🥇Ukusasazwa kwezikhululo zeofisi zeZextras/Zimbra eYandex.Cloud

Intshayelelo

Ukuphucula iziseko zeofisi kunye nokuthunyelwa kweendawo ezintsha zokusebenza ngumngeni omkhulu kwiinkampani zazo zonke iintlobo kunye nobukhulu. Eyona ndlela ilungileyo yeprojekthi entsha kukuqesha izixhobo efini kunye nokuthenga iilayisensi ezinokusetyenziswa zombini kumnikezeli nakwiziko lakho ledatha. Esinye isisombululo semeko enjalo Zextras Suite, ekuvumela ukuba wenze iqonga lentsebenziswano kunye nonxibelelwano lwenkampani yeshishini zombini kwindawo yelifu nakwisiseko sakho.

Isisombululo senzelwe iiofisi zaso nasiphi na isayizi kwaye sineemeko ezimbini eziphambili zokusasazwa: ukuba uneebhokisi zeposi eziya kuthi ga kwi-3000 lamawaka kwaye akukho mfuneko ziphezulu zokunyamezela impazamo, ungasebenzisa ufakelo lwe-server enye, kunye ne-multi-server yokufakela ukhetho. ixhasa ukusebenza okuthembekileyo nokuphendulayo kwamashumi kunye namakhulu amawaka eebhokisi zeposi. Kuzo zonke iimeko, umsebenzisi ufumana ukufikelela kwi-imeyile, amaxwebhu kunye nemiyalezo ngokusebenzisa ujongano lwewebhu olunye ukusuka kwindawo yokusebenza eqhuba nayiphi na i-OS ngaphandle kokufaka kunye nokuqwalasela isoftware eyongezelelweyo, okanye ngezicelo zeselula ze-iOS kunye ne-Android. Kuyenzeka ukusebenzisa i-Outlook neThunderbird eqhelekileyo.

Ukuhambisa iprojekthi, iqabane leZextras - SVZ wakhetha i-Yandex.Cloud ngenxa yokuba i-architecture yayo ifana ne-AWS kwaye kukho inkxaso ye-S3 yokugcina ehambelanayo, eya kunciphisa iindleko zokugcina i-imeyile enkulu, imiyalezo kunye namaxwebhu kunye nokwandisa ukunyamezela impazamo yesisombululo.

Kwimekobume yeYandex.Cloud, izixhobo ezisisiseko zokulawula umatshini zisetyenziselwa ukufaka iseva enye "Compute Cloud" kunye nezakhono zolawulo lwenethiwekhi yenyani "Ilifu eliyimfihlo labucala". Ufakelo lwe-multi-server, ngaphezu kwezixhobo ezichaziweyo, kuyimfuneko ukusebenzisa iteknoloji "Iqela lokubeka", ukuba kuyimfuneko (kuxhomekeke kumlinganiselo wenkqubo) - kwakhona "Amaqela oMzekelo", kunye ne-balancer yenethiwekhi Yandex Load Balancer.

Ukugcinwa kwezinto ezihambelana ne-S3 Yandex Into yokugcina ingasetyenziswa kuzo zombini iinketho zokufakela, kwaye inokudityaniswa kwiinkqubo ezibekwe kwindawo yogcino lwezoqoqosho kunye nokunyamezela iimpazamo kwidatha yeseva yemeyile kwiYandex.Cloud.

Ufakelo lweseva enye, kuxhomekeke kwinani labasebenzisi kunye/okanye iibhokisi zeposi, oku kulandelayo kuyafuneka: kwiseva ephambili 4-12 vCPU, 8-64 GB vRAM (amaxabiso athile e-vCPU kunye ne-vRAM axhomekeke kwinani. yeebhokisi zeposi kunye nomthwalo onguwo), ubuncinci i-80 GB yedisk yenkqubo yokusebenza kunye nezicelo, kunye nesithuba esongezelelweyo sedisk yokugcina iposi, izalathisi, iilog, njl. utshintsho oluguquguqukayo ngexesha lokusebenza kwenkqubo; kwiiseva ezincedisayo ze-Docs: 2-4 vCPU, 2-16 GB vRAM, i-16 GB disk space (amaxabiso athile omthombo kunye nenani lamaseva axhomekeke kumthwalo wangempela); Ukongezelela, iseva ye-TURN / STUN ingafuneka (imfuno yayo njengomncedisi ohlukeneyo kunye nezixhobo zixhomekeke kumthwalo wangempela). Ufakelo lweeseva ezininzi, inani kunye nenjongo yokudlala indima yoomatshini benyani kunye nezibonelelo ezinikezelwe kubo zimiselwa ngamnye ngokuxhomekeke kwiimfuno zomsebenzisi.

Injongo yenqaku

Inkcazo yokuthunyelwa kwindawo yeYandex.Cloud yeemveliso zeZextras Suite ezisekelwe kwi-server ye-Zimbra yeposi kwi-single-server yokufakela ukhetho. Ukufakwa okubangelwayo kunokusetyenziswa kwindawo yokuvelisa (abasebenzisi abanamava banokwenza izicwangciso eziyimfuneko kunye nokongeza izibonelelo).

Inkqubo yeZextras Suite/Zimbra ibandakanya:

zimbra — i-imeyile yenkampani ekwaziyo ukwabelana ngeebhokisi zeposi, iikhalenda kunye noluhlu lwabafowunelwa (iincwadi zeedilesi).
Zextras Amaxwebhu -Iofisi eyakhelwe-ngaphakathi esekelwe kwi-LibreOffice kwi-intanethi yokudala kunye nokusebenzisana namaxwebhu, i-spreadsheets, kunye neentetho.
Zextras Drive -Ukugcinwa kwefayile yomntu ngamnye ekuvumela ukuba uhlele, ugcine kwaye wabelane ngeefayile kunye neefolda nabanye abasebenzisi.
Iqela leZextras -umthunywa onenkxaso yenkomfa yomsindo kunye nevidiyo. Iinguqulelo ezikhoyo ziyi-Team Basic, evumela kuphela unxibelelwano lwe-1: 1, kunye neQela lePro, elixhasa iinkomfa zabasebenzisi abaninzi, amajelo, ukwabelana ngesikrini, ukwabelana ngefayile kunye neminye imisebenzi.
Zextras Mobile -Inkxaso yezixhobo eziphathwayo ngokuTshintshela iActiveSync ukulungelelanisa i-imeyile kunye nezixhobo eziphathwayo kunye nemisebenzi yolawulo ye-MDM (uLawulo lweSixhobo esiXelwayo). Ikuvumela ukuba usebenzise iMicrosoft Outlook njengomthengi we-imeyile.
Zextras Admin - ukuphunyezwa kwenkqubo yolawulo lweziqeshisi ezininzi kunye nogunyaziso lwabalawuli ukulawula amaqela abaxumi kunye neendidi zeenkonzo.
Zextras Backup -umjikelo opheleleyo wogcino lwedatha kunye nokubuyisela ngexesha lokwenyani
Zextras Powerstore - ukugcinwa kwe-hierarchical yezinto zenkqubo yeposi kunye nenkxaso yeeklasi zokucwangcisa idatha, kunye nokukwazi ukugcina idatha kwindawo okanye kwiindawo zokugcina iifu ze-S3 ye-architecture, kuquka i-Yandex Object Storage.

Emva kokugqiba ukufakela, umsebenzisi ufumana inkqubo esebenza kwindawo yeYandex.Cloud.

