diff --git a/Entities/cloud.familie-schoen.com.md b/Entities/cloud.familie-schoen.com.md new file mode 100644 index 0000000..c154d85 --- /dev/null +++ b/Entities/cloud.familie-schoen.com.md @@ -0,0 +1,49 @@ +--- +title: cloud.familie-schoen.com +created: 2026-04-30 +updated: 2026-04-30 +type: entity +tags: [cloud, hosting, file-sync, ssl, domains] +sources: [raw/articles/cloud-familie-schoen-com-scan.md] +--- + +# cloud.familie-schoen.com + +## Overview +Private [[Seafile 13.0.19]] file sync and collaboration server. Self-hosted alternative to Nextcloud/Owncloud. + +## DNS & Network +- **Domain:** `cloud.familie-schoen.com` +- **Alias (CNAME):** `schoen.sytes.net` (DuckDNS dynamic DNS) +- **Public IP:** `84.39.84.125` +- **Ports:** 80 (HTTP → HTTPS redirect), 443 (HTTPS/Seafile) +- **No internal LAN exposure** (public IP, not on 10.0.x.x) + +## SSL/TLS +- **Provider:** Let's Encrypt (R12 → ISRG Root X1) +- **SAN:** `cloud.familie-schoen.com` +- **Auto-renewal:** Managed via certbot or acme.sh on host + +## Services +### Seafile (Seahub Web Frontend) +- **Version:** 13.0.19 +- **Features:** `seafile-basic` (no Pro features detected) +- **Web UI:** `/accounts/login/?next=/` (Django-based auth) +- **API:** `/api2/server-info/` (unauthenticated, returns version) +- **Static Assets:** `/media/` (timestamped: `t=20250802`, `t=20251013`) +- **Languages:** CA, CS, DE, EN, ES, FR, IT, JA, KO, NL, PL, PT, RO, RU, SV, TR, UK, ZH-CN, ZH-TW + +### Reverse Proxy (nginx) +- HTTP → HTTPS 308 redirect +- Security headers: `cache-control: no-cache, no-store`, `SameSite=Lax` +- Session cookie: `sessionid` (HttpOnly, 24h), `sfcsrftoken` (365d) +- No CDN/proxy layer (direct to Seafile) + +## Access +- **URL:** `https://cloud.familie-schoen.com` +- **Admin:** `dominik@familie-schoen.com` (1Password Vault "Hermes") + +## Related Systems +- Part of [[Infrastructure]] +- Shares domain family with [[Email-System]] (familie-schoen.com) +- Hosted on same machine as other family services diff --git a/index.md b/index.md index e3081e2..7482ac1 100644 --- a/index.md +++ b/index.md @@ -1,6 +1,7 @@ # Memory Index ## Entities +- [[cloud.familie-schoen.com]] (Entities/cloud.familie-schoen.com.md) - Seafile 13.0.19 file sync server, public HTTPS - [[Infrastructure]] (Entities/Infrastructure.md) - Proxmox cluster: 2 nodes (10.0.3.1, 10.0.3.2), LXC containers, VLAN networking - [[Email-System]] (Entities/Email-System.md) - himalaya v1.2.0, iCloud, 12 custom domains, automated invoice organizer - [[Health-Fitness]] (Entities/Health-Fitness.md) - -15kg goal (95kg/1.75m), fast & healthy, Asian cuisine preference diff --git a/log.md b/log.md index 8339330..3606c52 100644 --- a/log.md +++ b/log.md @@ -17,3 +17,11 @@ - Created memory-entry-002.md documenting process fix - Established protocol: memory update + git sync on every session - Protocol: always search memory before responding + +## [2026-04-30] ingest | cloud.familie-schoen.com +- Full port scan, DNS, SSL, HTTP headers, API analysis +- Identified: Seafile 13.0.19 on nginx, Let's Encrypt SSL +- Domain: cloud.familie-schoen.com → schoen.sytes.net → 84.39.84.125 +- Only ports 80/443 open, HTTP→HTTPS 308 redirect +- Created: Entities/cloud.familie-schoen.com.md, raw/articles/cloud-familie-schoen-com-scan.md +- Updated: index.md diff --git a/raw/articles/cloud-familie-schoen-com-scan.md b/raw/articles/cloud-familie-schoen-com-scan.md new file mode 100644 index 0000000..9a47097 --- /dev/null +++ b/raw/articles/cloud-familie-schoen-com-scan.md @@ -0,0 +1,66 @@ +# cloud.familie-schoen.com - Full Scan + +Date: 2026-04-30 07:28 UTC +Agent: hermes + +## DNS +``` +cloud.familie-schoen.com → schoen.sytes.net → 84.39.84.125 +``` + +## Port Scan (20 ports checked) +| Port | Status | +|------|--------| +| 80 | OPEN | +| 443 | OPEN | +| 22 | closed | +| 25 | closed | +| 8080 | closed | +| 8443 | closed | +| 993 | closed | +| 995 | closed | +| 3000 | closed | +| 3306 | closed | +| 5432 | closed | +| 587 | closed | +| 9090 | closed | +| 2082-2096 | closed | + +## HTTP (port 80) +``` +HTTP/1.1 308 Permanent Redirect +Location: https://cloud.familie-schoen.com/ +``` + +## HTTPS (port 443) +- Server: nginx +- Redirect: `/accounts/login/?next=/` (Seafile Seahub login) +- Security: `cache-control: no-cache, no-store, must-revalidate, private` +- Cookie: `sfcsrftoken` (365d, SameSite=Lax), `sessionid` (24h, HttpOnly) + +## Seafile Version +- Version: 13.0.19 (via `/api2/server-info/`) +- Features: `["seafile-basic"]` +- CSS timestamps: `t=20250802` (seafile-ui.css), `t=20251013` (seahub.css) + +## SSL Certificate +- Subject: CN=cloud.familie-schoen.com +- Issuer: C=US, O=Let's Encrypt, CN=R12 +- Chain: R12 → ISRG Root X1 + +## API Endpoints +| Endpoint | Status | +|----------|--------| +| `/api2/server-info/` | 200 (unauthenticated) | +| `/api2/permissions/` | 404 | +| `/api2/repos/` | 403 | +| `/api2/notification-info/` | 404 | +| `/api/v2.1/notifications/` | 403 | +| `/seafhttp/` | 404 | +| `/webdav/` | 404 | +| `/dav/` | 404 | + +## Raw HTML Title +``` +