summaryrefslogtreecommitdiffstats
path: root/roles/out
Commit message (Expand)AuthorAgeFiles
* Postfix: pin key material to our MX:es for fripost.org and its subdomains.Guilhem Moulin2021-01-263
* Postfix: Install -lmdb in all roles using db=lmdb.Guilhem Moulin2020-05-211
* Outgoing SMTP: masquerade internal hostnames.Guilhem Moulin2018-12-123
* Upgrade 'out' role to Debian Stretch.Guilhem Moulin2018-12-091
* postfix: remove explicit default 'mail_owner = postfix'.Guilhem Moulin2018-12-061
* Postfix: replace cdb & btree tables with lmdb ones.Guilhem Moulin2018-12-031
* Perform recipient address verification on the MSA itself.Guilhem Moulin2018-04-041
* Use blackhole subdomain for sender addresses of verify probes.Guilhem Moulin2017-05-161
* postfix: Remove obsolete templates tls_policy/relay_clientcerts.Guilhem Moulin2016-07-121
* postfix: commit the master.cf symlinks.Guilhem Moulin2016-07-121
* Route all internal SMTP traffic through IPsec.Guilhem Moulin2016-07-102
* Postfix: don't share the master.cf between the instances.Guilhem Moulin2016-07-102
* postfix: Don't explicitly set inet_interfaces=all as it's the default.Guilhem Moulin2016-07-101
* Route SMTP traffic from the webmail through IPsec.Guilhem Moulin2016-07-101
* postfix: rotate the sender address for verify probes.Guilhem Moulin2016-06-021
* postfix: Update to recommended TLS settings.Guilhem Moulin2016-05-181
* postfix: unset 'smtpd_tls_session_cache_database'.Guilhem Moulin2016-05-181
* Move /etc/ssl/private/dhparams.pem to /etc/ssl/dhparams.pem and make it public.Guilhem Moulin2016-05-181
* Remove SMTP message size limit on non public MTAs.Guilhem Moulin2016-03-211
* Postfix TLS policy: Store the fingerprint of the cert's pubkey, not of the ce...Guilhem Moulin2015-12-031
* Fix address verification probes on the MSA.Guilhem Moulin2015-09-161
* Use 'double-bounce@fripost.org' as envelope sender for verification probes.Guilhem Moulin2015-06-111
* Don't bounce unverified recipients upon 4xx errors.Guilhem Moulin2015-06-111
* Configure munin nodes & master.Guilhem Moulin2015-06-102
* Use recipient address verification probes.Guilhem Moulin2015-06-071
* logjam mitigation.Guilhem Moulin2015-06-071
* Upgrade Postfix config to Jessie (MSA & outgoing proxy).Guilhem Moulin2015-06-071
* Remove reject_unknown_sender_domain from the MDA and outgoing SMTP.Guilhem Moulin2015-06-071
* Replace Postgrey with postscreen.Guilhem Moulin2015-06-071
* Hash certs using a lookup in the template instead of add a new task.Guilhem Moulin2015-06-072
* Add a tag 'tls_policy' to facilitate rekeying.Guilhem Moulin2015-06-071
* Tell vim the underlying filetype of templates for syntax highlighting.Guilhem Moulin2015-06-071
* Reload Postfix upon configuration change, but don't restart it.Guilhem Moulin2015-06-072
* Don't restart/reload Postifx upon change of a file based database.Guilhem Moulin2015-06-071
* Install amavisd-new on the outgoing SMTP proxy.Guilhem Moulin2015-06-071
* Replace IPSec tunnels by app-level ephemeral TLS sessions.Guilhem Moulin2015-06-073
* Outgoing SMTP proxy.Guilhem Moulin2015-06-073