snac.8 9.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324
  1. .Dd $Mdocdate$
  2. .Dt SNAC 8
  3. .Os
  4. .Sh NAME
  5. .Nm snac
  6. .Nd snac administration
  7. .Sh DESCRIPTION
  8. The
  9. .Nm
  10. daemon processes messages from other servers in the Fediverse
  11. using the ActivityPub protocol.
  12. .Pp
  13. This is the admin manual. For user operation, see
  14. .Xr snac 1 .
  15. For file and data formats, see
  16. .Xr snac 5 .
  17. .Ss Building and Installation
  18. A C compiler must be installed in the system, as well as the development
  19. headers and libraries for OpenSSL and curl. To build
  20. .Nm ,
  21. run
  22. .Bd -literal -offset indent
  23. make
  24. .Ed
  25. .Pp
  26. And, after that, run as root
  27. .Bd -literal -offset indent
  28. make install
  29. .Ed
  30. .Ss Database Initialization
  31. Once
  32. .Nm
  33. is properly installed on the system, designate a directory where
  34. the server and user data are to be stored. This directory
  35. must not exist yet.
  36. .Nm
  37. must always be run as a regular user; you can create one for
  38. it or use your own. To initialize the database, execute
  39. .Bd -literal -offset indent
  40. snac init $HOME/snac-data
  41. .Ed
  42. .Pp
  43. A small set of questions will be asked regarding the installation,
  44. specially the host name it will run under, the local network address
  45. and port
  46. .Nm
  47. will listen to, the optional path prefix and possibly other things.
  48. .Pp
  49. You can launch the
  50. .Nm
  51. process by running
  52. .Bd -literal -offset indent
  53. snac httpd $HOME/snac-data
  54. .Ed
  55. .Pp
  56. Use a web browser to connect to the specified address and port. You
  57. should see a greeting page.
  58. .Pp
  59. Log messages are sent to the standard error stream. By default, only
  60. relevant information is written there. You can increase the debugging
  61. level by editing the 'dbglevel' field in the
  62. .Pa server.json
  63. file or by setting a numeric value between 0 and 3 to the DEBUG
  64. environment variable, see below.
  65. .Pp
  66. If you operate a Linux systemd-enabled system or OpenBSD, there are
  67. startup scripts and configuration data in the
  68. .Pa examples
  69. directory.
  70. For other operating systems, please read the appropriate documentation
  71. on how to install a daemon as a non-root service.
  72. .Ss Upgrading to a new version
  73. Sometimes, the database disk layout changes between versions. If there
  74. is such a change,
  75. .Nm
  76. will refuse to run and require an upgrade. Do this by running
  77. .Bd -literal -offset indent
  78. snac upgrade $HOME/snac-data
  79. .Ed
  80. .Pp
  81. .Ss Server Setup
  82. .Pp
  83. An http server with TLS and proxying support must already be
  84. installed and configured.
  85. .Nm
  86. runs as a daemon and listens on a TCP/IP socket, preferrably
  87. on a local interface. It can serve the full domain or only
  88. a directory. The http server must be configured to route to the
  89. .Nm
  90. socket all related traffic and also the webfinger standard
  91. address. The Host header must be propagated.
  92. See the examples below.
  93. .Ss Adding Users
  94. .Pp
  95. Users must be created from the command line.
  96. You can do it by running
  97. .Bd -literal -offset indent
  98. snac adduser $HOME/snac-data
  99. .Ed
  100. .Pp
  101. All needed data will be prompted for. There is no artificial limit
  102. on the number of users that can be created.
  103. .Ss Customization
  104. The
  105. .Pa server.json
  106. configuration file allows some behaviour tuning:
  107. .Bl -tag -width tenletters
  108. .It Ic host
  109. The host name.
  110. .It Ic prefix
  111. The URL path prefix.
  112. .It Ic address
  113. The listen network address.
  114. .It Ic port
  115. The list network port.
  116. .It Ic dbglevel
  117. The debug level. An integer value, being 0 the less verbose (the default).
  118. .It Ic layout
  119. The disk storage layout version. Never touch this.
  120. .It Ic queue_retry_max
  121. Messages sent out are stored in a queue. If the posting of a messages fails,
  122. it's re-enqueued for later. This integer configures the maximum count of
  123. times the sending will be retried.
