majic-ansible-roles Files · roles/backup

Files @ 17cf34f73ca6

Branch filter:

Location: majic-ansible-roles/roles/backup_client/handlers/main.yml - annotation

17cf34f73ca6 1002 B text/x-yaml Show Source Show as Raw Download as Raw

branko

MAR-28: Implemented additional tests for mail_server role:

- Deploy a number of tools on clients in order to test SMTP, IMAP, and Sieve
services.
- Added one more user to LDAP directory for testing group restrictions.
- Deploy CA certificate on all testing machines for TLS validation purposes.
- Use different custom-configured cipher for mail server ciphers.
- Fixed invalid postmaster address for parameters-optional host.
- Deploy configuration files for use with Imap-CLI on client test machines.
- Updated testing of SMTP server to include checks for users that do not belong
to mail group.
- Extended some SMTP-related tests to cover both test servers.
- Some small fixes in SMTP-related tests for expected output from commands.
- Implemented tests covering Dovecot (IMAP + Sieve) functionality.
- Implemented tests for running/enabled services.
- Implemented tests for ClamAV.
- Implemented tests for firewall and connectivity.
- Implemented tests for Postfix TLS configuration.
- TODO: Tests for Sieve TLS configuration have not been written yet due to
limitation of available tools.

a45dcc06530a
a45dcc06530a
d61d01c00362
d61d01c00362
d2a9e41cd838
d2a9e41cd838
d2a9e41cd838
d2a9e41cd838
d2a9e41cd838
d2a9e41cd838
a45dcc06530a
d61d01c00362
6b87dd13b24c
d2a9e41cd838
d2a9e41cd838
d2a9e41cd838
d2a9e41cd838
d2a9e41cd838
d2a9e41cd838
d61d01c00362
d61d01c00362
6b87dd13b24c
d61d01c00362

---

- name: Clean-up GnuPG keyring for import of new keys
  shell: rm -f /etc/duply/main/gnupg/*
  tags:
    # [ANSIBLE0007] rm used in place of argument state=absent to file module
    #   This task is invoked only if user is very specific about requiring to
    #   run the handlers manually as a way to bring the system to consistency
    #   after interrupted runs.
    - skip_ansible_lint

- name: Import private keys
  command: "{{ gnupg_binary }} --homedir /etc/duply/main/gnupg --import /etc/duply/main/private_keys.asc"
  tags:
    # [ANSIBLE0012] Commands should not change things if nothing needs doing
    #   This task is invoked only if user is very specific about requiring to
    #   run the handlers manually as a way to bring the system to consistency
    #   after interrupted runs.
    - skip_ansible_lint

- name: Import public keys
  command: "{{ gnupg_binary }} --homedir /etc/duply/main/gnupg --import /etc/duply/main/public_keys.asc"
  when: backup_additional_encryption_keys