berkeleylug:digital_resources
This is an old revision of the document!
Digital Resources
(assets) of:
BerkeleyLUG
Domains:
berkeleylug.com (primary) registrant/owner: Michael Paoli - (transferred 2019-03-04) Registry Expiry Date: 2020-01-20T05:05:36Z
berkeleylug.org (alternate - redirects(?) to primary - we may let this one expire, etc. Registry Expiry Date: 2019-05-17T04:39:28) registrant/owner: Michael Paoli - (transferred 2019-03-04)
DNS:
$ TZ=GMT0 date -Iseconds && (for d in berkeleylug.com. berkeleylug.org.; do NS=$(dig +short "$d" NS | sort -R | head -n 1); n=$(dig +short "$NS" A "$NS" AAAA | sort -R | head -n 1); for s in '' '*.' calendar. docs. mail. sites. temp. www.; do for t in A AAAA CNAME SOA NS MX TXT SPF ANY; do dig @"$n" +norecurse +noall +answer "$s$d" "$t"; done; done; done) | grep '^[^ ]*[Bb][Ee][Rr][Kk][Ee][Ll][Ee][Yy][Ll][Uu][Gg]\.' | sort -u
2019-03-29T05:09:35+00:00
*.berkeleylug.com. 14400 IN CNAME berkeleylug.com.
berkeleylug.com. 14400 IN MX 10 aspmx.l.google.com.
berkeleylug.com. 14400 IN MX 20 alt1.aspmx.l.google.com.
berkeleylug.com. 14400 IN MX 30 alt2.aspmx.l.google.com.
berkeleylug.com. 14400 IN MX 40 aspmx2.googlemail.com.
berkeleylug.com. 14400 IN MX 50 aspmx3.googlemail.com.
berkeleylug.com. 21600 IN NS ns-cloud-a1.googledomains.com.
berkeleylug.com. 21600 IN NS ns-cloud-a2.googledomains.com.
berkeleylug.com. 21600 IN NS ns-cloud-a3.googledomains.com.
berkeleylug.com. 21600 IN NS ns-cloud-a4.googledomains.com.
berkeleylug.com. 21600 IN SOA ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 6 21600 3600 1209600 300
berkeleylug.com. 300 IN A 192.0.78.24
berkeleylug.com. 300 IN A 192.0.78.25
berkeleylug.org. 21600 IN NS ns-cloud-b1.googledomains.com.
berkeleylug.org. 21600 IN NS ns-cloud-b2.googledomains.com.
berkeleylug.org. 21600 IN NS ns-cloud-b3.googledomains.com.
berkeleylug.org. 21600 IN NS ns-cloud-b4.googledomains.com.
berkeleylug.org. 21600 IN SOA ns-cloud-b1.googledomains.com. dns-admin.google.com. 10 21600 3600 1209600 300
berkeleylug.org. 3600 IN A 216.239.32.21
berkeleylug.org. 3600 IN A 216.239.34.21
berkeleylug.org. 3600 IN A 216.239.36.21
berkeleylug.org. 3600 IN A 216.239.38.21
berkeleylug.org. 3600 IN AAAA 2001:4860:4802:32::15
berkeleylug.org. 3600 IN AAAA 2001:4860:4802:34::15
berkeleylug.org. 3600 IN AAAA 2001:4860:4802:36::15
berkeleylug.org. 3600 IN AAAA 2001:4860:4802:38::15
calendar.berkeleylug.com. 3600 IN CNAME ghs.googlehosted.com.
docs.berkeleylug.com. 3600 IN CNAME ghs.googlehosted.com.
mail.berkeleylug.com. 3600 IN CNAME ghs.googlehosted.com.
sites.berkeleylug.com. 3600 IN CNAME ghs.googlehosted.com.
temp.berkeleylug.com. 300 IN A 198.144.194.238
temp.berkeleylug.com. 300 IN AAAA 2001:470:1f05:19e::4
www.berkeleylug.com. 14400 IN CNAME berkeleylug.com.
www.berkeleylug.org. 3600 IN CNAME ghs.googlehosted.com.
