módulo de Mailfilter. Adicionalmente, hay otro apartado en este proyecto llamado '**hardening**' donde se incrementará todavía más la seguridad del módulo.
Llegados a este punto, el módulo de correo debería ser totalmente funcional, no obstante, todavía está sin securizar, por lo que es conveniente no usarlo todavía hasta al menos, haber configurado y habilitado el módulo de Mailfilter. Adicionalmente, hay otro apartado en este proyecto llamado [Hardening](https://zentyal-aws.projects.djoven.es/zentyal-hardening/#modulo-de-correo) donde se incrementará todavía más la seguridad del módulo.
Mencionar también que si el servidor está instalado en el proveedor cloud AWS, por defecto no se permite enviar emails (revisar la última sección del apartado 'AWS').
Mencionar también que si el servidor está instalado en el proveedor cloud AWS, por defecto no se permite enviar emails (revisar la penúltima sección de la página [AWS](https://zentyal-aws.projects.djoven.es/aws-configuration/#solicitar-envio-de-correos)).
### Módulo de Webmail
Expand Down Expand Up @@ -1003,13 +1003,14 @@ El siguiente módulo a configurar será el [Webmail] (Sogo), el cual nos permiti
!!! warning
Si no vemos el buzón de correo, es posible que estemos experimentando un bug existente, el cual se produce cuando no se tiene configurado los protocolos no seguros de correo y el certificado usado es auto-firmado. Para solucionarlo, ver en el apartado 'Webmail -> IMAPS' de la página 'bug fixing'.
Si no vemos el buzón de correo, es posible que estemos experimentando un bug existente, el cual se produce cuando no se tiene configurado los protocolos no seguros de correo y el certificado usado es auto-firmado. Para solucionarlo, ver la página [bug fixing].
6. Finalmente, tratamos de enviar otro email a nosotros mismos para verificar la integración con el módulo de correo:
![Webmail sending an email](assets/zentyal/webmail-sending_email.png "Webmail sending an email")
[ActiveSync]: https://doc.zentyal.org/es/mail.html#soporte-activesync
[bug fixing]: https://zentyal-aws.projects.djoven.es/zentyal-bug-fixing/#imaps
Llegados a este punto, el módulo es totalmente funcional, no obstante, estableceré las siguientes configuraciones opcionales:
Expand Down Expand Up @@ -1237,7 +1238,7 @@ A continuación las acciones a realizar para configurar el módulo:
![Mail confirmation](assets/zentyal/mailfilter-confirmed_spam.png "Mail confirmation")
Llegados a este punto, nuestro servicio de correo es lo suficientemente seguro para ser utilizado en producción. No obstante, es altamente recomendable configurar como mínimo SPF y DKIM e idealmente, DMARC. Estas configuraciones relativas a la seguridad se tratan en la página [Hardening](https://zentyal-aws.projects.djoven.es/en/zentyal-hardening/). Adicionalmente, también es recomendable establecer certificados emitidos por entidades certificadoras reconocidas como Let's Encrypt. Nuevamente, esto será tratado en otra página del proyecto, concretamente en [Certificates](https://zentyal-aws.projects.djoven.es/en/zentyal-certificates/).
Llegados a este punto, nuestro servicio de correo es lo suficientemente seguro para ser utilizado en producción. No obstante, es altamente recomendable configurar como mínimo SPF y DKIM e idealmente, DMARC. Estas configuraciones relativas a la seguridad se tratan en la página [Hardening](https://zentyal-aws.projects.djoven.es/zentyal-hardening/#modulo-de-correo). Adicionalmente, también es recomendable establecer certificados emitidos por entidades certificadoras reconocidas como Let's Encrypt. Nuevamente, esto será tratado en otra página del proyecto, concretamente en [Certificates](https://zentyal-aws.projects.djoven.es/zentyal-certificates/).
### Módulo de CA
Expand Down
7 changes: 5 additions & 2 deletions docs/zentyal-installation.en.md
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ The environment data for the project will be:

Before proceeding to install Zentyal, we will perform the following actions:

1. We connect to the instance through SSH using the private key that we downloaded when creating the Key pair:
1. We connect to the instance through SSH using the private key that we downloaded when creating the [Key pair]:

```sh linenums="1"
ssh -i KP-Prod-Zentyal.pem [email protected]
Expand Down Expand Up @@ -87,6 +87,8 @@ Before proceeding to install Zentyal, we will perform the following actions:

7. Finally, we add the contents of our public key to the newly created file `.ssh/authorized_keys`.

[Key pair]: https://zentyal-aws.projects.djoven.es/en/aws-configuration/#key-pair

## Instalation

From now on, the server will be ready to install Zentyal 7.0. Here are the steps to follow for its installation:
Expand Down Expand Up @@ -143,7 +145,7 @@ From now on, the server will be ready to install Zentyal 7.0. Here are the steps
!!! warning
It's possible that when the network is finished configuring, the reported bug [here] will occur. If this is the case, follow the steps described on the `Bug fixing` page (see top navigation menu) or simply modify the URL to: <https://arthas.icecrown.es:8443>
It's possible that when the network is finished configuring, the reported bug [here] will occur. If this is the case, follow the steps described on the [Bug fixing] page (see top navigation menu) or simply modify the URL to: <https://arthas.icecrown.es:8443>

8. Once changes have been saved, we can start managing Zentyal through the dashboard.

Expand Down Expand Up @@ -205,3 +207,4 @@ From now on, the server will be ready to install Zentyal 7.0. Here are the steps
[firewall]: https://doc.zentyal.org/en/firewall.html
[network]: https://doc.zentyal.org/en/firststeps.html#network-configuration-with-zentyal
[here]: https://github.com/zentyal/zentyal/issues/2100
[Bug fixing]: https://zentyal-aws.projects.djoven.es/zentyal-bug-fixing/#saving-changes
7 changes: 5 additions & 2 deletions docs/zentyal-installation.md
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ Los datos del entorno que crearé para el proyecto son:

Antes de proceder a instalar Zentyal, realizaremos las siguientes acciones:

1. Nos conectamos a la instancia a través de SSH usando la clave privada que nos hemos descargado cuando creamos el Key pair:
1. Nos conectamos a la instancia a través de SSH usando la clave privada que nos hemos descargado cuando creamos el [Key pair]:

```sh linenums="1"
ssh -i KP-Prod-Zentyal.pem [email protected]
Expand Down Expand Up @@ -87,6 +87,8 @@ Antes de proceder a instalar Zentyal, realizaremos las siguientes acciones:

7. Finalmente, añadimos el contenido de nuestra clave pública al archivo recién creado `.ssh/authorized_keys`.

[Key pair]: https://zentyal-aws.projects.djoven.es/aws-configuration/#key-pair

## Instalación

A partir de este momento, el servidor estará listo para instalar Zentyal 7.0. A continuación las acciones a realizar para su instalación:
Expand Down Expand Up @@ -143,7 +145,7 @@ A partir de este momento, el servidor estará listo para instalar Zentyal 7.0. A

!!! warning

Es posible que al terminar de configurarse la red, se nos reproduzca el bug reportado [aquí]. Si es el caso, seguir los pasos descritos en la página `Bug fixing` (ver menú superior de navegación) o simplemente modificamos la URL por: <https://arthas.icecrown.es:8443>
Es posible que al terminar de configurarse la red, se nos reproduzca el bug reportado [aquí]. Si es el caso, seguir los pasos descritos en la página [Bug fixing] (ver menú superior de navegación) o simplemente modificamos la URL por: <https://arthas.icecrown.es:8443>

8. Una vez que se haya terminado de guardar cambios, podremos empezar a gestionar Zentyal a través del dashboard.

Expand Down Expand Up @@ -205,3 +207,4 @@ A partir de este momento, el servidor estará listo para instalar Zentyal 7.0. A
[firewall]: https://doc.zentyal.org/es/firewall.html
[network]: https://doc.zentyal.org/es/firststeps.html#configuracion-basica-de-red-en-zentyal
[aquí]: https://github.com/zentyal/zentyal/issues/2100
[Bug fixing]: https://zentyal-aws.projects.djoven.es/zentyal-bug-fixing/#saving-changes

0 comments on commit 93ee340

Please sign in to comment.