Imigaqo nezithintelo

Ukwabiwa kwesithuba sedisk kwiibhokisi zeposi, izalathisi, kunye nolunye uhlobo lwedatha alugqunywanga kuba iZextras Powerstore ixhasa iindidi ezininzi zokugcina. Uhlobo kunye nobukhulu bokugcinwa kuxhomekeke kwimisebenzi kunye neeparitha zenkqubo. Ukuba kuyimfuneko, oku kunokwenziwa kamva kwinkqubo yokuguqula ukufakela okuchazwe kwimveliso.
Ukwenza lula ukufakela, ukusetyenziswa kweseva ye-DNS elawulwa ngumlawuli ukusombulula amagama e-domain yangaphakathi (engeyiyo eyoluntu) ayiqwalaselwa; kusetyenziswa iseva ye-Yandex.Cloud DNS eqhelekileyo. Xa isetyenziswe kwindawo yokuvelisa, kuyacetyiswa ukuba kusetyenziswe iseva ye-DNS, enokuthi isele ikhona kwisiseko senkampani.
Kucingelwa ukuba i-akhawunti kwi-Yandex.Cloud isetyenziselwa izicwangciso ezingagqibekanga (ngokukodwa, xa ungena kwi "Console" yenkonzo, kukho kuphela isikhombisi (kuluhlu "lukhoyo lwamafu" phantsi kwegama elingagqibekanga). uqhelene nokusebenza kwiYandex.Cloud, Banako, ngokubona kwabo, ukwenza uluhlu olwahlukileyo lwebhentshi yovavanyo, okanye basebenzise ekhoyo.
Umsebenzisi kufuneka abe nendawo ye-DNS yoluntu apho kufuneka abe nofikelelo lolawulo.
Umsebenzisi kufuneka abe nofikelelo kulawulo kwiYandex.Cloud "Console" ubuncinane kunye nendima "yomhleli" ("uMnini wamafu" unamalungelo onke ayimfuneko ngokuzenzekelayo; kukho izikhokelo zokunika ukufikelela kwilifu kwabanye abasebenzisi. : maxesha, два, ezintathu)
Eli nqaku alichazi ukuhlohla izatifikethi ze-X.509 zesiko ezisetyenziselwa ukukhusela unxibelelwano lwenethiwekhi kusetyenziswa iindlela ze-TLS. Xa ukufakela kugqityiwe, izatifikethi ezizisayinileyo ziya kusetyenziswa, ezivumela ukuba kusetyenziswe iibhrawuza ukufikelela kwisistim efakelweyo. Badla ngokubonisa isaziso sokuba umncedisi akanaso isatifikethi esingqinisisekayo, kodwa akuvumela ukuba uqhubeke usebenza. De ufakelo lwezatifikethi luqinisekiswe zizixhobo zabaxumi (ezisayinwe luluntu kunye/okanye ngabasemagunyeni bezatifikethi zequmrhu), izicelo zezixhobo eziphathwayo zisenokungasebenzi kunye nesistim efakelweyo. Ngoko ke, ukufakwa kweziqinisekiso ezichaziweyo kwindawo yokuvelisa kuyimfuneko, kwaye iqhutywe emva kokugqitywa kovavanyo ngokuhambelana nemigaqo-nkqubo yokhuseleko lwenkampani.

Inkcazo yenkqubo yokufakela inkqubo yeZextras/Zimbra kwinguqulelo "yeseva enye".

1. Ukulungiselela kwangaphambili

Ngaphambi kokuba uqalise ukufakela kufuneka uqinisekise:

a) a Ukwenza utshintsho kwindawo ye-DNS yoluntu (ukwenza irekhodi A kwiseva ye-Zimbra kunye nerekhodi ye-MX ye-domain yeposi enikezelweyo).
b) u Ukumisela isiseko senethiwekhi yenyani kwiYandex.Cloud.

Ngelo xesha, emva kokwenza utshintsho kwi-DNS zone, kuthatha ixesha elithile ukuba olu tshintsho lusasazeke, kodwa, ngakolunye uhlangothi, awukwazi ukwenza irekhodi A ngaphandle kokwazi idilesi ye-IP ehambelana nayo.

Ngoko ke, izenzo zenziwa ngolu luhlu lulandelayo:

1. Gcina idilesi ye-IP yoluntu kwiYandex.Cloud

1.1 Kwi "Yandex.Cloud Console" (ukuba kuyimfuneko, ukukhetha iifolda "kumafu akhoyo"), yiya kwicandelo le-Virtual Private Cloud, icandelo leedilesi ze-IP, emva koko ucofe iqhosha elithi "Gcina idilesi", khetha indawo yokufumaneka oyithandayo (okanye uvume. ngexabiso elicetywayo, lo mmandla wokufumaneka kufuneka ngokulandelayo usetyenziswe kuzo zonke iintshukumo ezichazwe kamva kwi Yandex.Cloud, ukuba iifomu ezihambelanayo zinokhetho lokukhetha indawo yokufumaneka), kwibhokisi yencoko yababini evulayo, unga, ukuba uyanqweneleka, kodwa hayi ngokuyimfuneko, khetha i “DDoS Protection” ukhetho, kwaye ucofe iqhosha elithi “Reserve” (jonga kwakhona uxwebhu).

Emva kokuvala ingxoxo, idilesi ye-IP engatshintshiyo eyabelwe inkqubo iya kufumaneka kuluhlu lweedilesi ze-IP, ezinokukopishwa kwaye zisetyenziswe kwisinyathelo esilandelayo.

1.2 Kwindawo ye-DNS "yangaphambili", yenza irekhodi ye-A ye-Zimbra yomncedisi ekhomba kwidilesi ye-IP eyabelwe ngaphambili, irekhodi ye-A ye-TURN iseva ekhomba kwidilesi ye-IP efanayo, kunye nerekhodi ye-MX yesizinda seposi esamkelweyo. Kumzekelo wethu, ezi ziya kuba mail.testmail.svzcloud.ru (Zimbra server), turn.testmail.svzcloud.ru (TURN iseva), kunye testmail.svzcloud.ru (mail domain), ngokulandelanayo.

1.3 Kwi-Yandex.Cloud, kwindawo ekhethiweyo yokufumaneka kwe-subnet eya kusetyenziselwa ukuhambisa oomatshini bokwenene, yenza ukuba i-NAT isebenze kwi-Intanethi.

Ukwenza oku, kwicandelo elithi "uthungelwano lwamafu", khetha inethiwekhi yelifu efanelekileyo (ngokungagqibekanga, kuphela inethiwekhi engagqibekanga ekhoyo), khetha indawo efanelekileyo yokufumaneka kuyo kwaye ukhethe "Vumela i-NAT kwi-Intanethi. ” kwiisetingi zayo.

Ubume buza kutshintsha kuluhlu lwe-subnets:

Ngeenkcukacha ezithe vetshe, bona amaxwebhu: maxesha и два.

2. Ukudala oomatshini benyani

2.1. Ukwenza umatshini wenyani weZimbra

Ukulandelelana kwezenzo:

2.1.1 Kwi "Yandex.Cloud Console", yiya kwicandelo leCompute Cloud, icandelo elithi "Virtual machines", cofa iqhosha elithi "Yenza iVM" (ukufumana ulwazi oluthe kratya ekudaleni iVM, bona uxwebhu).

2.1.2 Apho kufuneka usete:

Igama - ngokungenasizathu (ngokuhambelana nefomathi exhaswa yiYandex.Cloud)
Indawo yokufumaneka – kufuneka ihambelane naleyo ikhe yakhethwa ngaphambili kwinethiwekhi yenyani.
Kwimifanekiso kawonke-wonke khetha Ubuntu 18.04 lts
Faka idiski yokuqalisa ubuncinci i-80GB ngobukhulu. Ngeenjongo zokuvavanya, uhlobo lwe-HDD lwanele (kunye nokusetyenziswa kwemveliso, ngaphandle kokuba ezinye iintlobo zedatha zidluliselwe kwiidiski zohlobo lwe-SSD). Ukuba kuyimfuneko, iidiski ezongezelelweyo zingongezwa emva kokudala i-VM.

Kwisethi "yezixhobo zekhompyutha":

vCPU: ubuncinane 4.
Isabelo esiqinisekisiweyo se-vCPU: ngexesha lezenzo ezichazwe kwinqaku, ubuncinane i-50%; emva kofakelo, ukuba kuyimfuneko, inokunciphisa.
RAM: 8GB iyacetyiswa.
I-subnet: khetha i-subnet apho i-Intanethi ye-NAT yenziwe yasebenza ngexesha lenqanaba lokuqala lokulungiselela.
Idilesi kawonke-wonke: khetha kuluhlu idilesi ye-IP esetyenziswe ngaphambili ukwenza irekhodi A kwiDNS.
Umsebenzisi: ngokubona kwakho, kodwa yahlukile kumsebenzisi oyingcambu kunye neeakhawunti zenkqubo yeLinux.
Kufuneka ucacise iqhosha likawonke-wonke (elivuliwe) le-SSH.

→ Funda ngakumbi malunga nokusebenzisa i-SSH

bona kwakho 1 lokusebenza. Ukwenza izitshixo ze-SSH kwi-openssh kunye ne-putty kunye nokuguqula izitshixo ukusuka kwi-putty ukuya kwifomathi evulekileyo.

2.1.3 Nje ukuba useto lugqityiwe, cofa "Yenza i-VM".

2.2. Ukwenza umatshini wenyani weZextras Docs

Ukulandelelana kwezenzo:

2.2.1 Kwi "Yandex.Cloud Console", yiya kwicandelo leCompute Cloud, icandelo elithi "Virtual machines", cofa iqhosha elithi "Yenza iVM" (ukufumana ulwazi oluthe kratya ekudaleni iVM, bona apha).

