Upgrade znc from 1.0 to 1.2 (latest release)

Relocate tarsnap.key into /decrypted

Safer symlink creation and downloaded file removal

Install the carddav plugin so owncloud contacts can be used (fixes #154)

Some minor tweaks

This reverts commit 703d356492.

Fix URL of z-push download

Data loss will occur if backing up postgresql while it runs. A simple
fix is to stop it during the backup. I've moved the backup to early
morning to reduce possible downtime.

A better approach would be to use pg_dump.

The previous behaviour relied on managesieve copying over the
.dovecot.sieve file into the user's directory. I found this to be
particularly fragile. For instance, re-deploying roundcube without
dovecot could overwrite the .dovecot.sieve symlink and break
managesieve.

A better approach is to use the global sieve configuration that
roundcube provides and not mess with dovecot's files directly.

Properly behaving websites should 301 redirect the naked domain.

This prevents timeouts when trying to sync very large mailboxes. By
default, z-push attempts to get headers for all messages in a folder.

Update README to include troubleshooting page in wiki

polish to match the replacement of MySQL.

polish to match the replacement of MySQL with PostgreSQL.

Quote password substitution (may contain spaces)

Quote password variables (they may contain spaces)

String-valued variables containing spaces can be substituted into an ansible
tasks file but they will not be interpreted correctly.

Docs on setting up a DNS txt record for DKIM

To take advantage of the OpenDKIM installation it's important to set up a DNS txt record. This documentation addition explains how to do that.

quote password environment variable

Making main user's shell configurable

Allow # in mail_db_password

PostgreSQL 9.1 installs its pid into a different folder than 9.2

I had a # in my mail_db_password and spent the last 2 hours trying to figure out why I couldn't connect by IMAP. A # is only allowed if the connect string is wrapped in quotes.

Tarsnap looking for PostgreSQL in the wrong place

Allow both TCP and UDP port 53 for DNS lookups through OpenVPN

Update chat.freenode.net port to SSL-only

Fixes issue #8

Fixes issue #8. Adds new variable mail_header_privacy, on by default.
Installs postfix-pcre unconditionally, and then copies the pcre file
over and adds the header check to main.cf based on the variable value.
“this header replacement works great, but it logs that the replacement
has been done, which means that you are storing this information,
unless you are anonymizing your logs”

Make the ntp pool configurable

still allow people to override them in defaults.yml

use the world-wide pool by default, but specify north-america in
user.yml. Also, documentation. This way Sovereign will still behave the
same, but the NTP servers can be changed when desired.