summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--account.mdwn36
-rw-r--r--account/commands.mdwn95
-rw-r--r--address/commands.mdwn2
-rw-r--r--address/setup.mdwn67
-rw-r--r--address/timeline.mdwn26
-rw-r--r--brokenlinks.mdwn3
-rw-r--r--files.mdwn15
-rw-r--r--files/intro.mdwn32
-rw-r--r--files/setup.mdwn74
-rw-r--r--index.mdwn7
-rw-r--r--internet.mdwn7
-rw-r--r--intro.mdwn50
-rw-r--r--intro/email.mdwn22
-rw-r--r--intro/sms.mdwn1
-rw-r--r--mail.mdwn17
-rw-r--r--mail/intro.mdwn37
-rw-r--r--mail/setup.mdwn107
-rw-r--r--orphans.mdwn3
-rw-r--r--quota.mdwn5
-rw-r--r--quota/intro.mdwn17
-rw-r--r--quota/setup.mdwn28
-rw-r--r--quota/use.mdwn46
-rw-r--r--redpill.mdwn25
-rw-r--r--redpill/admin.mdwn52
-rw-r--r--redpill/purpose.mdwn27
-rw-r--r--redpill/use.mdwn25
-rw-r--r--sitemap.mdwn3
27 files changed, 829 insertions, 0 deletions
diff --git a/account.mdwn b/account.mdwn
new file mode 100644
index 0000000..d5b21f9
--- /dev/null
+++ b/account.mdwn
@@ -0,0 +1,36 @@
+# Accounts
+
+Each user has a single, personal account.
+
+The account, and what it provides access to, is protected by a personal
+[[password]].
+
+
+## Personal resources
+
+Each account can have various personal resources attached:
+
+ * Email [[addresses]]
+ * Personal [[file_shares|files]]
+ * A personal [[homepage]]
+ * One or more [[websites]]
+
+
+## Shared services
+
+User accounts provide access to various shared resources:
+
+ * [[Mailinglists]]
+ * Collaborative [[file_shares|files]]
+ * [[Printers]]
+ * [[Addressbooks|addressbooks]]
+ * [[Calendars]]
+
+
+## Account administration
+
+User accounts are administered by the technical supporters using a set of
+[[account/commands]]
+
+New users are pointed to the [[intro]] page by [[intro/email]] and
+[[intro/sms]].
diff --git a/account/commands.mdwn b/account/commands.mdwn
new file mode 100644
index 0000000..c02c482
--- /dev/null
+++ b/account/commands.mdwn
@@ -0,0 +1,95 @@
+# Account maintainance commands
+
+Within commands below, Don't take square brackets, angle brackets and triple-dots literally:
+
+ * *< This >* should be replaced with your own info - including the angle brackets
+ * *[This]* is optional parts of the command - including the square brackets
+ * *...* means "repeat ad libitum" - leave it out or add more stuff similar to that right before the dots
+
+## Normal users
+
+### Create new account
+
+ 1. Pick a username:
+ * Start with the initials of the user
+ * Include also second letter of either first name or surname
+ * If necessary, add third letter of first name or surname (or a trailing number)
+ * The result should be practical (short and related to the name of the user) but must not be a nickname or initals: A username is comparable to the shape of a key - the user may get confused in every day use if it looks like a toy or jewelery!
+ 2. Create the account:
+
+ localadduser <username> <fullname> <cellphone> [<otherphone>] <addresshint> [<addresshint>...]
+
+ * Full name: Full name (Capital and small letters allowed, as is space and special characters, but no comma!)
+ * Cellphone: Cellphone number including country code but without other spaces. Like this: +45 40843136
+ * Addresshint: local part of email address, followed by @-sign, and optionally followed by mailgroup. Like these: jonas@ js@pool_of_maildomains
+ 3. Send an email based on [[intro/email.en]] skeleton:
+ * If an ouside working email address has been provided, then use that as recipient. Alternatively use the contact person of the new user (teacher, boss etc.) as recipient.
+ * Add \<username>@example.com as Cc:
+ * Add hostmaster@example.com as Bcc:
+ * Add teknik@lists.example.com as Reply-To:
+ 4. Send a cellphone text message based on [[intro/sms.en]], adding the the password spit out from the command above.
+
+TODO: Automate more: sending out sms and email should happen automatically.