2.2.2 Apho kufuneka usete:

Igama - ngokungenasizathu (ngokuhambelana nefomathi exhaswa yiYandex.Cloud)
Indawo yokufumaneka – kufuneka ihambelane naleyo ikhe yakhethwa ngaphambili kwinethiwekhi yenyani.
Kwimifanekiso kawonke-wonke khetha Ubuntu 18.04 lts
Faka idiski yokuqalisa ubuncinci i-80GB ngobukhulu. Ngeenjongo zokuvavanya, uhlobo lwe-HDD lwanele (kunye nokusetyenziswa kwemveliso, ngaphandle kokuba ezinye iintlobo zedatha zidluliselwe kwiidiski zohlobo lwe-SSD). Ukuba kuyimfuneko, iidiski ezongezelelweyo zingongezwa emva kokudala i-VM.

Kwisethi "yezixhobo zekhompyutha":

vCPU: ubuncinane 2.
Isabelo esiqinisekisiweyo se-vCPU: ngexesha lezenzo ezichazwe kwinqaku, ubuncinane i-50%; emva kofakelo, ukuba kuyimfuneko, inokunciphisa.
RAM: ubuncinane 2GB.
I-subnet: khetha i-subnet apho i-Intanethi ye-NAT yenziwe yasebenza ngexesha lenqanaba lokuqala lokulungiselela.
Idilesi kawonke-wonke: akukho dilesi (lo matshini awufuni ukufikelela kwi-Intanethi, kuphela ukufikelela okuphumayo kulo matshini ukuya kwi-Intanethi, enikezelwa yi-"NAT kwi-Intanethi" ukhetho lwe-subnet esetyenzisiweyo).
Umsebenzisi: ngokubona kwakho, kodwa yahlukile kumsebenzisi oyingcambu kunye neeakhawunti zenkqubo yeLinux.
Ngokuqinisekileyo kufuneka ucwangcise isitshixo sikawonke-wonke (esivuliweyo) se-SSH, ungasebenzisa enye efana neyomncedisi weZimbra, ungavelisa isibini esitshixo esahlukileyo, kuba isitshixo sabucala somncedisi we Zextras Docs siyakufuna ukubekwa kumncedisi we Zimbra. idiski.

Jonga kwakhona iSihlomelo 1. Ukwenza izitshixo ze-SSH kwi-openssh kunye ne-putty kunye nokuguqula izitshixo ukusuka kwi-putty ukuya kwifomathi ye-openssh.

2.2.3 Nje ukuba useto lugqityiwe, cofa "Yenza i-VM".

2.3 Oomatshini abadalwe benyani baya kufumaneka kuluhlu lweematshini ezibonakalayo, ezibonisa, ngokukodwa, isimo sabo kunye needilesi ze-IP ezisetyenzisiweyo, zombini kunye nangaphakathi. Ulwazi malunga needilesi ze-IP ziya kufuneka kumanyathelo ofakelo alandelayo.

3. Ukulungiselela iseva yeZimbra yokufakela

3.1 Kuhlohlwa uhlaziyo

Kufuneka ungene kwi-server ye-Zimbra kwidilesi ye-IP kawonke-wonke usebenzisa umxhasi owuthandayo we-ssh usebenzisa isitshixo se-ssh sabucala kwaye usebenzisa igama lomsebenzisi elixeliweyo xa usenza umatshini wenyani.

Emva kokungena, sebenzisa imiyalelo:

sudo apt update
sudo apt upgrade

(xa uphumeza umyalelo wokugqibela, phendula "y" kumbuzo malunga nokuba uqinisekile na ngokufaka uluhlu olucetywayo lohlaziyo)

Emva kokufaka uhlaziyo, unako (kodwa akufuneki ukuba) usebenzise umyalelo:

sudo apt autoremove

Kwaye ekupheleni kwesinyathelo, sebenzisa umyalelo

sudo shutdown –r now

3.2 Ufakelo olongezelelweyo lwezicelo

Kufuneka ufake umxhasi we-NTP ukuze ungqamanise ixesha lenkqubo kunye nesicelo sesikrini ngalo myalelo ulandelayo:

sudo apt install ntp screen

(Xa uphumeza umyalelo wokugqibela, phendula u-“y” xa ubuzwa ukuba uqinisekile na ukufaka uluhlu oluncanyathiselweyo lweepakethe)

Unako kwakhona ukufaka izixhobo ezongezelelweyo ukulungiselela umlawuli. Umzekelo, iCommander Midnight inokufakwa ngomyalelo:

sudo apt install mc

3.3. Ukutshintsha ubumbeko lwenkqubo

3.3.1 Kwifayile /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg tshintsha ixabiso lepharamitha lawula_etc_hosti c oyinyaniso phezu amanga.

Qaphela: ukutshintsha le fayile, umhleli kufuneka aqhutywe ngamalungelo omsebenzisi weengcambu, umzekelo, "sudo vi /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg” okanye, ukuba ipakethe ye-mc ifakiwe, ungasebenzisa umyalelo “sudo mceedit /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg»

3.3.2 Hlela / njl / imikhosi ngolu hlobo lulandelayo, ukubuyisela kumgca ochaza i-FQDN yomkhosi idilesi esuka ku-127.0.0.1 ukuya kwidilesi ye-IP yangaphakathi yalo mncedisi, kunye negama elisuka kwigama elipheleleyo kwi-.internal zone ukuya kwigama likawonke-wonke lomncedisi elichazwe ngaphambili kwi-A. -irekhodi yendawo ye-DNS, kunye nehambelanayo ngokutshintsha i-hostname emfutshane (ukuba ihluke kwi-hostname emfutshane kwi-DNS A irekhodi yoluntu).

Umzekelo, kwimeko yethu ifayile yenginginya ibonakala ngathi:

Emva kokuyihlela yakhangeleka ngolu hlobo:

Qaphela: ukutshintsha le fayile, umhleli kufuneka aqhutywe ngamalungelo omsebenzisi weengcambu, umzekelo, "sudo vi /etc/hosts” okanye, ukuba ipakethe ye-mc ifakiwe, ungasebenzisa umyalelo “sudo mceedit /etc/hosts»

3.4 Seta igama lokugqitha lomsebenzisi

Oku kuyimfuneko ngenxa yokuba kwixesha elizayo i-firewall iya kuqwalaselwa, kwaye ukuba kukho naziphi na iingxaki ezivela kuyo, ukuba umsebenzisi unegama eliyimfihlo, kuya kwenzeka ukuba ungene kumatshini wenyani usebenzisa i-serial console evela kwi-Yandex. Cloud web console kwaye uvale i-firewall kunye/okanye ulungise impazamo. Xa udala umatshini wenyani, umsebenzisi akanalo igama eligqithisiweyo, kwaye ke ukufikelela kunokwenzeka kuphela nge-SSH usebenzisa uqinisekiso oluphambili.

Ukuseta igama eligqithisiweyo kufuneka usebenzise umyalelo:

sudo passwd <имя пользователя>

Umzekelo, kwimeko yethu iya kuba ngumyalelo "umsebenzisi wesudo passwd".

4. Ukufakwa kweZimbra kunye neZextras Suite

4.1. Ukhuphela usasazo lweZimbra kunye neZextras Suite

4.1.1 Ukukhuphela ukuhanjiswa kweZimbra

Ukulandelelana kwezenzo:

1) Yiya kwi-URL ngesikhangeli www.zextras.com/download-zimbra-9 kwaye ugcwalise ifomu. Uya kufumana i-imeyile enekhonkco lokukhuphela iZimbra kwii-OS ezahlukeneyo.

2) Khetha inguqulelo yangoku yokuhanjiswa kweqonga le-Ubuntu 18.04 LTS kwaye ukope ikhonkco

3) Khuphela ukuhanjiswa kweZimbra kwiseva yeZimbra kwaye uyikhuphe. Ukwenza oku, sebenzisa imiyalelo kwiseshoni ye-ssh kwiseva ye-zimbra

cd ~
mkdir zimbra
cd zimbra
wget <url, скопированный на предыдущем шаге>
tar –zxf <имя скачанного файла>

(kumzekelo wethu oku "tar –zxf zcs-9.0.0_OSE_UBUNTU18_latest-zextras.tgz")

4.1.2 Ukukhuphela ukuhanjiswa kweZextras Suite

Ukulandelelana kwezenzo:

1) Yiya kwi-URL ngesikhangeli www.zextras.com/download

2) Gcwalisa ifom ngokufaka idatha efunekayo kwaye ucofe iqhosha elithi "KHUPHELA NGOKU".

