fripost-ansible/roles/MSA/files/etc, branch master Fripost ansible scripts postfix: Adjust anonymize_sender.pcre. 2022-10-11T12:02:34+00:00 Guilhem Moulin guilhem@fripost.org 2022-10-11T12:02:31+00:00 bcff69a1a65808d705a3abc4a730adca8a58a6b1 






postfix-sender-login: Better hardening.
2020-05-21T01:40:53+00:00

Guilhem Moulin
guilhem@fripost.org

2020-05-20T13:46:27+00:00

6d1daa0424c168eae4bfa9f6772add3f77ec506f

Run as a dedicated user, not ‘postfix’.





Run as a dedicated user, not ‘postfix’.







MSA: Update role to Debian Buster.
2020-05-19T04:36:36+00:00

Guilhem Moulin
guilhem@fripost.org

2020-05-19T04:06:17+00:00

82e6b29ad39bfaee2d4036f98d1362ab8e689006

For `ssl_cipher_list` we pick the suggested value from
https://ssl-config.mozilla.org/#server=postfix&version=3.4.10&config=intermediate&openssl=1.1.1d

At the moment it's equivalent (modulo order) to adding ‘EDH+AESGCM+aRSA’
to ‘EECDH+AESGCM:EECDH+CHACHA20!MEDIUM!LOW!EXP!aNULL!eNULL’.





For `ssl_cipher_list` we pick the suggested value from
https://ssl-config.mozilla.org/#server=postfix&version=3.4.10&config=intermediate&openssl=1.1.1d

At the moment it's equivalent (modulo order) to adding ‘EDH+AESGCM+aRSA’
to ‘EECDH+AESGCM:EECDH+CHACHA20!MEDIUM!LOW!EXP!aNULL!eNULL’.







systemd.service: Tighten hardening options.
2018-12-09T19:25:40+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-09T17:15:10+00:00

2147ff3bd9091b88960e2243b2d7d76d03cadc89












systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’.
2018-12-09T19:25:39+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-08T00:06:06+00:00

6a57ea01fd48992883d6dac1b7746e79202215e4

And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.





And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.







postfix-msa: anonymize SASL-authenticated senders using IPv6.
2017-06-06T11:32:45+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-06T11:32:45+00:00

4c60cd07f1c5295d3611601db3c658f0eadfad87












move postfix-sender-login.{service,socket} to files/.
2017-06-02T12:12:32+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-02T12:12:26+00:00

1395cc86969823d9972517833c614becba8660a0












MSA: reject null sender address.
2017-05-14T13:02:46+00:00

Guilhem Moulin
guilhem@fripost.org

2017-05-14T13:02:21+00:00

c55ae1e2a93b1debd8df3ef944c2ddc91055c423












Configure the Mail Submission Agent.
2015-06-07T00:51:10+00:00

Guilhem Moulin
guilhem@fripost.org

2013-12-02T22:39:26+00:00

1a50ad8f85ae7b42d7749b43d8f01adb663114ff