diff --git a/HowtoSecureMailServer.page b/HowtoSecureMailServer.page new file mode 100644 index 0000000..fb50b49 --- /dev/null +++ b/HowtoSecureMailServer.page @@ -0,0 +1,18 @@ + +Notes... + +``` +# dd if=/dev/zero of=/var.img bs=1M count=36000 +# losetup /dev/loop0 /var.img +# cryptsetup luksFormat --hash sha256 --key-size=512 /dev/loop0 +# cryptsetup luksOpen /dev/loop0 crypted-var +# mkfs.ext4 -LVAR /dev/mapper/crypted-var +# mount /dev/mapper/crypted-var /mnt/ +# ### stop your service using /var, rsyslog, etc. +# rsync -avh --progress /var/ /mnt/ +# umount /mnt +# echo "crypted-var /var.img none luks" >> /etc/crypttab +# echo "/dev/mapper/crypted-var /var ext4 defaults 0 2" >> /etc/fstab +# reboot +# go to scaleway console, and type your passphrase! +``` \ No newline at end of file