<div dir="auto">Thanks Richard, happy to help.<div dir="auto"><br></div><div dir="auto">Could you also disable some of the weaker ssl ciphers ?</div><div dir="auto"><br></div><div dir="auto"><a href="https://internet.nl/site/qgis.org/1513926/">https://internet.nl/site/qgis.org/1513926/</a> (from the original issue) has some complains on that. </div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Feb 27, 2022, 10:19 Richard Duivenvoorde <<a href="mailto:rdmailings@duif.net">rdmailings@duif.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Kaplan,<br>
<br>
Thanks for the dnssec link, that looks like something we can do.<br>
<br>
Coming friday I now plan to:<br>
- move <a href="http://qgis.org" rel="noreferrer noreferrer" target="_blank">qgis.org</a> website to another cloud-instance<br>
- (maybe also <a href="http://docs.qgis.org" rel="noreferrer noreferrer" target="_blank">docs.qgis.org</a>)<br>
- enable dnssec on those (ssl we already use letsencrypt for)<br>
- change build script (on qgis2) to rsync to those<br>
- investigate if we can shutdown apache on qgis2 (or what is holding us back)<br>
- I'd be in favour of either a new qgis2 or upgrading qgis2 to latest debian too, but need help of Juergen with that (not sure what he has running on build stuff) @Juergen, are you available for some questions maybe next friday?<br>
<br>
Regards,<br>
<br>
Richard<br>
<br>
<br>
On 2/26/22 17:51, Lior Kaplan wrote:<br>
> I see <a href="http://qgis.org" rel="noreferrer noreferrer" target="_blank">qgis.org</a> <<a href="http://qgis.org" rel="noreferrer noreferrer" target="_blank">http://qgis.org</a>> use cloudflare from DNS, so this should be the procedure for DNSsec<br>
> <a href="https://developers.cloudflare.com/dns/additional-options/dnssec/" rel="noreferrer noreferrer" target="_blank">https://developers.cloudflare.com/dns/additional-options/dnssec/</a> <<a href="https://developers.cloudflare.com/dns/additional-options/dnssec/" rel="noreferrer noreferrer" target="_blank">https://developers.cloudflare.com/dns/additional-options/dnssec/</a>><br>
> <br>
> Regarding SSL, that can be easily done with Let's Encrypt <a href="https://letsencrypt.org/" rel="noreferrer noreferrer" target="_blank">https://letsencrypt.org/</a> <<a href="https://letsencrypt.org/" rel="noreferrer noreferrer" target="_blank">https://letsencrypt.org/</a>><br>
> Most Linux distributions have tools that do the process almost automatically.<br>
> <br>
> I'd be happy to help (volunteering).<br>
> <br>
> Kaplan<br>
> <br>
> <br>
> +972-52-2235911<br>
> L: Lior Kaplan <<a href="https://www.linkedin.com/in/liorkaplan/" rel="noreferrer noreferrer" target="_blank">https://www.linkedin.com/in/liorkaplan/</a>><br>
> T: @opensource_il <<a href="https://twitter.com/opensource_il" rel="noreferrer noreferrer" target="_blank">https://twitter.com/opensource_il</a>><br>
> F: @liorkaplanopensource <<a href="https://www.facebook.com/liorkaplanopensource" rel="noreferrer noreferrer" target="_blank">https://www.facebook.com/liorkaplanopensource</a>><br>
> <a href="https://kaplanopensource.co.il/" rel="noreferrer noreferrer" target="_blank">https://kaplanopensource.co.il/</a> <<a href="https://kaplanopensource.co.il/" rel="noreferrer noreferrer" target="_blank">https://kaplanopensource.co.il/</a>><br>
> <br>
> <br>
> <br>
> On Sat, Feb 26, 2022 at 10:02 AM Andreas Neumann <<a href="mailto:andreas@qgis.org" target="_blank" rel="noreferrer">andreas@qgis.org</a> <mailto:<a href="mailto:andreas@qgis.org" target="_blank" rel="noreferrer">andreas@qgis.org</a>>> wrote:<br>
> <br>
> Hi Richard,<br>
> <br>
> Yes, there is a budget available for sysadmin / maintenance.<br>
> <br>
> If you know a good person with the necessary sysadmin skills, it would be great - ideally someone who could regularly work on such issues.<br>
> <br>
> Thanks,<br>
> Andreas<br>
> <br>
> On Sat, 26 Feb 2022 at 08:56, Richard Duivenvoorde <<a href="mailto:rdmailings@duif.net" target="_blank" rel="noreferrer">rdmailings@duif.net</a> <mailto:<a href="mailto:rdmailings@duif.net" target="_blank" rel="noreferrer">rdmailings@duif.net</a>>> wrote:<br>
> <br>
> Hi PSC,<br>
> <br>
> See: <a href="https://github.com/qgis/QGIS-Website/issues/977" rel="noreferrer noreferrer" target="_blank">https://github.com/qgis/QGIS-Website/issues/977</a> <<a href="https://github.com/qgis/QGIS-Website/issues/977" rel="noreferrer noreferrer" target="_blank">https://github.com/qgis/QGIS-Website/issues/977</a>><br>
> <br>
> I'm currently myself too busy to pick this up, but I'm happy to ask a colleague to do this.<br>
> Is there maybe some budget available for this? I could ask him to do some other systemadmin stuff too? Thinking about a 2000 euro or so?<br>
> <br>
> Another option is that I do this in an upcoming hackfest (i'll probably need a Juergen hand also somewhere :-) )<br>
> <br>
> Regards,<br>
> <br>
> Richard Duivenvoorde<br>
> _______________________________________________<br>
> Qgis-psc mailing list<br>
> <a href="mailto:Qgis-psc@lists.osgeo.org" target="_blank" rel="noreferrer">Qgis-psc@lists.osgeo.org</a> <mailto:<a href="mailto:Qgis-psc@lists.osgeo.org" target="_blank" rel="noreferrer">Qgis-psc@lists.osgeo.org</a>><br>
> <a href="https://lists.osgeo.org/mailman/listinfo/qgis-psc" rel="noreferrer noreferrer" target="_blank">https://lists.osgeo.org/mailman/listinfo/qgis-psc</a> <<a href="https://lists.osgeo.org/mailman/listinfo/qgis-psc" rel="noreferrer noreferrer" target="_blank">https://lists.osgeo.org/mailman/listinfo/qgis-psc</a>><br>
> <br>
> <br>
> <br>
> -- <br>
> <br>
> --<br>
> Andreas Neumann<br>
> <a href="http://QGIS.ORG" rel="noreferrer noreferrer" target="_blank">QGIS.ORG</a> <<a href="http://QGIS.ORG" rel="noreferrer noreferrer" target="_blank">http://QGIS.ORG</a>> board member (treasurer)<br>
> _______________________________________________<br>
> Qgis-psc mailing list<br>
> <a href="mailto:Qgis-psc@lists.osgeo.org" target="_blank" rel="noreferrer">Qgis-psc@lists.osgeo.org</a> <mailto:<a href="mailto:Qgis-psc@lists.osgeo.org" target="_blank" rel="noreferrer">Qgis-psc@lists.osgeo.org</a>><br>
> <a href="https://lists.osgeo.org/mailman/listinfo/qgis-psc" rel="noreferrer noreferrer" target="_blank">https://lists.osgeo.org/mailman/listinfo/qgis-psc</a> <<a href="https://lists.osgeo.org/mailman/listinfo/qgis-psc" rel="noreferrer noreferrer" target="_blank">https://lists.osgeo.org/mailman/listinfo/qgis-psc</a>><br>
> <br>
<br>
</blockquote></div>