hongy19’s blog
move dovecot, opensmtpd, nginx from Archlinux to Ubuntu
I plan to move Archlinux at vultr to Ubuntu at Tencent.
-
firewall at Tencent,
- no need to convert iptables to ufw since Tencent cloud has firewall
- “在轻量数据库中,支持配置防火墙规则来控制访问权限,进行网络隔离以增强安全性。如果不配置防火墙规则,则表示不限制访问数据库的来源,未经授权的访问也可连接数据库。如果配置防火墙规则,限制了来源、协议以及端口,例如:配置来源为172.1.4.12、协议为TCP、端口为45,访问策略为允许,则表示仅允许来源为172.1.4.12,来自 TCP 协议且端口号为45的应用访问轻量数据库。”
- open Tencent firewall port: 80, 443; 25,465,587; 993
- Tencent not support send smtp email but it is Ok to receive email, see link
-
letsencrypt;
- sudo tar -cpzvf letsencrypt_archive.tar.gz -C /etc letsencrypt
- “-C /etc”: Change directory to /etc first (so the archive contains letsencrypt/ instead of full /etc/letsencrypt/ path)
- sudo tar -xzvpf letsencrypt_archive.tar.gz -C /etc
- sudo apt install certbot python3-certbot-nginx
- dpkg -L certbot
- sudo vim /usr/lib/systemd/system/certbot.service
- add “ExecStartPost=/bin/systemctl reload nginx.service ; /bin/systemctl restart smtpd ; /bin/systemctl restart dovecot” and sudo systemctl daemon-reload
- …
Openclaw installation and configuration
- openclaw:
- 2026.3.24 change plugin interface and many old plugin doesn’t work
- openclaw update
- Weibo official plugin:
- get appID and appSecret from 微博小龙虾
- dingtalk-connector for 钉钉:
- follow guideline.
- get useID from 钉钉管理后台
- get groupid from “openclaw logs”, @ robot at group and get following logs
- 2026-03-26T11:20:54.327Z warn [DingTalk:__default__] 群聊被拦截: conversationId=cidxxxxxxxxxxxxxxxxxxxxxxxx= 不在 groupAllowFrom 白名单中
- pinned version plugin upgrade
- backup openclaw.json
- openclaw plugins uninstall weibo-openclaw-plugin
- remove weibo in openclaw.json
- openclaw plugins install @wecode-ai/weibo-openclaw-plugin@2.0.1-beta.1
- add weibo in openclaw.json
- openclaw cron
- openclaw cron add –name “每周记忆整理” –cron “0 7 * * 1” –tz “Asia/Shanghai” –session isolated –message “整理最近 7 天的日志,提炼到长期记忆” –announce –channel weibo –to “1000000009”
- openclaw logs
- timestamp is UTC by default, openclaw logs –local-time
"weibo": {
"enabled": true,
"appId": "11111111111",
"appSecret": "786aaxxxxxxxxxxxxxxxxxxxxx522"
},
"dingtalk-connector": {
"enabled": true,
"clientId": "dingxxxxxxxxxxxxxxxxxxx",
"clientSecret": "CDxXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXjA",
"dmPolicy": "allowlist",
"allowFrom": ["000000000000000000000000000003"],
"groupPolicy": "allowlist",
"groupAllowFrom": ["cidxxxxxxxxxxxxxxxxxxxxxxxx="],
"requireMention": true
}
…
epub bookmark update
- rename sample.epub to sample.zip
- unzip sample.zip
- update OEBPS/toc.ncx
- in the folder which include “OEBPS”, “META-INF” and “mimetype”. not the folder which include folder sample
- zip -D -rX9 sample.epub * -x mimetype