+
+### Attach groups to account
+
+ 1. Attach the account to relevant organisational groups:
+
+ (user=<username>; for group in <group1> [<group2> ...]; do adduser $user $group; done)
+
+### Add/replace additional email addresses to account
+
+Use the following command to change hinting of an existing user account:
+
+ chfn <username>
+
+
+## Update email address info in smtp server
+
+ 1. Run this command:
+
+ localmaildomainprepare
+
+ 2. Check and correct warnings, and repeat above command.
+
+ 3. When satisfied with result, run this command:
+
+ localmaildomainupdate
+
+FIXME: localmaildomainupdate should email diff file to postmaster@example.com
+
+
+## Extend password lifespan
+
+If a user exceeds password lifespan, and still remembers the old password, the lifespan can be extended slightly to open a new window for changing it:
+
+ localresetpasswdexpiry <username>
+
+TODO: The above command should ideally emit an sms and/or email rewuesting the user to immediately change password
+
+## Reset password
+
+ 1. Reset the actual password using the following command:
+
+ localresetpasswd <username>
+
+ 2. Send a cellphone text message similar to the one for creating a new account.
+
+TODO: The above command should ideally emit an sms and/or email rewuesting the user to immediately change password
+
+## Warn about password expiry
+
+ 1. Notice log messages warning about passwords soon expiring
+ 2. Send a cellphone textmessage with the following content:
+
+ You must change your password - it soon expires! Read how and why at the web page http://support.redpill.dk/intro
+
+ Or in danish:
+
+ Du skal ændre din adgangskode - den udløber snart! Læs hvordan og hvorfor på websiden http://support.redpill.dk/intro
+
+TODO: Rewrite as automated syslog-ng plugin or cron script passing the message to an sms gateway.
+
+### Locate users with short password lifespan
+
+ (group=<gruppe>; echo $group:; for user in `members $group`; do chage -l $user|egrep -q '^Maximum:\[[:blank:]]*[0-9]{2}$' && printf $user'\t' && chage -l $user|egrep '^Password Expires:'; done)
diff --git a/address/commands.mdwn b/address/commands.mdwn
new file mode 100644
index 0000000..49eecca
--- /dev/null
+++ b/address/commands.mdwn
@@ -0,0 +1,2 @@
+# Directory services maintainance commands
+
diff --git a/address/setup.mdwn b/address/setup.mdwn
new file mode 100644
index 0000000..86242a2
--- /dev/null
+++ b/address/setup.mdwn
@@ -0,0 +1,67 @@
+# Setting up and using central addresses
+
+## Looking up addresses
+
+### Web access
+
+ * Public search page
+
+ * Horde webmail
+
+### Desktop applications
+
+ * Mozilla Thunderbird
+
+### Cell phone
+
+ * SMS lookup
+
+## Adding and editing
+
+### Web access
+
+ * Horde webmail
+
+### Desktop applications
+
+ * Directory assistant (Linux, MacOS w/ X11)
+
+## Exchanging data
+
+### Importing addresses
+
+#### Well-structured address databases
+
+Some address book applications can export entries as an LDIF file.
+This often means the data is well-structured and easy to feed into the central database.
+
+Import of LDIF files is supported from the following applications:
+
+ * Mozilla Thunderbird
+
+If you use a different application and it can export LDIF files, then try if it works.
+Tell us your experiences, so we can (maybe improve the import routines and) add it to this list.
+
+#### Other sources
+
+For applications that cannot export LDIF, first feed the data into an application that does,
+and then import from there.
+
+Here's a possible recipe for a list of addresses stored in an Excel spreadsheet:
+
+ 1. Remove noise (eg. non-tabular comments)
+ 2. Export as comma-separated file
+ * Use "Western european (ISO-8859-1)" as character codepage (not Unicode)
+ 3. Open Mozilla Thunderbird, and select "Import..." from the Tools menu
+ 4. Import addressbook, choose "Comma Separated" and open the exported data file
+ 5. Match Address Book fields with records to import
+ * Use "Display Name" as full name, if first and last name was not previously stored separately
+ * Use company fields for company info, if each previous record contained both company and contact person info
+ * Use custom fields for custom data (avoid reusing standard fields for new purposes!)
