majic-ansible-roles Changelog /roles/mail

Changelog - /roles/mail_server/tasks/main.yml @ 0c330b88956a - showing 51 out of 51 revisions

branko	0c330b88956a	2 months ago	MAR-218: Switch to using task imports instead of includes: MAR-218: Switch to using task imports instead of includes: - Should result in somewhat faster run, except the includes happen during planning phase. None of the changed includes will have problem with this. - Solves the issue of (included) imported tasks not being tagged properly, particularly in relation to the mechanism for explicitly running all handlers.
branko	c10934519e18	2 months ago	MAR-218: Switch to using fully-qualified collection names for all tasks: MAR-218: Switch to using fully-qualified collection names for all tasks: - Ensures there is no ambiguity when invoking a module.
branko	7cabc17c71c3	2 months ago	MAR-218: Quote all octal values in YAML files: MAR-218: Quote all octal values in YAML files: - Fixes linting errors, and ensures there is no ambiguity in case of YAML specification changes.
branko	3802c52995e5	2 months ago	MAR-218: Fix include invocations: MAR-218: Fix include invocations: - The old include keyword/task has been deprecated in favour of more explicit include_tasks one.
branko	aa7b596ef595	4 years ago	MAR-151: Drop rcconf workaround: MAR-151: Drop rcconf workaround: - The workaround was needed on Debian Jessie because the systemctl is-enabled command did not behave correctly for SysV init scripts. - Drop the installation of the rcconf package. - Use the "enabled" parameter in service module instead.
branko	069c78425a29	4 years ago	MAR-151: Use 2048-bit DH parameter for IMAP server under Debian 10 Buster: MAR-151: Use 2048-bit DH parameter for IMAP server under Debian 10 Buster: - Deploy a statically-generated DH parameter. - Set-up DH parameter configuration based on Debian version. - Implemented test for newly-generated file.
branko	af834be42e8e	4 years ago	MAR-153: Fix Martin Hellman's name in all test docstrings.
branko	a7cd31c6886d	4 years ago	MAR-153: Use custom Diffie-Helman parameters for SMTP server in the mail_server role.
branko	663c02da41b8	4 years ago	Noticket: Improve reliability for mail_server tests, detection of running ClamAV daemon: Noticket: Improve reliability for mail_server tests, detection of running ClamAV daemon: The fixes mainly help with reliability of tests against the mail_server role due to ClamAV not becoming available before the tests get run. This normally is not a real issue in production (since the daemon will become available farily quickly). Changes made: - Wait for ClamAV socket to become available in mail_server role (otherwise mail delivery failures can happen). - Increase memory used in mail server instances for testing to avoid OOM killer kicking-in during tests. - Introduce slight delay when running local alias tests to avoid race condition. - Formating fix in task that waits for ClamAV database to be available.
branko	9f0f315631e4	5 years ago	MAR-148: Fixing linting errors: MAR-148: Fixing linting errors: - Do not compare against booleans when value is already boolean in "when" conditions. - Do not compare variables to empty strings in "when" conditions. This change currently works only for complex variables (stuff can break badly in case of simple variables in current default Ansible configuration).
branko	a20ca43cd967	6 years ago	MAR-134: Fix Ansible warning about use of apt and with_items: MAR-134: Fix Ansible warning about use of apt and with_items: - The apt module can accept list of names already, and with_items is considered to be deprecated in this regard (otherwise it would end-up running one apt command per item). - Changed multiple roles where apt was used together along with_items.
branko	9281920d0c23	6 years ago	MAR-135: Switch to using run_handlers instead of handlers as variable: MAR-135: Switch to using run_handlers instead of handlers as variable: - Updated all roles to now depend on run_handlers being set to True in order to force execution of handlers.
branko	b0c92677ba93	6 years ago	MAR-129: Updated mail_server role for new Molecule and Ansible: MAR-129: Updated mail_server role for new Molecule and Ansible: - Moved variables from test playbooks into group/host vars. - Fixed linting errors. - Reference custom top-level linting configuration file in tests. - Fixed deprecation errors reported by Ansible. - Updated how the hosts on which the tests should be run are referenced.
branko	e925a89aff82	7 years ago	MAR-114: Updated remaining task syntax in database and mail_server roles.
