fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	submission: Prospective SPF checking.	Guilhem Moulin	2018-12-12	1
\| \| \| \|	Cf. http://www.openspf.org/Best_Practices/Outbound .
*	Upgrade syntax to Ansible 2.7 (apt module).	Guilhem Moulin	2018-12-03	1
\|
*	Postfix: replace cdb & btree tables with lmdb ones.	Guilhem Moulin	2018-12-03	1
\| \| \| \|	Cf. lmdb_table(5).
*	Don't let authenticated client use arbitrary sender addresses.	Guilhem Moulin	2017-06-01	1
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	The following policy is now implemented: * users can use their SASL login name as sender address; * alias and/or list owners can use the address as envelope sender; * domain postmasters can use arbitrary sender addresses under their domains; * domain owners can use arbitrary sender addresses under their domains, unless it is also an existing account name; * for known domains without owner or postmasters, other sender addresses are not allowed; and * arbitrary sender addresses under unknown domains are allowed.
*	MSA: reject null sender address.	Guilhem Moulin	2017-05-14	1
\|
*	Postfix MX/MSA instances: put certs in the the instance's $config_directory.	Guilhem Moulin	2016-07-10	1
\|
*	Postfix: don't share the master.cf between the instances.	Guilhem Moulin	2016-07-10	1
\|
*	Change the pubkey extension from .pem to .pub.	Guilhem Moulin	2016-07-10	1
\|
*	certs/public: fetch each cert's pubkey (SPKI), not the cert itself.	Guilhem Moulin	2016-06-15	1
\| \| \| \|	To avoid new commits upon cert renewal.
*	Add an ansible module 'fetch_cmd' to fetch the output of a remote command ↵	Guilhem Moulin	2016-05-18	1
\| \| \| \| \| \|	locally. And use this to fetch all X.509 leaf certificates.
*	Upgrade playbooks to Ansible 2.0.	Guilhem Moulin	2016-02-12	1
\|
*	Automatically fetch X.509 certificates, and add them to git.	Guilhem Moulin	2015-12-03	1
\|
*	Configure munin nodes & master.	Guilhem Moulin	2015-06-10	1
\| \| \| \| \|	Interhost communications are protected by stunnel4. The graphs are only visible on the master itself, and content is generated by Fast CGI.
*	Reload Postfix upon configuration change, but don't restart it.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \|	(Unless a new instance is created, or the master.cf change is modified.) Changing some variables, such as inet_protocols, require a full restart, but most of the time it's overkill.
*	Don't restart/reload Postifx upon change of a file based database.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \|	And don't restart or reload either upon change of pcre: files that are used by smtpd(8), cleanup(8) or local(8), following the suggestion from http://www.postfix.org/DATABASE_README.html#detect .
*	Configure the Mail Submission Agent.	Guilhem Moulin	2015-06-07	1