From 66f1a739aacd8b2ec30ad5a793c8ef827cf4ebf0 Mon Sep 17 00:00:00 2001 From: Bob Mottram Date: Thu, 12 Sep 2019 15:47:30 +0100 Subject: [PATCH] Update website --- website/index.html | 2664 ++++++++++++++++++++++---------------------- 1 file changed, 1334 insertions(+), 1330 deletions(-) diff --git a/website/index.html b/website/index.html index 6aef2f7d7..865c57833 100644 --- a/website/index.html +++ b/website/index.html @@ -2,1366 +2,1370 @@ + -
-
-
- - - - - - -
InstallSource codeDonate
-

- Epicyon is an AGPL licensed ActivityPub protocol compliant federated social network server suitable for hosting a small number of accounts on low power systems requiring minimal maintenance, such as single board computers. It's the ActivityPub equivalent of an email server, storing posts as human readable JSON on file, rather than in a database. It also uses only a small amount of RAM. -

-

An Internet of People, Not Corporate Agendas

-

- Epicyon is written in Python with a HTML+CSS web interface and uses almost no javascript which makes display in a web browser very lightweight. -

+
+
+
+ + + + + + +
InstallSource codeDonate
+

+ Epicyon is an AGPL licensed ActivityPub protocol compliant federated social network server suitable for hosting a small number of accounts on low power systems requiring minimal maintenance, such as single board computers. It's the ActivityPub equivalent of an email server, storing posts as human readable JSON on file, rather than in a database. It also uses only a small amount of RAM. +

+

An Internet of People, Not Corporate Agendas

+

+ Epicyon is written in Python with a HTML+CSS web interface and uses almost no javascript which makes display in a web browser very lightweight. +

- - - - - -
+ + + + + + + + + +
-

- Emojis, hashtags, photos, video and audio attachments, instance and account level blocking controls, moderation functions and reports are all supported. Build the community you want and avoid the stuff you don't. No ads. No blockchains or other Silicon Valley garbage. -

+

+ Emojis, hashtags, photos, video and audio attachments, instance and account level blocking controls, moderation functions and reports are all supported. Build the community you want and avoid the stuff you don't. No ads. No blockchains or other Silicon Valley garbage. +

-

Message Scopes

-

- Define the scope of your messages to reach the right people. -

- - -

International and Customizable

-

- Epicyon supports many languages. Translations and emoji can easily be added. Alter the logo, backgrounds, terms of service and style to create a unique personality for your instance. -

-

Genuine Sharing Economy

-

- Barter and gift physical items or services with other people on your instance. Search for shared items which you might want or post items you no longer have a use for. Pool resources between trusted friends to build solidarity and have fun. -

- -

Promote Your Skills and Build Teams

-

- Define a set of skills in your profile and search for other people who have the skills you need. Organize teams who can get things done! -

- - - - - -
-

No Artificial Incentives

-

- No algorithmic timelines. No rating or ranking of people. No trending stuff. Removing the artficial cruft of social networking allows you to focus on things you actually care about, instead of what someone else thinks you should pay attention to. -

- -
-

On a Debian based system:

-
-

sudo apt-get -y install tor python3-pip python3-socks imagemagick python3-numpy python3-setuptools python3-crypto python3-dateutil python3-pil.imagetk certbot

-

sudo pip3 install commentjson beautifulsoup4 pycryptodome

-
+

Message Scopes

+

+ Define the scope of your messages to reach the right people. +

+ + +

International and Customizable

+

+ Epicyon supports many languages. Translations and emoji can easily be added. Alter the logo, backgrounds, terms of service and style to create a unique personality for your instance. Choose from a few different themes, or make a new one. +

+

Genuine Sharing Economy

+

+ Barter and gift physical items or services with other people on your instance. Search for shared items which you might want or post items you no longer have a use for. Pool resources between trusted friends to build solidarity and have fun. +

+ +

Promote Your Skills and Build Teams

+

+ Define a set of skills in your profile and search for other people who have the skills you need. Organize teams who can get things done! +

+ + + + + +
+

No Artificial Incentives

+

+ No algorithmic timelines. No rating or ranking of people. No trending stuff. Removing the artficial cruft of social networking allows you to focus on things you actually care about, instead of what someone else thinks you should pay attention to. +

+ +
+

On a Debian based system:

+
+

sudo apt-get -y install tor python3-pip python3-socks imagemagick python3-numpy python3-setuptools python3-crypto python3-dateutil python3-pil.imagetk certbot

+

sudo pip3 install commentjson beautifulsoup4 pycryptodome

+
-

- Create a user for the server to run as: -

-
-

sudo su

-

adduser --system --home=/etc/epicyon --group epicyon

-
+

+ Create a user for the server to run as: +

+
+

sudo su

+

adduser --system --home=/etc/epicyon --group epicyon

+
-

- Clone the repo: -

-
-

cd /etc

-

git clone https://gitlab.com/bashrc2/epicyon

-

chown -R epicyon:epicyon /etc/epicyon

-
+

+ Clone the repo: +

+
+

cd /etc

+

git clone https://gitlab.com/bashrc2/epicyon

+

chown -R epicyon:epicyon /etc/epicyon

+
-

- Create a daemon: -

-
-

nano /etc/systemd/system/epicyon.service

-
-

- Paste the following: -

-
- [Unit]
- Description=epicyon
- After=syslog.target
- After=network.target
-
- [Service]
- Type=simple
- User=epicyon
- Group=epicyon
- WorkingDirectory=/etc/epicyon
- ExecStart=/usr/bin/python3 /etc/epicyon/epicyon.py --port 443 --proxy 7156 --domain YOUR_DOMAIN --registration open --debug
- Environment=USER=epicyon
- Restart=always
- StandardError=syslog
-
- [Install]
- WantedBy=multi-user.target -
-

- Activate the daemon: -

-
- systemctl enable epicyon
- systemctl start epicyon -
-

- Create a web server configuration: -

-
- nano /etc/nginx/sites-available/YOUR_DOMAIN -
-

- And paste the following: -

-
- server {
- listen 80;
- listen [::]:80;
- server_name YOUR_DOMAIN;
- root /var/www/YOUR_DOMAIN/htdocs;
- access_log /dev/null;
- error_log /dev/null;
- client_max_body_size 31m;
- client_body_buffer_size 128k;
-
- limit_conn conn_limit_per_ip 10;
- limit_req zone=req_limit_per_ip burst=10 nodelay;
-
- index index.html;
- rewrite ^ https://$server_name$request_uri? permanent;
- }
-
- server {
- listen 443 ssl;
- server_name YOUR_DOMAIN;
-
- ssl_stapling off;
- ssl_stapling_verify off;
- ssl on;
- ssl_certificate /etc/letsencrypt/live/YOUR_DOMAIN/fullchain.pem;
- ssl_certificate_key /etc/letsencrypt/live/YOUR_DOMAIN/privkey.pem;
- #ssl_dhparam /etc/ssl/certs/YOUR_DOMAIN.dhparam;
-
- ssl_session_cache builtin:1000 shared:SSL:10m;
- ssl_session_timeout 60m;
- ssl_prefer_server_ciphers on;
- ssl_protocols TLSv1.2 TLSv1.3;
- ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS';
- add_header X-Frame-Options DENY;
- add_header X-Content-Type-Options nosniff;
- add_header X-XSS-Protection "1; mode=block";
- add_header X-Download-Options noopen;
- add_header X-Permitted-Cross-Domain-Policies none;
-
- add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive";
- add_header Strict-Transport-Security max-age=15768000;
-
- access_log /dev/null;
- error_log /dev/null;
-
- root /var/www/YOUR_DOMAIN/htdocs;
- index index.html;
-
- location / {
- proxy_http_version 1.1;
- client_max_body_size 31M;
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection "upgrade";
- proxy_set_header Host $http_host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forward-Proto http;
- proxy_set_header X-Nginx-Proxy true;
- proxy_temp_file_write_size 64k;
- proxy_connect_timeout 10080s;
- proxy_send_timeout 10080;
- proxy_read_timeout 10080;
- proxy_buffer_size 64k;
- proxy_buffers 16 32k;
- proxy_busy_buffers_size 64k;
- proxy_redirect off;
- proxy_request_buffering off;
- proxy_buffering off;
- proxy_pass http://localhost:7156;
- }
- } -
+

+ Create a daemon: +

+
+

nano /etc/systemd/system/epicyon.service

+
+

+ Paste the following: +

+
+[Unit]
+Description=epicyon
+After=syslog.target
+After=network.target
+
+[Service]
+Type=simple
+User=epicyon
+Group=epicyon
+WorkingDirectory=/etc/epicyon
+ExecStart=/usr/bin/python3 /etc/epicyon/epicyon.py --port 443 --proxy 7156 --domain YOUR_DOMAIN --registration open --debug
+Environment=USER=epicyon
+Restart=always
+StandardError=syslog
+
+[Install]
+WantedBy=multi-user.target +
+

