majic-ansible-roles Changelog /testsite/group

Changelog - /testsite/group_vars/mail.yml @ d06cc66f85c8 - showing 29 out of 29 revisions

branko	d06cc66f85c8	10 months ago	MAR-230: Update minimum TLS protocol on testsite to supported version.
branko	24120c68c6b4	21 months ago	MAR-196: Simplify allowed TLS protocol configuration for mail_server role: MAR-196: Simplify allowed TLS protocol configuration for mail_server role: - Accept minimum version allowed instead of arbitrary list. - Fixes deprecation warnings in Dovecot logs (ssl_protocols -> ssl_min_protocol transition).
branko	b56ccd5a92ee	7 years ago	MAR-129: Fixed linting errors in the test site files.
branko	24c957d877de	9 years ago	MAR-96: Fixed indentation for code listing in testsite documentation for generating the SSH keys. Added an extra "workstation" machine to test site meant to be used for testing Debian 9 Stretch compatibility. Moved testing of "extra_backup_patterns" into the new workstation machine.
branko	4b964a31bd96	9 years ago	MAR-95: Separated configuration for backing-up the /root and /home directories in the common role. This should allow user to have better fine-grained control over what gets backed-up in the home directory. Updated role reference documentation. Updated the testsite variable configuration so the new setting can be tested.
branko	8548876c068b	9 years ago	MAR-90: Updated testsite to include the two new configuration options (to make sure they are applied correctly).
branko	111e954e826d	9 years ago	MAR-89: Implemented mail_server role parameter for specifying maximum number of IMAP connections a single user can have from single IP address.
branko	3bd270c9e860	9 years ago	MAR-78: Implement ability to specify local mail aliases in the mail_server role.
branko	1b05bae8e440	10 years ago	MAR-56: Added LDIF templates to docs for relevant roles. Added warning about freshclam/clamav service restart during initial install (need to be restarted). Switched some TLS truststore vars to use concerete values. Introduced option for specifying additional Nginx config options. Added docs for some params. Assmeble Duplicity include pattern when needed. Don't set passwords for existing system users. Fix permissions for database users to be more restrictive. Fixed a couple of default param definitions (mainly tls cert/key stuff). Updated URL for downloading Prosody LDAP plugin. Updated testsite configs.
branko	18cd76ec050d	10 years ago	MAR-51: Replaced referencing of local files for TLS keys and certificates with actual values. Documentation has been updated throughout to reflect this in both role reference and usage instructions.
branko	4313878669b1	10 years ago	MAR-37: Fixed documentation for the mail server LDAP base DN parameter, and renamed the parameter to make a bit more sense (to reduce confusion).
branko	e1f36d36827b	10 years ago	MAR-19: Fixed missing parameter for using TLS for LDAP connections in Prosody configuraiton template. Fixed LDAP client configurations, moving most of them out of the individual yml files into all.yml (so only the ldap server gets different config).
branko	e838bcb94a9e	10 years ago	MAR-19: Simplified the mail server parameters by making a bunch of them optional.
branko	70733167cdf8	10 years ago	MAR-9: Created small utility playbook in testsite for generating the necessary TLS keys and certificates. Updated testsite configuration to be slightly different (no need for separate chain file I think).
branko	0f17841d0aad	10 years ago	MAR-9: Updated the testsite to use domain parameter defined within all.yml. Some regex replacements are done in same file to calculate the remaining necessary values. Fixed a small code error in ldap_permissions module.
branko	06bf1c3c9611	11 years ago	MAR-5: Added server to test site for testing the web server roles. Updated mail server configuration to relay mails for the web server in test site.
branko	96e9f230a669	11 years ago	MAR-10: Updated server roles to deploy private key and certificate. Updated documentation and test site configuration as well.
branko	76ed37089b33	11 years ago	MAR-10: Added support for deploying CA certificates to role 'common'. Make sure symlink truststore is deployed as file in Postfix chroot (for role mail_server). Small fix in handlers for role common (ls command is not necessary). Updated testsite configuration and documentation to refer to correct CA certificate file (for trust chain).
branko	298c0dbe1698	11 years ago	MAR-4: Updated documentation for the mail server role, adding information about rsync installation, set-up of chroot for Postfix, and the smtp_allow_relay_from option. Updated mail_server role implementation, fixing rsync command for deploying the truststore to preserve truststore permissions and adding support for specifying networks from which unauthenticated relaying should be allowed.
branko	81d6b5ac9240	11 years ago	MAR-4: Added example configuration for the mail server role. Updated name for the TLS key files. Added steps that need to be done after mail server has been set-up (for TLS keys mainly).
branko	1b50bc1cc817	11 years ago	MAR-4: Simplified role parameters (make them all one-dimensional, don't use dictionaries).
branko	1bdb64307968	11 years ago	MAR-4: Added configuration options for mail postmaster (Dovecot setting).
branko	67d9190a521a	11 years ago	MAR-4: Added RBL support for Postifx SMTP checks.
branko	d9dae92d436c	11 years ago	MAR-4: Added SMTP authentication configuration to Postifx. Added TLS configuration to Postfix. Updated testsite. Removed unused file.
branko	d2f91c66acd3	11 years ago	MAR-4: Added configuration option for specifying Dovecot separator.
branko	85d2a408fd21	11 years ago	MAR-4: Updated testsite to include Dovecot LDAP password and IMAP TLS configuration.
branko	ce1b1a242584	11 years ago	MAR-4: Added creation of dedicated user/group for stored mail.
branko	5ef84494bbb1	11 years ago	MAR-4: Updated configuration for testsite mail server.
branko	be262063970c	11 years ago	MAR-4: Added LDAP users for Postfix/Dovecot to test site. Added an extra group for authorisation purposes for mail server. Deploy LDAP client role to mail server.