<feed xmlns='http://www.w3.org/2005/Atom'>
<title>fripost-ansible/roles/IMAP/templates, branch master</title>
<subtitle>Fripost ansible scripts</subtitle>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/'/>
<entry>
<title>IMAP: Adjust dovecot configuration to bullseye.</title>
<updated>2024-09-08T00:10:41+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2024-09-08T00:10:41+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=4977d7c1d80ac0caf94914fbf9be8471d056c906'/>
<id>4977d7c1d80ac0caf94914fbf9be8471d056c906</id>
<content type='text'>
Provisioning /etc/dovecot/conf.d/*.conf is a pain on upgrade so we
consolidate that by reverting these files to the distro-provided ones
and shipping a single /etc/dovecot/conf.d/99-local.conf override
instead.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Provisioning /etc/dovecot/conf.d/*.conf is a pain on upgrade so we
consolidate that by reverting these files to the distro-provided ones
and shipping a single /etc/dovecot/conf.d/99-local.conf override
instead.
</pre>
</div>
</content>
</entry>
<entry>
<title>dovecot: Bump VSZ to 1G.</title>
<updated>2022-10-11T12:00:04+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2022-10-11T12:00:04+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=d7a8e117b2595b2ba74cb5a7ba237ca18f36e1ab'/>
<id>d7a8e117b2595b2ba74cb5a7ba237ca18f36e1ab</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Prefix ‘ipaddr’ and ‘ipv4’ with ‘ansible.utils.’.</title>
<updated>2022-10-11T11:57:22+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2022-10-11T11:24:54+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=a69c2e1c3c771db93d98a253192e131af40c9830'/>
<id>a69c2e1c3c771db93d98a253192e131af40c9830</id>
<content type='text'>
This silences the following deprecation warning:

  Use 'ansible.utils.ipaddr' module instead. This feature will be removed from ansible.netcommon in a release after 2024-01-01.
  Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This silences the following deprecation warning:

  Use 'ansible.utils.ipaddr' module instead. This feature will be removed from ansible.netcommon in a release after 2024-01-01.
  Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
</pre>
</div>
</content>
</entry>
<entry>
<title>IMAP: Update role to Debian Buster.</title>
<updated>2020-05-19T05:56:01+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2020-05-19T00:40:48+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=829f4d830aefedd95a75e61cfc9aa3e03f039c6f'/>
<id>829f4d830aefedd95a75e61cfc9aa3e03f039c6f</id>
<content type='text'>
For `ssl_cipher_list` we pick the suggested value from
https://ssl-config.mozilla.org/#server=dovecot&amp;version=2.3.9&amp;config=intermediate&amp;openssl=1.1.1d

At the moment it's equivalent (modulo order) to adding ‘EDH+AESGCM+aRSA’
to ‘EECDH+AESGCM:EECDH+CHACHA20!MEDIUM!LOW!EXP!aNULL!eNULL’.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
For `ssl_cipher_list` we pick the suggested value from
https://ssl-config.mozilla.org/#server=dovecot&amp;version=2.3.9&amp;config=intermediate&amp;openssl=1.1.1d

At the moment it's equivalent (modulo order) to adding ‘EDH+AESGCM+aRSA’
to ‘EECDH+AESGCM:EECDH+CHACHA20!MEDIUM!LOW!EXP!aNULL!eNULL’.
</pre>
</div>
</content>
</entry>
<entry>
<title>dovecot: raise default_vsz_limit from 256MB to 512MB.</title>
<updated>2019-05-23T17:19:16+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2019-05-23T17:19:16+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=dfc1467c9ccb0e8427c647faa50ca92a01f5d6d6'/>
<id>dfc1467c9ccb0e8427c647faa50ca92a01f5d6d6</id>
<content type='text'>
This avoids lmtp errors like

        Error: mmap(size=0) failed with file […] dbox-Mails/dovecot.index.cache: Cannot allocate memory

See https://www.dovecot.org/list/dovecot/2012-August/137569.html and
https://www.dovecot.org/list/dovecot/2011-December/132455.html .
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This avoids lmtp errors like

        Error: mmap(size=0) failed with file […] dbox-Mails/dovecot.index.cache: Cannot allocate memory

See https://www.dovecot.org/list/dovecot/2012-August/137569.html and
https://www.dovecot.org/list/dovecot/2011-December/132455.html .
</pre>
</div>
</content>
</entry>
<entry>
<title>Update 'IMAP', 'MSA' and 'LDAP-provider' roles to Debian Stretch.</title>
<updated>2018-12-09T19:25:40+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2018-12-09T17:41:06+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=e2ddcfc51f66c2a52a401064eab005e793f148ee'/>
<id>e2ddcfc51f66c2a52a401064eab005e793f148ee</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>postfix: remove explicit default 'mail_owner = postfix'.</title>
<updated>2018-12-06T18:22:29+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2018-12-06T18:22:29+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=5a407e715e6efc7da24b2902913a9da58d2bd19c'/>
<id>5a407e715e6efc7da24b2902913a9da58d2bd19c</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Postfix: replace cdb &amp; btree tables with lmdb ones.</title>
<updated>2018-12-03T02:43:41+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2018-12-03T02:18:56+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=dcdb8cd6b1b525fc8eacd509586da3396c068251'/>
<id>dcdb8cd6b1b525fc8eacd509586da3396c068251</id>
<content type='text'>
Cf. lmdb_table(5).
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Cf. lmdb_table(5).
</pre>
</div>
</content>
</entry>
<entry>
<title>Dovecot: Explicitly disable LDAP.</title>
<updated>2016-12-08T18:50:23+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2016-12-08T18:50:23+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=9b3ac744b73c7bbd246333da1cbfa63838d0cc54'/>
<id>9b3ac744b73c7bbd246333da1cbfa63838d0cc54</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>postfix: Remove obsolete templates tls_policy/relay_clientcerts.</title>
<updated>2016-07-12T14:23:09+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2016-07-12T14:22:25+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=ab90bbd0a1983d8571a030fcd9d95d8576a0e8bc'/>
<id>ab90bbd0a1983d8571a030fcd9d95d8576a0e8bc</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
