william@DiskStation:/volume1/@appdata/Apache2.4/log$ pwd
/volume1/@appdata/Apache2.4/log
william@DiskStation:/volume1/@appdata/Apache2.4/log$

apt install iptables-persistent
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -s 87.121.72.216 -j ACCEPT
iptables -P INPUT DROP
dpkg-reconfigure iptables-persistent

cat /etc/lighttpd/conf-available/10-vhost.conf

server.modules += ( "mod_openssl" )
 
$SERVER["socket"] == "[2404:9400:213c:6b01:0000:0000:0000:0001]:443" {
        ssl.engine  = "enable"
        ssl.privkey= "/etc/letsencrypt/live/1.mygeekvps.net/privkey.pem"
        ssl.pemfile = "/etc/letsencrypt/live/1.mygeekvps.net/cert.pem"
        ssl.ca-file= "/etc/letsencrypt/live/1.mygeekvps.net/chain.pem"
        ssl.cipher-list = "HIGH"
        server.document-root        = "/var/www/html1"
}
 
$SERVER["socket"] == "[2404:9400:213c:6b01:0000:0000:0000:0002]:443" {
        ssl.engine  = "enable"
        ssl.privkey= "/etc/letsencrypt/live/2.mygeekvps.net/privkey.pem"
        ssl.pemfile = "/etc/letsencrypt/live/2.mygeekvps.net/cert.pem"
        ssl.ca-file= "/etc/letsencrypt/live/2.mygeekvps.net/chain.pem"
        ssl.cipher-list = "HIGH"
        server.document-root        = "/var/www/html2"
}
 
$SERVER["socket"] == "[2404:9400:213c:6b01:0000:0000:0000:0003]:443" {
        ssl.engine  = "enable"
        ssl.privkey= "/etc/letsencrypt/live/3.mygeekvps.net/privkey.pem"
        ssl.pemfile = "/etc/letsencrypt/live/3.mygeekvps.net/cert.pem"
        ssl.ca-file= "/etc/letsencrypt/live/3.mygeekvps.net/chain.pem"
        ssl.cipher-list = "HIGH"
        server.document-root        = "/var/www/html3"
}

iface eth0 inet6 static
address 2404:9400:213c:6b01:0000:0000:0000:0001/128
# use SLAAC to get global IPv6 address from the router
# we may not enable ipv6 forwarding, otherwise SLAAC gets disabled
autoconf 1
accept_ra 2
 
iface eth0 inet6 static
address 2404:9400:213c:6b01:0000:0000:0000:0002/128
# use SLAAC to get global IPv6 address from the router
# we may not enable ipv6 forwarding, otherwise SLAAC gets disabled
autoconf 1
accept_ra 2
 
iface eth0 inet6 static
address 2404:9400:213c:6b01:0000:0000:0000:0003/128
# use SLAAC to get global IPv6 address from the router
# we may not enable ipv6 forwarding, otherwise SLAAC gets disabled
autoconf 1
accept_ra 2

nano /etc/wpa_supplicant/wpa_supplicant-wlo1.conf

ctrl_interface=/run/wpa_supplicant
update_config=1
 
 
network={
        ssid="My SSID"
        psk=4a11d6d1d48bd83ae9f0dc4f804dddc60a91782653fc883c0b9f23c8a2db72ef
}

systemctl enable wpa_supplicant@wlo1.service

mv /etc/network/interfaces /etc/network/interfaces.save

systemctl enable systemd-networkd

nano /etc/systemd/network/lan0.network

[Match]
Name=enp0s3
 
[Network]
DHCP=yes
 
[DHCP]
ClientIdentifier=mac

systemctl start systemd-networkd

amavisd-new genrsa /var/lib/dkim/domain.pem 1024
 
chown amavis:amavis /var/lib/dkim/domain.pem
 
chmod 0400 /var/lib/dkim/domain.pem
 
nano /etc/amavis/conf.d/50-user
 
dkim_key("domain", "dkim", "/var/lib/dkim/domain.pem");
 
"domain"  => { d => "domain", a => 'rsa-sha256', ttl => 10*24*3600 },
 
systemctl restart amavis
 
amavisd-new showkeys
 
amavisd-new testkeys