3) Iphepha lokukhuphela liya kuvula

Inee-URL ezimbini ezinomdla kuthi: enye iphezulu kwiphepha le-Zextras Suite ngokwayo, esiya kuyidinga ngoku, kwaye enye isezantsi kwibhloko ye-Docs Server ye-Ubuntu 18.04 LTS, eya kufuneka kamva faka i-Zextras Docs kwi-VM yee-Docs.

4) Khuphela ukuhanjiswa kweZextras Suite kwiseva yeZimbra kwaye uyikhuphe. Ukwenza oku, sebenzisa imiyalelo kwiseshoni ye-ssh kwiseva ye-zimbra

cd ~
mkdir zimbra
cd zimbra

(ukuba uvimba weefayili wangoku akatshintshanga emva kwenyathelo langaphambili, imiyalelo engentla ingashiywa)

wget http://download.zextras.com/zextras_suite-latest.tgz
tar –zxf zextras_suite-latest.tgz

4.2. Ukufakwa kweZimbra

Ukulandelelana kwezenzo

1) Yiya kulawulo apho iifayile bezikhutshiwe kwinyathelo 4.1.1 (inokujongwa ngomyalelo we-ls ngelixa kulawulo lwe ~/zimbra).

Kumzekelo wethu kuya kuba:

cd ~/zimbra/zcs-9.0.0_OSE_UBUNTU18_latest-zextras/zimbra-installer

2) Qhuba ufakelo lweZimbra usebenzisa umyalelo

sudo ./install.sh

3) Siphendula imibuzo yomfaki

Ungayiphendula imibuzo yomfaki "y" (ihambelana no "ewe"), "n" (ihambelana no "hayi"), okanye ushiye ingcebiso yomfaki ingatshintshwanga (inika iinketho, ibonise kwizibiyeli zesikwere, umzekelo, " [Y]” okanye “ [N].”

Ngaba uyavumelana nemigaqo yesivumelwano selayisensi yesoftware? - Ewe.

Sebenzisa indawo yokugcina ipakethe yeZimbra? – ngokungagqibekanga (ewe).

"Faka i-zimbra-ldap?","Faka i-zimbra-logger?","Faka i-zimbra-mta?” – okumiselweyo (ewe).

Faka i-zimbra-dnscache? - hayi (inkqubo yokusebenza ine-caching yayo ye-DNS iseva eyenziwe ngokungagqibekanga, ngoko ke le phakheji iya kuba nengxabano nayo ngenxa yezibuko ezisetyenzisiweyo).

Faka i-zimbra-snmp? - ukuba uyanqwena, unokushiya inketho engagqibekanga (ewe), akufuneki uyifake le phakheji. Kumzekelo wethu, ukhetho olungagqibekanga lushiywe.

"Faka i-zimbra-store?","Faka i-zimbra-apache?","Faka i-zimbra-spell?","Faka i-zimbra-memcached?","Faka i-zimbra-proxy?” – okumiselweyo (ewe).

Faka i-zimbra-snmp? – hayi (iphakheji eneneni ayixhaswanga kwaye ifakwe endaweni yayo ngeZextras Drive).

Faka i-zimbra-imapd? – ukungagqibeki (hayi).

Faka i-zimbra-chat? – hayi (ifakwe endaweni yayo liQela leZextras)

Emva koko umfakeli uya kubuza ukuba uqhubeke nofakelo?

Siphendula ngokuthi "ewe" ukuba sinokuqhubeka, ngaphandle koko siphendula "hayi" kwaye sifumana ithuba lokutshintsha iimpendulo kwimibuzo ebuzwa ngaphambili.

Emva kokuvuma ukuqhubeka, isifakeli siya kufaka iipakethe.

4.) Siphendula imibuzo kwi-configurator ephambili

4.1) Ekubeni kumzekelo wethu igama le-DNS yomncedisi weposi (Igama lerekhodi) kunye negama le-imeyile enikezelweyo (igama lerekhodi le-MX) lahlukile, umlungiseleli ubonisa isilumkiso kwaye uyakucela ukuba usete igama le-imeyile enikezelweyo. Siyavumelana nesiphakamiso sakhe kwaye sifaka igama lerekhodi leMX. Kumzekelo wethu ibonakala ngolu hlobo:

Qaphela: unokuseta kwakhona i-domain ye-imeyile enikezelweyo ukuba yahluke kwigama lomncedisi ukuba igama lomncedisi linerekhodi ye-MX yegama elifanayo.

4.2) Umququzeleli ubonisa imenyu engundoqo.

Sidinga ukuseta iphasiwedi yomlawuli weZimbra (inqaku le-6 kumzekelo wethu wemenyu), ngaphandle kokuba akunakwenzeka ukuqhubeka nofakelo, kwaye utshintshe isethingi ye-zimbra-proxy (inqaku le-8 kumzekelo wethu; ukuba kuyimfuneko, olu cwangciso lunokutshintshwa. emva kofakelo).

4.3) Ukutshintsha izicwangciso ze-zimbra-store

Kwi-prompt ye-configurator, faka inombolo yento yemenyu kwaye ucinezele u-Enter. Sifika kwimenyu yokuseta yokugcina:

apho kwisimemo somququzeleli sifaka inombolo yemenyu ye-Admin Password (kumzekelo wethu we-4), cinezela u-Enter, emva koko umququzeleli unikezela ngegama eliyimfihlo elenziwe ngokungaqhelekanga, onokuthi uvumelane nalo (ukukhumbula) okanye ufake eyakho. Kuzo zombini ezi meko, ekugqibeleni kufuneka ucinezele u-Enter, emva koko into ethi "Password yoMlawuli" iya kususa isiphawuli sokulinda igalelo lolwazi kumsebenzisi:

Sibuyela kwimenyu yangaphambili (siyavumelana nesiphakamiso somququzeleli).

4.4) Ukutshintsha izicwangciso ze-zimbra-proxy

Ngokufaniswa nesinyathelo sangaphambili, kwimenyu ephambili, khetha inombolo yento ethi "zimbra-proxy" kwaye uyifake kwi-configurator prompt.

Kwimenyu yokumisela i-Proxy evulayo, khetha inombolo yento ethi "Imo yomncedisi we-Proxy" kwaye uyifake kwi-prompt configurator.

Umququzeleli uya kunika ukukhetha enye yeendlela, faka "ukuqondisa kwakhona" kwi-prompt yayo kwaye ucinezele u-Enter.

Emva koko sibuyela kwimenyu ephambili (sivumelana nesiphakamiso somququzeleli).

4.5) Ukubaleka ubumbeko

Ukuqala uqwalaselo, ngenisa u-“a” kwi-prompt prompt. Emva koko iya kubuza ukuba ugcina uqwalaselo olungenisiweyo kwifayile (enokuthi isetyenziselwe ukufakela kwakhona) - ungavumelana nesindululo esingagqibekanga, ukuba ugcino lwenziwe - luyakubuza ukuba yeyiphi ifayile ukugcina uqwalaselo (wena). Ungavumelana nesindululo esingagqibekanga okanye ungenise igama lakho lefayile).

Kweli nqanaba, usenako ukwala ukuqhubeka nokwenza utshintsho kuqwalaselo ngokuvumelana nempendulo engagqibekanga kumbuzo othi "Inkqubo iya kuguqulwa - qhubeka?"

Ukuqala ukufakela, kufuneka uphendule "Ewe" kulo mbuzo, emva koko umququzeleli uya kusebenzisa izicwangciso ezifakwe ngaphambili kwixesha elithile.

4.6) Ukugqibezela ukufakela kweZimbra

Ngaphambi kokuba kugqitywe, umfakeli uya kubuza ukuba uyazise na iZimbra malunga nofakelo. Unokuvumelana nesindululo esingagqibekanga okanye wale (ngokuphendula ngokuthi “Hayi”) isaziso.

Emva koko umfakeli uya kuqhubeka nokwenza imisebenzi yokugqibela kangangexesha elithile kwaye abonise isaziso sokuba ulungelelwaniso lwenkqubo lugqityiwe ngokucofa naliphi na iqhosha lokuphuma kumfaki.

4.3. Ukufakwa kweZextras Suite

Ngolwazi oluthe kratya malunga nokufaka iZextras Suite, bona umyalelo.

Ukulandelelana kwezenzo:

1) Yiya kulawulo apho iifayile bezikhutshiwe kwinyathelo 4.1.2 (inokujongwa ngomyalelo we-ls ngelixa kulawulo lwe ~/zimbra).

