RED SCARF Suite components

by Cover Tower - Updated November 9, 2021

Below is the list with all the components of RED SCARF Suite. The 8 components developed and maintained by Cover Tower are marked with the Cover Tower logo. The other 38 components are developed and maintained by other companies who own their names and logos. (You can find more about these companies by following the links to their official websites or Wikipedia pages, on the ‘info’ note of each application.)

The version of each application is very important, since not all versions function well together. When a new version of an application is released, we install and test it, to check if it functions well within the suite, if there are any conflicts, bugs, etc. Therefore, before you upgrade any component to a new version, it’s recommended to check if that version has been verified to function well within the suite and included on this list.

If you want to be informed when it’s safe to upgrade RED SCARF Suite components and when the instructions in the ‘Complete Guide to a Complete Linux Server’ get updated, you can subscribe to our newsletter.

11Debian 11 (bullseye) | Kernel: 5.10.0-9-amd64Debian is a Linux distribution consisting entirely of free software. Debian is recommended by its performance, stability, wealth of software packages, well-thought package management system and developer community dedicated to the free software philosophy. The real reason for its high quality, which made it the most popular operating system for servers, is the ethical standards that underpin its development, outlined in the famous Debian Social Contract, whose text can be read here. This is because ethical principles are always coupled with strong motivation and honest and sustained effort to improve the software, which in their turn lead to high technical finesse.
License
Website
Wikipedia
22Nginx 1.18.0Nginx is a free and open source web server that can also act as a reverse proxy, load balancer, mail proxy and HTTP cache server. Nginx uses an asynchronous event-driven approach to handling requests, rather than threads, like Apache. Nginx is by far better than Apache, mainly because it can handle a much larger number of concurent HTTP requests and because it uses dramatically less RAM memory. Nginx was built with the explicit goal of outperforming Apache and it does it overwhelmingly.
License
Website
Wikipedia
33MariaDB10.5.12MariaDB is a free and open source relational database management system (RDBMS), forked from MySQL. Development is led by some of the original developers of MySQL, who forked MySQL due to concerns over its acquisition by Oracle Corporation. MariaDB maintains high compatibility with MySQL (exact matching with MySQL commands and APIs and library binary parity), making it a drop-in replacement.
License
Website
Wikipedia
44PHP7.4PHP is a general-purpose programming language specifically suited for server-side web development. It's the most popular scripting language for web development because it's highly effective, easy to use, the code is easy to debug and maintain, it's highly compatible with many relational database management systems and the documentation is impressive. The real reason for its quality and unmatched success is the way it was born: it developed organically, out of practical necessities, by the incremental contributions of some outstanding minds with an in-depth understanding of real life programming. The remarkable speed improvements achieved with PHP 7 reaffirmed the tremendous future potential of PHP.
PHP License and Zend Engine License
Website
Wikipedia
55BIND9.11.5BIND is the most popular Domain Name System (DNS) software. It can be used as an authoritative name server for specific domains, as a recursive resolver for the general DNS system or as a DNS forwarder. It offers automatic DNSSEC zone signing and key management, response rate limiting (RRL) and recursive query limits to fight against distributed denial of service attacks, response policy zones (RPZ), multiprocessor support and many other DNS features. BIND also includes a number of administrative tools, such as the 'dig' and 'delv' DNS lookup tools, 'nsupdate' for dynamic DNS zone updates, 'rndc' for remote name server administration, etc.
License
Website
Wikipedia
66Fail2Ban 0.10.2Fail2ban is an intrusion prevention application that protects servers from brute-force attacks by monitoring log files and blocking IPs belonging to hosts that make too many failed log in attempts in a specified time interval. The number of failed log in attempts that trigger a ban, the time interval in which the failed log in attempts can occur and the ban time are all configurable. Fail2ban is an indispensable tool for protecting all network-facing applications that create access log files.
License
Website
Wikipedia
77ClamAV 0.102.4ClamAV is a free and open source antivirus software used for detecting viruses, trojans, malware and other types of malicious software. It can be used for on-demand or automated scanning of sensitive directories, for real-time scanning of incoming emails, etc. It offers a multi-threaded daemon, a command line scanner and a tool for periodically updating the virus signatures database.
