fripost-ansible/roles/MSA/files, branch master Fripost ansible scripts postfix: Adjust anonymize_sender.pcre. 2022-10-11T12:02:34+00:00 Guilhem Moulin guilhem@fripost.org 2022-10-11T12:02:31+00:00 bcff69a1a65808d705a3abc4a730adca8a58a6b1 






postfix-sender-login: Better hardening.
2020-05-21T01:40:53+00:00

Guilhem Moulin
guilhem@fripost.org

2020-05-20T13:46:27+00:00

6d1daa0424c168eae4bfa9f6772add3f77ec506f

Run as a dedicated user, not ‘postfix’.





Run as a dedicated user, not ‘postfix’.







MSA: Update role to Debian Buster.
2020-05-19T04:36:36+00:00

Guilhem Moulin
guilhem@fripost.org

2020-05-19T04:06:17+00:00

82e6b29ad39bfaee2d4036f98d1362ab8e689006

For `ssl_cipher_list` we pick the suggested value from
https://ssl-config.mozilla.org/#server=postfix&version=3.4.10&config=intermediate&openssl=1.1.1d

At the moment it's equivalent (modulo order) to adding ‘EDH+AESGCM+aRSA’
to ‘EECDH+AESGCM:EECDH+CHACHA20!MEDIUM!LOW!EXP!aNULL!eNULL’.





For `ssl_cipher_list` we pick the suggested value from
https://ssl-config.mozilla.org/#server=postfix&version=3.4.10&config=intermediate&openssl=1.1.1d

At the moment it's equivalent (modulo order) to adding ‘EDH+AESGCM+aRSA’
to ‘EECDH+AESGCM:EECDH+CHACHA20!MEDIUM!LOW!EXP!aNULL!eNULL’.







systemd.service: Tighten hardening options.
2018-12-09T19:25:40+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-09T17:15:10+00:00

2147ff3bd9091b88960e2243b2d7d76d03cadc89












systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’.
2018-12-09T19:25:39+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-08T00:06:06+00:00

6a57ea01fd48992883d6dac1b7746e79202215e4

And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.





And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.







postfix-sender-login: strip extension before lookup.
2017-06-13T16:39:25+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-13T16:27:55+00:00

402799906a53aeb3c6feff9b3e98d750acd559e0

Users can add an extension (following postconf(5)'s
$recipient_delimiter) to the local part of any envelope sender address
already allowed.





Users can add an extension (following postconf(5)'s
$recipient_delimiter) to the local part of any envelope sender address
already allowed.







postfix-msa: anonymize SASL-authenticated senders using IPv6.
2017-06-06T11:32:45+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-06T11:32:45+00:00

4c60cd07f1c5295d3611601db3c658f0eadfad87












postfix-sender-login: wibble
2017-06-05T14:46:54+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-05T14:46:54+00:00

9fc349a989f536b3ccb688db4bcf1ea36774a393












move postfix-sender-login.{service,socket} to files/.
2017-06-02T12:12:32+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-02T12:12:26+00:00

1395cc86969823d9972517833c614becba8660a0












postfix-sender-login: terminate the worker after 32*$nProc connections to release ressources.
2017-06-01T09:00:58+00:00

Guilhem Moulin
guilhem@fripost.org

2017-06-01T09:00:58+00:00

8cfd584400a9852c4bd7c4b3d50ff0cacc8ec019