fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	AEAD ciphers: Add EECDH+CHACHA20 macro.	Guilhem Moulin	2020-05-18	1
\| \| \| \| \| \| \|	This adds the following two ciphers: ECDHE-ECDSA-CHACHA20-POLY1305 TLSv1.2 Kx=ECDH Au=ECDSA Enc=CHACHA20/POLY1305(256) Mac=AEAD ECDHE-RSA-CHACHA20-POLY1305 TLSv1.2 Kx=ECDH Au=RSA Enc=CHACHA20/POLY1305(256) Mac=AEAD
*	Update 'IMAP', 'MSA' and 'LDAP-provider' roles to Debian Stretch.	Guilhem Moulin	2018-12-09	1
\|
*	Let's Encrypt	Guilhem Moulin	2016-03-02	1
\|
*	Use the Let's Encrypt CA for our public certs.	Guilhem Moulin	2015-12-20	1
\|
*	dovecot: remove !SSLv2 from ssl_cipher_list.	Guilhem Moulin	2015-12-15	1
\|
*	dovecot: Disable SSLv3.	Guilhem Moulin	2015-09-17	1
\|
*	logjam mitigation.	Guilhem Moulin	2015-06-07	1
\|
*	Upgrade Dovecot config to Jessie.	Guilhem Moulin	2015-06-07	1
\|
*	Replace IPSec tunnels by app-level ephemeral TLS sessions.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \|	For some reason giraff doesn't like IPSec. App-level TLS sessions are less efficient, but thanks to ansible it still scales well.
*	Generate certs for Dovecot and Nginx if they are not there.	Guilhem Moulin	2015-06-07	1
\|
*	Configure Sieve and ManageSieve.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \|	Also, add the 'managesieve' RoundCube plugin to communicate with our server.
*	Configure the webmail.	Guilhem Moulin	2015-06-07	1
\|
*	Configure the IMAP server.	Guilhem Moulin	2015-06-07	1
	(For now, only LMTP and IMAP processes, without replication.)