License
Website
Wikipedia
88Postfix 3.4.14Postfix is a free and open source mail transfer agent (MTA). As an SMTP server, Postfix can implement a defense layer against spambots and malware by using complex access policies, and by integration with anti spam tools such as SpamAssassin. It is usually used in conjunction with a message-store access server such as Dovecot. As an SMTP client, Postfix acts as a parallelized mail-delivery engine. Postfix is fast, efficient, easy to administer, and secure if properly configured.
License
Website
Wikipedia
99Dovecot2.3.4.1Dovecot is a robust, secure and fast IMAP and POP3 server. It's easy to use and memory efficient. It acts as a mail storage server. Mail is delivered to Dovecot by a mail delivery agent (MDA) and is stored for later access with an email client. The email client (or mail user agent (MUA)) can be either a web application, like Roundcube, or a standalone program like Thunderbird. Dovecot includes a local delivery agent (LDA) and a LMTP server with Sieve filtering support.
License
Website
Wikipedia
1010Apache SpamAssassin 3.4.2Apache SpamAssassin is the most popular free and open source email spam filtering application. It's highly configurable and it can use different spam-detection techniques, such as blacklists, Bayesian filtering, online databases, external programs, DNS-based techniques and fuzzy-checksum-based spam detection. It can be easily integrated with mail servers for automatic filtering of incoming emails.
License
Website
Wikipedia
1111Postgrey 1.36Postgrey is a Postfix policy server that implements greylisting. When Postfix receives a mail delivery request from a sender that it does't recognize, the email will be rejected with a temporary error. If the email is legitimate, the sending server will try again after a few minutes, as is required by the SMTP specification, and if sufficient time has passed, the email will be accepted. Spam filtering tools and antivirus applications are intensive users of memory and CPU, so, stopping spam before it enters any filtering processes is an efficient way of reducing spam while sparing the server's hardware resources.
License
Website
1212Postfix Admin3.3.8Postfix Admin is a web based administration interface for Postfix based mail servers. It can be used to create and manage email domains, individual mailboxes, alias email addresses, etc. It requires PHP, a DBMS like MariaDB, Postfix and an IMAP/POP3 server, like Dovecot. It offers a command line client and has storage quota support.
License
Website
1313Roundcube1.4.11Roundcube is a web-based IMAP client with a desktop-like user interface which can be easily installed on a LEMP stack. It provides all the functionalities of a complete email client such as full support for MIME and HTML messages, threaded message listing, message searching, spell checking, address book, folder manipulation, canned response templates, multiple sender identities, support for GPG encryption, template system for custom skins, plug-in API for flexible extensions, etc.
License
Website
Wikipedia
1414Mailman2.1.29Mailman is an electronic mailing lists manager. Features include: a web interface for list administration, a customizable publicly-accessible web page for each mailing list, built-in message archiving, spam filtering, separate interfaces for users, moderators and administrators, support for multiple administrators and moderators for each list, per-list privacy features (closed-subscriptions, private archives, private membership rosters, sender-based posting rules), integrated bounce detection and automatic handling of bouncing addresses, etc.
License
Website
Wikipedia
1515phpList3.5.6phpList is a web application for sending mass emails such as marketing emails, newsletters, announcements, notifications, etc. to large lists of subscribers. phpList can be used to set up and schedule email campaigns that send one email to thousands or even millions of subscribers. Features include: web interface for editing messages, HTML/plain text support, email customization by using HTML templates, separate lists of subscribers for specific subscriber groups, email addresses can be imported from email accounts, databases, etc.
License
Website
Wikipedia
1616ProFTPD 1.3.6ProFTPD is a feature-rich and secure FTP server. It offers per directory access configuration, multiple virtual FTP servers and anonymous FTP services, hidden directories and files based on permissions or user/group ownership. In stand-alone mode it runs as a configurable non-privileged user in order to prevent attackers from exploiting its 'root' abilities. Its functionalities can be easily extended with modules.
