Sovereign是一套Ansible腳本，可用于完全基于開(kāi)源軟件來(lái)構(gòu)建和維護(hù)自己的個(gè)人云，因此您可以控制一切。如果您以前從未使用過(guò)Ansible，您可能會(huì)發(fā)現(xiàn)這些腳本很有用，因?yàn)樗鼈冋故玖嗽摴ぞ叩墓δ堋?/p>

Sovereign在提供合理的安全性和低維護(hù)成本的同時(shí)提供有用的云服務(wù)。 每隔幾周使用它來(lái)設(shè)置服務(wù)器，SSH，但大多數(shù)情況下都不會(huì)使用它。

目前提供的服務(wù)：

• IMAP?over SSL via?Dovecot, complete with full text search provided by?Solr.
• POP3?over SSL, also via Dovecot
• SMTP?over SSL via Postfix, including a nice set of?DNSBLs?to discard spam before it ever hits your filters.
• Virtual domains for your email, backed by?PostgreSQL.
• Spam fighting via?Rspamd.
• Mail server verification using?DKIM?and?DMARC?so the Internet knows your mailserver is legit.
• Secure on-disk storage for email and more via?EncFS.
• Webmail via?Roundcube.
• Mobile push notifications via?Z-Push.
• Email client?automatic configuration.
• Jabber/XMPP?instant messaging via?Prosody.
• An RSS Reader via?Selfoss.
• CalDAV?and?CardDAV?to keep your calendars and contacts in sync, via?ownCloud.
• Your own private storage cloud via?ownCloud.
• Your own VPN server via?OpenVPN.
• An IRC bouncer via?ZNC.
• Monit?to keep everything running smoothly (and alert you when it’s not).
• collectd?to collect system statistics.
• Web hosting (ex: for your blog) via?Apache.
• Firewall management via?Uncomplicated Firewall (ufw).
• Intrusion prevention via?fail2ban?and rootkit detection via?rkhunter.
• SSH configuration preventing root login and insecure password authentication
• RFC6238?two-factor authentication compatible with?Google Authenticator?and various hardware tokens
• Nightly backups to?Tarsnap.
• Git hosting via?cgit?and?gitolite.
• Read-it-later via?Wallabag