Summary

Clone URL:

git Use ID

Description:

Majic Ansible Roles is a collection of Ansible roles that are used on regular basis for deployment and maintenance of Majic infrastructure.

Trending files:

Download:

Download as zip With subrepos

Latest Changes

branko	72af31a420be	2 months ago	MAR-192: Switch to using NTPsec NTP server for increased security: MAR-192: Switch to using NTPsec NTP server for increased security: - This has for some time been a way better option, and it should also provide for compatibility with Debian 12 Bookworm.
branko	922ac53a02a7	2 months ago	MAR-192: Drop the Python 2.7-specific packages from installation: MAR-192: Drop the Python 2.7-specific packages from installation: - These are leftovers from previous work for dropping the Python 2.7 support.
branko	bd4384a5c663	2 months ago	MAR-192: Added support for Debian 12 Bookworm to backup role.
branko	12e2e1882f77	2 months ago	MAR-192: Added support for Debian 12 Bookworm to backup_client role: MAR-192: Added support for Debian 12 Bookworm to backup_client role: - Drop the orphan config file for backup server helper.
branko	6c4dab8571af	2 months ago	MAR-192: Added support for Debian 12 Bookworm to preseed role.
branko	a8b21f4ea421	2 months ago	MAR-192: Added support for Debian 12 Bookworm to bootstrap role.
branko	ae1a499dbd62	2 months ago	MAR-195: Reject mails with non-matching sender for logged-in users: MAR-195: Reject mails with non-matching sender for logged-in users: - Prevents logged-in user from setting "MAIL FROM" with e-mail address that does not match either his own account or one of the aliases that the user receives mails from. - Reworked the submission port configuration to restrict only based on sender-related restrictions, merging some of the newer changs from the workaround.org instructions.
branko	24120c68c6b4	2 months ago	MAR-196: Simplify allowed TLS protocol configuration for mail_server role: MAR-196: Simplify allowed TLS protocol configuration for mail_server role: - Accept minimum version allowed instead of arbitrary list. - Fixes deprecation warnings in Dovecot logs (ssl_protocols -> ssl_min_protocol transition).
branko	1561f2f0a525	2 months ago	MAR-194: Validate maintenance_allowed_sources parameter.
branko	736e06e7ffd6	2 months ago	MAR-194: Use IP addresses instead names for maintenance allowed connections: MAR-194: Use IP addresses instead names for maintenance allowed connections: - Less ambigious. Solves problems around names being resolvable to different IPs depending on what DNS server is used. - Parameter renamed to better represent what is specified. - Updated requirements to allow execution of ipv4/ipv6 filters. - Pin the rich requirement to a lower version for compatibility reasons. - Implement tests for IPv6 connectivity tests. - Improve rendering of base rules (indentation).

README.rst

Majic Ansible Roles

Majic Ansible Roles is a collection of Ansible roles that are used on regular basis for deployment and maintenance of Majic infrastructure.

The roles are kept as a separate project in hope of making them potentially useful to wider audience, and for reference purposes.

Roles cover different aspects of infrastructure, such as mail servers, web servers, web applications etc. The roles are mainly well-suited for smaller installations.

License

Majic Ansible Roles is released under terms of BSD (3-Clause) License. See the LICENSE file for more details.