fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	Remove the IMAP caching proxy.	Guilhem Moulin	2016-05-28	1
\| \| \| \| \| \| \| \| \|	Dovecot imapc requires two authentication rounds to the IMAP backend for each connection. It seems suboptimal that Roundcube keeps connecting to the IMAP server for each new connection, but benchmarks shows little advantage in caching the IMAP sessions with imapproxy: http://www.dovecot.org/list/dovecot/2012-February/133544.html
*	Use systemd unit files for stunnel4.	Guilhem Moulin	2016-05-12	1
\|
*	stunnel: disable compression.	Guilhem Moulin	2015-10-27	1
\|
*	stunnel: use GCM ciphers only; use SSL options rather than ciphers to ↵	Guilhem Moulin	2015-10-27	1
\| \| \| \|	disable protocols.
*	Rename imap.conf → roundcube.conf	Guilhem Moulin	2015-06-07	1
\|
*	stunnel.conf → imap.conf	Guilhem Moulin	2015-06-07	1
\|
*	Upgrade the webmail configuration from Wheezy to Jessie.	Guilhem Moulin	2015-06-07	1
\|
*	Disable Nagle's algorithm (and SSLv3) in stunnel.	Guilhem Moulin	2015-06-07	1
\|
*	Use stunnel to secure the connection from the IMAP proxy to the IMAP server.	Guilhem Moulin	2015-06-07	1
	The reason is that we don't want to rely on CAs to verify the certificate of our server. Dovecot currently doesn't offer a way to match said cert against a local copy or known fingerprint. stunnel does.