branko	23200e1ae9a8	7 years ago	MAR-114: Updated task syntax for mail roles: MAR-114: Updated task syntax for mail roles: - Updated mail_server and mail_forwarder roles. - Added and removed quoting where it makes sense. - Switched to using expanded syntax (instead of one-liners). - Updated ordering of arguments in task definitions.
branko	277c561f3f52	7 years ago	MAR-28: Impelmented general and SMTP-related tests for mail_server: MAR-28: Impelmented general and SMTP-related tests for mail_server: - Increased amount of memory in test instances to 768MB. - Fixed playbook for runs against client test instances. - Fixed typos and invalid settings in test playbook. - Switched to expanded syntax in tasks used for deploying TLS keys and certificates in order to avoid mangling of TAB characters. - Fixed missing permissions set-up for Postfix main configuration file. - Fixed deployment of Postfix master.cf configuration file to take into account configurable virtual mail user. - Implemented tests covering SMTP functionality.
branko	64823e04bd4b	7 years ago	MAR-28: Fixed minor issues in the mail_server tasks: MAR-28: Fixed minor issues in the mail_server tasks: - Ensure command handler is excluded from linting checks. - Fixed modes to use leading zero.
branko	0004ec73b902	7 years ago	MAR-28: Implemented scaffolding for testing the mail_server role: MAR-28: Implemented scaffolding for testing the mail_server role: - Added Molecule configuration. - Added test playbook. - Restart Postfix for truststore changes. - Added test data (private keys and certificates). - Fixed small documentation inaccuracy.
branko	aa2802e42d9d	8 years ago	MAR-99: Implemented script for checking local certificates (currently only expiration is supported). Updated common role to deploy the script, and set-up configuration directory for it. Updated roles that deploy certificates to also deploy configuration file for checking the certificate expiration dates.
branko	bf96a77e88ab	8 years ago	MAR-100: Configure mail server name for mails coming from the local server via /etc/mailname. Make sure the configured name is equivalent to the full hostname specified in ansible inventory.
branko	f344ed6181a9	8 years ago	MAR-90: Fixed small typo in documentation for ldap_server role. Added configuration parameters for the mail_server role for specifying TLS protocols and ciphers.
branko	3bd270c9e860	8 years ago	MAR-78: Implement ability to specify local mail aliases in the mail_server role.
branko	922cda0a1834	8 years ago	MAR-58: Updated roles, LDAP modules, and test site to be compatible with Ansible 2.0.x and 2.1.x. Switched from using sudo/sudo_user to become/become_user. Fixed referencing of variables within roles, mainly for with_items/with_dicts calls. Improved handling of options in ldap_entry module to avoid deprecation of passing dict-like arguments to ldap_entry module. Minor fix to ldap_permissions module.
branko	97be416e882e	8 years ago	MAR-56: Set-up slapd to listen on legacy TLS port. Fixed ClamAV tasks used for waiting for ClamAV database to be donwloaded. Fixed some handling of rewrite rules for the PHP websites.
branko	5a15eda01800	8 years ago	MAR-56: Wait for freshclam to download the initial ClamAV database in mail_server role. Make it possible to specify Gunicorn version in the wsgi_website role (and also install the required futures package now). Clarify the parameter for wsgi_application in wsgi_website role should be relative to code sub-directory. Simplify how roles are specified as deps in order to avoid reruns of shared roles in Ansible 1.9.x (for the non-parametrised/singleton roles, that is). Set correct prompt for virtual environments created in wsgi_website.
branko	1b05bae8e440	8 years ago	MAR-56: Added LDIF templates to docs for relevant roles. Added warning about freshclam/clamav service restart during initial install (need to be restarted). Switched some TLS truststore vars to use concerete values. Introduced option for specifying additional Nginx config options. Added docs for some params. Assmeble Duplicity include pattern when needed. Don't set passwords for existing system users. Fix permissions for database users to be more restrictive. Fixed a couple of default param definitions (mainly tls cert/key stuff). Updated URL for downloading Prosody LDAP plugin. Updated testsite configs.
branko	7387caca37f3	8 years ago	MAR-51: Introduced ability to only run the handlers for each role. May help with inconsitencies due to failed runs.
branko	18cd76ec050d	8 years ago	MAR-51: Replaced referencing of local files for TLS keys and certificates with actual values. Documentation has been updated throughout to reflect this in both role reference and usage instructions.
