fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-10	3
\|
*	Configure munin nodes & master.	Guilhem Moulin	2015-06-10	1
\| \| \| \| \|	Interhost communications are protected by stunnel4. The graphs are only visible on the master itself, and content is generated by Fast CGI.
*	Don't assume that Postfix queue ID are always 10-digits long.	Guilhem Moulin	2015-06-10	1
\|
*	Add a reserved domain 'discard.fripost.org' to discard messages.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \|	‘noreply@’ aliases can be added by routing them to ‘@discard.fripost.org’.
*	Make the webmail connect directly to the outgoing SMTP proxy.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \|	(Hence delete the 'webmail' Postfix instance.) This shortens the delay caused by the recipient verification probes.
*	Use recipient address verification probes.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \| \|	This is specially useful for mailing lists and the webmail, since it prevents our outgoing gateway from accepting mails known to be bouncing. However the downside is that it adds a delay of up to 6s after the RCPT TO command.
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	1
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	3
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	3
\|
*	Upgrade custom logcheck-database to Jessie.	Guilhem Moulin	2015-06-07	1
\|
*	Upgrade amavis config to Jessie.	Guilhem Moulin	2015-06-07	1
\|
*	Upgrade Postfix config to Jessie (MSA & outgoing proxy).	Guilhem Moulin	2015-06-07	1
\|
*	Upgrade Dovecot config to Jessie.	Guilhem Moulin	2015-06-07	1
\|
*	Configure the list manager (Sympa).	Guilhem Moulin	2015-06-07	2
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	1
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	3
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	1
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	3
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	3
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	2
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	2
\|
*	Replace Postgrey with postscreen.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \| \| \| \| \| \|	See http://www.postfix.org/POSTSCREEN_README.html and http://rob0.nodns4.us/postscreen.html It's infortunate that smtpd(8) cannot be chrooted any longer, which means that we have to un-chroot cleanup(8) as well. Indeed, currently smtpd(8) uses $virtual_alias_maps for recipient validation; later cleanup(8) uses it again for rewriting. So these processes need to be both chrooted, or both not.
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	1
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	3
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	1
\|
*	Fix Amavis' Policy Banks.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \| \| \| \| \| \|	It turns out that in a policy bank, a *_by_ccat doesn't replace the default but is merely merged into the default (if the keys overlap, those in the bank take precedence of course). Hence it's pointless to use CC_CATCHALL in a bank unless all the other keys have been overridden, for instance. Also, treat unchecked (eg, encrypted) mails as clean in the OUTGOING Policy Bank.
*	Add a logcheck rule to ignore cyrus' annoying log messages.	Guilhem Moulin	2015-06-07	1
\| \| \| \|	Namely, "DIGEST-MD5 common mech free". See also bug #631932.
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	2
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	3
\|
*	Install amavisd-new on the outgoing SMTP proxy.	Guilhem Moulin	2015-06-07	1
\| \| \| \|	For DKIM signing and virus checking.
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	2
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	2
\|
*	More logcheck-database tweaks.	Guilhem Moulin	2015-06-07	3
\|
*	logcheck-database tweaks.	Guilhem Moulin	2015-06-07	3
\|
*	Make use of Ansible 1.5 new features.	Guilhem Moulin	2015-06-07	2
\| \| \| \|	Most notably pipelining=True and sysctl_set=yes.
*	Configure the (basic) logging policy.	Guilhem Moulin	2015-06-07	2