Kumzekelo wethu kuya kuba:

cd ~/zimbra/zextras_suite

2) Qhuba ufakelo lweZextras Suite usebenzisa umyalelo

sudo ./install.sh all

3) Siphendula imibuzo yomfaki

Umgaqo wokusebenza kwe-installer ufana ne-installer ye-Zimbra, ngaphandle kokungabikho komququzeleli. Ungayiphendula imibuzo yomfaki "y" (ihambelana no "ewe"), "n" (ihambelana no "hayi"), okanye ushiye ingcebiso yomfaki ingatshintshwanga (inika iinketho, ibonise kwizibiyeli zesikwere, umzekelo, " [Y]” okanye “ [N].”

Ukuqala inkqubo yokufakela, kufuneka uphendule ngokuqhubekayo "ewe" kule mibuzo ilandelayo:

Ngaba uyavumelana nemigaqo yesivumelwano selayisensi yesoftware?
Ngaba unqwenela ukuba iZextras Suite ikhuphele, ifake kwaye iphucule iThala leeNcwadi le-ZAL ngokuzenzekelayo?

Emva kokuba isaziso siya kuboniswa sicela ukuba ucofe u-Enter ukuze uqhubeke:

Emva kokucofa u-Enter, inkqubo yokufakela iya kuqala, ngamanye amaxesha iphazanyiswe yimibuzo, apho, nangona kunjalo, siphendula ngokuvumelana neengcebiso ezingagqibekanga ("ewe"), ezizezi:

I-Zextras Suite Core ngoku iza kufakwa. Qhubeka?
Ngaba unqwenela ukumisa iSicelo seWebhu seZimbra (ibhokisi yemeyile)?
I-Zextras Suite Zimlet iza kufakwa ngoku. Qhubeka?

Ngaphambi kokuba inxalenye yokugqibela yofakelo iqale, uya kwaziswa ukuba kufuneka uqwalasele isihluzo se-DOS kwaye ucele ukuba ucinezele u-Enter ukuze uqhubeke. Emva kokucofa u-Enter, inxalenye yokugqibela yofakelo iqala, ekugqibeleni isaziso sokugqibela siboniswa kwaye umfaki ugqiba.

4.4. Ulungelelwaniso lokuqala lokumisela kunye nokumiselwa kweeparamitha zokumisela i-LDAP

1) Zonke izenzo ezilandelayo zenziwa phantsi komsebenzisi we-zimbra. Ukwenza oku kufuneka usebenzise umyalelo

sudo su - zimbra

2) Guqula i-DOS icebo lokucoca ngomyalelo

zmprov mcf zimbraHttpDosFilterMaxRequestsPerSec 150

3) Ukufakela iZextras Docs, uya kufuna ulwazi malunga nolunye ukhetho loqwalaselo lweZimbra. Ukwenza oku unokusebenzisa umyalelo:

zmlocalconfig –s | grep ldap

Kumzekelo wethu, olu lwazi lulandelayo luya kuboniswa:

Ukusebenzisa ngakumbi, uya kufuna i-ldap_url, zimbra_ldap_password (kunye ne-zimbra_ldap_usrdn, nangona isifakeli seZextras Amaxwebhu siqhele ukwenza uqikelelo oluchanekileyo malunga negama lomsebenzisi le-LDAP).

4) Yeka njengomsebenzisi we-zimbra ngokusebenzisa umyalelo
phuma

5. Ukulungiselela iseva yee-Docs ukulungiselela ukufakela

5.1. Kunyuswa isitshixo sabucala se-SSH kwiseva yeZimbra kunye nokungena kwiseva yeeDocs

Kuyimfuneko ukubeka kwi-server ye-Zimbra isitshixo sangasese se-SSH isitshixo, isitshixo sikawonke-wonke esasisetyenziswe kwinqanaba le-2.2.2 yegatya 2.2 xa udala umatshini we-Docs. Ingalayishwa kumncedisi nge-SSH (umzekelo, nge-sftp) okanye incamatheliswe ngebhodi eqhotyoshwayo (ukuba amandla omthengi we-SSH asetyenzisiweyo kunye nemeko-bume yophumezo iyamvumela).

Sicinga ukuba isitshixo sabucala sibekwe kwifayile ~/.ssh/docs.key kwaye umsebenzisi osetyenziselwe ukungena kwiseva yeZimbra ngumnini wayo (ukuba ukhuphelo/ukwenziwa kwale fayile kuqhutywa phantsi kwalo msebenzisi, uzenze ngokuzenzekelayo. yaba ngumnini wayo).

Kufuneka uqhube umyalelo kube kanye:

chmod 600 ~/.ssh/docs.key

Kwixesha elizayo, ukungena kwiseva yee-Docs, kufuneka wenze olu landelelwano lulandelayo lwezenzo:

1) Ngena kwiseva yeZimbra

2) Qhuba umyalelo

ssh -i ~/.ssh/docs.key user@<внутренний ip-адрес сервера Docs>

Apho ixabiso <idilesi ye-IP yangaphakathi ye-Docs server> inokufumaneka kwi "Yandex.Cloud Console", umzekelo, njengoko kuboniswe kumhlathi 2.3.

5.2. Kuhlohlwa uhlaziyo

Emva kokungena kwiseva ye-Docs, sebenzisa imiyalelo efana naleyo ye-Zimbra server:

sudo apt update
sudo apt upgrade

(xa uphumeza umyalelo wokugqibela, phendula "y" kumbuzo malunga nokuba uqinisekile na ngokufaka uluhlu olucetywayo lohlaziyo)

Emva kokufaka uhlaziyo, unako (kodwa akufuneki ukuba) usebenzise umyalelo:

sudo apt autoremove

Kwaye ekupheleni kwesinyathelo, sebenzisa umyalelo

sudo shutdown –r now

5.3. Ufakelo olongezelelweyo lwezicelo

Kufuneka ufake umxhasi we-NTP ukuvumelanisa ixesha lenkqubo kunye nesicelo sekhusi, esifana nesenzo esifanayo somncedisi we-Zimbra, ngomyalelo olandelayo:

sudo apt install ntp screen

(Xa uphumeza umyalelo wokugqibela, phendula u-“y” xa ubuzwa ukuba uqinisekile na ukufaka uluhlu oluncanyathiselweyo lweepakethe)

Unako kwakhona ukufaka izixhobo ezongezelelweyo ukulungiselela umlawuli. Umzekelo, iCommander Midnight inokufakwa ngomyalelo:

sudo apt install mc

5.4. Ukutshintsha ubumbeko lwenkqubo

5.4.1. Kwifayile /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg, ngendlela efanayo neseva yeZimbra, tshintsha ixabiso le-manage_etc_hosts parameter ukusuka kwinyani ukuya kubuxoki.

5.4.2. Hlela / njl / imikhosi, yongeza i-FQDN yoluntu ye-Zimbra iseva, kodwa ngedilesi yangaphakathi ye-IP eyabelwe yi-Yandex.Cloud. Ukuba unomncedisi we-DNS wangaphakathi olawulwa ngumlawuli osetyenziswa ngoomatshini benyani (umzekelo, kwindawo yemveliso), kwaye ekwazi ukusombulula i-FQDN yoluntu yomncedisi we-Zimbra ngedilesi ye-IP yangaphakathi xa ifumana isicelo kuthungelwano lwangaphakathi (kuba izicelo ezivela kwi-Intanethi, i-FQDN yomncedisi we-Zimbra kufuneka ixazululwe ngedilesi ye-IP yoluntu, kwaye umncedisi we-TURN kufuneka ahlale esonjululwe ngedilesi ye-IP yoluntu, kubandakanywa xa ufikelela kwiidilesi zangaphakathi), lo msebenzi awufuni.

Umzekelo, kwimeko yethu ifayile yenginginya ibonakala ngathi:

Emva kokuyihlela yakhangeleka ngolu hlobo:

6. Ukufakwa kwee-Zextras Docs

6.1. Ngena kwi-Docs server

Inkqubo yokungena kwi-Docs server ichazwe kwigatya 5.1.

6.2. Kukhutshelwa usasazo lweZextras Docs

Ukulandelelana kwezenzo:

1) Kwiphepha elivela kwigatya lesi-4.1.2. Ukukhuphela ukuhanjiswa kweZextras Suite Khuphela ukuhanjiswa kweZextras Suite (kwinyathelo lesi-3), kopisha i-URL yokwakha i-Docs ye-Ubuntu 18.04 LTS (ukuba ayizange ikopishwe ngaphambili).

