ansible.git
5 months agoupdate etherpad
Ralf Jung [Sun, 27 Jan 2019 21:45:25 +0000 (22:45 +0100)]
update etherpad

6 months agoupdate prosody config
Ralf Jung [Wed, 19 Dec 2018 18:55:50 +0000 (19:55 +0100)]
update prosody config

8 months agoimprove mailman-check
Ralf Jung [Tue, 13 Nov 2018 09:47:57 +0000 (10:47 +0100)]
improve mailman-check

9 months agoanother attempt at fixing apache IPv6 listening
Ralf Jung [Fri, 5 Oct 2018 12:54:54 +0000 (14:54 +0200)]
another attempt at fixing apache IPv6 listening

9 months agojournalwatch: postfix
Ralf Jung [Sun, 30 Sep 2018 17:41:42 +0000 (19:41 +0200)]
journalwatch: postfix

10 months agoupdate etherpad
Ralf Jung [Sun, 2 Sep 2018 12:31:10 +0000 (14:31 +0200)]
update etherpad

10 months agojournalwatch: ssh
Ralf Jung [Sat, 25 Aug 2018 12:31:53 +0000 (14:31 +0200)]
journalwatch: ssh

10 months agoapache is still only sometimes starting correctly
Ralf Jung [Mon, 20 Aug 2018 18:05:25 +0000 (20:05 +0200)]
apache is still only sometimes starting correctly

10 months agotweak do-update
Ralf Jung [Mon, 20 Aug 2018 16:42:50 +0000 (18:42 +0200)]
tweak do-update

10 months agologcheck: postfix
Ralf Jung [Sun, 19 Aug 2018 09:13:20 +0000 (11:13 +0200)]
logcheck: postfix

10 months agojournalwatch: ignore more delays (<= 500ms)
Ralf Jung [Sat, 18 Aug 2018 12:12:56 +0000 (14:12 +0200)]
journalwatch: ignore more delays (<= 500ms)

11 months agomaybe this helps for apache?
Ralf Jung [Thu, 16 Aug 2018 07:45:31 +0000 (09:45 +0200)]
maybe this helps for apache?

11 months agoremove cleanup task
Ralf Jung [Fri, 10 Aug 2018 11:12:00 +0000 (13:12 +0200)]
remove cleanup task

11 months agobetter IPv6 network config fix
Ralf Jung [Fri, 10 Aug 2018 10:59:53 +0000 (12:59 +0200)]
better IPv6 network config fix

11 months agoadd cronjob to make sure that apache is running
Ralf Jung [Tue, 31 Jul 2018 18:56:32 +0000 (20:56 +0200)]
add cronjob to make sure that apache is running

11 months agojournalwatch: postfix
Ralf Jung [Sun, 22 Jul 2018 08:12:07 +0000 (10:12 +0200)]
journalwatch: postfix

11 months agosome machines are so slow, postfix often complains
Ralf Jung [Sun, 22 Jul 2018 08:10:02 +0000 (10:10 +0200)]
some machines are so slow, postfix often complains

12 months agojournalwatch: bind
Ralf Jung [Wed, 27 Jun 2018 07:27:32 +0000 (09:27 +0200)]
journalwatch: bind

12 months agodisable upgrade debug output for now
Ralf Jung [Sun, 24 Jun 2018 16:30:28 +0000 (18:30 +0200)]
disable upgrade debug output for now

12 months agofix cronjob mode
Ralf Jung [Thu, 21 Jun 2018 08:05:28 +0000 (10:05 +0200)]
fix cronjob mode

12 months agoadd script to continuously check DNS settings
Ralf Jung [Thu, 21 Jun 2018 08:02:08 +0000 (10:02 +0200)]
add script to continuously check DNS settings

12 months agojournalwatch: bind
Ralf Jung [Mon, 18 Jun 2018 09:34:25 +0000 (11:34 +0200)]
journalwatch: bind

12 months agoupdate site.yml dependency comment
Ralf Jung [Mon, 18 Jun 2018 07:23:24 +0000 (09:23 +0200)]
update site.yml dependency comment

12 months agoignore more strato-specific errors
Ralf Jung [Mon, 18 Jun 2018 07:05:29 +0000 (09:05 +0200)]
ignore more strato-specific errors

12 months agoonly redirect to https if we have letsencrypt
Ralf Jung [Sun, 17 Jun 2018 21:08:35 +0000 (23:08 +0200)]
only redirect to https if we have letsencrypt

13 months agopostfix: permit adding more domains to virtual_mailbox_domains
Ralf Jung [Sat, 16 Jun 2018 18:15:22 +0000 (20:15 +0200)]
postfix: permit adding more domains to virtual_mailbox_domains