+ 6. Review the imported data now stored in a new Address Book
+ * Re-import if not satisfied: The field matching is remembered from last import
+ 7. Edit entries as needed
+ * Each personal entry *must* contain both first name and last name
+ * Each company-only entry must contain *no* personal data
+
+### Two-way syncronization
diff --git a/address/timeline.mdwn b/address/timeline.mdwn
new file mode 100644
index 0000000..1c32879
--- /dev/null
+++ b/address/timeline.mdwn
@@ -0,0 +1,26 @@
+# Timeline of (planned and effectuated) events relate to central address handling
+
+## TODO
+
+ * Public addressbook lookup through raw LDAP interface
+ * User-friendly access to public addressbook
+ * Integration with HORDE webmail framework
+ * Integration with Mozilla Thunderbird (documentation and possibly semi-automation)
+ * Web lookup page
+ * Wap lookup page
+ * SMS lookup routine
+ * Shared addressbooks for closed groups
+ * User-friendly access to shared addressbooks
+ * Integration with HORDE webmail framework
+ * Integration with Mozilla Thunderbird (documentation and possibly semi-automation)
+ * Web lookup page
+ * Wap lookup page
+ * SMS lookup routine
+ * Personal addressbooks (both discrete and public accessible)
+ * Semi-automated import (batch-adding) entries
+ * User-friendly access to adding and editing entries
+ * Integration with HORDE webmail framework
+ * Desktop apps (integration with system tools, use of generic tools, or design of custom tools)
+ * Web administration tool
+ * SMS add/overwrite routine
+ * Two-way syncronization with other personal (and shared?) directory databases
diff --git a/brokenlinks.mdwn b/brokenlinks.mdwn
new file mode 100644
index 0000000..20626bf
--- /dev/null
+++ b/brokenlinks.mdwn
@@ -0,0 +1,3 @@
+# Broken links
+
+[[brokenlinks ]]
diff --git a/files.mdwn b/files.mdwn
new file mode 100644
index 0000000..ce2f843
--- /dev/null
+++ b/files.mdwn
@@ -0,0 +1,15 @@
+# Overview of file sharing info
+
+Each user [[account]] provides access to personal and shared files.
+
+
+## Setup
+
+ * Short [[files/intro]] to accessing file shares
+ * [[Configuration|files/setup]] more detailed
+
+
+## Use
+
+ * The file shares are restricted by a disk [[quota]]
+ * [[Problem]] reporting
diff --git a/files/intro.mdwn b/files/intro.mdwn
new file mode 100644
index 0000000..a6ff55e
--- /dev/null
+++ b/files/intro.mdwn
@@ -0,0 +1,32 @@
+# Introduction to filesharing
+
+Your account at [[template id=realm]] provides access to file shares. Some
+personal shares and some shares common to the groups you are member of.
+
+
+## Access from Macintosh
+
+ 1. Change to the application "Finder" (switch to the desktop)
+ 2. Choose "Go" from the menu, and then "Connect to server..." at the bottom
+ 3. Type in the server address **[[template id=filehost]]**
+ 3. Provide your username and password
+ 4. Choose the file shares to use
+
+
+## Access from Windows
+
+ 1. Download and install the application [WinSCP](http://winscp.org/)
+ 2. Start the application "WinSCP"
+ 3. Type in the server address **[[template id=filehost]]**, and
+ your username and password
+ 4. Work only in the supfolders containing normal documents!
+
+/!\ Contact your technicians if you need access to **shared** documents from
+Windows, as it requires a few adjustments on the server.
+
+
+## More info
+
+ * [[Setup]] more detailed.
+ * [[Overview|files]] of filesharing info.
+ * [[Overview|account]] of possibilities with your account.
diff --git a/files/setup.mdwn b/files/setup.mdwn
new file mode 100644
index 0000000..fde80bd
--- /dev/null
+++ b/files/setup.mdwn
@@ -0,0 +1,74 @@
+# Filesharing setup
+
+[[File_shares|intro]] is accessible in different ways. Via the
+Macintosh-friendly **afp** or the more generic **sftp**.
+
+
+## Macintosh-friendly access (afp)
+
+The easiest method is using the "Apple Filesharing Protocol", **afp**.
+It is integrated in both MacOS X and the older MacOS Classic, and provides
+separate access to each personal and group share.
+
+
+ 1. Open filesharing:
+ * With MacOS X choose "Connect to server..." from the desktop.