2) Khuphela ukuhanjiswa kweZextras Suite kwiseva yeZimbra kwaye uyikhuphe. Ukwenza oku, sebenzisa imiyalelo kwiseshoni ye-ssh kwiseva ye-zimbra

cd ~
mkdir zimbra
cd zimbra
wget <URL со страницы скачивания>

(kwimeko yethu umyalelo othi "wget" uphunyeziwe Khuphela.zextras.com/zextras-docs-installer/latest/zextras-docs-ubuntu18.tgz»)

tar –zxf <имя скачанного файла>

(kwimeko yethu, umyalelo othi "tar -zxf zextras-docs-ubuntu18.tgz" uyasetyenziswa)

6.3. Ukufakelwa kweZextras Docs

Ngolwazi oluthe kratya malunga nokufaka kunye nokuqwalasela iZextras Docs, bona apha.

Ukulandelelana kwezenzo:

1) Yiya kulawulo apho iifayile bezikhutshiwe kwinyathelo 4.1.1 (inokujongwa ngomyalelo we-ls ngelixa kulawulo lwe ~/zimbra).

Kumzekelo wethu kuya kuba:

cd ~/zimbra/zextras-docs-installer

2) Qhuba ufakelo lweZextras Docs usebenzisa umyalelo

sudo ./install.sh

3) Siphendula imibuzo yomfaki

Inkqubo iya kulungiswa, ungathanda ukuqhubeka? – yamkela ukhetho olusisiseko (“ewe”).

Emva koku, ukufakela ukuxhomekeka kuya kuqala: umfaki uya kubonisa ukuba zeziphi iipakethe ezifuna ukuzifaka kwaye zicele ukuqinisekiswa ukuzifaka. Kuzo zonke iimeko, siyavumelana nonikezelo olungagqibekanga.

Umzekelo, unokubuza "I-python2.7 ayifumanekanga. Ngaba ungathanda ukuyifaka?»,«ipython-ldap ayifunyenwanga. Ngaba ungathanda ukuyifaka?" kwaye nangokunjalo.

Emva kokufaka zonke iipakethe eziyimfuneko, umfaki ucela imvume yokufaka iZextras Amaxwebhu:

Ngaba ungathanda ukufaka iZextras DOCS? – yamkela ukhetho olusisiseko (“ewe”).

Emva kokuba ixesha elithile lichithwe ukufaka iipakethe, iZextras Docs ngokwayo, kwaye iqhubela phambili kwimibuzo yoqwalaselo.

4) Siphendula imibuzo kwi-configurator

Umqwalaseli ucela iiparamitha zoqwalaselo nganye nganye; ekuphenduleni, amaxabiso afunyenwe kwinqanaba lesi-3 kwigatya lesi-4.4 afakiwe. Ulungelelwaniso lokuqala lweseto kunye nokumiselwa kweeparamitha zokumisela i-LDAP.

Kumzekelo wethu, useto lujongeka ngolu hlobo:

5) Ukugqibezela ukufakela iZextras Docs

Emva kokuphendula imibuzo ye-configurator, i-installer igqibezela ukulungiswa kwe-Docs yendawo kwaye ibhalise inkonzo efakwe kwi-server ye-Zimbra efakwe ngaphambili.

Kufakelo lomncedisi omnye, oku kuhlala kukwanela, kodwa kwezinye iimeko (ukuba amaxwebhu akayi kuvulwa kwi-Docs kumxhasi wewebhu kwi-Drive tab) unokufuna ukwenza intshukumo efunekayo kufakelo lomncedisi omninzi. -kumzekelo wethu, kwiseva ephambili yeZimbra, kuya kufuneka uyenze phantsi komsebenzisi weZimbra Teams /opt/zimbra/libexec/zmproxyconfgen и zmproxyctl qala kwakhona.

7. Ukusetwa kokuqala kweZimbra kunye neZextras Suite (ngaphandle kweQela)

7.1. Ngena kwi admin console okokuqala

Ngena kwi-browser usebenzisa i-URL: https:// : 7071

Ukuba uyanqwena, ungangena kumxhasi wewebhu usebenzisa i-URL: https://

Xa ungena, iiphequluli zibonisa isilumkiso malunga noqhagamshelwano olungakhuselekanga ngenxa yokungakwazi ukuqinisekisa isatifikethi. Kuya kufuneka uphendule kwisikhangeli malunga nemvume yakho yokuya kwindawo ngaphandle kwesi silumkiso. Oku kungenxa yokuba emva kofakelo, isatifikethi esizisayinileyo se-X.509 sisetyenziselwa uqhagamshelo lwe-TLS, olunokuthi kamva (ukusetyenziswa okunemveliso - lutshintshwe ngesatifikethi sorhwebo okanye esinye isatifikethi esivunyiweyo zizikhangeli ezisetyenzisiweyo.

Kwifom yokuqinisekisa, faka igama lomsebenzisi kwifomathi admin@<idomeyini yakho yeposi eyamkelekileyo> kunye negama lokugqitha lomlawuli weZimbra elixeliweyo xa ufaka iseva yeZimbra kwinyathelo lesi-4.3 kwigatya lesi-4.2.

Kumzekelo wethu ibonakala ngolu hlobo:

Umlawuli weConsole:

Umxhasi wewebhu:

Qaphela 1. Ukuba awukhankanyi isizinda semeyile esamkelweyo xa ungena kwikhonsoli yomlawuli okanye umxhasi wewebhu, abasebenzisi baya kuqinisekiswa kwidomeyini yemeyile eyenziweyo xa kuhlohla iseva yeZimbra. Emva kofakelo, lo kuphela kommandla wemeyile owamkelweyo okhoyo kulo mncedisi, kodwa njengoko inkqubo isebenza, imimandla yeposi eyongezelelweyo inokongezwa, kwaye ngokuyichaza ngokucacileyo isizinda kwigama lomsebenzisi kuya kwenza umahluko.

Qaphela 2. Xa ungena kumxhasi wewebhu, isikhangeli sakho sinokucela imvume yokubonisa izaziso ezivela kwindawo. Kufuneka uvume ukufumana izaziso kule sayithi.

Qaphela 3. Emva kokungena kwi-console yomlawuli, unokwaziswa ukuba kukho imiyalezo kumlawuli, ngokuqhelekileyo ukukhumbuza ukuba umise i-Zextras Backup kunye / okanye ukuthenga ilayisenisi ye-Zextras ngaphambi kokuba ilayisenisi yesilingo esingagqibekanga siphelelwe lixesha. Ezi zenzo zingenziwa kamva, kwaye ngoko ke imiyalezo ekhoyo ngexesha lokungena inokungahoywa kwaye/okanye imakishwe njengefundiweyo kwimenyu ye-Zextras: Isilumkiso seZextras.

Qaphela 4. Kubaluleke ngakumbi ukuqaphela ukuba kwimo yomncedisi ebeka iliso ubume benkonzo yee-Docs iboniswa “njengengafumanekiyo” nokuba Amaxwebhu kumxhasi wewebhu asebenza ngokuchanekileyo:

Olu luphawu loguqulelo lwesilingo kwaye lunokulungiswa kuphela emva kokuthenga ilayisenisi kunye nenkxaso yoqhagamshelwano.

7.2. Ukusasazwa kwamacandelo eZextras Suite

KwiZextras: Imenyu engundoqo, kufuneka ucofe kwiqhosha elithi "Deploy" kuzo zonke ii-zimlets oceba ukuzisebenzisa.

Xa uhambisa i-winterlets, incoko yababini ibonakala kunye nesiphumo sokusebenza ngolu hlobo lulandelayo:

Kumzekelo wethu, zonke ii-winterlets ze-Zextras Suite zisetyenzisiwe, emva koko i-Zextras: Ifom ye-Core iya kuthatha le fomu ilandelayo:

7.3. Ukutshintsha iisetingi zofikelelo

7.3.1. Ukutshintsha iiSetingi zehlabathi

Kwi Useto lwemenyu: Iisetingi zehlabathi, imenu esezantsi yeseva yoMmeli, tshintsha ezi parameters zilandelayo:

Imo yewebhu ye-proxy: phinda uqondise
Yenza iseva engummeli yeconsole yolawulo: khangela ibhokisi.
Emva koko nqakraza ku-"Gcina" kwindawo ephezulu ekunene yefom.

Kumzekelo wethu, emva kotshintsho olwenziweyo, ifom ibonakala ngolu hlobo:

7.3.2. Utshintsho kwiisetingi eziphambili zeseva yeZimbra

Kwi Useto lwemenyu: Iiseva: <igama lomncedisi we-Zimbra ongundoqo>, i-submenu ye-server yommeleli, tshintsha ezi parameters zilandelayo:

Imodi yommeleli wewebhu: nqakraza kwiqhosha elithi "Setha kwakhona kwixabiso elingagqibekanga" (ixabiso ngokwalo aliyi kutshintsha, kuba sele libekwe ngexesha lofakelo). Yenza iseva ye-proxy ye-console yolawulo: khangela ukuba ibhokisi yokukhangela ikhangelwe (ixabiso elingagqibekanga kufuneka lisetyenziswe, ukuba akunjalo, ungacofa iqhosha elithi "Hlela kwakhona kwixabiso elingagqibekanga" kunye/okanye ukuseta ngesandla). Emva koko nqakraza ku-"Gcina" kwindawo ephezulu ekunene yefom.

