# Setting up YunoHost

Notes on setting up [[YunoHost]].


## Installation

Run install script on your new server.


### Post-installation


#### SSH

Removes SSH root access during installation which is good.  However doesn't give much more info about logging in as admin.  That should be key-based only as well, no?  Out-of-the-box it remains password-based.

I changed it be key-based by copying the key over with `ssh-copy-id`.

If you remove root login via SSH, you should set a root password so that you can log in as root via the virtual KVM.  ([[Hetzner]] is handy in that it lets you do this at any time without needing a reboot.)


#### Security

I think they could do more to encourage good security practices.  "You are now about to define a new admin password. The password should be at least 8 characters - though it is good practice to use longer password (i.e. a passphrase) and/or to use various kind of characters (uppercase, lowercase, digits and special characters)."


#### DNS

Had to look up how to add a SRV record correctly - luckily iwantmyname has it in knowledge base https://help.iwantmyname.com/hc/en-gb/articles/360014961418-How-do-I-add-an-SRV-record

Still not quite sure if I've done them all right.  Not too fussed about xmpp so it doesn't matter.


#### TLS

Go to Domains / <domain> / Manage SSL Certificate to install via Let's Encrypt.


#### Reverse DNS

Need to do reverse dns and don't know how. https://yunohost.org/#/dns_config


#### Misc

lastname must be a valid lastname???  I got this validation error when creating a user and using just my initial.  Surely you should be able to go anon if you want to.


#### LDAP

Seem to be having trouble with LDAP and baikal.


### Apps


#### syncthing

syncthing seems to work pretty easily (although ynh doesn't give you the big warning about changing the admin password like cloudron does.)


#### anarchism docs

easy one :)


####