hakurei.app/static/articles/grapheneos-servers.html
2022-11-27 06:05:55 -05:00

615 lines
25 KiB
HTML

<!DOCTYPE html>
<html lang="en" prefix="og: https://ogp.me/ns#">
<head>
<meta charset="utf-8"/>
<title>GrapheneOS servers | Articles | GrapheneOS</title>
<meta name="description" content="Documentation on GrapheneOS servers."/>
<meta name="theme-color" content="#212121"/>
<meta name="color-scheme" content="dark light"/>
<meta name="msapplication-TileColor" content="#ffffff"/>
<meta name="viewport" content="width=device-width, initial-scale=1"/>
<meta name="twitter:site" content="@GrapheneOS"/>
<meta name="twitter:creator" content="@GrapheneOS"/>
<meta property="og:title" content="GrapheneOS servers"/>
<meta property="og:description" content="Documentation on GrapheneOS servers."/>
<meta property="og:type" content="website"/>
<meta property="og:image" content="https://grapheneos.org/opengraph.png"/>
<meta property="og:image:width" content="512"/>
<meta property="og:image:height" content="512"/>
<meta property="og:image:alt" content="GrapheneOS logo"/>
<meta property="og:site_name" content="GrapheneOS"/>
<meta property="og:url" content="https://grapheneos.org/articles/grapheneos-servers"/>
<link rel="canonical" href="https://grapheneos.org/articles/grapheneos-servers"/>
<link rel="icon" href="/favicon.ico"/>
<link rel="icon" sizes="any" type="image/svg+xml" href="/favicon.svg"/>
<link rel="mask-icon" href="{{path|/mask-icon.svg}}" color="#1a1a1a"/>
<link rel="apple-touch-icon" href="/apple-touch-icon.png"/>
{{css|/main.css}}
<link rel="manifest" href="/manifest.webmanifest"/>
<link rel="license" href="/LICENSE.txt"/>
<link rel="me" href="https://grapheneos.social/@GrapheneOS"/>
{{js|/js/redirect.js}}
</head>
<body>
<header>
<nav id="site-menu">
<ul>
<li><a href="/"><img src="{{path|/mask-icon.svg}}" alt=""/>GrapheneOS</a></li>
<li><a href="/features">Features</a></li>
<li><a href="/install/">Install</a></li>
<li><a href="/build">Build</a></li>
<li><a href="/usage">Usage</a></li>
<li><a href="/faq">FAQ</a></li>
<li><a href="/releases">Releases</a></li>
<li><a href="/source">Source</a></li>
<li><a href="/history/">History</a></li>
<li><a href="/articles/">Articles</a></li>
<li><a href="/donate">Donate</a></li>
<li><a href="/contact">Contact</a></li>
</ul>
</nav>
</header>
<main id="grapheneos-servers">
<h1><a href="#grapheneos-servers">GrapheneOS servers</a></h1>
<p>This is a detailed list of the public GrapheneOS servers.</p>
<nav id="table-of-contents">
<h2><a href="#table-of-contents">Table of contents</a></h2>
<ul>
<li><a href="#grapheneos.org">GrapheneOS website</a></li>
<li><a href="#staging.grapheneos.org">Staging GrapheneOS website</a></li>
<li><a href="#releases.grapheneos.org">GrapheneOS release servers</a></li>
<li><a href="#grapheneos.network">GrapheneOS network servers</a></li>
<li><a href="#mail.grapheneos.org">GrapheneOS mail server</a></li>
<li><a href="#discuss.grapheneos.org">GrapheneOS discussion forum server</a></li>
<li><a href="#matrix.grapheneos.org">GrapheneOS Matrix server</a></li>
<li><a href="#ns1.grapheneos.org">GrapheneOS DNS servers</a></li>
<li><a href="#staging.ns1.grapheneos.org">Staging GrapheneOS DNS server</a></li>
<li><a href="#attestation.app">Attestation website and service</a></li>
<li><a href="#staging.attestation.app">Staging attestation website and service</a></li>