License
Website
Wikipedia
1717phpMyAdmin5.1.0phpMyAdmin is the most popular web application for MySQL/MariaDB administration. It's written in PHP and it can be used to easily manage databases, tables, columns, relations, indexes, users, user priviledges, etc. Its web interface offers a more confortable interaction with MySQL/MariaDB databases than the command line, while also offering the ability to execute any SQL query in an embeded console. phpMyAdmin can be used to import or export databases in different formats, to manage databases on multiple servers, to create graphics of database layouts in various formats, to perform advanced searches, etc.
License
Website
Wikipedia
1818WordPress5.7WordPress is a feature-rich and versatile content management system (CMS). It is the best website management system not because it's perfect, but because it solves all the problems raised by website building and management in the simplest way, while respecting its users’ freedom. Nobody wants to spend additional time, patience and money to use complicated software and nobody likes software burdened with restrictions. Accompanied by its GPL license, a guarantee of its users’ freedom, WordPress grew into the most popular CMS and one of the best examples of how a high quality free and open source application can be developed using the ‘online collaboration on publicly available source code’ model. WordPress is not only a robust CMS, but an ecosystem with thousands of free themes and plugins. WordPress can be used for any type of website: large e-commerce websites, news websites, magazines, portofolio websites, blogs, etc.
License
Website
Wikipedia
1919WPS Hide Login1.8.5WPS Hide Login is a lightweight WordPress plugin that allows the site administrator to change the default login page name (wp-login.php) to any custom name. Changing the default login URL has been proved very effective in fighting against brute force attacks. Before beginning to try various passwords to fraudulently log in to one's admin area, an attacker has to first find the login URL, which is not trivial. If the administrator of the WordPress website also disabled logging in with email address (by installing the plugin 'No Login by Email Address'), the email address being easy to find by an attacker by looking at the contact page, etc., and the administrator also took the precaution to use a username difficult to guess (different from admin, administrator, webmaster, etc.), then any attacker trying to log in, will have three obstacles ahead: the first is to find the login URL, the second is to find the username and the third is to find the password.
License
Website
2020Nginx Cache1.0.5Nginx Cache is a plugin that automatically purges Nginx cache when the website content is changed. It is indispensable when using FastCGI cache because any time the content is edited, the visitors need to see the new edited content and not the old cached files. It also allows the administrator to purge the Nginx cache manually, by clicking 'Purge Cache' in the 'Nginx' menu located in the upper WordPress admin bar.
License
Website
2121WooCommerce4.7.1WooCommerce is a popular e-commerce plugin for WordPress. It offers all the features needed to build a professional, modern e-commerce website, it's easy to use and is designed so that PHP developers can easily extend its functionalities with custom made plugins. WooCommerce has become one of the leading e-commerce platforms because it solves all the problems associated with e-commerce in the simplest way, as compared with competing e-commerce platforms, while remaining easy to customize and respecting users' freedom.
License
Website
Wikipedia
2222Sync WooCommerce with Dolibarr1.0.0'Sync WooCommerce with Dolibarr’ is a WordPress plugin that acts as a bridge between WooCommerce and Dolibarr ERP/CRM. When a product is created in WooCommerce, it is automatically transferred to Dolibarr (along with its data and product categories). If an order is placed by a client in WooCommerce, the order is automatically transferred to Dolibarr (along with all the client’s data). This plugin also allows the admin to manually transfer products/orders/clients/registered users in bulk to Dolibarr. It offers an option to apply structured SKU numbers to all the products in the store. It also adds to the ‘Inventory’ section of products a ‘Generate SKU number’ button, a ‘Unit of measure’ field, where the admin can choose a unit of measure for the product, options to display the unit of measure on the shop page or on the single product page and cart page and a field for the warehouse name. Dolibarr has to be installed on the same machine as the WooCommerce website. This plugin is designed so that multiple WooCommerce websites can be connected to one Dolibarr instance, installed on the same machine.
License
Website
2323Dolibarr12.0.3Dolibarr is a powerful, well-structured and flexible free and open source ERP & CRM application. It has all the fuctionalities of a classic ERP & CRM application and is very easy to install, upgrade, use and customize. It has a modular structure, all the functionalities being implemented by separate modules which can be enabled/disabled at will. It can be used with multiple currencies, it's translated in many languages, it can be integrated with other applications, like Mailman, it offers ‘Point of Sale’ modules, it can be used to conduct polls/surveys, it has an import/export assistant, job scheduler, ticketing system, etc. Its functionalities can be further extended by installing additional modules. It even has a built-in module development wizard. Dolibarr is another good example of how honest FOSS principles can give birth to a complex application whose quality surpasses that of proprietary competitors, while respecting its users’ freedom.
