fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	Roundcube: add a link to our webpage as support URL.	Guilhem Moulin	2016-05-24	1
\|
*	Roundcube: add a warning regarding IMAP hostname change.	Guilhem Moulin	2016-05-23	1
\|
*	Add an ansible module 'fetch_cmd' to fetch the output of a remote command ↵	Guilhem Moulin	2016-05-18	1
\| \| \| \| \| \|	locally. And use this to fetch all X.509 leaf certificates.
*	roundube: Pin X.509 certificate for sieve.fripost.org:4190.	Guilhem Moulin	2016-05-17	2
\|
*	Use systemd unit files for stunnel4.	Guilhem Moulin	2016-05-12	3
\|
*	Roundcube's CSP: remove 'upgrade-insecure-requests' and ↵	Guilhem Moulin	2016-04-08	1
\| \| \| \|	'block-all-mixed-content'.
*	Roundcube's CSP: allow loading images from data: URIs and arbitrary URLs.	Guilhem Moulin	2016-04-07	1
\| \| \| \|	Per user request: https://wiki.fripost.org/tracker/CSP_too_strict/
*	Set frame-ancestors from 'none' to 'self' in roundcube's CSP.	Guilhem Moulin	2016-04-02	1
\|
*	wibble	Guilhem Moulin	2016-04-02	1
\|
*	Set a HPKP on the webmail, website/wiki/git and list manager.	Guilhem Moulin	2016-04-01	1
\|
*	Set a CSP on the webmail, website/wiki and list manager.	Guilhem Moulin	2016-04-01	1
\|
*	Set HTTP security headers.	Guilhem Moulin	2016-03-30	1
\| \| \| \|	See https://securityheaders.io .
*	Let's Encrypt	Guilhem Moulin	2016-03-02	1
\|
*	Upgrade playbooks to Ansible 2.0.	Guilhem Moulin	2016-02-12	2
\|
*	Use the Let's Encrypt CA for our public certs.	Guilhem Moulin	2015-12-20	2
\|
*	nginx: Move include.d/* to snippets/.	Guilhem Moulin	2015-12-20	1
\|
*	nginx: s/conf.d/include.d/	Guilhem Moulin	2015-12-15	1
\|
*	wibble	Guilhem Moulin	2015-12-09	1
\|
*	ngnix: mv ssl/config conf.d/ssl	Guilhem Moulin	2015-12-09	1
\|
*	Use a dedicated subdomain for ManageSieve.	Guilhem Moulin	2015-12-03	1
\|
*	Automatically fetch X.509 certificates, and add them to git.	Guilhem Moulin	2015-12-03	1
\|
*	Roundcube managesieve SSL options: use AESGCM and disable compression.	Guilhem Moulin	2015-10-27	1
\|
*	stunnel: disable compression.	Guilhem Moulin	2015-10-27	1
\|
*	stunnel: use GCM ciphers only; use SSL options rather than ciphers to ↵	Guilhem Moulin	2015-10-27	1
\| \| \| \|	disable protocols.
*	roundcube: Raise 'imap_timeout' from 1 to 3 minutes.	Guilhem Moulin	2015-09-30	1
\| \| \| \|	See http://wiki.fripost.org/tracker/Error_on_search_in_roundcube/ .
*	roundcube: Use php5-enchant and GNU Aspell for spell-checking.	Guilhem Moulin	2015-09-29	1
\|
*	Add jqueryui configuration.	Guilhem Moulin	2015-09-29	2
\|
*	Make roundcube plugin configuration static files.	Guilhem Moulin	2015-09-29	4
\|
*	Upgrade Roundcube to 1.1.2.	Guilhem Moulin	2015-09-24	8
\|
*	Make the webmail connect directly to the outgoing SMTP proxy.	Guilhem Moulin	2015-06-07	6
\| \| \| \| \|	(Hence delete the 'webmail' Postfix instance.) This shortens the delay caused by the recipient verification probes.
*	Use recipient address verification probes.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \| \|	This is specially useful for mailing lists and the webmail, since it prevents our outgoing gateway from accepting mails known to be bouncing. However the downside is that it adds a delay of up to 6s after the RCPT TO command.
*	Upgrade the webmail configuration from Wheezy to Jessie.	Guilhem Moulin	2015-06-07	3
\|
*	Don't make Roundcube add a 'X-Sender' header with the sender's identity.	Guilhem Moulin	2015-06-07	1
\|
*	Roundcube's 'password' plugin.	Guilhem Moulin	2015-06-07	1
\|
*	Make Nginx send the intermediate certificate along with the server's.	Guilhem Moulin	2015-06-07	1
\|
*	Remove o=mailHosting from the LDAP directory suffix.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \|	So our suffix is now a mere 'dc=fripost,dc=org'. We're also using the default '/var/lib/ldap' as olcDbDirectory (hence we don't clear it before hand).
*	Add ability to add custom OrganizationalUnits in genkeypair.	Guilhem Moulin	2015-06-07	1
\| \| \| \|	Also, it's now possible to reuse an existing private key (with -f).
*	Tell vim the underlying filetype of templates for syntax highlighting.	Guilhem Moulin	2015-06-07	1
\|
*	Reload Postfix upon configuration change, but don't restart it.	Guilhem Moulin	2015-06-07	2
\| \| \| \| \| \|	(Unless a new instance is created, or the master.cf change is modified.) Changing some variables, such as inet_protocols, require a full restart, but most of the time it's overkill.
*	Replace IPSec tunnels by app-level ephemeral TLS sessions.	Guilhem Moulin	2015-06-07	3
\| \| \| \| \|	For some reason giraff doesn't like IPSec. App-level TLS sessions are less efficient, but thanks to ansible it still scales well.
*	Outgoing SMTP proxy.	Guilhem Moulin	2015-06-07	1
\|
*	Expose the real user ID when using the webmail.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \|	Sadly not doing so and keeping a table message ID -> username, like we do for SASL authenticated users, doesn't seem trivial here. We could encrypt the header, though.
*	Fix syntax error.	Guilhem Moulin	2015-06-07	1
\|
*	Generate certs for Dovecot and Nginx if they are not there.	Guilhem Moulin	2015-06-07	2
\|
*	Force Roundcube to connect the IMAP server on localhost:143.	Guilhem Moulin	2015-06-07	1
\|
*	Allow Roundcube to offer JavaScript.	Guilhem Moulin	2015-06-07	1
\|
*	Support boken SMTP clients and LOGIN SASL mechanism.	Guilhem Moulin	2015-06-07	1
\|
*	Install Rouncube from backports.	Guilhem Moulin	2015-06-07	2
\| \| \| \| \| \|	Recent versions have a whole bunch of bugfixes and nice new features: http://trac.roundcube.net/wiki/Changelog
*	wibble	Guilhem Moulin	2015-06-07	1
\|
*	Assume a DNS entry for each role.	Guilhem Moulin	2015-06-07	3
\| \| \| \| \| \|	E.g., ldap.fripost.org, ntp.fripost.org, etc. (Ideally the DNS zone would be provisioned by ansible, too.) It's a bit unclear how to index the subdomains (mx{1,2,3}, etc), though.