+ Activate the daemon: +

+
+systemctl enable epicyon
+systemctl start epicyon +
+

+ Create a web server configuration: +

+
+nano /etc/nginx/sites-available/YOUR_DOMAIN +
+

+ And paste the following: +

+
+server {
+ listen 80;
+ listen [::]:80;
+ server_name YOUR_DOMAIN;
+ root /var/www/YOUR_DOMAIN/htdocs;
+ access_log /dev/null;
+ error_log /dev/null;
+ client_max_body_size 31m;
+ client_body_buffer_size 128k;
+
+ limit_conn conn_limit_per_ip 10;
+ limit_req zone=req_limit_per_ip burst=10 nodelay;
+
+ index index.html;
+ rewrite ^ https://$server_name$request_uri? permanent;
+}
+
+server {
+ listen 443 ssl;
+ server_name YOUR_DOMAIN;
+
+ ssl_stapling off;
+ ssl_stapling_verify off;
+ ssl on;
+ ssl_certificate /etc/letsencrypt/live/YOUR_DOMAIN/fullchain.pem;
+ ssl_certificate_key /etc/letsencrypt/live/YOUR_DOMAIN/privkey.pem;
+ #ssl_dhparam /etc/ssl/certs/YOUR_DOMAIN.dhparam;
+
+ ssl_session_cache builtin:1000 shared:SSL:10m;
+ ssl_session_timeout 60m;
+ ssl_prefer_server_ciphers on;
+ ssl_protocols TLSv1.2 TLSv1.3;
+ ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS';
+ add_header X-Frame-Options DENY;
+ add_header X-Content-Type-Options nosniff;
+ add_header X-XSS-Protection "1; mode=block";
+ add_header X-Download-Options noopen;
+ add_header X-Permitted-Cross-Domain-Policies none;
+
+ add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive";
+ add_header Strict-Transport-Security max-age=15768000;
+
+ access_log /dev/null;
+ error_log /dev/null;
+
+ root /var/www/YOUR_DOMAIN/htdocs;
+ index index.html;
+
+ location / {
+ proxy_http_version 1.1;
+ client_max_body_size 31M;
+ proxy_set_header Upgrade $http_upgrade;
+ proxy_set_header Connection "upgrade";
+ proxy_set_header Host $http_host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
+ proxy_set_header X-Forward-Proto http;
+ proxy_set_header X-Nginx-Proxy true;
+ proxy_temp_file_write_size 64k;
+ proxy_connect_timeout 10080s;
+ proxy_send_timeout 10080;
+ proxy_read_timeout 10080;
+ proxy_buffer_size 64k;
+ proxy_buffers 16 32k;
+ proxy_busy_buffers_size 64k;
+ proxy_redirect off;
+ proxy_request_buffering off;
+ proxy_buffering off;
+ proxy_pass http://localhost:7156;
+ }
+} +
-

- Enable the site: -

-
- ln -s /etc/nginx/sites-available/YOUR_DOMAIN /etc/nginx/sites-enabled/ -
+

+ Enable the site: +

+
+ln -s /etc/nginx/sites-available/YOUR_DOMAIN /etc/nginx/sites-enabled/ +
-

- Forward port 443 from your internet router to your server. If you have dynamic DNS make sure its configured. Add a TLS certificate: -

-
- certbot certonly -n --server https://acme-v01.api.letsencrypt.org/directory --standalone -d YOUR_DOMAIN --renew-by-default --agree-tos --email YOUR_EMAIL -
-

- Restart your web server: -

-
- systemctl restart nginx -
-

- Now you can navigate to your domain and register an account. The first account becomes the administrator. -

+

+ Forward port 443 from your internet router to your server. If you have dynamic DNS make sure its configured. Add a TLS certificate: +

+
+certbot certonly -n --server https://acme-v01.api.letsencrypt.org/directory --standalone -d YOUR_DOMAIN --renew-by-default --agree-tos --email YOUR_EMAIL +
+

+ Restart your web server: +

+
+ systemctl restart nginx +
+

+ Now you can navigate to your domain and register an account. The first account becomes the administrator. +

- +