open-productive-stack/README.md

Open Productive Stack

Overview

This repository contains a productive stack of open-source applications for team collaboration and communication. The stack includes:

Core Infrastructure

• Traefik: Edge router that handles routing and load balancing for all services
• PostgreSQL: Relational database for applications requiring PostgreSQL
• MariaDB: MySQL-compatible database for applications requiring MySQL
• Adminer: Database management tool for easy database administration

Mail

• Mailcow: Complete mail server solution with SMTP, IMAP, antivirus, and webmail

Collaboration Tools

• Nextcloud: Self-hosted file sync and share platform with collaboration features
• OnlyOffice: Online office suite for document editing and collaboration
• OpenProject: Project management and team collaboration software
• HedgeDoc: Collaborative markdown notes editor for team documentation

Web Publishing

• Drupal: Flexible content management system (CMS) for building websites

All components are containerized using Docker for easy deployment, scaling, and management, creating a complete productivity environment for teams.

Requirements

You need docker and with docker compose plugin. You may want to follow the post installation instructions.

At least 6 cores with 16GB RAM 100GB SSD would be sufficent.

Diagnostics

Run the unified diagnostics script from the repository root:

./diagnostic.sh

This combines the previous diagnostic.sh and health_check.sh checks.

Mail Security

Current Status

• ✅ SPF, DKIM, DMARC configured
• ✅ MTA-STS policy enforced (https://mta-sts.nasarek.dev/.well-known/mta-sts.txt)
• ✅ TLS-RPT configured
• ✅ TLS certificates valid on all mail ports
• ⚠️ DNSSEC: Enable at DNS provider and ensure DS/DNSKEY are published
• ⚠️ TLSA (DANE): Add records after DNSSEC is active (see /var/deploy/scripts/README-TLSA.md)

TLSA Record Automation

Automated TLSA record updates are available. See /var/deploy/scripts/README-TLSA.md for setup instructions.

The automation monitors certificate changes and updates TLSA records automatically when certificates are renewed.

Install

Prerequisites

1. Copy the env and docker-compose.override.yml to the service directories via the script.

Add your specific settings in set-config.sh, then:

./copy_overrides.bash

2. Set your env variables in ./core/.env, ./drupal/.env, ./gitlab/.env, ./hedgedoc/.env, ./onlyoffice/.env, ./nextcloud/.env, ./openproject/.env.

3. Generate mailcow config

cd mailcow
./geneare_config.bash

4. Copy config to .env

cp mailcow.conf .env

5. Create infrastructure via script:

./create_infra.bash

Core environment

1. Start traefik, mariadb, postgres and adminer with:

docker compose -f core/docker-compose.yml up -d

Drupal

1. Set your env variables in
2. Start Drupal containers.

docker compose -f drupal/docker-compose.yml up -d

Additional steps

You may want to use Redis Caching.

1. add to drupal/sites/default/settings.php:

// Redis Configuration
$settings['redis.connection']['interface'] = 'PhpRedis';
$settings['redis.connection']['host'] = 'redis';
$settings['redis.connection']['port'] = 6379;
$settings['cache']['default'] = 'cache.backend.redis';
$settings['cache']['bins']['bootstrap'] = 'cache.backend.chainedfast';
$settings['cache']['bins']['discovery'] = 'cache.backend.chainedfast';
$settings['cache']['bins']['config'] = 'cache.backend.chainedfast';

4. Visit your Domain and install Drupal site.

Gitlab

1. Start gitlab.

docker compose -f gitlab/docker-compose.yml up -d

2. Get your root password.

sudo docker exec -it gitlab grep 'Password:'
/etc/gitlab/initial_root_password

4. Visit you domain and log in.

Hedgedoc

1. Start containers.

docker compose -f hedgedoc/docker-compose.yml up -d

2. Add your user.

source hedgedoc/.env
docker exec hedgedoc bin/manage_users --pass ${HEDGEDOC_USER_PASSWORD} --add ${HEDGEDOC_USER_EMAIL}

Mailcow

1. Start containers.

docker compose docker-compose.yml up -d

4. Visit DOMAIN/admin and log in with admin:admin.

5. Consider the post installation steps, i. e.

watchdog dmarc dkim (You get your dkim key when you registered your email domain in mailcow ui)

OnylOffice

1. Start containers.

docker compose -f onlyoffice/docker-compose.yml up -d

Nextcloud

1. Start OnlyOffice first!
2. Start containers.

docker compose -f nextcloud/docker-compose.yml up -d

3. Visit nextcloud domain and login with your .env credentials.

Openproject

1. Start containers.

docker compose -f hedgedoc/docker-compose.yml up -d

2. Visit openproject domain and login with admin:admin and set new password.

Roadmap

• Tweak the core components and subservices for petter performance.
• More automatisation when installing the environment.
• Add more services
  • Matrix/Synapse + Element
• Fix all the Nextcloud errors

• Your web server is not properly set up to resolve .well-known URLs, failed on: /.well-known/webfinger For more details see the documentation ↗.