</ul>
</nav>
<section id="grapheneos.org">
<h2><a href="#grapheneos.org">GrapheneOS website</a></h2>
<ul>
<li><a href="https://github.com/GrapheneOS/grapheneos.org">Repository</a></li>
<li><a href="https://github.com/GrapheneOS/grapheneos.org/issues">Issue tracker</a></li>
</ul>
<p>Specs:</p>
<ul>
<li>3x OVH VPS vps2020-value-1-2-40</li>
<li>1 core</li>
<li>2 GB memory</li>
<li>40 GB NVMe SSD storage</li>
<li>250 Mbit/s bandwidth</li>
</ul>
<p>Domains:</p>
<ul>
<li>grapheneos.org</li>
<li>www.grapheneos.org</li>
<li>grapheneos.app</li>
<li>www.grapheneos.app</li>
<li>grapheneos.ca</li>
<li>www.grapheneos.ca</li>
<li>grapheneos.com</li>
<li>www.grapheneos.com</li>
<li>grapheneos.dev</li>
<li>www.grapheneos.dev</li>
<li>grapheneos.info</li>
<li>www.grapheneos.info</li>
<li>grapheneos.net</li>
<li>www.grapheneos.net</li>
<li>grapheneos.ovh</li>
<li>www.grapheneos.ovh</li>
<li>grapheneos.page</li>
<li>www.grapheneos.page</li>
<li>vanadium.app</li>
<li>www.vanadium.app</li>
<li>mta-sts.grapheneos.org</li>
<li>mta-sts.mail.grapheneos.org</li>
<li>mta-sts.grapheneos.app</li>
<li>mta-sts.grapheneos.ca</li>
<li>mta-sts.grapheneos.com</li>
<li>mta-sts.grapheneos.dev</li>
<li>mta-sts.grapheneos.info</li>
<li>mta-sts.grapheneos.net</li>
<li>mta-sts.grapheneos.ovh</li>
<li>mta-sts.grapheneos.page</li>
<li>mta-sts.vanadium.app</li>
</ul>
<p>IPs:</p>
<ul>
<li>198.27.89.126 (0.grapheneos.org) — os-bhs2</li>
<li>2607:5300:201:3100::1aae (0.grapheneos.org) — os-bhs2</li>
<li>146.59.188.36 (1.grapheneos.org) — os-gra8</li>
<li>2001:41d0:304:200::a087 (1.grapheneos.org) — os-gra8</li>
<li>51.79.181.222 (2.grapheneos.org) — os-sgp2</li>
<li>2402:1f00:8000:800::25ba (2.grapheneos.org) — os-sgp2</li>
</ul>
<p>Ports:</p>
<ul>
<li>22 ssh - no passwords, SSHFP</li>
<li>80 http - HTTPS redirect only</li>
<li>443 https - static, DANE TLSA</li>
</ul>
</section>
<section id="staging.grapheneos.org">
<h2><a href="#staging.grapheneos.org">Staging GrapheneOS website</a></h2>
<ul>
<li><a href="https://github.com/GrapheneOS/grapheneos.org">Repository</a></li>
<li><a href="https://github.com/GrapheneOS/grapheneos.org/issues">Issue tracker</a></li>
</ul>
<p>Specs:</p>
<ul>
<li>OVH VPS vps2020-starter-1-2-20</li>
<li>1 core</li>
<li>2 GB memory</li>
<li>20 GB SATA SSD storage</li>
<li>100 Mbit/s bandwidth</li>
</ul>
<p>Domains:</p>
<ul>
<li>staging.grapheneos.org</li>
</ul>
<p>IPs:</p>
<ul>
<li>51.222.140.11 — os-bhs6</li>
<li>2607:5300:205:200::a23 — os-bhs6</li>
</ul>
<p>Ports:</p>
<ul>
<li>22 ssh - no passwords, SSHFP</li>
<li>80 http - HTTPS redirect only</li>
<li>443 https - static, DANE TLSA</li>
</ul>
</section>
<section id="releases.grapheneos.org">
<h2><a href="#releases.grapheneos.org">GrapheneOS release servers</a></h2>
<p>These are the static file servers for GrapheneOS releases and our app
repository. These are used by the releases page and web installer along with the
System Updater and Apps (app repository client) within the OS.</p>
<ul>
<li><a href="https://github.com/GrapheneOS/releases.grapheneos.org">Repository</a></li>
<li><a href="https://github.com/GrapheneOS/releases.grapheneos.org/issues">Issue tracker</a></li>
</ul>
<p>Specs:</p>
<ul>
<li>8x OVH VPS vps2020-elite-8-8-160</li>
<li>8 core</li>
<li>8 GB memory</li>
<li>160 GB NVMe SSD storage</li>
