Fixes issue #8. Adds new variable mail_header_privacy, on by default.
Installs postfix-pcre unconditionally, and then copies the pcre file
over and adds the header check to main.cf based on the variable value.
“this header replacement works great, but it logs that the replacement
has been done, which means that you are storing this information,
unless you are anonymizing your logs”

use the world-wide pool by default, but specify north-america in
user.yml. Also, documentation. This way Sovereign will still behave the
same, but the NTP servers can be changed when desired.

Otherwise only pop and imap (un-secured) are blocked.
Which we don't use.

This works on Debian/Ubuntu only.

There are similar packages for other distributions, but they still
need manual configuration. It seemed better to go for the common
denominator. unattended-upgrades is usually installed by default
anyway, so we are just reinforcing best practices.

added dovecot-pop3d
allowed in the firewall
monitored with monit
added relevant tests

Updated the default port to reflect MySQL to Postgres change (port 3306 to 5432)

* Added 'cipher' and 'auth' lines to the generated client configs

PostgreSQL works similarly with varchar and text columns. Rather than
limiting the amount of characters a column can hold simply use text
columns.

Because this sql is now PostgreSQL specific, there's no need to maintain
what was set in the mysql settings.

Remove all configuration for MySQL and configure PostgreSQL as the main
database.

All *_mysql_* options have been changed to *_db_* options.

Postgres requires the database user to have a password in order to
connect via localhost. The db_admin_password option is used to set the
password of the admin user (usually postgres).

When you're hosting a couple of hundred aliases, you will benefit.
It seems safer to create the index and deal with the slight overhead
for just a couple of records, as opposed to not having these
indexes and deal with serious performance issues if you have
lots of aliases on the machine.

Don't mail them individually to the destemail. The destemail setting is thus no
longer used, but let's set it anyway to be clear where it will mail if you
change the action back.

This allows the `recipient_delimiter` setting in etc_postfix_main.cf.j2
to function as intended.

Fixes: #121

Also mailing to root (which gets forwarded to admin_email) for easier automated sorting

Signed-off-by: PajamaSoft <support@pajamasoft.com>

Use the changed `mail_virtual_users` structure to ensure directories and
sieve rules are created for each defined account.

Web interface listens on localhost only.
The web interface is needed for polling monit
status from the console via::

    monit summary

mail_virtual_xx list were not use correctly in tasks.

We got error 'unicode object' has no attribute 'name' because:
with_items:
 - "{{ mail_virtual_xx }}
is understood has a list of strings containing information extracted from {{ mail_virtual_xx }} variable

 Now we use:
   with_items: virtual_domain_xx}}"

Based on playbook from https://github.com/phred/5minbootstrap

These are the changes necessary to enable Roundcube's manage sieve plugin to mange server-side sieve filters.

Signed-off-by: PajamaSoft <support@pajamasoft.com>

OpenVPN role

Added friendly_networks variable to denote whitelisted networks

Move the settings of the virtual mail directories into a separate
ansible task.

Without the owner being set to vmail and dovecot, when a virtual user
tries to access their mail account, dovecot throws an error that it does
not have permission to create the mail folder for the user.

With the owner and permissions being set the user's mail directory is
created and they can successfully sign in.

Adds/subscribes Drafts, Sent, Junk, Trash and Archive mailboxes.

* Removed unicode char from task name (ansible 1.3 doesn’t like it)
* Use ansible sysctl module instead of lineinfile
* Wait for only 5 seconds (for fully automated deploy)

correctly. The number of days that a certificate will be considered
valid is now a user-controlled variable and is set to five years by
default. (Fixes Issue #87)