Kumzekelo wethu, emva kotshintsho olwenziweyo, ifom ibonakala ngolu hlobo:

Qaphela: (ukuqalisa kwakhona kungafuneka ukuba ukungena kweli zibuko akusebenzi)

7.4. Ukungena kwi-console yomlawuli omtsha

Ngena kwiconsole yolawulo kwibrawuza yakho usebenzisa iURL: https:// :9071
Kwixesha elizayo, sebenzisa le URL ukungena

Qaphela: kufakelo lomncedisi omnye, njengomthetho, utshintsho olwenziwe kwinyathelo elidlulileyo lwanele, kodwa kwezinye iimeko (ukuba iphepha lomncedisi aliboniswanga xa ungenisa i-URL ekhankanyiweyo), unokufuna ukwenza isenzo esifunekayo. Ufakelo lweeseva ezininzi-kumzekelo wethu, kwimiyalelo ephambili yeseva yeZimbra kuya kufuneka ukuba yenziwe njengomsebenzisi weZimbra. /opt/zimbra/libexec/zmproxyconfgen и zmproxyctl qala kwakhona.

7.5. Ukuhlela i-COS ehlala ikho

Kwiisetingi: Imenyu yeKlasi yeNkonzo, khetha i-COS enegama elithi "default".

Kwimenu engaphantsi ethi “Amathuba”, sukukhangela umsebenzi we-“Portfolio”, emva koko ucofe u-“Gcina” kwindawo ephezulu ekunene kwifomu.

Kumzekelo wethu, emva koqwalaselo, ifom ibonakala ngolu hlobo:

Kukwacetyiswa ukuba ujonge "Vumela ukwabelana ngeefayile kunye neefolda" ukusetwa kwimenyu ephantsi yeDrive, emva koko ucofe u-"Gcina" kwindawo ephezulu ekunene yefom.

Kumzekelo wethu, emva koqwalaselo, ifom ibonakala ngolu hlobo:

Kwimeko yovavanyo, kudidi olufanayo lwenkonzo, unokwenza iQela lePro imisebenzi ngokuvula ibhokisi yokukhangela enegama elifanayo kwimenyu ephantsi yeQela, emva koko ifom yoqwalaselo iya kuthatha le fom ilandelayo:

Xa iimpawu zeQela lePro zivaliwe, abasebenzisi baya kuba nokufikelela kuphela kwiifitsha eziSiseko zeQela.
Nceda uqaphele ukuba iZextras Team Pro inelayisensi ngokuzimeleyo yeZextras Suite, ekuvumela ukuba uyithengele iibhokisi zeposi ezimbalwa kuneZextras Suite ngokwayo; Iimpawu zeQela eliSiseko zibandakanyiwe kwilayisensi yeZextras Suite. Ke ngoko, ukuba isetyenziswe kwindawo yemveliso, unokufuna ukwenza iklasi yenkonzo eyahlukileyo kubasebenzisi beQela lePro elibandakanya iimpawu ezifanelekileyo.

7.6. Ukuseta iFirewall

Ifuneka kwiseva ephambili yeZimbra:

a) a Vumela ufikelelo olusuka kwi-Intanethi ukuya kwi-ssh, http/https, imap/imaps, pop3/pop3s, smtp port (izibuko eliphambili kunye nezibuko ezongezelelweyo zokusetyenziswa ngabaxhasi beposi) kunye nezibuko zolawulo lwekhonsoli.

b) u Vumela lonke uqhagamshelo olusuka kuthungelwano lwangaphakathi (apho i-NAT kwi-Intanethi yenziwe yasebenza kwinqanaba 1.3 kwinqanaba loku-1).

Akukho mfuneko yokuqwalasela i-firewall yomncedisi we Zextras Docs, ngokuba ayifumaneki kwi-Intanethi.

Ukwenza oku, kufuneka wenze olu landelelwano lwezenzo ezilandelayo:

1) Ngena kwikhonsoli yokubhaliweyo yomncedisi oyintloko weZimbra. Xa ungena nge-SSH, kufuneka usebenzise umyalelo "wesikrini" ukunqanda ukuphazamiseka kophumezo lomyalelo ukuba uxhulumaniso nomncedisi lulahlekile okwexeshana ngenxa yotshintsho kwizicwangciso ze-firewall.

2) Qhuba imiyalelo

sudo ufw allow 22,25,80,110,143,443,465,587,993,995,9071/tcp
sudo ufw allow from <адрес_вашей_сети>/<длина CIDR маски>
sudo ufw enable

Kumzekelo wethu ibonakala ngolu hlobo:

7.7. Ukujonga ukufikelela kumxhasi wewebhu kunye neconsole yolawulo

Ukubeka esweni ukusebenza kwefirewall, ungaya kule URL ilandelayo kwisikhangeli sakho

Ikhonsoli yomlawuli: https:// :9071
Umxhasi wewebhu: http:// (kuya kubakho ukuhanjiswa okuzenzekelayo ku-https:// )
Kwangaxeshanye, usebenzisa enye i-URL https:// : 7071 I-console yolawulo kufuneka ingavuli.

Umxhasi wewebhu kumzekelo wethu ujongeka ngolu hlobo:

Phawula. Xa ungena kumxhasi wewebhu, isikhangeli sakho sinokucela imvume yokubonisa izaziso ezivela kwindawo. Kufuneka uvume ukufumana izaziso kule sayithi.

8. Ukuqinisekisa ukusebenza kweenkomfa zeaudio kunye nevidiyo kwiQela leZextras

8.1. Ulwazi jikelele

Izenzo ezichazwe ngezantsi azifunwa ukuba bonke abathengi beQela leZextras basebenzisana ngaphandle kokusebenzisa i-NAT (kule meko, ukusebenzisana nomncedisi we-Zimbra ngokwawo kunokwenziwa ngokusebenzisa i-NAT, oko kukuthi, kubalulekile ukuba akukho NAT phakathi kwabaxhasi), okanye ukuba okubhaliweyo kuphela kusetyenziswe umthunywa.

Ukuqinisekisa unxibelelwano lomxhasi nge-audio kunye nevidiyo yenkomfa:

a) a Kufuneka ufake okanye usebenzise iseva ekhoyo ye-TURN.

b) u Ngokuba Umncedisi we-TURN uvame ukuba nomsebenzi we-STUN umncedisi, kuyacetyiswa ukuba uyisebenzise kule ndawo ngokunjalo (njengenye indlela, ungasebenzisa iiseva ze-STUN zoluntu, kodwa ukusebenza kwe-STUN yodwa akwanelanga).

Kwindawo yokuvelisa, ngenxa yomthwalo onokuthi uphezulu, kucetyiswa ukuba uhambise i-TURN iseva kumatshini ohlukileyo. Ukuvavanya kunye / okanye umthwalo okhanyayo, umncedisi we-TURN unokudibaniswa nomncedisi omkhulu weZimbra.

Umzekelo wethu ujonga ukufaka i-TURN iseva kwi-server engundoqo ye-Zimbra. Ukufakela i-TURN TURN kumncedisi owahlukileyo kuyafana, ngaphandle kokuba amanyathelo anxulumene nokufaka kunye nokuqwalasela i-software ye-TURN yenziwa kwi-TURN server, kunye namanyathelo okuqwalasela umncedisi we-Zimbra ukusebenzisa loo mncedisi wenziwa kwi-server ye-Zimbra engundoqo.

8.2. Ukuhlohla iseva ye-TURN

Ukuba ungene ngaphambili nge-SSH kwiseva ephambili yeZimbra, sebenzisa umyalelo

sudo apt install resiprocate-turn-server

8.3. Ukumisela iseva ye-TURN

Phawula. Ukutshintsha zonke ezi fayile zilandelayo zoqwalaselo, umhleli kufuneka aqhutywe ngamalungelo omsebenzisi weengcambu, umzekelo, “sudo vi /etc/reTurn/reTurnServer.config” okanye, ukuba ipakethe ye-mc ifakiwe, ungasebenzisa umyalelo “sudo mceedit /etc/reTurn/reTurnServer.config»

Ukwenziwa lula komsebenzisi

Ukwenza lula ukuyilwa kunye nokulungiswa koqhagamshelo lovavanyo kumncedisi we-TURN, siya kukhubaza ukusetyenziswa kwamagama ayimfihlo akhawulezileyo kwi-TURN iseva yedatha yomsebenzisi. Kwimeko yemveliso, kuyacetyiswa ukuba usebenzise amagama ayimfihlo akhawulezayo; kule meko, ukuveliswa kwe-password hashes kubo kufuneka kwenziwe ngokuhambelana nemiyalelo equlethwe kwiifayile /etc/reTurn/reTurnServer.config kunye /etc/reTurn/users.txt.

