fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
...
*	dovecot-auth-proxy: Fix synopsis line.	Guilhem Moulin	2017-06-05	1
\|
*	postscreen: lower zen.spamhaus.org DNSBL score from 3 to 2 on the MX:es.	Guilhem Moulin	2017-06-05	1
\| \| \| \| \|	So being listed on that BL doesn't yield a flat reject if the IP isn't also listed to other lists.
*	postfix-sender-login: wibble	Guilhem Moulin	2017-06-05	2
\|
*	dovecot: enable user iteration and add a cronjob for `doveadm purge -A`	Guilhem Moulin	2017-06-05	9
\|
*	move postfix-sender-login.{service,socket} to files/.	Guilhem Moulin	2017-06-02	2
\|
*	postfix: enable XFORWARD command from our internal relays.	Guilhem Moulin	2017-06-02	1
\|
*	postfix: don't rate-limit our IPsec subnet.	Guilhem Moulin	2017-06-02	3
\|
*	postfix-sender-login: terminate the worker after 32*$nProc connections to ↵	Guilhem Moulin	2017-06-01	1
\| \| \| \|	release ressources.
*	postfix-sender-login: handle EINTR in read(2) and write(2) calls.	Guilhem Moulin	2017-06-01	1
\|
*	postfix-sender-login: pre-fork 2 servers.	Guilhem Moulin	2017-06-01	1
\| \| \| \| \|	On Linux perl's allow multiple children to block in a call to accept(2) so we don't need to place a lock around the call.
*	Don't make Roundcube add a 'X-Sender' header with the sender's identity.	Guilhem Moulin	2017-06-01	1
\|
*	Don't let authenticated client use arbitrary sender addresses.	Guilhem Moulin	2017-06-01	11
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	The following policy is now implemented: * users can use their SASL login name as sender address; * alias and/or list owners can use the address as envelope sender; * domain postmasters can use arbitrary sender addresses under their domains; * domain owners can use arbitrary sender addresses under their domains, unless it is also an existing account name; * for known domains without owner or postmasters, other sender addresses are not allowed; and * arbitrary sender addresses under unknown domains are allowed.
*	/lib/systemd/system → /etc/systemd/system	Guilhem Moulin	2017-05-31	17
\|
*	Also install non-free firmwares on civett.	Guilhem Moulin	2017-05-30	4
\|
*	Install more sympa dependencies.	Guilhem Moulin	2017-05-29	1
\|
*	Rotate civett's IPsec's key.	Guilhem Moulin	2017-05-29	2
\|
*	Use blackhole subdomain for sender addresses of verify probes.	Guilhem Moulin	2017-05-16	3
\| \| \| \| \| \| \| \| \| \| \|	These addresses need to be accepted on the MX:es, as recipients sometimes phone back during the SMTP session to check whether the sender exists. Since a time-dependent suffix is added to the local part (cf. http://www.postfix.org/postconf.5.html#address_verify_sender_ttl) it's not enough to drop incoming mails to ‘double-bounce@fripost.org’, and it's impractical to do the same for /^double-bounce.*@fripost\.org$/.
*	Change group of executables in /usr/local/{bin,sbin} from root to staff.	Guilhem Moulin	2017-05-14	7
\|
*	webmail: use Zend opcache and configure APCu.	Guilhem Moulin	2017-05-14	3
\|
*	sympa: don't tweak /etc/logrotate.d/sympa.	Guilhem Moulin	2017-05-14	1
\|
*	wwsympa: allow write access to /var/spool/sympa.	Guilhem Moulin	2017-05-14	1
\| \| \| \|	Request to post and moderate messages using the web interface.
*	MSA: reject null sender address.	Guilhem Moulin	2017-05-14	4
\|
*	IMAP: new script list-users.	Guilhem Moulin	2017-05-14	2
\|
*	Change civett's CNAME from civett.friprogramvarusyndikatet.se to ↵	Guilhem Moulin	2017-05-14	2
\| \| \| \|	civett.fripost.org
*	Fix Ansible 2.2.0 compatibility of a Jinja2 template.	Guilhem Moulin	2017-01-14	1
\|
*	Allow SMTP client from whitelisted IPs to bypass postscreen checks.	Guilhem Moulin	2017-01-14	1
\|
*	nginx: set Referrer-Policy HTTP header to "no-referrer".	Guilhem Moulin	2016-12-13	1
\|
*	nginx: add support for HTTP/2.	Guilhem Moulin	2016-12-13	5
\|
*	dovecot: Deduplicate attachments hourly, just before automatic backup.	Guilhem Moulin	2016-12-11	1
\|
*	dovecot: use Single-Instance Storage for mail attachments.	Guilhem Moulin	2016-12-10	4
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2016-12-08	1
\|
*	wiki: Add instruction for how to add the post-update hook.	Guilhem Moulin	2016-12-08	1
\|
*	Dovecot: Explicitly disable LDAP.	Guilhem Moulin	2016-12-08	1
\|
*	gitolite: allow hook.* git config keys.	Guilhem Moulin	2016-12-08	1
\|
*	Upgrade to lacme 0.2-1.	Guilhem Moulin	2016-12-08	2
\|
*	Webmail: Install XCache (PHP opcode cacher).	Guilhem Moulin	2016-12-08	1
\|
*	Dovecot: use fallocate(2) to preallocate new mdbox files.	Guilhem Moulin	2016-12-08	1
\|
*	Make Ansible modules compatible with Ansible 2.2.0.0.	Guilhem Moulin	2016-12-08	2
\|
*	Postscreen: Give temporary whitelist status to primary MX addresses only.	Guilhem Moulin	2016-09-20	2
\|
*	systemd: Ensure sympa service is enabled.	Guilhem Moulin	2016-09-18	1
\|
*	lacme-certs.conf: don't restart but reload dovecot after renewing IMAPS cert.	Guilhem Moulin	2016-09-18	1
\| \| \| \| \| \|	Unfortunately as of Debian 8.6 (Jessie) dovecot's service file doesn't have a “Reload” directive, so we can't use `/bin/systemctl restart dovecot` as notification. It'll be fixed in Stretch, though.
*	Postfix: ensure common aliases are present.	Guilhem Moulin	2016-09-18	3
\|
*	FreshClam: change ownership of /etc/clamav/freshclam.conf.	Guilhem Moulin	2016-09-18	1
\| \| \| \| \| \| \| \|	To match the stock version shipped by clamav-freshclam 0.99.2+dfsg-0+deb8u2 ~$ stat -c '%U:%G %a' /etc/clamav/freshclam.conf clamav:adm 444
*	Firewall: allow duplicates rules.	Guilhem Moulin	2016-09-18	1
\|
*	HPKP: increase max-mage directive to 6 months from 1 hour.	Guilhem Moulin	2016-09-18	1
\|
*	gencerts: improve workning: s/pubkey/SPKI/	Guilhem Moulin	2016-09-18	1
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2016-08-22	2
\|
*	Improve certs formatting.	Guilhem Moulin	2016-07-12	1
\|
*	gencerts: Print the SHA1 digests in hex not base64 format.	Guilhem Moulin	2016-07-12	1
\|
*	typo	Guilhem Moulin	2016-07-12	1
\|