License
Website
Wikipedia
2424Sync Dolibarr with WooCommerce1.0.0'Sync Dolibarr with WooCommerce’ is a Dolibarr module whose main function is to synchronize product stocks and order status between Dolibarr and WooCommerce. When the stock of a product increases/decreases in Dolibarr (by receiving purchased products, by validating shipments, by manually correcting the stock), the corresponding WooCommerce product stock is adjusted accordingly. Also, when an order that has been transferred from WooCommerce to Dolibarr is invoiced in Dolibarr, the status of that WooCommerce order is automatically changed to ‘Invoiced’. When the products listed on such an order are shipped to the customer and the shipment is validated in Dolibarr, the status of the corresponding WooCommerce order is changed to ‘Shipped/Completed/Pending payment’. The module also contains many customized PDF templates for orders and invoices, that can be used instead of the default PDF templates when viewing or printing such documents. It also adds some custom fields to products (such as ‘Site of origin’, ‘Downloadable’), to orders (such as ‘Delivery address’, ‘Customer note’) and to invoices (‘Delivery address’).
License
Website
2525Coturn4.5.1.1Coturn is both a 'Traversal Using Relays around NAT’ (TURN) server and a ‘Session Traversal Utilities for NAT’ (STUN) server. It can be managed in command line but also over telnet and HTTPS. It is feature-rich and supports many client-to-TURN-server protocols (UDP (per RFC 5766), TCP (per RFC 5766 and RFC 6062), TLS (per RFC 5766 and RFC 6062), DTLS, SCTP) and relay protocols (UDP (per RFC 5766), TCP (per RFC 6062)). As message integrity digest algorithms it supports HMAC-SHA1, with MD5-hashed keys and as TURN authentication mechanisms it supports long-term credentials, TURN REST API (a modification of the long-term mechanism, for time-limited secret-based authentication for WebRTC applications) and third-party oAuth-based client authorization. It has been included in ‘RED SCARF Suite’ to assist Nextcloud Talk during video communication sessions.
Coturn License and OpenSSL License
Website
2626Asterisk18.0.0Asterisk is a powerful and flexible free and open source private branch exchange (PBX) software. It is used to make phone calls between various types of endpoints, such as destinations on the 'public switched telephone network’ (PSTN), in-house telephone sets, devices and services on VoIP networks, etc. Features include: interactive voice response (IVR), voice mail, call queues, on-hold messages, automatic call distribution, conference calling, etc. Phone calls can be routed in various ways by using dial plans written in Asterisk’s extensions language. To extend its functionalities even further, users can add custom modules written in C or PHP. Also, external programs can communicate with Asterisk through the Asterisk Gateway Interface (AGI), to control specific telephony operations. Asterisk supports multiple VoIP protocols, such as the ‘Session Initiation Protocol’ (SIP), the ‘Media Gateway Control Protocol’ (MGCP), H.323, etc., as well as its own protocol: ‘Inter-Asterisk eXchange protocol’ (IAX). It can be used as a gateway between IP phones and the PSTN or as a gateway between VoIP services and WebRTC applications.
License
Website
Wikipedia
2727LibreOffice Online4.2.9-1LibreOffice Online is the online version of LibreOffice. Once installed on the server, users can access LibreOffice applications in a browser. The 'Collabora Online’ Nextcloud application integrates LibreOffice Online with Nextcloud, so that any user logged in to Nextcloud can open and edit any odt, ods, odp, docx, xlsx or pptx files inside Nextcloud. LibreOffice Online integrated into Nextcloud allows ‘collaborative editing’ in the sense that multiple Nextcloud users can view and edit documents simultaneously. In Nextcloud users can also create links that give access to documents to anonymous users with or without editing permission.