+ * With MacOS Classic choose "AppleShare" from "Chooser" in the apple
+ menu.
+
+ 2. Connect to the server **[[template id=filehost]]**
+
+ 3. Log on using your personal access info, and choose the file shares
+ you want bound to your machine.
+
+Alternatively in some cases, e.g. with the MacOS X web-browser Safari,
+you can double-click the address <afp://[[template id=filehost]]>
+
+When finished using the shares, "eject" it by dropping it in the trash
+can.
+
+
+## General access (sftp)
+
+Windows and Linux unfortunately cannot (in a simple way) use afp, and
+their own similar builtin methods are either too insecure (ftp, nfs) or
+problematic to get to work through the Internet (smb).
+
+The alternative SSH-based **sftp** works on all three platforms with a helper
+application installed:
+
+ 1. Use an sftp application:
+ * With Windows the Free Software application
+ [WinSCP](http://winscp.org/) is recommended.
+ * With MacOS X the Free Software application
+ [Fugu](http://rsug.itd.umich.edu/software/fugu/) is recommended.
+ * With MacOS X for terminal use you can use the builtin command line
+ tool "sftp".
+ * With MacOS Classic you can use the shareware application
+ [MacSFTP](http://pros.orange.fr/chombier/MacSFTP/SFTP_info.html)
+ * With Linux on X11 desktop, both Gnome and KDE have sftp support builtin.
+ * With Linux on a text terminal, the application "Midnight Commander" (the
+ command "mc") is recommended.
+
+ 2. Type in the server address **[[template id=filehost]]**, and your personal
+ access info.
+
+Alternatively your can in some cases double-click the address
+<sftp://[[template id=filehost]]>
+
+/!\ Sftp provides access to all of your personal account, without any
+userfriendly wrapping. Avoid moving around folders and files you do not
+know what is. For example the "Maildir" folder, containing all of your
+emails.
+
+Sftp only provides access to your personal account. With some adjustment
+on the server you can also be granted access to some types of group
+shares as well. If you can only access personal file shares using sftp, and you
+need access to group shares too, then please tell your technicians to adjust
+your access on the server.
+
+
+## More info
+
+ * [[Overview|files]] of filesharing info.
+ * [[Overview|account]] of possibilities with your account.
diff --git a/index.mdwn b/index.mdwn
new file mode 100644
index 0000000..1f1a7e6
--- /dev/null
+++ b/index.mdwn
@@ -0,0 +1,7 @@
+# ICT documentation
+
+This is ICT documentation for [[template id=realm]].
+
+Please go read the [[intro]].
+
+Or have a look at the [[sitemap]].
diff --git a/internet.mdwn b/internet.mdwn
new file mode 100644
index 0000000..6538464
--- /dev/null
+++ b/internet.mdwn
@@ -0,0 +1,7 @@
+# Internet
+
+Internet is the Babel tower of computers - a substantial set of rules for
+common language and behaviour, independent from oddities of each participating
+computer.
+
+In other words, Internet is but a very effective communications tool.
diff --git a/intro.mdwn b/intro.mdwn
new file mode 100644
index 0000000..05bdfeb
--- /dev/null
+++ b/intro.mdwn
@@ -0,0 +1,50 @@
+# Introduction to using [[template id=realm]]
+
+As a user of [[template id=realm]] you have been given an "account". You have
+received a "username" (probably by email), and a password (probably by
+cellphone text message).
+
+The password you received has only a short lifespan, and **must** be changed
+soon.
+
+
+## Pick a good password
+
+Invent something impossible to guess, yet easy to remember.
+
+ * Avoid personal info. Don't use your mother's birthday or your pet cat.
+ * Avoid plain words. Gibberish mixed with mumbo jumbo is much better (robots
+ use dictionaries!).
+
+Suggestion: Think of a phrase - e.g. a poem or a song. Pick first letter of
+each word. Add a number. Gibberish in itself, but easy (for you) to
+remember/recreate.
+
+
+## Save your password in your head only
+
+Your password is strictly personal.
+
+ * Do not write it down.
+ * Do not **ever** reveal it to anyone. Not a friend, your boss, the police, me
+ or other technicians.