branko	61e6cfb81789	8 years ago	MAR-51: Fixed documentation for ansible_key parameter in preseed role. Updated ca_certificates parameter in common role to accept key-value pairs of filenames and certificates to put on remote host (so lookups/inventory can be utilised in more flexible manner). Updated backup_client role to fail if it is not possible to extract encryption key IDs from deployed keys. Moved purging of Exim4 configuration files from handlers to tasks (more robust, and still idempotent). All documentation has been updated as well.
branko	a9e97d3e2306	9 years ago	MAR-54: Separated SMTP ports for server-to-server comms and user mail submission, allowing authentication only on port 587 (port 25 purely for server-to-server communication). Hardened TLS configuration on port 587.
branko	a561d73e3242	9 years ago	MAR-45: Introduced workaround for broken handling of SysV init scripts by systemctl is-enabled command.
branko	d5252677bcb0	9 years ago	MAR-44: Updated roles depending on backup_client role to use the new design (where only backup patterns are provided to the dependant backup_client role).
branko	f05039c7d383	9 years ago	MAR-44: Implemented backup support for the mail server role.
branko	e838bcb94a9e	9 years ago	MAR-19: Simplified the mail server parameters by making a bunch of them optional.
branko	a6633bcc83d1	9 years ago	MAR-13: Added a hack to restart the slapd server once the group for OpenLDAP has been changed (otherwise the user can't read the TLS key, and error happens). Fixed some service resources to be explicitly enabled.
branko	b453b7fcb189	9 years ago	MAR-13: Don't use Wheezy backports repository for deploying mail server. Updated package name for Emacs.
branko	eb9a1b525c77	9 years ago	MAR-12: Added documentation related to firewall for the common role. Added deployment of firewall rules for roles mail_server, prosody, and ldap_server.
branko	284ed92d40bb	9 years ago	MAR-10: Fixed truststore filename in docs for test site. Install the ssl-cert package explicitly, and allow server processes to access their keys by adding them to group ssl-cert instead.
branko	0ad9410c243a	9 years ago	MAR-10: Deploy CA certificates to /etc/ssl/certs/ only, otherwise some weird issues can happen in case update-ca-certificates does not run. Plus is it more straightforward. Deploy TLS private key/cert a bit later for all roles in order to have the necessary groups available. Fixed a wrong notify.
branko	96e9f230a669	9 years ago	MAR-10: Updated server roles to deploy private key and certificate. Updated documentation and test site configuration as well.
branko	76ed37089b33	9 years ago	MAR-10: Added support for deploying CA certificates to role 'common'. Make sure symlink truststore is deployed as file in Postfix chroot (for role mail_server). Small fix in handlers for role common (ls command is not necessary). Updated testsite configuration and documentation to refer to correct CA certificate file (for trust chain).
branko	298c0dbe1698	10 years ago	MAR-4: Updated documentation for the mail server role, adding information about rsync installation, set-up of chroot for Postfix, and the smtp_allow_relay_from option. Updated mail_server role implementation, fixing rsync command for deploying the truststore to preserve truststore permissions and adding support for specifying networks from which unauthenticated relaying should be allowed.
branko	07956dae35fc	10 years ago	MAR-4: Deploy the truststore PEM file for connecting to the LDAP server via rsync. Explicitly create directories for ClamAV in the Postfix chroot.
branko	1b50bc1cc817	10 years ago	MAR-4: Simplified role parameters (make them all one-dimensional, don't use dictionaries).
branko	2f0d3abc3c49	10 years ago	MAR-4: Use static file configuration for ClamAV Milter. This is more reliable since there is no decent way to signal debconf to redeploy configuration files.
branko	12abf97ac229	10 years ago	MAR-4: Implemented scanning of mails via ClamAV. Added a couple of comments to Postfix configuration file.
branko	d9dae92d436c	10 years ago	MAR-4: Added SMTP authentication configuration to Postifx. Added TLS configuration to Postfix. Updated testsite. Removed unused file.
branko	107417b217e0	10 years ago	MAR-4: Added some missing service restarts for Postfix. Added deployment of Dovecot configuration.
branko	ce1b1a242584	10 years ago	MAR-4: Added creation of dedicated user/group for stored mail.
branko	f7579be2c24b	10 years ago	MAR-4: Added stock main.cf Postfix configuration file. Added deployment of Postifx LDAP configuration files.
branko	82951ff4f9f9	10 years ago	MAR-4: Added initial implementation for mail server role. Includes deployment of packages and purging of Exim4 configuration. Dovecot packages installed from backports.