13 months agojournalwatch: only filter broken conterinerization messages on strato machines
Ralf Jung [Sat, 16 Jun 2018 18:06:44 +0000 (20:06 +0200)]
journalwatch: only filter broken conterinerization messages on strato machines

13 months agopermit configuring mail system hostname
Ralf Jung [Sat, 16 Jun 2018 18:01:27 +0000 (20:01 +0200)]
permit configuring mail system hostname

13 months agomake unbound dependency for postfix optional
Ralf Jung [Sat, 16 Jun 2018 17:57:33 +0000 (19:57 +0200)]
make unbound dependency for postfix optional

13 months agojournalwatch: systemd error on strato
Ralf Jung [Sat, 16 Jun 2018 17:17:50 +0000 (19:17 +0200)]
journalwatch: systemd error on strato

13 months agomake letsencrypt optional for apache/postfix
Ralf Jung [Sat, 16 Jun 2018 17:17:41 +0000 (19:17 +0200)]
make letsencrypt optional for apache/postfix

13 months agoInstall libpam-systemd before installing needrestart
Ralf Jung [Sat, 16 Jun 2018 10:05:23 +0000 (12:05 +0200)]
Install libpam-systemd before installing needrestart

Otherwise, needrestart can pull in libpam-systemd from backports, and therefore
upgrade the entire systemd to backports.

13 months agoMailman CAPTCHA: rename displayhtml -> display
Ralf Jung [Sun, 10 Jun 2018 17:40:56 +0000 (19:40 +0200)]
Mailman CAPTCHA: rename displayhtml -> display

13 months agoadd script to easily play site.yml
Ralf Jung [Sun, 10 Jun 2018 17:40:30 +0000 (19:40 +0200)]
add script to easily play site.yml

13 months agofix mailman patch detection
Ralf Jung [Sun, 3 Jun 2018 20:42:41 +0000 (22:42 +0200)]
fix mailman patch detection

13 months agoadd data protection information to subscribeack
Ralf Jung [Sun, 3 Jun 2018 18:44:03 +0000 (20:44 +0200)]
add data protection information to subscribeack

13 months agopatch mailman to add a simple question-and-answer CAPTCHA
Ralf Jung [Sun, 3 Jun 2018 18:37:35 +0000 (20:37 +0200)]
patch mailman to add a simple question-and-answer CAPTCHA

13 months agomailman: set SUBSCRIBE_FORM_SECRET to protect better against spammers
Ralf Jung [Sat, 2 Jun 2018 13:49:21 +0000 (15:49 +0200)]
mailman: set SUBSCRIBE_FORM_SECRET to protect better against spammers

13 months agoapache: anonymize error.log; set ServerAdmin and ServerName
Ralf Jung [Sat, 2 Jun 2018 07:48:26 +0000 (09:48 +0200)]
apache: anonymize error.log; set ServerAdmin and ServerName

13 months agofix log-anon script
Ralf Jung [Sat, 2 Jun 2018 07:48:20 +0000 (09:48 +0200)]
fix log-anon script

13 months agotweak apache2 config
Ralf Jung [Sat, 2 Jun 2018 07:13:10 +0000 (09:13 +0200)]
tweak apache2 config

13 months agojournalwatch: postfix
Ralf Jung [Sun, 27 May 2018 14:00:40 +0000 (16:00 +0200)]
journalwatch: postfix

13 months agolater prosody uses systemd to daemonize
Ralf Jung [Wed, 23 May 2018 19:07:52 +0000 (21:07 +0200)]
later prosody uses systemd to daemonize

13 months agodocument role dependencies
Ralf Jung [Tue, 22 May 2018 20:25:54 +0000 (22:25 +0200)]
document role dependencies

13 months agojournalwatch: postfix
Ralf Jung [Tue, 22 May 2018 16:23:20 +0000 (18:23 +0200)]
journalwatch: postfix

13 months agojournalwatch: opendkim
Ralf Jung [Tue, 22 May 2018 14:34:41 +0000 (16:34 +0200)]
journalwatch: opendkim

13 months agojournalwatch: dovecot
Ralf Jung [Tue, 22 May 2018 12:43:10 +0000 (14:43 +0200)]
journalwatch: dovecot

13 months agoadd tag to only deploy journalwatch patterns (and config)
Ralf Jung [Tue, 22 May 2018 12:37:33 +0000 (14:37 +0200)]
add tag to only deploy journalwatch patterns (and config)

13 months agojournalwatch: opendkim
Ralf Jung [Tue, 22 May 2018 12:35:48 +0000 (14:35 +0200)]
journalwatch: opendkim

13 months agoalso create newmail settings.py
Ralf Jung [Mon, 21 May 2018 08:48:47 +0000 (10:48 +0200)]
also create newmail settings.py

