Topic: [NEW HOWTO] Rocket.Chat

[guest22]

Got that, still npm under SCL still installs ONLY in the SCL environment. So as far as stock SME Server concerns, it is not effected AFAIK. Hence the enable command.

[Daniel B.]

It's not the fact that you use SCL. Npm install dependencies in the working directory of your project, not system wide. So indeed, you won't polute the system. But updates won't be managed automatically with yum, you'll have to use npm to do that

[guest22]

It's not the fact that you use SCL. Npm install dependencies in the working directory of your project, not system wide. So indeed, you won't polute the system. But updates won't be managed automatically with yum, you'll have to use npm to do that

Agree. One of the downsides of the upside of using SCL.

[Daniel B.]

It'd be the same without SCL (with the stock nodejs/npm). Here, SCL only gets a new enough node environment

[guest22]

Not completely correct. NPM packages are installed under the SCL environment (thus /opt/rh) structure. Stock SME Server will still not be effected.

[ReetP]

Quick update.

My contrib vaguely works.

However, after thinking I had written crap code it transpires that there are issues with email.js not sending mails in a RFC compliant format, or at least one that SME is happy with.

Two issues....

First is the'From' header is not set by email.js on the default install.... this can be modified once you have logged in. So your initial setup mail won't go through even though the account is setup.

Second is that email.js does not set a Date header. Double whammy... !

If I can figure some JS I'll try a patch and see if I can get it merged.

Onwards and upwards.... albeit slowly !

[ReetP]

OK - just posted at the meteor forums

https://forums.meteor.com/t/email-flagged-as-spam/5576/8

I don't get JS so any help gratefully received

[Daniel B.]

Unfortunately, even if required, this missing Date headers rejects more and more valid email. Newer version of qpsmtpd, and its headers checker plugin has disabled this requirement by default because too many legitimate email forget this one

[ReetP]

Well, I'm kind of getting there a bit but...

Code: [Select]

    mc = new MailComposer();

    # Set up the date
    var dateObj = new Date();

    # Convert to UTC - all good so far
    dateObj = dateObj.toUTCString();

    # Convert the date to a string (we could probably add it direct but..... don't know how)
    var newDate = String (dateObj);

    # Concatenate test and date
    newDate =  "date: " + newDate;

    # Add our header - trouble is knowing what is already in there - I don't know how to add to existing elements ??
    # This seems to work on a JS test but fails in email.js (or at least it fails to send with same error 552) - which I could debug it :-(
    object = {header: [newDate]};
   
    // setup message data
    mc.setMessageOption({
      from: options.from,
      to: options.to,
      cc: options.cc,
      bcc: options.bcc,
      replyTo: options.replyTo,
      subject: options.subject,
      text: options.text,
      html: options.html
    });

    _.each(options.headers, function (value, name) {
      mc.addHeader(name, value);
    });
    # blah....
Some notes from the JS file

 * @param {Object} options
 * @param {String} options.from "From:" address (required)
 * @param {String|String[]} options.to,cc,bcc,replyTo
 *   "To:", "Cc:", "Bcc:", and "Reply-To:" addresses
 * @param {String} [options.subject]  "Subject:" line
 * @param {String} [options.text|html] Mail body (in plain text and/or HTML)
 * @param {Object} [options.headers] Dictionary of custom headers

Oh for some perl

Time for bed Zebedee.... boinnnnnng

[ReetP]

Bit more thinking on this.... my guess is the object variable is in this type of format:

Code: [Select]

var options = {
    from: 'some person',
    to: 'someone else',
    cc: 'some cc',
    text: 'some text',
    headers: {
        date: 'date now',
        another: 'other data'
    }
};
You then get

options.from
options.to

etc etc

So the question is how do you add another element to the headers without losing what MAY be there ?

[ReetP]

Another issue I just fell over. Trying to enable https. Added webapps. Added the subdomain as per the wiki.

