2.3 KiB
title | date | draft | tags | authors | post | |||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
QuasselCore on Debian 11 | 2022-02-13 | false |
|
|
33 |
date: 2022-02-13
Introduction
After discovering how amazing wireguard vpn is on Android, I decided to move my quasselcore server off of Ramnode, where I was securing it with LetsEncrypt Certs, and instead run it on a double-natted kvm host on my home server where I could give it more ram and cpu, and back up the entire vm image to my backup-backup server using syncoid and zfs snapshots.
But there are a few little niggles, so I am writing it down.
Install Packages
apt install postgresql postgresql-contrib quasselcore libqt5sql5-psql apparmor-utils
stop quasselcore
systemctl stop quasselcore
allow quasselcore in apparmor
so quasselcore user can read it's own configuration directory
aa-complain /usr/bin/quasselcore
systemctl restart apparmor
postgresql socket connection
If you want to use Postgresql socket connection because
why wouldn't you, allow md5 authentication in pg_hba.conf
# /etc/postgresql/13/main/pg_hba.conf
local quassel quassel md5
systemctl restart postgresql
Copy the Postgresql Database
dump database on old/previous server
pg_dump -d quassel -f quasseldb.sql
create database on new server
postgres# CREATE USER quassel;
postgres# \password quassel
postgres# CREATE DATABASE quassel WITH OWNER quassel;
import database on new server
psql -d quassel -f quasseldb.sql
Configure QuasselCore
sudo quasselcore --configdir=/var/lib/quassel --select-backend=Postgresql
When prompted for postgresql host, you can use /var/run/postgresql
if
you want to use unix-socket.
Before starting quasselcore, make sure that all the files in /var/lib/quassel
are owned by quasselcore:quassel, and they might not be.
For other quasselcore
options you can type quasselcore -h
, but I chose to
use ufw to restrict the client port to the wireguard interface.
ufw allow in on wg1 to any port 4242
Connect
To connect to your new quasselcore
, open quassel client or quasseldroid
and simply change the host name.