move dovecot, opensmtpd, nginx from Archlinux to Ubuntu

Sun, 05 Apr 2026 14:52:00 +0000

I plan to move Archlinux at vultr to Ubuntu at Tencent.

firewall at Tencent,
- no need to convert iptables to ufw since Tencent cloud has firewall
- “在轻量数据库中，支持配置防火墙规则来控制访问权限，进行网络隔离以增强安全性。如果不配置防火墙规则，则表示不限制访问数据库的来源，未经授权的访问也可连接数据库。如果配置防火墙规则，限制了来源、协议以及端口，例如：配置来源为172.1.4.12、协议为TCP、端口为45，访问策略为允许，则表示仅允许来源为172.1.4.12，来自 TCP 协议且端口号为45的应用访问轻量数据库。”
- open Tencent firewall port: 80, 443; 25,465,587; 993
- Tencent not support send smtp email but it is Ok to receive email, see link
letsencrypt;
- sudo tar -cpzvf letsencrypt_archive.tar.gz -C /etc letsencrypt
- “-C /etc”: Change directory to /etc first (so the archive contains letsencrypt/ instead of full /etc/letsencrypt/ path)
- sudo tar -xzvpf letsencrypt_archive.tar.gz -C /etc
- sudo apt install certbot python3-certbot-nginx
- dpkg -L certbot
- sudo vim /usr/lib/systemd/system/certbot.service
- add “ExecStartPost=/bin/systemctl reload nginx.service ; /bin/systemctl restart smtpd ; /bin/systemctl restart dovecot” and sudo systemctl daemon-reload
nginx

Vps on Keep It Simple, Stupid