  124. .It Ic queue_retry_minutes
  125. The number of minutes to wait before the failed posting of a message is
  126. retried. This is not linear, but multipled by the number of retries
  127. already done.
  128. .It Ic max_timeline_entries
  129. This is the maximum timeline entries shown in the web interface.
  130. .It Ic timeline_purge_days
  131. Entries in the timeline older that this number of days are purged.
  132. If you don't want any timeline purging and enjoy your data drives
  133. fill up with old crap and finally burst in flames, you can disable
  134. purging by setting this to 0.
  135. .It Ic local_purge_days
  136. Same as before, but for the user-generated entries in the local timeline.
  137. .It Ic css_urls
  138. This is a list of URLs to CSS files that will be inserted, in this order,
  139. in the HTML before the user CSS. Use these files to configure the global
  140. site layout.
  141. .It Ic disable_cache
  142. If set to true, timeline caching is not done. This is only useful for
  143. debugging purposes; don't enable it unless you know what do you want, as
  144. it makes everything slower.
  145. .El
  146. .Pp
  147. You must restart the server to make effective these changes.
  148. .Pp
  149. If a file named
  150. .Pa greeting.html
  151. is present in the server base directory, it will be returned whenever
  152. the base URL of the server is requested. Fill it with whatever
  153. information about the instance you want to supply to people
  154. visiting the server, like sign up requirements, site policies
  155. and such. The special %userlist% mark in the file will cause
  156. the list of users in this instance to be inserted.
  157. .Pp
  158. Users can change a bit of information about themselves from the
  159. web interface. See
  160. .Xr snac 1
  161. for details. Further, every user has a private CSS file in their
  162. .Pa static/style.css
  163. that can be modified to suit their needs. This file contains
  164. a copy of the
  165. .Pa style.css
  166. file in the server root and it's inserted into the HTML output.
  167. It's not easily accesible from the web interface to avoid users
  168. shooting themselves in the foot by destroying everything.
  169. .Ss Old Data Purging
  170. From version 2.06, there is no longer a need to add a special
  171. cron job for purging old data, as this is managed internally.
  172. .Ss ActivityPub Support
  173. These are the following activities and objects that
  174. .Nm
  175. supports:
  176. .Bl -tag -width tenletters
  177. .It Vt Follow
  178. Complete support, on input and output.
  179. .It Vt Undo
  180. For
  181. .Vt Follow ,
  182. .Vt Like
  183. and
  184. .Vt Announce
  185. objects, on input and output.
  186. .It Vt Create
  187. For
  188. .Vt Note
  189. objects, on input and output.
  190. .It Vt Accept
  191. For
  192. .Vt Follow
  193. objects, on input and output.
  194. .It Vt Like
  195. For
  196. .Vt Note
  197. objects, on input and output.
  198. .It Vt Announce
  199. For
  200. .Vt Note
  201. objects, on input and output.
  202. .It Vt Update
  203. For
  204. .Vt Person
  205. objects, on input and output. Support for updating
  206. .Vt Note
  207. objects will probably be added in the future.
  208. .It Vt Delete
  209. Supported for
  210. .Vt Note
  211. and
  212. .Vt Tomsbtone
  213. objects on input, and for
  214. .Vt Note
  215. objects on output.
  216. .El
  217. .Pp
  218. The rest of activities and objects are dropped on input.
  219. .Pp
  220. There is partial support for
  221. .Vt OrderedCollection
  222. objects in the
  223. .Pa /outbox
  224. (with the last 20 entries of the local timeline shown). No pagination
  225. is supported. Intentionally, the
  226. .Pa /followers
  227. and
  228. .Pa /following
  229. paths return empty lists.