<li>2000 Mbit/s bandwidth</li>
</ul>
<p>Domains:</p>
<ul>
<li>releases.grapheneos.org</li>
<li>seamlessupdate.app</li>
<li>www.seamlessupdate.app</li>
<li>mta-sts.seamlessupdate.app</li>
<li>apps.grapheneos.org</li>
</ul>
<p>IPs:</p>
<ul>
<li>142.4.204.63 (0.releases.grapheneos.org) — os-bhs2</li>
<li>2607:5300:201:3100::6210 (0.releases.grapheneos.org) — os-bhs2</li>
<li>142.4.205.198 (1.releases.grapheneos.org) — os-bhs6</li>
<li>2607:5300:205:200::2441 (1.releases.grapheneos.org) — os-bhs6</li>
<li>51.222.228.120 (2.releases.grapheneos.org) — os-bhs6</li>
<li>2607:5300:205:200::3f46 (2.releases.grapheneos.org) — os-bhs6</li>
<li>51.222.228.121 (3.releases.grapheneos.org) — os-bhs6</li>
<li>2607:5300:205:200::39fe (3.releases.grapheneos.org) — os-bhs6</li>
<li>51.255.149.102 (4.releases.grapheneos.org) — os-gra8</li>
<li>2001:41d0:304:200::14ff (4.releases.grapheneos.org) — os-gra8</li>
<li>51.255.119.223 (5.releases.grapheneos.org) — os-gra8</li>
<li>2001:41d0:304:200::a687 (5.releases.grapheneos.org) — os-gra8</li>
<li>51.195.34.205 (6.releases.grapheneos.org) — os-de2</li>
<li>2001:41d0:701:1100::2ec9 (6.releases.grapheneos.org) — os-de2</li>
<li>135.125.177.39 (7.releases.grapheneos.org) — os-de2</li>
<li>2001:41d0:701:1100::3e56 (7.releases.grapheneos.org) — os-de2</li>
</ul>
<p>Ports:</p>
<ul>
<li>22 ssh - no passwords, SSHFP</li>
<li>80 http - HTTPS redirect only</li>
<li>443 https - static, DANE TLSA</li>
</ul>
</section>
<section id="grapheneos.network">
<h2><a href="#grapheneos.network">GrapheneOS network servers</a></h2>
<p>These are the default servers used by GrapheneOS for connectivity checks,
secure network time, attestation key provisioning and Predicted Satellite Data
Service (PSDS). These either serve empty responses or provide reverse proxies to
other services.</p>
<ul>
<li><a href="https://github.com/GrapheneOS/grapheneos.network">Repository</a></li>
<li><a href="https://github.com/GrapheneOS/grapheneos.network/issues">Issue tracker</a></li>
</ul>
<p>Specs:</p>
<ul>
<li>3x OVH VPS vps2020-value-1-2-40</li>
<li>1 core</li>
<li>2 GB memory</li>
<li>40 GB NVMe SSD storage</li>
<li>250 Mbit/s bandwidth</li>
</ul>
<p>Domains:</p>
<ul>
<li>grapheneos.network</li>
<li>connectivitycheck.grapheneos.network</li>
<li>www.grapheneos.network</li>
<li>grapheneos.online</li>
<li>connectivitycheck.grapheneos.online</li>
<li>www.grapheneos.online</li>
<li>connectivitycheck.grapheneos.org (legacy)</li>
<li>connectivity.grapheneos.org (legacy)</li>
<li>mta-sts.grapheneos.network</li>
<li>mta-sts.grapheneos.online</li>
<li>google.psds.grapheneos.org</li>
<li>remoteprovisioning.grapheneos.org</li>
<li>time.grapheneos.org</li>
</ul>
<p>IPs:</p>
<ul>
<li>167.114.34.100 (0.grapheneos.network) — os-bhs6</li>
<li>2607:5300:205:200::b44 (0.grapheneos.network) — os-bhs6</li>
<li>146.59.188.59 (1.grapheneos.network) — os-gra8</li>
<li>2001:41d0:304:200::df95 (1.grapheneos.network) — os-gra8</li>
<li>51.79.181.226 (2.grapheneos.network) — os-sgp2</li>
<li>2402:1f00:8000:800::e14 (2.grapheneos.network) — os-sgp2</li>
</ul>
<p>Ports:</p>
<ul>
<li>22 ssh - no passwords, SSHFP</li>
<li>80 http - no content, returns 204 response code for /generate_204 and /gen_204, HTTPS redirect for other URLs</li>
<li>443 https - no content, returns 204 response code for /generate_204 and /gen_204, DANE TLSA</li>