License
Website
2828Nextcloud20.0.4Nextcloud is a file sync and share application offering a variety of online collaboration tools, that turn it into a complete groupware solution. The server component can be installed on Linux VPSs, dedicated servers and even in shared hosting accounts. The client component, which is used to sync local files with Nextcloud, can be installed on all major operating systems. Nextcloud allows syncing files from desktop/laptop/tablet/phone, sharing them with other Nextcloud users or giving public access to them if needed. Hundreds of apps can be installed to extend the built-in functionalities. Thus, Nextcloud can be used to have chat, audio or video conversations, to manage calendars and tasks, to conduct surveys, to create forms, to mount external directories, to share files with other Nextcloud instances through 'federation sharing’, to edit office documents online, etc. Nextcloud is an excellent example of how a compnay dedicated to the free software philosophy can create a complex and flexible application that surpasses its proprietary competitors in terms of features and design. It’s also a proof that developing free and open source software is a financially viable option for companies.
License
Website
Wikipedia
2929External storage support 1.11.1This application allows connecting Nextcloud to local directories outside the web root, to external FTP servers, to other Nextcloud servers, WebDAV servers, etc. Access to the new storage location can be restricted to specific users or groups. After configuration, Nextcloud users will see a new folder in their root directory. They can access and use this folder like any other Nextcloud folder, creating, removing or sharing files with other users.
License
Website
3030Antivirus for files3.2.0This application integrates ClamAV antivirus with Nextcloud. After correctly configuring 'Antivirus for files’, any file uploaded to Nextcloud will be scanned with ClamAV. If a virus will be detected, the infected file will be deleted before being written to the Nextcloud storage and a notification will be displayed, informing the user about the detection.
License
Website
3131Calendar2.2.0The Calendar application implements a digital calendar that allows synchronizing events from various devices with Nextcloud and editing them online, inviting people to events, sending browser notifications or email reminders before events, seeing attendees' status, etc. It is integrated with the Contacts application and has WebCal support.
License
Website
3232Tasks0.13.6The Tasks application allows users to create tasks, add start and due dates, change display options, associate a status, a priority, show the degree of completion, add a category, add a description, add subtasks, etc. Tasks can be shared, they can be linked to a Nextcloud calendar and synchronized with local clients like Thunderbird (by adding the Nextcloud calendar as a remote calendar in the local client). Tasks can also be downloaded as ICS files using the download button for each calendar.
License
Website
3333Forms2.2.3Forms is a Nextcloud application that can be used to create forms containig various fields: long texts, short texts, checkboxes, radio buttons, drop-down lists. Once created, the forms can be shared with specific users or groups, with all registered users or made public. When creating the forms, an expiration date can be set. The answers submitted by users who fill out the forms can be viewed in Nextcloud or exported as csv files.
License
Website
3434Polls1.8.1Polls is an application that allows creating polls with title, description, expiration date, visible or hidden to other Nextcloud users, with results display options, shared with specific users, groups, or made public. If the owner of a poll shares it with a Nextcloud user, an email is automatically sent to that Nextcloud user, containing an invitation to participate in the poll.
License
Website
3535Collabora Online3.7.17Collabora Online is an application that integrates LibreOffice Online with Nextcloud. After correct installation and configuration of LibreOffice Online, this application allows users to open and edit odt, ods, odp, docx, xlsx or pptx files inside Nextcloud. Such documents can also be made public, with or without editing permission.
License
Website
3636SIP Trip Phone1.0.0SIP Trip Phone is a browser phone that connects to an Asterisk server to make and receive VoIP phone calls. It uses SIP over WebSocket and WebRTC. For calls to and from PSTN phone numbers, a 'telnyx.com’ or ‘localphone.com’ account is needed and a real phone number acquired from one of the two providers. SIP Trip Phone allows making and receiving phone calls to/from any mobile or landline phone, at lower rates than with regular phones. It allows making cheap international phone calls from phone numbers located in the same country as the receivers (who will be able to call those numbers and pay as for local calls). It can be used to make free calls over the Internet between extensions configured on the underlying Asterisk server. It logs recent phone calls and their duration, it can be used to pause/mute or transfer phone calls to different extensions configured on the same Asterisk server. Asterisk can be used to implement an IVR (Interactive Voice Response) and many advanced PBX features such as voicemail, queue management, music on hold, number blacklisting, call recording, audio conference calls, etc.
