fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	Allow 'vmail' users with a UID lower than 500.	Guilhem Moulin	2015-06-10	1
\| \| \| \|	Fix regression introduced in f7c8011.
*	logjam mitigation.	Guilhem Moulin	2015-06-07	1
\|
*	Upgrade Dovecot config to Jessie.	Guilhem Moulin	2015-06-07	9
\|
*	Fix Dovecot's mail location.	Guilhem Moulin	2015-06-07	2
\|
*	Remove o=mailHosting from the LDAP directory suffix.	Guilhem Moulin	2015-06-07	2
\| \| \| \| \| \|	So our suffix is now a mere 'dc=fripost,dc=org'. We're also using the default '/var/lib/ldap' as olcDbDirectory (hence we don't clear it before hand).
*	Performance tuning in Dovecot's configuration.	Guilhem Moulin	2015-06-07	2
\|
*	Replace IPSec tunnels by app-level ephemeral TLS sessions.	Guilhem Moulin	2015-06-07	2
\| \| \| \| \|	For some reason giraff doesn't like IPSec. App-level TLS sessions are less efficient, but thanks to ansible it still scales well.
*	Don't use mailbox list indexes.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \| \|	In 2.1.7 they are buggy, and make Dovecot crash (when connected through Evolution for instance). They have improved a lot since, though: http://hg.dovecot.org/dovecot-2.2/file/c55c660d6e9d/NEWS
*	Generate certs for Dovecot and Nginx if they are not there.	Guilhem Moulin	2015-06-07	1
\|
*	Dovecot wibble.	Guilhem Moulin	2015-06-07	1
\|
*	The 'vmail' user may have a UID lower than 500.	Guilhem Moulin	2015-06-07	1
\| \| \| \|	So we set 'first_valid_uid' to 1, to accept any UID.
*	Support boken SMTP clients and LOGIN SASL mechanism.	Guilhem Moulin	2015-06-07	1
\|
*	Compress messages on the IMAP backend.	Guilhem Moulin	2015-06-07	2
\|
*	Install dovecot from backports (for imapc).	Guilhem Moulin	2015-06-07	1
\| \| \| \| \|	Interesting features include caching of mail headers (v2.2.8+) as well as new IMAP capabilities.
*	Configure Sieve and ManageSieve.	Guilhem Moulin	2015-06-07	2
\| \| \| \| \|	Also, add the 'managesieve' RoundCube plugin to communicate with our server.
*	Make the virtual mailboxes visible under RoundCube.	Guilhem Moulin	2015-06-07	7
\| \| \| \| \| \|	RoundCubes lists subscribed mailboxes only (determined using LIST-EXTENDED by default); also, it seems to ignore new subscriptions to mailboxes not listed by the LIST command.
*	Configure the webmail.	Guilhem Moulin	2015-06-07	2
\|
*	wibble	Guilhem Moulin	2015-06-07	2
\|
*	Configure dovecot's antispam filter.	Guilhem Moulin	2015-06-07	4
\| \| \| \| \| \| \| \| \| \| \| \| \|	Mails to be retrained are stored in the spooldir /home/mail/spamspool; later a daemon catches them up and feed them to sa-learn(1p). (On busy systems batch-process the learning should be much more efficient.) The folder transisition matrix along with the corresponding actions can be found there: http://hg.dovecot.org/dovecot-antispam-plugin/raw-file/5ebc6aae4d7c/doc/dovecot-antispam.7.txt See also dovecot-antispam(7).
*	Enable IMAP virtual mailboxes.	Guilhem Moulin	2015-06-07	6
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Using dovecot's 'virtual' plugin, cf. http://wiki2.dovecot.org/Plugins/Virtual The 'virtual/' namespace is visible in the NAMESPACE command (hidden=no), but not in LIST (list=no). This should ensure that the namespace isn't automatically synced by offlineimap, but nevertheless visible by roundcube, cf. http://trac.roundcube.net/ticket/1486796 http://mailman2.u.washington.edu/pipermail/imap-protocol/2010-May/001076.html
*	Configure the IMAP server.	Guilhem Moulin	2015-06-07	9
	(For now, only LMTP and IMAP processes, without replication.)