<code>apt install postgresql postgresql-contrib</code>

Schönes Passwort erstellen

<code>pwgen 20</code>

Dann Passwort für Nutzer listmonk verwenden:

<code>passwd postgres</code>

Datenbank erstellen, dazu in die Datenbankanwendung psql wechseln:

<code>sudo -u postgres psql</code>

<code>create user listmonk with password 'einanderespasswortauspwgen';
CREATE DATABASE listmonk;
GRANT ALL PRIVILEGES ON DATABASE listmonk TO listmonk;
</code>

Jetzt wieder raus aus psql.

Nutzer anlegen
<code>adduser --system --group --shell="/sbin/nologin" --home="/var/lib/listmonk" listmonk</code>

Listmonk herunterladen

<code>wget https://github.com/knadh/listmonk/releases/download/hier_aktuelle_release_eintragen</code>

Software entpacken

<code>tar xzf datei.tar.gz</code>

Listmonk installieren 

<code>install -v listmonk /usr/local/bin/</code>

Config dir anlegen

<code>mkdir /etc/listmonk</code>

https://gorbe.io/posts/listmonk/install/

<code>
  560  nano config.toml 
  561  listmonk --install
  562  chown -R listmonk:listmonk /etc/listmonk/
  563  nano /usr/lib/systemd/system/listmonk.service
  564  systemctl daemon-reload
  565  systemctl enable --now listmonk.service
  566  systemctl status listmonk.service 
  567  cd ../nginx/sites-available/
  568  ls -la
  569  nano webmail 
  570  nano listmonk
  571  certbot certonly -d list.hardwarepunk.de
  572  systemctl stop nginx.service 
  573  certbot certonly -d list.hardwarepunk.de
  574  systemctl start nginx.service 
  575  cd ../
  576  cd sites-enabled/
  577  ln -s ../sites-available/listmonk 
  578  ls -la
  579  systemctl restart nginx.service 
</code>

Nginx config
<code>
server {
        listen 80;
        listen [::]:80;
        listen 443 ssl http2;
        listen [::]:443 ssl http2;

        server_name list.domain.tld;

        ssl_certificate /etc/letsencrypt/live/list.domain.tld/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/list.domain.tld/privkey.pem;

        add_header Strict-Transport-Security max-age=15768000;

        location / {
                proxy_pass http://localhost:9000/;
                proxy_set_header Host $host;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        if ($ssl_protocol = "") {
            return 301 https://$server_name$request_uri;
        }
}
</code>