License
Website
3737SMS Relentless1.0.0This Nextcloud application connects to a 'telnyx.com’ or ‘plivo.com’ account to send and receive SMS messages. It needs at least an SMS enabled phone number acquired from Telnyx or Plivo. It allows sending and receiving SMS messages from a browser, using one or multiple phone numbers located in a country chosen by the admin. The numbers can be acquired from Telnyx or Plivo or from both. Users can send individual SMS messages to any SMS enabled phone numbers in the world, they can send SMS messages to multiple recipients by uploading ‘csv’ or ‘txt’ files containig the target phone numbers, they receive delivery receipts for sent SMS messages, they receive Nextcloud notifications and can also receive email notifications when new SMS messages arrive, they can list all the sent and received messages in paginated tables, filter all the messages by any table column, archive messages older then a specified time interval before deleting them, so that they become available for future viewing and analysis, list current balance and current phone numbers, set alphanumeric sequences as Sender IDs for sent SMS messages, etc.
License
Website
3838Pax Fax1.0.0This application allows sending and receiving faxes in Nextcloud by connecting to a 'phaxio.com’ account. A real fax number acquired from Phaxio is needed. Users can send up to 20 documents in each fax call (supported file formats are: pdf, doc, docx, odt, jpg, png, tif, txt, html), they can send faxes to 10 different fax numbers simultaneously, they can receive faxes as pdf documents in Nextcloud, they receive notifications in Nextcloud and can receive email notifications when new faxes arrive, they can list all the sent or received faxes and search for specific faxes by phone number or date, they can see the current balance and set one of the Phaxio numbers as caller ID for sent faxes, they can upload files to send as fax from their computer or choose them directly from Nextcloud, etc.
License
Website
3939Roundpin1.0.0Roundpin is a browser phone that connects to an Asterisk server to make and receive audio/video calls using WebRTC and SIP over WebSocket. For calls to and from mobile and landline phone numbers, a 'telnyx.com’ or ‘localphone.com’ account is needed and a real phone number acquired from one of the two providers. It can be used to have text, audio and video conversations with other extensions configured on the same Asterisk server and to make and receive audio phone calls to/from any phone number in the world. Video conferences with other extensions configured in Asterisk and even with external users who are not logged in to Roundpin can be started with two clicks. It logs recent phone calls and their duration, it allows pausing/muting and transferring phone calls as well as using an IVR (Interactive Voice Response) configured on the underlying Asterisk server. Asterisk can be used to implement advanced PBX features, such as voicemail, queue management, music on hold, number blacklisting, call recording, etc.
License
Website
Source code
Donate
4040MyBB1.8.26MyBB is a free and open source forum software recommended by its well-thought structure, features and flexibility. It allows admins to open/close/stick/unstick threads, move or copy threads, split and merge threads, merge selected posts together, merge users, send mass emails to users, ban users, add more user groups, it displays a 'who’s online’ list, it has a forum statistics page, a full text search engine, a customizable control panel, custom user permissions, ability to attach multiple files per post, quick moderation operations, email notification of new posts, creation of polls, quick reply box, report posts to moderators, etc. Its features can be further extended by choosing one of the hundreds of plugins available. Its appearance can also be changed by installing new themes.
License
Website
Wikipedia
4141Friendica2021.01Friendica is a decentralised social network platform. A Friendica installation functions as a network node that can interact with other Friendica nodes and even with other social network platforms. Friendica has built-in support for protocols such as ActivityPub, OStatus, diaspora* protocols, DFRN. This enables Friendica users to communicate with users of different other platforms from the 'Fediverse’: diaspora*, Mastodon, GNU social, Red, Hubzilla, StatusNet, Pleroma, Socialhome, pump.io, GangGo, etc. Full interaction with Twitter is also possible. Users can import content from arbitrary websites (including WordPress websites and Tumblr) into the social stream. They can write posts and edit them, they can comment, like/dislike posts from other contacts, reshare, use hashtags, share photos, set up events, they can have different public and private profiles; there are private conversation pages where communication is restricted to group members; one-to-one private messaging is also possible. Different addons can be installed to extend the built-in functionalities and different themes are available to change appearance.