</ul>
</section>
<section id="mail.grapheneos.org">
<h2><a href="#mail.grapheneos.org">GrapheneOS mail server</a></h2>
<ul>
<li><a href="https://github.com/GrapheneOS/mail.grapheneos.org">Repository</a></li>
<li><a href="https://github.com/GrapheneOS/mail.grapheneos.org/issues">Issue tracker</a></li>
</ul>
<p>Specs:</p>
<ul>
<li>OVH VPS vps2020-value-1-2-40</li>
<li>1 core</li>
<li>2 GB memory</li>
<li>40 GB NVMe SSD storage</li>
<li>250 Mbit/s bandwidth</li>
</ul>
<p>Domains:</p>
<ul>
<li>mail.grapheneos.org</li>
</ul>
<p>IPs:</p>
<ul>
<li>192.99.98.22 — os-bhs6</li>
<li>2607:5300:205:200::94f — os-bhs6</li>
</ul>
<p>Ports:</p>
<ul>
<li>22 ssh - no passwords, SSHFP</li>
<li>25 smtp - DANE TLSA</li>
<li>465 submissions - AUTH only, DANE TLSA</li>
<li>993 imaps - DANE TLSA</li>
</ul>
</section>
<section id="discuss.grapheneos.org">
<h2><a href="#discuss.grapheneos.org">GrapheneOS discussion forum server</a></h2>
<ul>
<li><a href="https://github.com/GrapheneOS/discuss.grapheneos.org">Repository</a></li>
<li><a href="https://github.com/GrapheneOS/discuss.grapheneos.org/issues">Issue tracker</a></li>
</ul>
<p>Specs:</p>
<ul>
<li>OVH VPS vps2020-essential-2-4-40</li>
<li>2 core</li>
<li>4 GB memory</li>
<li>40 GB NVMe SSD storage</li>
<li>500 Mbit/s bandwidth</li>
</ul>
<p>Domains:</p>
<ul>
<li>discuss.grapheneos.org</li>
</ul>
<p>IPs:</p>
<ul>
<li>51.161.11.34 — os-bhs6</li>
<li>2607:5300:205:200::3df — os-bhs6</li>
</ul>
<p>Ports:</p>
<ul>
<li>22 ssh - no passwords, SSHFP</li>
<li>80 http - HTTPS redirect only</li>
<li>443 https - static file server and reverse proxy to Flarum</li>
</ul>
</section>
<section id="matrix.grapheneos.org">
<h2><a href="#matrix.grapheneos.org">GrapheneOS Matrix server</a></h2>
<p>This server primarily runs the synapse Matrix server with PostgreSQL behind an
nginx web server. It also runs the mjolnir bot for moderation and matterbridge is
used to implement a bridge between Matrix, IRC and Telegram.</p>
<ul>
<li><a href="https://github.com/GrapheneOS/matrix.grapheneos.org">Repository</a></li>
<li><a href="https://github.com/GrapheneOS/matrix.grapheneos.org/issues">Issue tracker</a></li>
</ul>
<p>Specs:</p>
<ul>
<li>OVH VPS vps2020-comfort-4-8-160</li>
<li>4 core</li>
<li>8 GB memory</li>
<li>160 GB NVMe SSD storage</li>
<li>1000 Mbit/s bandwidth</li>
</ul>
<p>Domains:</p>
<ul>
<li>matrix.grapheneos.org</li>
<li>element.grapheneos.org</li>
</ul>
<p>IPs:</p>
<ul>
<li>51.222.17.122 — os-bhs6</li>
<li>2607:5300:205:200::26e1 — os-bhs6</li>
</ul>
<p>Ports:</p>
<ul>
<li>22 ssh - no passwords, SSHFP</li>
<li>80 http - HTTPS redirect only</li>
<li>443 https - reverse proxy to Synapse for matrix.grapheneos.org and static site providing Element for element.grapheneos.org, DANE TLSA</li>
</ul>
</section>
<section id="ns1.grapheneos.org">
<h2><a href="#ns1.grapheneos.org">GrapheneOS DNS servers</a></h2>
<ul>
<li><a href="https://github.com/GrapheneOS/ns1.grapheneos.org">Repository</a></li>
<li><a href="https://github.com/GrapheneOS/ns1.grapheneos.org/issues">Issue tracker</a></li>
</ul>
<p>Specs:</p>
<ul>
<li>2x OVH VPS vps2020-value-1-2-40</li>
<li>1 core</li>
<li>2 GB memory</li>
<li>40 GB NVMe SSD storage</li>
<li>250 Mbit/s bandwidth</li>
</ul>
<p>Domains:</p>
<ul>
<li>ns1.grapheneos.org</li>
<li>ns2.grapheneos.org</li>
</ul>