Ukulandelelana kwezenzo:

1) Hlela ifayile /etc/reTurn/reTurnServer.config

Guqula ixabiso le-parameter ye-"UserDatabaseHashedPasswords" ukusuka ku-"yinyaniso" ukuya ku-"false".

2) Hlela ifayile /etc/reTurn/users.txt

Yibekele igama lomsebenzisi, igama eliyimfihlo, indawo (ngokungathandabuzekiyo, engasetyenziswanga xa useka uqhagamshelo lweZimbra) kwaye usete ubume beakhawunti ukuba "KUGUNYAZIWE".

Kumzekelo wethu, ifayile ekuqaleni yayijongeka ngathi:

Emva kokuhlelwa kwabonakala ngathi:

3) Ukusebenzisa ubumbeko

Qhuba umyalelo

sudo systemctl restart resiprocate-turn-server

8.4. Ukumisela i-firewall ye-TURN iseva

Ngeli nqanaba, imithetho eyongezelelweyo ye-firewall efunekayo ekusebenzeni kwe-TURN server ifakwe. Kufuneka uvumele ufikelelo kwizibuko eziphambili apho umncedisi amkela izicelo, kunye noluhlu oluguquguqukayo lwamazibuko asetyenziswa ngumncedisi ukulungelelanisa imijelo yeendaba.

Amazibuko achazwe kwifayile /etc/reTurn/reTurnServer.config, kwimeko yethu yile:

Ukufakela imithetho ye-firewall, kufuneka usebenzise imiyalelo

sudo ufw allow 3478,49152:65535/udp
sudo ufw allow 3478,49152:65535/tcp

8.5. Ukuqwalasela ukusebenzisa umncedisi we-TURN kwiZimbra

Ukuqwalasela, i-FQDN yomncedisi isetyenzisiweyo, umncedisi we-TURN, owenziwe kwinqanaba le-1.2 lomhlathi we-1, kwaye kufuneka isonjululwe ngamaseva e-DNS kunye nedilesi ye-IP kawonkewonke kuzo zombini izicelo ezivela kwi-Intanethi kunye nezicelo ezivela kwiidilesi zangaphakathi.

Jonga ubumbeko lwangoku lwe "zxsuite iqela iceServer fumana" uqhagamshelwano oluqhutywa phantsi komsebenzisi we-zimbra.

Ngolwazi oluthe kratya malunga nokucwangcisa ukusetyenziswa komncedisi we-TURN, bona icandelo "Fakela iQela leZextras ukusebenzisa umncedisi we-TURN" amaxwebhu.

Ukuqwalasela, kufuneka usebenzise le miyalelo ilandelayo kwiseva yeZimbra:

sudo su - zimbra
zxsuite team iceServer add stun:<FQDN вашего сервера TURN>:3478?transport=udp
zxsuite team iceServer add turn:<FQDN вашего сервера TURN>:3478?transport=udp credential <пароль> username <имя пользователя>
zxsuite team iceServer add stun:<FQDN вашего сервера TURN>:3478?transport=tcp
zxsuite team iceServer add turn:<FQDN вашего сервера TURN>:3478?transport=tcp credential <пароль> username <имя пользователя>
zxsuite team iceServer add stun:<FQDN вашего сервера TURN>:3478
logout

Amaxabiso egama lomsebenzisi kunye negama lokugqitha, ngokulandelanayo, elichazwe kwinyathelo lesi-2 kwigatya lesi-8.3 lisetyenziswa njenge <igama lomsebenzisi> kunye <password>.

Kumzekelo wethu ibonakala ngolu hlobo:

9. Ukuvumela imeyile ukuba idlule kwiprotocol ye-SMTP

Ngokutsho uxwebhu, kwi-Yandex.Cloud, i-traffic ephumayo kwi-port ye-TCP 25 kwi-Intanethi kunye ne-Yandex Compute Cloud oomatshini benyani bahlala bevaliwe xa befunyenwe ngedilesi ye-IP yoluntu. Oku akusayi kukuthintela ekujongeni ukwamkelwa kweposi ethunyelwe isuka kwenye iseva yemeyile ukuya kwindawo eyamkelekileyo yeposi, kodwa kuya kukuthintela ekuthumeleni imeyile ngaphandle kweseva yeZimbra.

Amaxwebhu achaza ukuba i-Yandex.Cloud inokuvula i-TCP port 25 kwisicelo senkxaso ukuba uyathobela Izikhokelo zokusetyenziswa ezamkelekileyo, kwaye unelungelo lokuvala izibuko kwakhona xa kuphulwa imithetho. Ukuvula izibuko, kufuneka uqhagamshelane nenkxaso yeYandex.Cloud.

Isicelo

Ukwenza izitshixo ze-SSH kwi-openssh kunye ne-putty kunye nokuguqula izitshixo ukusuka kwi-putty ukuya kwifomathi evulekileyo

1. Kuyilwa izibini eziphambili ze-SSH

KwiWindows usebenzisa i-putty: sebenzisa i-puttygen.exe umyalelo kwaye ucofe iqhosha elithi "Yenza".

KwiLinux: sebenzisa umyalelo

ssh-keygen

2. Ukuguqula izitshixo ukusuka kwi-putty ukuya kwifomati ye-opensh

KwiWindows:

Ukulandelelana kwezenzo:

Qalisa inkqubo puttygen.exe.
Layisha iqhosha labucala kwifomathi yeppk, sebenzisa into yemenyu Ifayile → Layisha iqhosha labucala.
Ngenisa ibinzana lokugqithisa ukuba liyafuneka kweli qhosha.
Isitshixo sikawonke-wonke kwifomathi ye-OpenSSH iboniswe kwi-puttygen ngombhalo othi "Isitshixo sikawonke-wonke sokuncamathisela kwi-OpenSSH authorized_keys intsimi yefayile"
Ukuthumela ngaphandle isitshixo sabucala kwifomathi ye-OpenSSH, khetha Iinguqu → Thumela iqhosha le-OpenSSH kwimenyu ephambili
Gcina iqhosha labucala kwifayile entsha.

Kwi Linux

1. Faka iphakheji yezixhobo zePuTTY:

ku Ubuntu:

sudo apt-get install putty-tools

kunikezelo olufana neDebian:

apt-get install putty-tools

kunikezelo olusekwe kwi-RPM esekwe kwi-yum (CentOS, njl.):

yum install putty

2. Ukuguqula iqhosha labucala, sebenzisa umyalelo:

puttygen <key.ppk> -O private-openssh -o <key_openssh>

3. Ukwenza isitshixo sikawonke-wonke (ukuba kuyimfuneko):

puttygen <key.ppk> -O public-openssh -o <key_openssh.pub>

Isiphumo

Emva kokufakela ngokuhambelana neengcebiso, umsebenzisi ufumana iseva ye-imeyile ye-Zimbra elungiselelwe kwisiseko seYandex.Cloud kunye nokwandiswa kweZextras kunxibelelwano lwenkampani kunye nentsebenziswano kunye namaxwebhu. Izicwangciso zenziwe ngezithintelo ezithile kwindawo yokuvavanya, kodwa akunzima ukutshintshela ukufakela kwimodi yokuvelisa kwaye ungeze iinketho zokusebenzisa i-Yandex.Cloud yokugcina into kunye nabanye. Ngemibuzo malunga nokusasazwa kunye nokusetyenziswa kwesisombululo, nceda uqhagamshelane neqabane lakho leZextras - SVZ okanye abameli Yandex.Cloud.

Kuyo yonke imibuzo enxulumene neZextras Suite, ungaqhagamshelana noMmeli weZextras Ekaterina Triandafilidi nge-imeyile [imeyile ikhuselwe]

umthombo: www.habr.com

Ukusasazwa kwezikhululo zeofisi zeZextras/Zimbra kwiYandex.Cloud

Injongo yenqaku

Imigaqo nezithintelo

Inkcazo yenkqubo yokufakela inkqubo yeZextras/Zimbra kwinguqulelo "yeseva enye".

Isicelo

Isiphumo

Yongeza izimvo Phendula impendulo