sovereign

提交图

作者	SHA1	备注	提交日期
Allen Riddell	ca6eb2d85b	Add mailserver default vars to role	8 年前
Mike Ashley	3d68705341	Add leading 0 to octal file permissions This is done to suppress warnings from ansible-lint.	8 年前
Carl Meyer	619eac6534	Adjust comment for clarity.	8 年前
Carl Meyer	d46a9c47ef	Idempotency/changed-reporting fixes for OpenDMARC tasks.	8 年前
Carl Meyer	7e817bfae6	Encrypt Postgres passwords, and fix change-reporting.	8 年前
Carl Meyer	e8796ecd28	Idempotent and independent post-certificate-renewal tasks.	8 年前
Laurent Arnoud	d56f0bd7ef	Use https for rpsamd key and repository	8 年前
Carl Meyer	1a3d01f311	Complete rmilter/rspamd setup.	8 年前
Carl Meyer	d46fb1521b	Make OpenDMARC cron job email root only on error.	8 年前
Carl Meyer	57982401a9	Pass {auth_type} to milters, fixing OpenDKIM signing of authenticated SMTP messages.	8 年前
Mike Ashley	8f1b6a9ed8	Arrange for services to restart on cert renewal	9 年前
Mike Ashley	beaceafbd1	Update mailserver role to use LE certificate	9 年前
Mike Ashley	4c830e1b07	Override opendmarc defaults This patch restores sovereign's configuration of opendmarc.	9 年前
Mike Ashley	1bc60827ef	Revert opendmarc to use mysql An earlier commit started transitioning opendmarc to use postgres, but this was incomplete. This patch reverts that change and uses mysql for the reporting database. Other changes: * Do not maintain a copy of the database import schema. A copy is included in the distribution in /usr/share/doc, so that is used instead. * The configuration file is replaced with the distribution's sample configuration. A second patch will restore the actual configuration. This will make the changes easier to see if the default configuraton file changes in future versions of opendmarc.	9 年前
Mike Ashley	195d8811fc	Remove references to Trusty and Wheezy Make a clean distinction between Debian 7 and Debian 8. Anticipate the next Ubuntu LTS release (Xenial) that is planned for support.	9 年前
Mike Ashley	b8f030eb48	Merge tomcat changes to default configuration Take changes to the tomcat6 default configuration and apply to tomcat7 configuration. This was done by review of the diff between sovereign's tomcat6 configuration and the default tomcat7 configuration.	9 年前
Mike Ashley	ae6d97a4b6	Match tomcat version to solr The package solr installs and uses tomcat7. Installing tomcat8 appears to be a mistake for Debian Jessie.	9 年前
Mike Ashley	d3abc02f84	Clean up Apache SSL configuration Avoid using the Include directive. Move most of the SSL configuration to the global configuration and leave enabling the SSL engine to each virtual host that wants to use it.	9 年前
Carl Meyer	3265e77865	Update rspamd repository to the official one.	9 年前
Sebastian Kriems	fe536873b7	ufw tasks shall have the ufw tag resolves #453 Conflicts: roles/common/tasks/ufw.yml	9 年前
Sven Neuhaus	d59c5eff05	Generate 2048 DH group and add it to Postfix	9 年前
Mike Ashley	aa59a1a2f0	Correct special-casing of z-push Apache configuration	9 年前
Stuart Read	e444efa2b4	Add jessie to special-casing for modern apache conf.d handling.	9 年前
Stuart Read	22ef6be96e	Revert "Z-push apache config: Jessie also uses conf-available/conf-enabled" This reverts commit 6b53da4bdc. Using a different approach to maintain wheezy compatibility	9 年前
Stuart Read	6b53da4bdc	Z-push apache config: Jessie also uses conf-available/conf-enabled	9 年前
rokaz	a8a0905738	Fix dependency for Solr	9 年前
Alex Payne	b3dc1b00e9	Correct Tomact config file name.	9 年前
Alex Payne	69abd70297	Remove references to Debian 7	9 年前
Alex Payne	2352d2d67e	OpenDMARC running under Postgres (?)	9 年前
Alex Payne	7275a52ba6	Update to Tomcat 8	9 年前
Alex Payne	34d537fcf2	Remove Dovecot installation for older distros	9 年前
Alex Payne	2e966fe790	Don't need older Postgres anymore	9 年前
Alex Payne	b674e0a669	Unified Solr installation across distros	9 年前
Alex Payne	ecaa4c2330	Partially working Rspamd replacement for dspam	9 年前
Alex Payne	58a4532fe7	Better permission handling for OpenDMARC. Resolves #400.	9 年前
Alex Payne	417403f534	Use {{ mail_server_hostname }} over mail.servername Resolves #402.	9 年前
Alex Payne	7bb62ca678	Explicitly require MySQL server as part of OpenDMARC isntall. Resolves #410.	9 年前
Miloš Hadžić	d823ed0848	Use lmtp instead of lda for delivery.	9 年前
Pavel Karoukin	a86e43d5b4	Couple issues with OpenDMARC on Debian 7: * fix mail_db_opendmarc_username/mail_db_opendmarc_password variable not found. * python-mysqldb package is required. Add it to opendmarc task.	9 年前
Laurent Arnoud	21e0110684	Ignore copy tasks	9 年前
Laurent Arnoud	a09e2e71c1	tar used in place of unarchive module	9 年前
Will McCutchen	16b66cc849	Define apache SSL config in one place	9 年前
Alex Payne	26d61c68a8	Implement OpenDMARC. Resolves #369.	9 年前
Manfred Touron	16c93ea486	Using more verbose 'dependencies' tag (#393)	9 年前
Manfred Touron	b49f3a6586	Tagged 'deps' aptitude tasks	9 年前
John Rogerson	f72e1d2350	Update dovecot version from wheezy backports For correct implementation of the fix for logjam attack (https://github.com/sovereign/sovereign/pull/372), state=latest is needed to grab sufficient version of Dovecot. If not then 37aa7e2cb5 doesn't work.	9 年前
Sven Neuhaus	a088d9c456	Use "modern" SSLCipherSuite per Mozilla recommendations. See https://wiki.mozilla.org/Security/Server_Side_TLS for details. Removes RC4 cipher. Fixes issue #341. Also explicitly disabled SSLCompression and enables OCSP stapling. We should put all these settings in /etc/apache2/mods-enabled/ssl.conf to avoid duplication...	9 年前
Sven Neuhaus	c898aa98d6	Install postgresql 9.4, 9.3 or 9.1 if available (on Debian Jessie, Ubuntu Trusty or older distributions such as Debian Wheezy and Ubuntu Precise).	9 年前
Sven Neuhaus	a849a49f37	Fix: Files shouldn't be owned or writeable by httpd unless necessary.	9 年前
Sven Neuhaus	8b5ed21e38	use wheezy-backports for dspam and solr packages on wheezy relates to pull request #372	9 年前

140 次代码提交 (98cb6dd610d8f104e04d57a60e943d5533db478e)