13 months agogenerate virtual transport_map from mailman and dovecot domain lists
Ralf Jung [Mon, 21 May 2018 08:38:23 +0000 (10:38 +0200)]
generate virtual transport_map from mailman and dovecot domain lists

13 months agomove newmail script to dovecot tasks; add changepw script; fix quota-warning script
Ralf Jung [Sun, 20 May 2018 22:00:28 +0000 (00:00 +0200)]
move newmail script to dovecot tasks; add changepw script; fix quota-warning script

13 months agoconfigure mailman; group mailman tasks together
Ralf Jung [Sun, 20 May 2018 21:48:41 +0000 (23:48 +0200)]
configure mailman; group mailman tasks together

13 months agopostfix: use default jinja combinator
Ralf Jung [Sun, 20 May 2018 20:59:37 +0000 (22:59 +0200)]
postfix: use default jinja combinator

13 months agomake unbound its own role
Ralf Jung [Sun, 20 May 2018 20:50:08 +0000 (22:50 +0200)]
make unbound its own role

13 months agopostfix: offer opening another smtpd on port 26
Ralf Jung [Sun, 20 May 2018 20:45:20 +0000 (22:45 +0200)]
postfix: offer opening another smtpd on port 26

13 months agoopendkim: properly create tmpdir; use DNSSEC
Ralf Jung [Sun, 20 May 2018 20:16:35 +0000 (22:16 +0200)]
opendkim: properly create tmpdir; use DNSSEC

13 months agogenerate relay_clientcerts whitelist from host_vars
Ralf Jung [Sun, 20 May 2018 19:46:04 +0000 (21:46 +0200)]
generate relay_clientcerts whitelist from host_vars

13 months agoadd a host_vars template
Ralf Jung [Sun, 20 May 2018 19:38:50 +0000 (21:38 +0200)]
add a host_vars template

13 months agofix playall to site.yml, now that that's the only playbook
Ralf Jung [Sun, 20 May 2018 17:24:22 +0000 (19:24 +0200)]
fix playall to site.yml, now that that's the only playbook

13 months agostart dovecot config; generate postfix transport_map; support multiple sender IPs...
Ralf Jung [Sun, 20 May 2018 16:58:07 +0000 (18:58 +0200)]
start dovecot config; generate postfix transport_map; support multiple sender IPs in postfix

13 months agoreorganize postfix/email role; drop meta/main.yml dependencies as they interact badly...
Ralf Jung [Sun, 20 May 2018 08:57:35 +0000 (10:57 +0200)]
reorganize postfix/email role; drop meta/main.yml dependencies as they interact badly with tags

13 months agoadd etherpad role
Ralf Jung [Sun, 20 May 2018 08:43:50 +0000 (10:43 +0200)]
add etherpad role

13 months agoadd dependencies between roles
Ralf Jung [Sun, 20 May 2018 07:49:10 +0000 (09:49 +0200)]
add dependencies between roles

13 months agoavoid gathering facts when we do not need to
Ralf Jung [Sat, 19 May 2018 09:48:11 +0000 (11:48 +0200)]
avoid gathering facts when we do not need to

13 months agogather most of the playbooks in one and just use tags
Ralf Jung [Sat, 19 May 2018 08:01:53 +0000 (10:01 +0200)]
gather most of the playbooks in one and just use tags

the email playbook is still a mess...

14 months agoadd named.conf.options
Ralf Jung [Sat, 12 May 2018 12:56:41 +0000 (14:56 +0200)]
add named.conf.options

14 months agofix timesyncd service name
Ralf Jung [Sat, 12 May 2018 12:42:09 +0000 (14:42 +0200)]
fix timesyncd service name

14 months agoorder site.yml
Ralf Jung [Fri, 11 May 2018 17:20:00 +0000 (19:20 +0200)]
order site.yml

14 months agoadd bind role
Ralf Jung [Fri, 11 May 2018 17:15:38 +0000 (19:15 +0200)]
add bind role

14 months agoinstall acl; use latest LE-tiny
Ralf Jung [Fri, 11 May 2018 17:15:33 +0000 (19:15 +0200)]
install acl; use latest LE-tiny

14 months agoadd README
Ralf Jung [Fri, 11 May 2018 11:08:51 +0000 (13:08 +0200)]
add README

14 months agoadd lets-encrypt-tiny
Ralf Jung [Fri, 11 May 2018 10:01:13 +0000 (12:01 +0200)]
add lets-encrypt-tiny

14 months agogroup newmail script stuff in a block
Ralf Jung [Fri, 11 May 2018 08:53:14 +0000 (10:53 +0200)]
group newmail script stuff in a block