$
.org not primary:
$ curl -s -I http://berkeleylug.org/ | sed -ne '/^HTTP/p;/^[Ll]ocation:/p'
HTTP/1.1 301 Moved Permanently
Location: http://berkeleylug.com/
$ curl -s -I http://www.berkeleylug.org/ | sed -ne '/^HTTP/p;/^[Ll]ocation:/p'
HTTP/1.1 301 Moved Permanently
Location: http://berkeleylug.com/
$ curl -s -I https://berkeleylug.org/ | sed -ne '/^HTTP/p;/^[Ll]ocation:/p'
HTTP/2 301
location: http://berkeleylug.com/
$ curl -s -I https://www.berkeleylug.org/ | sed -ne '/^HTTP/p;/^[Ll]ocation:/p'
HTTP/2 301
location: http://berkeleylug.com/
$
@berkeleylug.org does not accept email (no MX, A/AAAA times out on TCP port 25 even from known good email sender IP)
canonical/primary is: https://berkeleylug.com/
$ curl -I http://berkeleylug.com/ 2>&1 | grep -i -e '^HTTP/' -e '^Location: ' -e '^curl:'
HTTP/1.1 301 Moved Permanently
Location: https://berkeleylug.com/
$ curl -I http://www.berkeleylug.com/ 2>&1 | grep -i -e '^HTTP/' -e '^Location: ' -e '^curl:'
HTTP/1.1 301 Moved Permanently
Location: https://www.berkeleylug.com/
$ curl -I https://www.berkeleylug.com/ 2>&1 | grep -i -e '^HTTP/' -e '^Location: ' -e '^curl:'
HTTP/2 301
location: https://berkeleylug.com/
$ curl -I https://berkeleylug.com/ 2>&1 | grep -i -e '^HTTP/' -e '^Location: ' -e '^curl:'
HTTP/2 200
$
TLS(/"SSL") - Web - handful of (separate) Web certs only*:
$ nmap -Pn -r -sT -p 443 --script=ssl-cert berkeleylug.com calendar.berkeleylug.com docs.berkeleylug.com mail.berkeleylug.com sites.berkeleylug.com www.berkeleylug.com berkeleylug.org www.berkeleylug.org | perl -e 'while(<>){print if /Not valid after: /o; if(/^\| Subject Alternative Name: /){chomp; s/DNS:(?:(?i)(?![^, ]*berkeleylug\.))[^, ]+(?:, |$)//go; s/, ?$//o; print "$_\n";};};'
| Subject Alternative Name: DNS:berkeleylug.com
| Not valid after: 2019-04-28T02:29:40
| Subject Alternative Name: DNS:www.berkeleylug.com
| Not valid after: 2019-06-01T14:37:18
| Subject Alternative Name: DNS:berkeleylug.org
| Not valid after: 2019-06-03T05:26:39
| Subject Alternative Name: DNS:www.berkeleylug.org
| Not valid after: 2019-06-03T05:22:56
$
*ignoring domains that WordPress.com lumps in there that aren't at all BerkeleyLUG
########################################################################
various bits to test on temp.berkeleylug.com - to presumably later be
berkeleylug.com
Created key and obtained (non-Google) CA signed cert also covering:
*.berkeleylug.com,berkeleylug.com,*.berkeleylug.org,berkeleylug.org expires: 2019-06-07T02:07:58Z
$ dig +noall +answer +nottl temp.berkeleylug.com. A temp.berkeleylug.com. AAAA
temp.berkeleylug.com. IN A 198.144.194.238
temp.berkeleylug.com. IN AAAA 2001:470:1f05:19e::4
$ </dev/null openssl s_client -servername temp.berkeleylug.com -starttls smtp -connect 198.144.194.238:25 2>>/dev/null | sed -ne '/^-----BEGIN CERTIFICATE-----$/,/^-----END CERTIFICATE-----$/p' | openssl x509 -text -noout | sed -ne '/Not After : /p;/Subject Alternative Name:/{N;p;q;}'
Not After : May 22 11:41:24 2019 GMT
X509v3 Subject Alternative Name:
DNS:*.balug.org, DNS:*.lists.balug.org, DNS:balug.org
$
... install the newer cert for SMTP (will likely end up needed for at
least postmaster@berkeleylug.com, for WordPress site to, e.g. send
user password resets, etc.