+ * Be proud if you forget your password: That means you picked a strong
+ password :-)
+
+If you loose or reveal your password then just report it, and a new one is
+created for you (and texted to you, if your cellphone number is known to the
+system).
+
+
+## Change your password
+
+You may change your password using the webmail:
+
+ 1. Log into the webmail application "IMP" at [[template id=webmailurl]]
+ 2. Go to the tool with a locker icon
+
+
+## More info
+
+ * [[mail/Intro]] to start using email
+ * [[Overview|account]] of possible uses of your account
diff --git a/intro/email.mdwn b/intro/email.mdwn
new file mode 100644
index 0000000..0bc8f2c
--- /dev/null
+++ b/intro/email.mdwn
@@ -0,0 +1,22 @@
+ Hi <fullname>
+
+ A personal account has been added for you at [[template id=realm]].
+
+ Your username is "<username>". Password will be sent through cellphone text message.
+
+ The account is used for email addresses and other personal services. Currently
+ the following email address(es) has been attached:
+ <addresses>
+
+ NB! Password lasts only 14 days - read here how to change it:
+
+ http://[[template id=supporthost]]/intro
+
+ Same place you can also read about setup and possibilities with your account
+ - more email adresses, subscribing to mailinglists etc.
+
+
+ Kind regards,
+
+ <me>
+ Technical supporter at [[template id=realm]]
diff --git a/intro/sms.mdwn b/intro/sms.mdwn
new file mode 100644
index 0000000..f32bba1
--- /dev/null
+++ b/intro/sms.mdwn
@@ -0,0 +1 @@
+ Here is a temporary password for your account. You MUST change it within 14 days: Read the web page http://[[template id=supporthost]]/intro . Password: <password>
diff --git a/mail.mdwn b/mail.mdwn
new file mode 100644
index 0000000..e409e67
--- /dev/null
+++ b/mail.mdwn
@@ -0,0 +1,17 @@
+# Overview of email documentation
+
+Each user [[account]] is an email account - with one ore more email
+[[addresses]] attached.
+
+
+## Setup
+
+ * Short [[mail/intro]] to start using email
+ * [[Configuration|mail/setup]] more detailed
+
+
+## Use
+
+ * Dealing with disk [[quota]]
+ * Subscribing to and and using [[mailinglists]]
+ * [[Problem]] reporting
diff --git a/mail/intro.mdwn b/mail/intro.mdwn
new file mode 100644
index 0000000..6192b82
--- /dev/null
+++ b/mail/intro.mdwn
@@ -0,0 +1,37 @@
+# Email introduction
+
+Your account at [[template id=realm]] has at least one email address attached.
+
+Additional addresses can be added on request. Some may already be added.
+
+All incoming emails are stored in your account inbox, no matter what email
+address was addressed.
+
+
+## Webmail
+
+Webmail is at [[template id=webmailurl]]
+
+This is ready to use as is - no additional setup required to get started.
+
+
+## Local email application
+
+"Real" email applications require some configuration to work.
+
+Here's a short summary of the needed setup:
+
+ * Email server is **[[template id=mailhost]]**, for both incoming and outgoing
+ services.
+ * Incoming email is reachable through **pop3** and **imap**. Imap is
+ recommended for most cases.
+ * Outgoing email is accepted through secure smtp on port **465** (not the
+ regular port 25).
+ * You MUST use password **authentication** for all email services (also smtp).
+
+
+## More info
+
+ * [[Setup]] more detailed
+ * [[Overview|mail]] of email-related info
+ * [[Overview|account]] of uses of your account
diff --git a/mail/setup.mdwn b/mail/setup.mdwn
new file mode 100644
index 0000000..6c4f363
--- /dev/null
+++ b/mail/setup.mdwn
@@ -0,0 +1,107 @@
+# Setting up your personal email account
+
+As a user at [[template id=realm]] you have been given a single [[account]].
+Tied to this account is an email address (or possibly more than one).
+
+All incoming emails are delivered to the inbox of your personal account (ie.
+same location no matter if you have more addresses attached).
+
+
+## Webmail setup
+
+Webmail is probably the simplest way to reach your emails. Somewhat like
+HoTMaiL but without advertisements.
+
+The website [[template id=webmailurl]] offers several webmail applications,
+each with different strengths and weaknesses.
+
+The topmost of the webmail applications, IMP, is recommended, due to its most
+complete functionality. It provides access to changing your account
+[[password]].
