fripost-ansible/roles/webmail/templates/etc, branch master Fripost ansible scripts Roundcube: managesieve: Disable ‘reject’ and ‘ereject’ extensions. 2022-10-11T13:45:13+00:00 Guilhem Moulin guilhem@fripost.org 2022-10-11T13:45:13+00:00 9c67e4f8e539638a6621803c3c18ce5723fbdcc6 






Prefix ‘ipaddr’ and ‘ipv4’ with ‘ansible.utils.’.
2022-10-11T11:57:22+00:00

Guilhem Moulin
guilhem@fripost.org

2022-10-11T11:24:54+00:00

a69c2e1c3c771db93d98a253192e131af40c9830

This silences the following deprecation warning:

  Use 'ansible.utils.ipaddr' module instead. This feature will be removed from ansible.netcommon in a release after 2024-01-01.
  Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.





This silences the following deprecation warning:

  Use 'ansible.utils.ipaddr' module instead. This feature will be removed from ansible.netcommon in a release after 2024-01-01.
  Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.







stunnel4: Harden and socket-activate.
2020-05-18T13:51:54+00:00

Guilhem Moulin
guilhem@fripost.org

2020-05-18T13:51:54+00:00

42df93debccbcb1a18cd377b6de0b5b20527312f












nginx: Don't hard-code the HPKP headers.
2016-07-12T01:10:33+00:00

Guilhem Moulin
guilhem@fripost.org

2016-07-12T01:10:33+00:00

ef430522256013665205cdda05636846cc622251

Instead, lookup the pubkeys and compute the digests on the fly.  But
never modify the actual header snippet to avoid locking our users out.





Instead, lookup the pubkeys and compute the digests on the fly.  But
never modify the actual header snippet to avoid locking our users out.







Route SMTP traffic from the webmail through IPsec.
2016-07-09T23:07:39+00:00

Guilhem Moulin
guilhem@fripost.org

2016-07-09T21:46:21+00:00

b441dd4a7c3ce72008968d324a12e5c342d164a3












Roundcube: route IMAP and managesieve traffic through IPSec.
2016-05-28T11:49:48+00:00

Guilhem Moulin
guilhem@fripost.org

2016-05-28T11:49:48+00:00

05d59141d1115cafb663305d680a930f089b4851












roundube: Pin X.509 certificate for sieve.fripost.org:4190.
2016-05-17T20:07:45+00:00

Guilhem Moulin
guilhem@fripost.org

2016-05-17T18:35:37+00:00

7a562e807515506d7dca2f370f63057be7366c34












Use systemd unit files for stunnel4.
2016-05-12T09:33:55+00:00

Guilhem Moulin
guilhem@fripost.org

2016-05-11T16:07:09+00:00

90d498034b891123350785a134402172de477f4f












stunnel: disable compression.
2015-10-27T15:26:24+00:00

Guilhem Moulin
guilhem@fripost.org

2015-10-27T15:26:24+00:00

c2b9d04ecef5babc028728d4426aab9237b5ce86












stunnel: use GCM ciphers only; use SSL options rather than ciphers to disable protocols.
2015-10-27T15:13:40+00:00

Guilhem Moulin
guilhem@fripost.org

2015-10-27T15:13:40+00:00

04bd46f2b238c052fe98a538c3601da131ccc343