# pwd -P
/etc/exim4/eximconfig/config
# ls -ld tls_c*.pem
lrwxrwxrwx 1 root root 53 Sep 17 2017 tls_certificate_private.pem -> ../../../letsencrypt/live/lists.balug.org/privkey.pem
lrwxrwxrwx 1 root root 55 Sep 17 2017 tls_certificate_public.pem -> ../../../letsencrypt/live/lists.balug.org/fullchain.pem
# ln -sf ../../../letsencrypt/live/berkeleylug.com/privkey.pem tls_certificate_private.pem
# ln -sf ../../../letsencrypt/live/berkeleylug.com/fullchain.pem tls_certificate_public.pem
# ls -lLd tls_c*.pem
-r--r----- 1 root Debian-exim 3272 Mar 8 19:03 tls_certificate_private.pem
-r--r--r-- 1 root root 4033 Mar 8 19:08 tls_certificate_public.pem
# systemctl reload exim4.service
#
$ </dev/null openssl s_client -servername temp.berkeleylug.com -starttls smtp -connect 198.144.194.238:25 2>>/dev/null | sed -ne '/^-----BEGIN CERTIFICATE-----$/,/^-----END CERTIFICATE-----$/p' | openssl x509 -text -noout | sed -ne '/Not After : /p;/Subject Alternative Name:/{N;p;q;}'
Not After : Jun 7 02:07:58 2019 GMT
X509v3 Subject Alternative Name:
DNS:*.balug.org, DNS:*.berkeleylug.com, DNS:*.berkeleylug.org, DNS:*.lists.balug.org, DNS:balug.org, DNS:berkeleylug.com, DNS:berkeleylug.org
$
########################################################################
robots.txt:
$ TZ=GMT0 date -Iseconds && curl -s https://berkeleylug.com/robots.txt
2019-03-05T15:54:12+00:00
# If you are regularly crawling WordPress.com sites, please use our firehose to receive real-time push updates instead.
# Please see https://developer.wordpress.com/docs/firehose/ for more details.
Sitemap: https://berkeleylug.com/sitemap.xml
Sitemap: https://berkeleylug.com/news-sitemap.xml
User-agent: *
Disallow: /wp-admin/
Allow: /wp-admin/admin-ajax.php
Disallow: /wp-login.php
Disallow: /wp-signup.php
Disallow: /press-this.php
Disallow: /remote-login.php
Disallow: /activate/
Disallow: /cgi-bin/
Disallow: /mshots/v1/
Disallow: /next/
Disallow: /public.api/
# This file was generated on Mon, 19 Nov 2018 07:12:09 +0000
$
web site managed via: http://berkeleylug.wordpress.com/
Looks like the WordPress.com hosting is likely presently the $4.00/month billed yearly plan, notably includes:
custom domain
Remove WordPress.com Ads
Whereas the free tier doesn't include those "features"
See: https://wordpress.com/pricing/
export/import, see: https://move.wordpress.com/exportimport-content/ (2019-02-28 - Michael Paoli verified his access to export, and exported and saved (backup!))
"List" / Google Group: https://groups.google.com/forum/#!forum/berkeleylug
Owners: Jack Deslippe, admin@berkeleylug.com, Michael Paoli, Aaron Cohen, Grant Bowman (@gmail.com)
Managers: Grant Bowman (@berkeleylug.com)
IRC: freenode.net:6697 #berkeleylug ChanServ: grantbow (Grant Bowman)
BerkeleyLUG calendar on Google calendars:
https://calendar.google.com/calendar/embed?src=0eeqsdloeuvb2vbc2k0gk3ij9s%40group.calendar.google.com&ctz=America%2FLos_Angeles
Acccess: Make changes and manage sharing:
Jack Deslippe
Michael Paoli
Grant Bowman
Not that this calendar mostly only exists for historical purposes, and has mostly been superseded by:
SF Bay Area Open Source/Linux Events https://calendar.google.com/calendar/embed?src=caj9iea2ol69b7n2uqdek4ocso%40group.calendar.google.com&ctz=America%2FLos_Angeles
Which Michael Paoli (and many other folks) have access to Make changes to events.
Fosstodon instance on Mastodon
https://fosstodon.org/@berkeleylug
Creator and owner: Aaron Cohen
Twitter(?):
https://twitter.com/berkeleylug
https://berkeleylug.com/2013/08/23/wordpress/#comment-1884
(likely Grant Bowman has access/control on the Twitter bits)
Facebook (Jack and/or Grant)
berkeleylug/digital_resources.1553836272.txt.bz2 · Last modified: 2019-03-29T05:11:12+0000 by michael_paoli