summaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Expand)AuthorAgeFiles
* rkhunter: Disable remote updates to fix CVE-2017-7480.Guilhem Moulin2017-07-291
* Use MariaDB as default MySQL flavor.Guilhem Moulin2017-07-295
* Don't install debsecan anymore by default.Guilhem Moulin2017-06-262
* MySQL: Use a single InnoDB file per table.Guilhem Moulin2017-06-151
* Webmail: don't allow outgoing TCP/993 connections.Guilhem Moulin2017-06-151
* postfix-sender-login: strip extension before lookup.Guilhem Moulin2017-06-131
* More logcheck-database tweaks.Guilhem Moulin2017-06-071
* postfix-msa: anonymize SASL-authenticated senders using IPv6.Guilhem Moulin2017-06-061
* dovecot-auth-proxy: Fix synopsis line.Guilhem Moulin2017-06-051
* postscreen: lower zen.spamhaus.org DNSBL score from 3 to 2 on the MX:es.Guilhem Moulin2017-06-051
* postfix-sender-login: wibbleGuilhem Moulin2017-06-052
* dovecot: enable user iteration and add a cronjob for `doveadm purge -A`Guilhem Moulin2017-06-059
* move postfix-sender-login.{service,socket} to files/.Guilhem Moulin2017-06-022
* postfix: enable XFORWARD command from our internal relays.Guilhem Moulin2017-06-021
* postfix: don't rate-limit our IPsec subnet.Guilhem Moulin2017-06-023
* postfix-sender-login: terminate the worker after 32*$nProc connections to rel...Guilhem Moulin2017-06-011
* postfix-sender-login: handle EINTR in read(2) and write(2) calls.Guilhem Moulin2017-06-011
* postfix-sender-login: pre-fork 2 servers.Guilhem Moulin2017-06-011
* Don't make Roundcube add a 'X-Sender' header with the sender's identity.Guilhem Moulin2017-06-011
* Don't let authenticated client use arbitrary sender addresses.Guilhem Moulin2017-06-0110
* /lib/systemd/system → /etc/systemd/systemGuilhem Moulin2017-05-3117
* Also install non-free firmwares on civett.Guilhem Moulin2017-05-302
* Install more sympa dependencies.Guilhem Moulin2017-05-291
* Use blackhole subdomain for sender addresses of verify probes.Guilhem Moulin2017-05-163
* Change group of executables in /usr/local/{bin,sbin} from root to staff.Guilhem Moulin2017-05-147
* webmail: use Zend opcache and configure APCu.Guilhem Moulin2017-05-143
* sympa: don't tweak /etc/logrotate.d/sympa.Guilhem Moulin2017-05-141
* wwsympa: allow write access to /var/spool/sympa.Guilhem Moulin2017-05-141
* MSA: reject null sender address.Guilhem Moulin2017-05-144
* IMAP: new script list-users.Guilhem Moulin2017-05-142
* Fix Ansible 2.2.0 compatibility of a Jinja2 template.Guilhem Moulin2017-01-141
* Allow SMTP client from whitelisted IPs to bypass postscreen checks.Guilhem Moulin2017-01-141
* nginx: set Referrer-Policy HTTP header to "no-referrer".Guilhem Moulin2016-12-131
* nginx: add support for HTTP/2.Guilhem Moulin2016-12-135
* dovecot: Deduplicate attachments hourly, just before automatic backup.Guilhem Moulin2016-12-111
* dovecot: use Single-Instance Storage for mail attachments.Guilhem Moulin2016-12-104
* More logcheck-database tweaks.Guilhem Moulin2016-12-081
* wiki: Add instruction for how to add the post-update hook.Guilhem Moulin2016-12-081
* Dovecot: Explicitly disable LDAP.Guilhem Moulin2016-12-081
* gitolite: allow hook.* git config keys.Guilhem Moulin2016-12-081
* Upgrade to lacme 0.2-1.Guilhem Moulin2016-12-082
* Webmail: Install XCache (PHP opcode cacher).Guilhem Moulin2016-12-081
* Dovecot: use fallocate(2) to preallocate new mdbox files.Guilhem Moulin2016-12-081
* Postscreen: Give temporary whitelist status to primary MX addresses only.Guilhem Moulin2016-09-201
* systemd: Ensure sympa service is enabled.Guilhem Moulin2016-09-181
* lacme-certs.conf: don't restart but reload dovecot after renewing IMAPS cert.Guilhem Moulin2016-09-181
* Postfix: ensure common aliases are present.Guilhem Moulin2016-09-183
* FreshClam: change ownership of /etc/clamav/freshclam.conf.Guilhem Moulin2016-09-181
* Firewall: allow duplicates rules.Guilhem Moulin2016-09-181
* More logcheck-database tweaks.Guilhem Moulin2016-08-222
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-25 17:17:28 +0000