1
1
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-11-15 14:53:06 +01:00
Commit Graph

24 Commits

Author SHA1 Message Date
Kristian Klausen
cf9c92fd34
dovecot: Disable POP3
No one uses it and less to worry about.

Fix #205
2021-07-16 19:45:43 +02:00
Kristian Klausen
af46f2a5c8 dovecot: Decouple the mailboxes from the system user
The homedir is now /home/vmail/%d/%n instead of /home/$USER.

Preparation for switching to a virtual user setup and removing all the
staff users from mail.a.o.
2021-07-16 01:48:14 +00:00
Kristian Klausen
316b85170b Add missing "create ssl cert" tasks 2021-05-13 22:03:39 +00:00
Kristian Klausen
4112bdf9fd Make ansible-lint happy
yaml: truthy value should be one of [false, true] (truthy)
yaml: wrong indentation: expected 4 but found 2 (indentation)
yaml: too few spaces before comment (comments)
yaml: missing starting space in comment (comments)
yaml: too many blank lines (1 > 0) (empty-lines)
yaml: too many spaces after colon (colons)
yaml: comment not indented like content (comments-indentation)
yaml: no new line character at the end of file (new-line-at-end-of-file)
load-failure: Failed to load or parse file
parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path.
2021-02-14 14:22:05 +01:00
Kristian Klausen
7b8e592031 dovecot: Open hole for managesieve in the firewall 2020-11-30 00:38:31 +01:00
Frederik Schwan
74c3d326e4
remove unencrypted IMAP, POP3 and add SMTPS support
This sets the dovecot ports for imap and pop3 to 0 which disables those
services. For SMTPS we add the the SMTPS service on 465 first before
deprecating support for submission on 587.
2020-11-29 13:06:18 +01:00
Frederik Schwan
5adae994b6
add dovecot cleanup timer to purge mdbox files
While mbox and maildir files get deleted by dovecot right away, that's
not the case for mdbox files. Since they contain multiple mails at once
in a proprietary format rewriting is expensive. That's why this step
is done in a separate step outside the dovecot process.
2020-11-15 13:06:00 +01:00
Kristian Klausen
bcf1c981bb Replace SpamAssassin with Rspamd
Switching to Rspamd has some advantages:
* It is probably faster than SA[1] (C + Lua vs Perl)
* We can reduce the number of moving parts. Rspamd has built-in DKIM
  signing, greylisting, DMARC checking to name a few
* It doesn't just mark the mail as spam/not-spam, it gives every mail a
  score and depending on the score it does either: nothing, greylist it,
  mark it as spam or reject it[2] (more actions is available and it can
  be tweaked)
* Replies whitelisting[3]
* It supports ARC signing, which can be useful
* A cool looking WebUi :)
* ... and more[4]...

[1] https://rspamd.com/doc/tutorials/migrate_sa.html#why-migrate-to-rspamd
[2] https://rspamd.com/doc/faq.html#what-are-rspamd-actions
[3] https://rspamd.com/doc/modules/replies.html
[4] https://rspamd.com/comparison.html
2020-11-15 04:40:49 +00:00
Jelle van der Waa
61ebfda051
Create dovecot configuration directory 2020-10-24 18:09:26 +02:00
Sven-Hendrik Haase
d68771ea7a
Fix for ansible 2.10 (fixes #149) 2020-09-23 22:22:34 +02:00
Frederik Schwan
2b2bd06512
fix E206 'Variables should have spaces before and after: {{ var_name }}' 2020-06-12 22:20:48 +02:00
Phillip Smith
512a4a333e resolve some ansible-lint errors 2020-02-11 16:25:39 +11:00
Florian Pritz
d20dd7e134
dovecot: Install our own PAM config
This enables lastlog so that we also see which accounts are used for
email only even if they are not used for SSH.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-11-08 14:30:24 +01:00
Phillip Smith
8d681f0040 add "firewall" tag to all relevant tasks 2018-08-17 14:56:37 +10:00
Phillip Smith
1258e6b7d1 make all firewalld changes take effect immediately 2018-08-17 10:32:10 +10:00
Florian Pritz
13078f8651
Enable cpu/memory accounting by default
The discovery script now uses a regex and no longer cares where exactly
accounting is enabled. Follow systemd upstream by enabling it by
default.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2018-06-25 14:50:58 +02:00
Florian Pritz
b847916c61
Disable firewalld tasks
Disable firewall because python2 module is not avaible and the tasks
fail which makes the playbooks fail and leads to handlers not being run.

https://github.com/ansible/ansible/issues/24855

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2018-03-21 12:38:01 +01:00
Phillip Smith
59807399ed initial commit of firewalld role and tasks 2018-03-06 08:46:24 +11:00
Florian Pritz
b59d6b99df
Add cpu/memory accounting to many roles
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2018-02-28 19:50:32 +01:00
Florian Pritz
1fae9c3d1f
dovecot: Update config for 2.3
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2018-01-08 09:28:01 +01:00
Florian Pritz
678f997bf2
dovecot/postfix: Add letsencrypt hook
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-09-03 19:08:20 +02:00
Jan Alexander Steffens (heftig)
bd90028cb0
roles: Ensure leading zero for octal modes
I've had mode=755 create garbage already...
2016-09-22 09:25:33 +02:00
Florian Pritz
dc0305ea13
dovecot: Add pigeonhole package
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-07-18 13:48:31 +02:00
Florian Pritz
7adb07bd19 Add role/dovecot
Config copied from nymeria with improved indentation.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-07-17 19:44:12 +02:00