Hack call: 14:00 UTC

• Running functional tests in Salsa CI (Joseph)

  • https://salsa.debian.org/freedombox-team/freedombox/-/merge_requests/2224

  • https://cryptpad.fr/pad/#/2/pad/view/u+wSDfAZG-RVmIgxAcLNDm530azTDLHB9m7JDfISsb0/

• Janus RTP ports (James)
  • Needs a range of UDP ports, similar to Coturn.
  • Choose another high-value range, different from Coturn.
• HTTPs redirect globally (sunil)
  • Exception for Tor Onion service
  • Cockpit requires HTTPS even for .onion
• Removing files from /etc/ (sunil)
  • Files that are not supposed to be modified.
  • Move into /usr, symlink to /etc.

  • ConfigurationFile component to create symlinks only when app is enabled.

  • Only files installed by freedombox package.
• Wordpress: Use of Google fonts CDN
  • Individual themes that bring in the use of Google CDN

  • https://salsa.debian.org/debian/wordpress/-/blob/master/debian/README.debian#L29

  • https://wordpress.org/plugins/disable-remove-google-fonts/

• Email server
  • Add to description the problem with domain names
  • Add to description/manual the problem with ISPs port blocking
    • Hetzner and AWS have a process for enabling
  • Enable for all users
• Provoxy exposed to the internet can't be exposed

  • https://salsa.debian.org/freedombox-team/freedombox/-/issues/2208

  • Warn users when using DMZ with only internal networks