  230. .Ss Migrating from Mastodon
  231. User migration from different Fediverse instances is a pain in the ass
  232. that has been implemented everywhere as a kludgy afterthought. There is
  233. not much that can be done, other than importing the list of people you
  234. follow to your new
  235. .Nm
  236. account.
  237. .Pp
  238. To do this, download the user's list of accounts being followed (in CSV
  239. format) from the Mastodon web interface and execute this:
  240. .Bd -literal -offset indent
  241. awk -F, 'NR > 1 { print $1 }' /path/to/following_accounts.csv | \\
  242. xargs -n 1 snac follow $SNAC_BASEDIR $SNAC_USER
  243. .Ed
  244. .Ss Other Considerations
  245. .Nm
  246. stores all the messages it receives as JSON files, which are usually
  247. bloated and filled with redundant information. Using a filesystem with
  248. file compression enabled (like btrfs or zfs) will probably be a good
  249. choice to store the
  250. .Nm
  251. database into.
  252. .Sh ENVIRONMENT
  253. .Bl -tag -width Ds
  254. .It Ev DEBUG
  255. Overrides the debugging level from the server 'dbglevel' configuration
  256. variable. Set it to an integer value. The higher, the deeper in meaningless
  257. verbiage you'll find yourself into.
  258. .El
  259. .Sh EXAMPLES
  260. You want to install the
  261. .Nm
  262. Fediverse daemon in the host example.com, that is correctly configured
  263. with a valid TLS certificate and running the nginx httpd server.
  264. The service will be installed under the
  265. .Pa fedi
  266. location. Two users, walter and jessie, will be hosted in the system.
  267. Their Fediverse presence addresses will be https://example.com/fedi/walter
  268. and https://example.com/fedi/jesse, respectively. They will be known
  269. in the Fediverse as @walter@example.com and @jesse@example.com. The
  270. .Nm
  271. daemon will run as the user snacusr in the system and listen to the
  272. localhost:8001 network socket. All data will be stored in the
  273. .Pa /home/snacusr/fedidata
  274. directory.
  275. .Pp
  276. Log into the system as snacusr and execute:
  277. .Bd -literal -offset indent
  278. snac init /home/snacusr/fedidata
  279. .Ed
  280. .Pp
  281. Answer "example.com" to the host name question, "/fedi" to the path
  282. prefix question, "localhost" to the address and "8001" to the port.
  283. .Pp
  284. Create the users
  285. .Bd -literal -offset indent
  286. snac adduser /home/snacusr/fedidata walter
  287. snac adduser /home/snacusr/fedidata jesse
  288. .Ed
  289. .Pp
  290. Answer the questions with reasonable values.
  291. .Pp
  292. Execute the server:
  293. .Bd -literal -offset indent
  294. snac httpd /home/snacusr/fedidata
  295. .Ed
  296. .Pp
  297. Edit the nginx configuration and add the following snippet to the
  298. example.com server section:
  299. .Bd -literal -offset indent
  300. location /.well-known/webfinger {
  301. proxy_pass http://localhost:8001;
  302. proxy_set_header Host $http_host;
  303. }
  304. location /fedi {
  305. proxy_pass http://localhost:8001;
  306. proxy_set_header Host $http_host;
  307. }
  308. .Ed
  309. .Pp
  310. Restart the nginx daemon and connect to https://example.com/fedi/walter.
  311. The empty, default screen will be shown. Enter the admin section with the
  312. credentials defined for this user. Search people, start following
  313. them, engage in arid discussions and generally enjoy the frustrating
  314. experience of Social Media.
  315. .Sh SEE ALSO
  316. .Xr snac 1 ,
  317. .Xr snac 5
  318. .Sh AUTHORS
  319. .An grunfink @grunfink@comam.es
  320. .Sh LICENSE
  321. See the LICENSE file for details.
  322. .Sh CAVEATS
  323. JSON files are fragile when modified by hand. Take care.