+
+Same website also lists some alternative websites also offering webmail access
+to accounts at [[template id=realm]]. Save those addresses on your own
+computer, for the case of the primary webmail service one day being out of
+order.
+
+Entering webmail, step by step:
+
+ 1. Go to [[template id=webmailurl]]
+ 2. Pick the topmost webmail application, IMP
+ 3. Login using your personal username and password
+
+
+## Recommended setup of local email program
+
+If you have a computer of your own, it is recommended to use a "real" email
+application in favor of webmail. It works faster and is more stable. It is also
+puts less burden on the server.
+
+ 1. Download [Mozilla Thunderbird](http://www.mozilla.com/thunderbird)
+
+ (!) Other email programs work too, but Mozilla Thunderbird is considered
+ most reliable, while still both userfriendly and
+ [free](http://en.wikipedia.org/wiki/Free_software).
+
+ 2. Create an "imap" account
+
+ (!) The alternative, pop3 (suggested by default in many applications), is
+ less flexible - e.g. does not work well concurrently with webmail access to
+ your emails.
+
+ 3. Use your provided username and **[[template id=mailhost]]** as both
+ incoming and outgoing server
+ 4. Enable encryption for incoming mail (imap or pop3):
+ * Enable "SSL" (also called "secure connection")
+ 5. Enable encryption for outgoing mail (smtp):
+ 1. Enable "SSL"
+ 2. Change port number from the standard 25 to 465 (Mozilla Thunderbird does
+ this automatically)
+ 3. Enable authentication, using same username and password as for your
+ incoming mail
+
+ /!\ Avoid "TLS" (also called "secure *passwords*") - it does not work
+ together with SSL.
+
+Many email applications help you setting up your account using a "wizard".
+Unfortunately security setup is often left out from such routines.
+If you are guided by a wizard, you therefore afterwards need to manually check
+that the configuration produced match the above instructions.
+
+/!\ Some applications stash away security options (SSL, password etc.) below
+"advanced settings" or similar.
+
+Your email application might complain that it does not trust the mail server.
+You then need to accept the "security certificate" used at [[template
+id=realm]] (see external reference to riseup.net at the bottom of this page).
+Mozilla Thunderbird need no special handling.
+
+
+## Special quirks with Apple Mail
+
+The default setting for some versions of Apple Mail is to leave a copy of all
+your emails on the server, even when deleted in the application.
+
+If you use Apple Mail, you need to avoid filling up your
+[[allowed_disk_space|quota/intro]] by changing that behaviour:
+
+ 1. Open "Mail"
+ 2. Go to Preferences > Accounts > Advanced
+ 3. Check "remove copy from server after retrieving a message"
+
+
+## External links
+
+The help texts at riseup.net is generally good, as their system works much like
+this. Just remember to use **[[template id=mailhost]]** whenever
+"mail.riseup.net" is mentioned.
+
+ * [Setting up email applications](http://help.riseup.net/mail/mail-clients/)
+ * [Dealing with security certificates](http://help.riseup.net/mail/security/certificates/)
+ * [Avoiding "leave on server" with pop3](http://www.earthnet.net/support/email/email_pop_remove_copy.htm)
+
+
+## More info
+
+ * [[Overview|mail]] of email-related info
+ * [[Overview|account]] of uses of your account
diff --git a/orphans.mdwn b/orphans.mdwn
new file mode 100644
index 0000000..1354030
--- /dev/null
+++ b/orphans.mdwn
@@ -0,0 +1,3 @@
+# Orphaned pages
+
+[[orphans ]]
diff --git a/quota.mdwn b/quota.mdwn
new file mode 100644
index 0000000..3f0f3cd
--- /dev/null
+++ b/quota.mdwn
@@ -0,0 +1,5 @@
+# Overview of disk quota documentation
+
+ * Short [[quota/intro]] to disk quota
+ * [[Use|quota/use]] of disk quota - eg. hints to freeing disk space
+ * [[Configuration|quota/setup]] to continuously show current disk quota status
diff --git a/quota/intro.mdwn b/quota/intro.mdwn
new file mode 100644
index 0000000..19d6240
--- /dev/null
+++ b/quota/intro.mdwn
@@ -0,0 +1,17 @@
+# Introduction to disk quota
+
+Your account has limited disk space. All of your personal files and emails have
+a sharing maximum.