License
Website
Wikipedia
4242OpenVPN 2.4.7OpenVPN implements virtual private network (VPN) techniques to create secure, encrypted network connections. It can be used in multiple scenarios, such as to encrypt Internet traffic to/from users connected through untrusted public access networks or to create encrypted connections over the Internet between private networks with different locations. It uses OpensSSL and TLS for key exchange. It can easily traverse NATs and firewalls. User authentication can be done by pre-shared secret keys, certificates or username and password. The OpenSSL library is used to encrypt both the data and the control channels. An additional layer of security can be added to the connection by using HMAC packet authentication. When a user wants to access the Internet from an untrusted public access network such as the Wi-Fi access point of a hotel, using a VPN is a must. OpenVPN allows installing a VPN server on one's own VPS or dedicated server, thus bringing real control, privacy and security to such connections.
License
Website
Wikipedia
4343Matomo4.2.1Matomo is an accurate and flexible web analytics application. It tracks visits to websites and applications and builds detailed reports and graphs for web traffic analysis. It can collect traffic data using the 'server log analytics method’ (access logs are parsed and traffic data is extracted and archived), the ‘JavaScript method’ (special JavaScript code is embedded into web pages), the ‘image tracking method’ (using ‘img’ HTML tags to make requests to Matomo URLs when web pages are loaded), or using client scripts that make requests to the Matomo tracking API. Matomo is very rich in features, yet its functionalities can be further extended by installing different plugins. When self-hosted, Matomo is a valuable replacement for third-party web analytics services, allowing maximum control over the program and over the collected data.
License
Website
Wikipedia
4444Backup-Manager 0.7.14Backup Manager is a powerful and easy-to-use tool for archiving important data on a server. It can create different types of archives: tar, tar.gz, tar.bz2, zip. The methods for building archives are: tarball, tarball-incremental, mysql, postgresql, svn, pipe. Archives are kept for a given number of days configured by the admin. Its upload feature can use FTP, SSH or RSYNC to transfer the generated archives to one or multiple remote hosts. It's also possible to automatically burn archives to removable media such as CDs or DVDs. Backup Manager can run in parallel mode, with different configuration files. This allows it to use different archiving methods for different directories and to create the archives with different frequencies.
License
Website
4545System Health and Security Probe1.0.0System Health and Security Probe is a program that runs periodically and sends a report email to the administrator if it detects at least one of the following problems: a) One or more services running on the host server are in failed state; b) The periodic ClamAV scan has detected any viruses in the mail directories or in the Nextcloud upload directories or the logs show recent virus detections in the incoming emails or in the files uploaded to Nextcloud; c) Any new IP address has been banned during the last run cycle interval due to repeated failed log in attempts against one of the applications monitored by Fail2ban; d) The free disk space on all partitions is less than a threashold established by the admin; e) The average CPU load in the last 15 minutes exceeded 100% utilization of all the CPU cores; It also stores all the IP addresses banned by Fail2ban in a MariaDB database and if one IP has been banned more than once, it includes the 'whois’ data for that IP in the email report. It also searches for the ‘abuse’ email address in the ‘whois’ data and writes a draft email that can be manually sent by the admin to the entity that owns the offending IP, to report the repeated attacks. The draft email includes the log lines containing the failed log in attepts for that IP. The program can also be configured to automatically send the abuse report email to the entity that owns the offending IPs that were banned more than once.
License
Website
4646RED SCARF Suite Panel1.0.0RED SCARF Suite Panel is an admin panel that displays all the components of RED SCARF Suite installed on the server, specifies if any services are in failed state, shows the available storage space and real time CPU, RAM and network ussage, lists the infected files detected by ClamAV during periodic scanning and offers a way to access with one click the customized, difficult to remember login URLs of any web application installed on the server. Its main purpose is to provide a general view of the server's capabilities and health status and to facilitate access to different login pages.
License
Website
ColorIndentation
blue squareKernel ComponentFirst LevelOperating system
purple squareShell ComponentSecond LevelApplications installed inside the operating system
green squareHull ComponentThird LevelApplications installed inside the preceding second level applications