14 months agoMove dh2048 creation to base, remove server-scripts from base
Ralf Jung [Fri, 11 May 2018 08:47:45 +0000 (10:47 +0200)]
Move dh2048 creation to base, remove server-scripts from base

14 months agoadd newmail script
Ralf Jung [Thu, 10 May 2018 22:51:53 +0000 (00:51 +0200)]
add newmail script

14 months agoadd mailman-check cronjob
Ralf Jung [Thu, 10 May 2018 22:41:37 +0000 (00:41 +0200)]
add mailman-check cronjob

14 months agomake base a role
Ralf Jung [Thu, 10 May 2018 10:58:34 +0000 (12:58 +0200)]
make base a role

14 months agoconfigure timesyncd
Ralf Jung [Thu, 10 May 2018 08:44:31 +0000 (10:44 +0200)]
configure timesyncd

14 months agodon't get DNS via DHCPv6 either
Ralf Jung [Thu, 10 May 2018 07:35:31 +0000 (09:35 +0200)]
don't get DNS via DHCPv6 either

14 months agounbound: make sure unbound is loaded before the network is considered online
Ralf Jung [Thu, 10 May 2018 07:18:52 +0000 (09:18 +0200)]
unbound: make sure unbound is loaded before the network is considered online

14 months agoadd do-update script
Ralf Jung [Thu, 10 May 2018 07:08:04 +0000 (09:08 +0200)]
add do-update script

14 months agopostfix needs opendkim access
Ralf Jung [Sat, 5 May 2018 15:23:13 +0000 (17:23 +0200)]
postfix needs opendkim access

14 months agoupdate server-scripts repo URL
Ralf Jung [Wed, 2 May 2018 07:53:25 +0000 (09:53 +0200)]
update server-scripts repo URL

14 months agodeploy apache log anonymizer
Ralf Jung [Tue, 1 May 2018 16:25:51 +0000 (18:25 +0200)]
deploy apache log anonymizer

14 months agojournalwatch: ssh, postfix
Ralf Jung [Tue, 1 May 2018 08:25:09 +0000 (10:25 +0200)]
journalwatch: ssh, postfix

14 months agofix NEEDRESTART_MODE
Ralf Jung [Tue, 1 May 2018 08:18:27 +0000 (10:18 +0200)]
fix NEEDRESTART_MODE

14 months agoI don't think we still need this with PW-logins disabled
Ralf Jung [Fri, 20 Apr 2018 07:33:58 +0000 (09:33 +0200)]
I don't think we still need this with PW-logins disabled

14 months agoapache: disable access_compat module
Ralf Jung [Tue, 17 Apr 2018 20:37:17 +0000 (22:37 +0200)]
apache: disable access_compat module

14 months agoless MAM
Ralf Jung [Tue, 17 Apr 2018 14:56:46 +0000 (16:56 +0200)]
less MAM

15 months agojournalwatch: ssh
Ralf Jung [Mon, 16 Apr 2018 20:36:38 +0000 (22:36 +0200)]
journalwatch: ssh

15 months agomake sure dhclient does not give us another DNS server
Ralf Jung [Mon, 16 Apr 2018 17:39:54 +0000 (19:39 +0200)]
make sure dhclient does not give us another DNS server

15 months agoSSH: filter more
Ralf Jung [Mon, 16 Apr 2018 08:52:38 +0000 (10:52 +0200)]
SSH: filter more

15 months agoadd unbound and more tools
Ralf Jung [Sun, 15 Apr 2018 16:26:57 +0000 (18:26 +0200)]
add unbound and more tools

15 months agoinstall more stuff
Ralf Jung [Sun, 15 Apr 2018 15:54:32 +0000 (17:54 +0200)]
install more stuff

15 months agoadd prosody config
Ralf Jung [Sun, 15 Apr 2018 15:32:35 +0000 (17:32 +0200)]
add prosody config

15 months agoconfigure root shell from /etc/skel; put conditionals above actions
Ralf Jung [Sun, 15 Apr 2018 15:32:25 +0000 (17:32 +0200)]
configure root shell from /etc/skel; put conditionals above actions

15 months agojournalwatch: ignore failed SSH attempts... there are just too many...
Ralf Jung [Sun, 15 Apr 2018 13:35:42 +0000 (15:35 +0200)]
journalwatch: ignore failed SSH attempts... there are just too many...

15 months agoroll out psmisc (for killall)
Ralf Jung [Sun, 15 Apr 2018 13:30:31 +0000 (15:30 +0200)]
roll out psmisc (for killall)

15 months agofail2ban cleanup done
Ralf Jung [Sun, 15 Apr 2018 13:27:03 +0000 (15:27 +0200)]
fail2ban cleanup done