That connects fine through the proxy. However, I cannot generate a letsencrypt certificate for the host/domain

[root@test letsencrypt.sh]# letsencrypt.sh -c
# INFO: Using main config file /etc/letsencrypt.sh/config.sh
Processing chat.reetspetit.info with alternative names: reetspetit.info mail.reetspetit.info test.reetspetit.info www.reetspetit.info
 + Signing domains...
 + Generating private key...
 + Generating signing request...
 + Requesting challenge for chat.reetspetit.info...
 + Requesting challenge for reetspetit.info...
 + Requesting challenge for mail.reetspetit.info...
 + Requesting challenge for test.reetspetit.info...
 + Requesting challenge for www.reetspetit.info...
 + Responding to challenge for chat.reetspetit.info...
ERROR: Challenge is invalid! (returned: invalid) (result: {"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:unauthorized","detail":"Invalid response from http://chat.reetspetit.info/.well-known/acme-challenge/13x4OOCTg8YN8758RU4DK3Atbj2BLta_oslRQCidfgI [212.83.164.73]: 403"},"uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/z8VL-s91k-aiiAKmHX3jUPB3DRwM0NEVuDjDx3R34lk/72772938","token":"13x4OOCTg8YN8758RU4DK3Atbj2BLta_oslRQCidfgI","keyAuthorization":"13x4OOCTg8YN8758RU4DK3Atbj2BLta_oslRQCidfgI._IYt1sNfNVNxGFTcIFNdJOP9E8mKxnAdY8DKER_1h1M","validationRecord":[{"url":"http://chat.reetspetit.info/.well-known/acme-challenge/13x4OOCTg8YN8758RU4DK3Atbj2BLta_oslRQCidfgI","hostname":"chat.reetspetit.info","port":"80","addressesResolved":["212.83.164.73"],"addressUsed":"212.83.164.73"}]})

I guess the proxy is routing the request to something internal in RocketChat rather than to the standard Primary ibay / .well-known/acme-challenge

Any ideas on how to get round this ? Does the reverse proxy need an entire subdomain ? Will a host not do the job ?

[ReetP]

That may have to do with http://gitweb.firewall-services.com/?p=smeserver-webapps-common;a=patch;h=c200387012776f811e0b06408332add8535712eb

I think that is an older patch from looking at the git account and comparing to mine.

Seems with my letsencrypt contrib and webapps I cannot get a cert for chat.reetspetit.net - seems fubar'd

+ Responding to challenge for chat.reetspetit.info...
ERROR: Challenge is invalid! (returned: invalid) (result: {"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:unauthorized","detail":"Invalid response from http://chat.reetspetit.info/.well-known/acme-challenge/3e4wXyIVcpNDXeAZPirqHj624rpOe_xtqAQLDL5tLD8 [212.83.164.73]: 403"},"uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/dTtVq4BkM-wjr0r8nTX68Q2YE0VpuGAHS_IPbuoSBZQ/72935804","token":"3e4wXyIVcpNDXeAZPirqHj624rpOe_xtqAQLDL5tLD8","keyAuthorization":"3e4wXyIVcpNDXeAZPirqHj624rpOe_xtqAQLDL5tLD8._IYt1sNfNVNxGFTcIFNdJOP9E8mKxnAdY8DKER_1h1M","validationRecord":[{"url":"http://chat.reetspetit.info/.well-known/acme-challenge/3e4wXyIVcpNDXeAZPirqHj624rpOe_xtqAQLDL5tLD8","hostname":"chat.reetspetit.info","port":"80","addressesResolved":["212.83.164.73"],"addressUsed":"212.83.164.73"}]})

The section in httpd.conf looks like this

<VirtualHost 0.0.0.0:443>

    ServerName chat.reetspetit.info
    ServerAlias
    SSLEngine on
    RewriteEngine on
    RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
    RewriteRule .* - [F]
    # alias for Apache icons
    Alias /icons/ /var/www/icons/
    ProxyPass /.well-known/acme-challenge/ !
    ProxyPass / http://localhost:3000/
    ProxyPassReverse / http://localhost:3000/

I guess the '!' at the end of the line means ignore requests, but it seems it doesn't.

I also think that you should probably set the Content to Primary as that where .well-known/acme-challenge is ?

chat.reetspetit.info=domain
    Content=Primary

[DanB35]

@ReetP

I'm not sure what's going on with your setup (or mine, for that matter), but I was able to get an LE cert, using your RPM, after setting up the proxy.

[ReetP]

Yes I have realised I may have a separate issue.

* ReetP tosses away another VM !

[guest22]

FYI https://metacpan.org/pod/Net::RocketChat