fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	Use recipient address verification probes.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \| \|	This is specially useful for mailing lists and the webmail, since it prevents our outgoing gateway from accepting mails known to be bouncing. However the downside is that it adds a delay of up to 6s after the RCPT TO command.
*	Upgrade the webmail configuration from Wheezy to Jessie.	Guilhem Moulin	2015-06-07	3
\|
*	Don't make Roundcube add a 'X-Sender' header with the sender's identity.	Guilhem Moulin	2015-06-07	1
\|
*	Roundcube's 'password' plugin.	Guilhem Moulin	2015-06-07	1
\|
*	Make Nginx send the intermediate certificate along with the server's.	Guilhem Moulin	2015-06-07	1
\|
*	Remove o=mailHosting from the LDAP directory suffix.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \|	So our suffix is now a mere 'dc=fripost,dc=org'. We're also using the default '/var/lib/ldap' as olcDbDirectory (hence we don't clear it before hand).
*	Add ability to add custom OrganizationalUnits in genkeypair.	Guilhem Moulin	2015-06-07	1
\| \| \| \|	Also, it's now possible to reuse an existing private key (with -f).
*	Tell vim the underlying filetype of templates for syntax highlighting.	Guilhem Moulin	2015-06-07	1
\|
*	Reload Postfix upon configuration change, but don't restart it.	Guilhem Moulin	2015-06-07	2
\| \| \| \| \| \|	(Unless a new instance is created, or the master.cf change is modified.) Changing some variables, such as inet_protocols, require a full restart, but most of the time it's overkill.
*	Replace IPSec tunnels by app-level ephemeral TLS sessions.	Guilhem Moulin	2015-06-07	3
\| \| \| \| \|	For some reason giraff doesn't like IPSec. App-level TLS sessions are less efficient, but thanks to ansible it still scales well.
*	Outgoing SMTP proxy.	Guilhem Moulin	2015-06-07	1
\|
*	Expose the real user ID when using the webmail.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \|	Sadly not doing so and keeping a table message ID -> username, like we do for SASL authenticated users, doesn't seem trivial here. We could encrypt the header, though.
*	Fix syntax error.	Guilhem Moulin	2015-06-07	1
\|
*	Generate certs for Dovecot and Nginx if they are not there.	Guilhem Moulin	2015-06-07	2
\|
*	Force Roundcube to connect the IMAP server on localhost:143.	Guilhem Moulin	2015-06-07	1
\|
*	Allow Roundcube to offer JavaScript.	Guilhem Moulin	2015-06-07	1
\|
*	Support boken SMTP clients and LOGIN SASL mechanism.	Guilhem Moulin	2015-06-07	1
\|
*	Install Rouncube from backports.	Guilhem Moulin	2015-06-07	2
\| \| \| \| \| \|	Recent versions have a whole bunch of bugfixes and nice new features: http://trac.roundcube.net/wiki/Changelog
*	wibble	Guilhem Moulin	2015-06-07	1
\|
*	Assume a DNS entry for each role.	Guilhem Moulin	2015-06-07	3
\| \| \| \| \| \|	E.g., ldap.fripost.org, ntp.fripost.org, etc. (Ideally the DNS zone would be provisioned by ansible, too.) It's a bit unclear how to index the subdomains (mx{1,2,3}, etc), though.
*	typo	Guilhem Moulin	2015-06-07	1
\|
*	wibble	Guilhem Moulin	2015-06-07	2
\|
*	Don't pass the client information unless necessary.	Guilhem Moulin	2015-06-07	1
\|
*	Don't use IPSec to relay messages to localhost.	Guilhem Moulin	2015-06-07	1
\|
*	Excplicitely make local services run on localhost.	Guilhem Moulin	2015-06-07	1
\|
*	typo	Guilhem Moulin	2015-06-07	1
\|
*	Configure Sieve and ManageSieve.	Guilhem Moulin	2015-06-07	2
\| \| \| \| \|	Also, add the 'managesieve' RoundCube plugin to communicate with our server.
*	Use a local IMAP caching proxy under the webmail.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \| \| \| \| \| \| \|	(Unless the webmail is itself a full IMAP server.) It replaces RoundCube's own IMAP and message caches. Dovecot's IMAPC storage backend is not very documented, but provides smart IMAP proxying. References include: http://dovecot.org/pipermail/dovecot/2011-January/056975.html http://wiki2.dovecot.org/HowTo/ImapcProxy http://wiki2.dovecot.org/Migration/Dsync
*	Configure the webmail.	Guilhem Moulin	2015-06-07	9