Mike Ashley
3ec386e028
Fix bug in opendmarc report scripts
This patch corrects a bug in the OpenDMARC 1.2.0+dfsg-1 package, fixed in 1.3.0 (or Debian 1.2.0+dfsg-2 which has not yet made it to Ubuntu Trusty). See also
- https://sourceforge.net/p/opendmarc/tickets/90/
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742447
8 years ago
Mike Ashley
16dc7d3f51
Disable mail submission on port 465
This patch finalizes the switch to port 587 for email submission that
was started with commit 166c57.
8 years ago
Mike Ashley
ebddb05fb4
Fix outgoing mail port configuration in webmail role
8 years ago
Mike Ashley
0e379f5927
Reinstate webmail role
This merge reinstates the webmail role lost when we moved to Jessie. The carddav, managesieve, and twofactor_gauthentication plugins are carried forward.
8 years ago
Mike Ashley
0bf32f2ce1
Add design document for webmail role
8 years ago
Mike Ashley
17bb355dfd
Add default sieve filter to roundcube
8 years ago
Mike Ashley
ed5b451c39
Add a few plugins to roundcube install
- managesieve :: this allows sieve filters to be edited through a
brower
- twofactor_gauthenticator :: allow optional two-factor authentication
when logging into webmail
- carddav :: sync ownCloud contacts with roundcube
8 years ago
Mike Ashley
959e893862
Create webmail role that installs Roundcube
8 years ago
Mike Ashley
c8a1f00be1
Merge pull request #588 from tomasbedrich/sudo-ssh-agent-forwarding
Allow SSH agent forwarding when using sudo. This allows one to use SSH agent forwarding from a local machine when logged in as a root on the Sovereign server. This is useful, for example, for cloning a Github repository to /var/www (owned by root) without the need to store private SSH keys on the Sovereign server.
8 years ago
Mike Ashley
a8807afb04
Copy Roundcube configuration file
Baseline the configuration file distributed Roundcube 1.4.1 before
modification for sovereign.
8 years ago
Mike Ashley
0eb4cda07a
Update mailserver role for rmilter change
The rmilter package changed the name of its listener service similar to
what was done for rspamd (see commit 2dbc976b ).
8 years ago
Mike Ashley
936b0d018a
Merge pull request #589 from tomasbedrich/update-rspamd-setup
Update Rspamd setup
8 years ago
Tomas Bedrich
2dbc976b99
Updated rspamd service name
8 years ago
Tomas Bedrich
3efc7ae54e
Allowed SSH agent forwarding when using sudo
8 years ago
Adrian Goins
b54337ead6
activate imap on trusty. closes #583
8 years ago
Adrian Goins
e229c5519b
fix for debian bug in opendmarc report scripts. closes #497
8 years ago
Allen Riddell
c1511c057f
Remove unnecessary defaults from openvpn certificate
8 years ago
Dosenpfand
9697cbe6b3
Silence letsencrypt cron output unless there is an error
8 years ago
Justin Plock
71b3d8b6a3
Merge pull request #575 from tomasbedrich/fix-github-ssh
Fix SSH connections to Github
8 years ago
Tomas Bedrich
7a399d45ca
Fix SSH connections to Github
8 years ago
Mike Ashley
0e7adf6e3a
Fix bug exposed by commit 264c232b (#572 )
The `private_key` variable used to check for changes was never
registered.
8 years ago
Mike Ashley
2ebd32acb1
Merge pull request #560 from mikeashley/submission-port
Use submission port for client outgoing email
8 years ago
Mike Ashley
a56dd3312f
Merge pull request #567 from mikeashley/remove-access_compat
Eliminate need for access_compat module in Apache
8 years ago
Mike Ashley
c3d4d0c41b
Merge pull request #570 from cimm/duplicate_when_in_letsencrypt
Remove duplicate when statement in Let's Encrypt task
8 years ago
Simon Schoeters
264c232bbf
Remove duplicate when statement in Let's Encrypt task
While adding the Let's Encrypt offline testing block in 1746afcc we
accidentially duplicated a the 'when' statement. Ansible only looks at
the last when statement for a given block meaning the earlier one has no
use. This commit merges both lines in one.
8 years ago
Allen Riddell
850ce16f5e
Merge pull request #568 from mikeashley/testing
Update testing to work with modularized Sovereign
8 years ago
Mike Ashley
2ca703a90a
Update testing to work with modularized Sovereign
* Harvest testing configuration into group variables
* Define testing group for Vagrant to use
* Move testing passwords to secrets directory that Vagrant uses
* Update .gitignore to keep the testing secrets
8 years ago
Allen Riddell
5d7d690135
Merge pull request #566 from mrwacky42/vpn-tls-min-version
VPN - enforce TLS min version on the client
8 years ago
Mike Ashley
97b11e3953
Eliminate need for access_compat module in Apache
The directives provided by `mod_access_compat` are deprecated. This
patch eliminates references to them.
8 years ago
Mike Ashley
166c57f045
Use submission port for client outgoing email
Currently client email is submitted via ssmtp (port 465). This has been
deprecated for years. The correct way to submit email is via
submission (port 587).
This patch adds port 587 as a second and the default way of submitting
email for delivery. Port 465 remains open for backwards compatibility
with existing clients.
8 years ago
Mike Ashley
5190ea1c5b
Merge pull request #526 from ariddell/feature/modularize-sovereign
Modularize sovereign
8 years ago
Allen Riddell
6d5a2ff718
Merge pull request #2 from mikeashley/ariddell-feature-fix
Add missing configuration parameter for ircbouncer
8 years ago
Mike Ashley
b00b93a85b
Add missing configuration variable for ircbouncer
8 years ago
Mike Ashley
3746e1ea67
Merge branch 'feature/modularize-sovereign' of https://github.com/ariddell/sovereign into ariddell-feature/modularize-sovereign
8 years ago
Mike Ashley
2f9729617a
Merge pull request #562 from ariddell/feature/jessie-docs
DOC: sudo is not installed by default on jessie
8 years ago
Mike Ashley
ce03947fbe
Merge pull request #563 from ariddell/feature/missing-handler
news role: add missing restart apache handler
8 years ago
Sharif Nassar
73c30c313b
VPN - enforce TLS min version on the client
8 years ago
Allen Riddell
97480c334e
Uncomment required vars in group_vars/sovereign
All of the variables need to be set.
8 years ago
Allen Riddell
e0347b657d
DOC: user-set vars now in group_vars/sovereign
8 years ago
Allen Riddell
19ff4c5958
Add readlater/wallabag default vars to role
8 years ago
Allen Riddell
712ea7aee2
news role: add missing restart apache handler
8 years ago
Allen Riddell
4339192052
Add news/selfoss default vars to role
8 years ago
Allen Riddell
9067f4cc27
Add git role default vars to role
8 years ago
Allen Riddell
86bc3ab073
Add tarsnap default vars to role
8 years ago
Allen Riddell
ab9ebd6e5c
Add owncloud default vars to role
8 years ago
Allen Riddell
9e71d9067f
Add openvpn default vars to role
8 years ago
Allen Riddell
98cb6dd610
Add prosody/xmpp default vars to role
8 years ago
Allen Riddell
a3b1852723
Add ircbouncer required vars to group_vars/sovereign
8 years ago
Allen Riddell
f31ac23001
Add monitoring default vars to role
8 years ago
Allen Riddell
ca6eb2d85b
Add mailserver default vars to role
8 years ago