+
+You will automatically receive email warnings if you reach your "quota" limit.
+You will then need to delete either some of your personal files or some of your
+emails.
+
+/!\ If you ignore quota warnings, then your account will be locked, and all
+emails sent to you will be rejected!
+
+
+## More info
+
+ * [[Use|quota/use]] of disk quota - eg. hints to freeing disk space
+ * [[Configuration|quota/setup]] to continuously show current disk quota status
diff --git a/quota/setup.mdwn b/quota/setup.mdwn
new file mode 100644
index 0000000..2997cc3
--- /dev/null
+++ b/quota/setup.mdwn
@@ -0,0 +1,28 @@
+# Setting up disk quota
+
+Your account has limited disk space. You will automatically receive warnings if
+you reach your "quota" limit.
+
+/!\ If you fail keep your account below your quota limit, then after some days
+your account will be locked. This affects several services, e.g. all emails
+sent to you will be rejected!
+
+## Disk quota status
+
+Some imap email programs can be configured to show your current quota status.
+
+### Mozilla Thunderbird
+
+ 1. Install the [Display Quota](https://addons.mozilla.org/thunderbird/881/)
+ plugin.
+
+### IMP webmail
+
+ 1. Enter "Layout" in the top panel to the right
+ 2. Select "Account information" and choose "Add"
+ 3. Select "Save"
+
+
+## More info
+
+ * [[Use|quota/use]] of disk quota - eg. hints to freeing disk space
diff --git a/quota/use.mdwn b/quota/use.mdwn
new file mode 100644
index 0000000..b0f7df6
--- /dev/null
+++ b/quota/use.mdwn
@@ -0,0 +1,46 @@
+# Disk quota usage
+
+Your account has limited disk space. All of your personal files and emails have
+a shard maximum.
+
+Your use of disk space is monitored, and if you use more space than allowed,
+you will automatically receive warnings to free some space: Either delet some
+of your personal files or some of your emails.
+
+/!\ If you fail to free enough disk space to get you below your quota limit,
+then after some days your account will be locked. This affects several
+services, e.g. all emails sent to you will be rejected!
+
+
+## Files
+
+If you use some of your personal [[file_shares|files]], then they probably
+consume more space than your emails: Sound, graphics and multimedia files
+are much larger than simple text messages like emails.
+
+## Emails
+
+Consider deleting emails with big attachments. Save the attachements as plain
+files first, if you want them preserved: email attachments consume up to the
+double amount of that used by same documents stored normally.
+
+If you use Apple Mail, your emails may fill up space on the server even when
+deleted in the application. See [[email_setup|mail/setup]] for more about the
+problem. To immediately purge deleted emails, do this:
+
+ 1. Open Apple Mail
+ 2. Go to Preferences > Accounts > Advanced
+ 3. Click the button 'Remove Now'.
+
+When you use imap (you probably do), then some routines may not behave as you
+would expect:
+
+ * You may have more folders on the server than shown in your email program.
+ You need to "subscribe" to additional email folders to see them.
+ * It is not enough to "delete" emails. You need to also "purge" the deleted
+ emails to have them completely removed from the system.
+
+
+## More info
+
+ * [[Configuration|quota/setup]] to continuously show current disk quota status
diff --git a/redpill.mdwn b/redpill.mdwn
new file mode 100644
index 0000000..5d1fb50
--- /dev/null
+++ b/redpill.mdwn
@@ -0,0 +1,25 @@
+# Redpill - sustainable ICT
+
+> You take the blue pill and [..] believe whatever you want to believe. You
+> take the red pill and [..] I show you how deep the rabbit-hole goes. [..] all
+> I am offering is the truth. Nothing more.
+
+-- Morpheus, The Matrix
+
+(in the movie "The Matrix" the hero Neo is offered to escape the illusion he
+believes is reality. The illusion is comfortable, but unethical.
+
+Pills usually work on the symptoms - soothing the pain without solving the
+underlying problems.
+
+Redpill is different. It is a self-help process - ICT structures designed to
+support and inspire active and concious ICT use. More demanding to establish,
+but more economical and less frustrating in the long run.
+
+Redpill is a saner alternative to traditional ICT.