<p>IPs:</p>
<ul>
<li>144.217.195.151 (ns1.grapheneos.org) — os-bhs6</li>
<li>2607:5300:205:200::29e8 (ns1.grapheneos.org) — os-bhs6</li>
<li>46.105.58.84 (ns2.grapheneos.org) — os-gra8</li>
<li>2001:41d0:304:200::528 (ns2.grapheneos.org) — os-gra8</li>
</ul>
<p>Ports:</p>
<ul>
<li>TCP 22 ssh - no passwords, SSHFP</li>
<li>TCP 53 domain - DNS</li>
<li>UDP 53 domain - DNS</li>
</ul>
</section>
<section id="staging.ns1.grapheneos.org">
<h2><a href="#staging.ns1.grapheneos.org">Staging GrapheneOS DNS server</a></h2>
<ul>
<li><a href="https://github.com/GrapheneOS/ns1.grapheneos.org">Repository</a></li>
<li><a href="https://github.com/GrapheneOS/ns1.grapheneos.org/issues">Issue tracker</a></li>
</ul>
<p>Specs:</p>
<ul>
<li>OVH VPS vps2020-starter-1-2-20</li>
<li>1 core</li>
<li>2 GB memory</li>
<li>20 GB SATA SSD storage</li>
<li>100 Mbit/s bandwidth</li>
</ul>
<p>Domains:</p>
<ul>
<li>staging.ns1.grapheneos.org</li>
</ul>
<p>IPs:</p>
<ul>
<li>51.222.141.59 — os-bhs6</li>
<li>2607:5300:205:200::3afd — os-bhs6</li>
</ul>
<p>Ports:</p>
<ul>
<li>TCP 22 ssh - no passwords, SSHFP</li>
<li>TCP 53 domain - DNS</li>
<li>UDP 53 domain - DNS</li>
</ul>
</section>
<section id="attestation.app">
<h2><a href="#attestation.app">Attestation website and service</a></h2>
<ul>
<li><a href="https://github.com/GrapheneOS/AttestationServer">Repository</a></li>
<li><a href="https://github.com/GrapheneOS/AttestationServer/issues">Issue tracker</a></li>
</ul>
<p>Specs:</p>
<ul>
<li>OVH VPS vps2020-essential-2-4-80</li>
<li>2 core</li>
<li>4 GB memory</li>
<li>80 GB NVMe SSD storage</li>
<li>500 Mbit/s bandwidth</li>
</ul>
<p>Domains:</p>
<ul>
<li>attestation.app</li>
<li>www.attestation.app</li>
<li>mta-sts.attestation.app</li>
</ul>
<p>IPs:</p>
<ul>
<li>51.222.17.138 — os-bhs6</li>
<li>2607:5300:205:200::86a — os-bhs6</li>
</ul>
<p>Ports:</p>
<ul>
<li>22 ssh - no passwords, SSHFP</li>
<li>80 http - HTTPS redirect only</li>
<li>443 https - static + reverse proxy to attestation service, DANE TLSA</li>
</ul>
</section>
<section id="staging.attestation.app">
<h2><a href="#staging.attestation.app">Staging attestation website and service</a></h2>
<ul>
<li><a href="https://github.com/GrapheneOS/AttestationServer">Repository</a></li>
<li><a href="https://github.com/GrapheneOS/AttestationServer/issues">Issue tracker</a></li>
</ul>
<p>Specs:</p>
<ul>
<li>OVH VPS vps2020-starter-1-2-20</li>
<li>1 core</li>
<li>2 GB memory</li>
<li>20 GB SATA SSD storage</li>
<li>100 Mbit/s bandwidth</li>
</ul>
<p>Domains:</p>
<ul>
<li>staging.attestation.app</li>
</ul>
<p>IPs:</p>
<ul>
<li>51.79.54.178 — os-bhs6</li>
<li>2607:5300:205:200::1585 — os-bhs6</li>
</ul>
<p>Ports:</p>
<ul>
<li>22 ssh - no passwords, SSHFP</li>
<li>80 http - HTTPS redirect only</li>
<li>443 https - static + reverse proxy to attestation service, DANE TLSA</li>
</ul>
</section>
</main>
<footer>
<a href="/"><img src="{{path|/mask-icon.svg}}" width="512" height="512" alt=""/>GrapheneOS</a>
<ul id="social">
<li><a href="https://discuss.grapheneos.org/">Forum</a></li>
<li><a href="https://twitter.com/GrapheneOS">Twitter</a></li>
<li><a href="https://github.com/GrapheneOS">GitHub</a></li>
<li><a href="https://reddit.com/r/GrapheneOS">Reddit</a></li>
<li><a href="https://www.linkedin.com/company/grapheneos/">LinkedIn</a></li>
</ul>
</footer>
</body>
</html>