+
+## More info
+
+ * Strategic [[arguments|purpose]]
+ * Daily [[use]]
+ * Technical [[overview|admin]]
diff --git a/redpill/admin.mdwn b/redpill/admin.mdwn
new file mode 100644
index 0000000..b7c3985
--- /dev/null
+++ b/redpill/admin.mdwn
@@ -0,0 +1,52 @@
+# Redpill for technicians
+
+## Recommended hardware and software
+
+### Servere
+
+Hardware:
+
+ * Noname x86 machines
+ * software RAID
+ * All user data mirrored to remote host
+
+Software:
+
+ * Debian GNU/Linux (distribution)
+ * Postfix
+ * Apache
+ * AMaVis
+ * Dovecot
+ * HORDE/IMP
+
+### Workstations
+
+For creative use:
+
+ * Apple Macintosh
+
+For classical administrative use:
+
+ * Debian GNU/Linux or Microsoft Windows
+
+For use in schools or Internet cafés, at fairs or other demanding places:
+
+ * Debian GNU/Linux
+
+## Redpill in an alien environment
+
+It is possible to run a Redpill system at a host organisation not using (and
+with no interest in) the Redpill concept. The system usually need _not_ submit
+to a strict foreign policy.
+
+You need from the ICT staff of your host organisation...:
+
+ * A single static public IP number with port 22 open inbound and standard
+ ports open outbound (or ideally fully open)
+ * Space for a single standard-sized computer (or preferrably 2)
+
+
+## More info
+
+ * Strategic [[arguments|purpose]]
+ * Daily [[use]]
diff --git a/redpill/purpose.mdwn b/redpill/purpose.mdwn
new file mode 100644
index 0000000..e0e8928
--- /dev/null
+++ b/redpill/purpose.mdwn
@@ -0,0 +1,27 @@
+# Redpill for decision makers
+
+Redpill is the opposite of outsourcing: As much as possible of your precious
+data and infrastructure in kept in-house, and the rest uses only simple and
+generic services to avoid depending on unique features of a single provider.
+
+An "ICT guide" is hired part-time to help setup your resources as
+self-sustainable as possible, and to train one or more of your own staff to
+work with the system on a day-to-day basis.
+
+When the setup is completed, smaller tasks like restarting services or
+adding/changing user accounts can be done by the "superusers" among your staff.
+Beyond that, your network can in principle run on its own. In reality you are
+recommended to keep your ICT guide in the loop as a technical advisor,
+continuously checking security and optimize/improve/extend services.
+
+You keep your ICT guide only for as long as the relationship is mutually
+beneficial: Your data, services and know-how stays with you. Your system keeps
+running, it just slowly becomes "oldfashioned". And you can take in other ICT
+guides or ordinary technicians - all code is Free Software, tied to the Debian
+GNU/Linux distribution with one of the largest userbases worldwide and favoured
+especially amongst skilled networks administrators.
+
+## More info
+
+ * Daily [[use]]
+ * Technical [[overview|admin]]
diff --git a/redpill/use.mdwn b/redpill/use.mdwn
new file mode 100644
index 0000000..d96fcfc
--- /dev/null
+++ b/redpill/use.mdwn
@@ -0,0 +1,25 @@
+# Redpill for users
+
+At a Redpill system you are the hero! You are offered various tools to use as
+you please, at your own pace.
+
+If problems occur along the way, then no god or magician wipes it off for you,
+but you are not all alone either...
+
+At some other systems, technical stuff is considered too important to involve
+you - or you are too important to get involved. Technicians are your servants
+and superheroes, taking care of technical challenges on your behalf.
+
+With Redpill, however, [[communicating|internet]] is considered too important
+to leave to others. Computers are servants (but sometimes clumsy at that),
+while technicians are skilled friends helping you if in trouble - not by
+carrying you, but by guiding and enlightening. And maybe use a little magic
+now and then too, but too much would spoil you.
+
+Redpill makes you the hero!
+
+## More info
+
+ * Strategic [[arguments|purpose]]
+ * Technical [[overview|admin]]
+ * [[../Intro]] to this Redpill-based system
diff --git a/sitemap.mdwn b/sitemap.mdwn
new file mode 100644
index 0000000..0e39c4d
--- /dev/null
+++ b/sitemap.mdwn
@@ -0,0 +1,3 @@
+# Sitemap
+
+[[map ]]