WIP: Setup of a mail server #9

Draft
otthorn wants to merge 151 commits from mailserver into master
Owner

Creating a full fledged mail server at Aurore

Before merging, to sure to...

TODO :

  • Add {{ ansible_managed }} in the config files where it is missing
  • Please yaml linter
  • Please ansible linter
  • Run the whole playbook one last time to check if the result is idempotent
  • Add a motd for each service (re2o-mailserver, Postfix, Dovecot, rspamd, etc...) and give a link of where to find them if necessary
  • Add apt retry and update cache everywhere where it is needed
register: apt_result
retries: 3
until: apt_result is succeeded
  • Rebase from master to avoid changing re2o-service password
  • Resolve merge conflicts (most notablly in the vault)
  • Re-deploy the new re2o-service password
  • Add the service mail-server to re2o (prod)
  • Change re2o instance (from re2o-test)
Creating a full fledged mail server at Aurore Before merging, to sure to... TODO : - [ ] Add `{{ ansible_managed }}` in the config files where it is missing - [ ] Please yaml linter - [ ] Please ansible linter - [ ] Run the whole playbook one last time to check if the result is idempotent - [ ] Add a motd for each service (re2o-mailserver, Postfix, Dovecot, rspamd, etc...) and give a link of where to find them if necessary - [ ] Add apt retry and update cache everywhere where it is needed ```yaml register: apt_result retries: 3 until: apt_result is succeeded ``` - [x] Rebase from master to avoid changing re2o-service password - [x] Resolve merge conflicts (most notablly in the vault) - [x] Re-deploy the new re2o-service password - [ ] Add the service `mail-server` to re2o (prod) - [ ] Change re2o instance (from `re2o-test`)
otthorn added 60 commits 3 years ago
continuous-integration/drone/push Build is failing Details
9c0f7010a7
Add (initial) mailserver playbook
continuous-integration/drone/push Build is failing Details
bb8bd718a9
fix yaml lint
continuous-integration/drone/push Build is failing Details
ca6d4a9839
commented unused tasks for the moment
continuous-integration/drone/push Build is failing Details
8557db5e89
Added the certificates gestion
continuous-integration/drone/push Build is failing Details
1847a5a698
Add nfs-client role
continuous-integration/drone/push Build is failing Details
f901669341
fix var names for better hierarchy
continuous-integration/drone/push Build is failing Details
807ecda890
Added NFS host_var for mail.auro.re
continuous-integration/drone/push Build is failing Details
17a64241d6
mail is no longer in adm
continuous-integration/drone/push Build is failing Details
d873b3f3a8
fix ansible-lint
continuous-integration/drone/push Build is failing Details
e77047a532
add sain defaults for NFS client
continuous-integration/drone/push Build is failing Details
a5a0e5ccfe
oupsie, reverse this
continuous-integration/drone/push Build is failing Details
06917ce46b
Agree to Letsencrypt TOS
continuous-integration/drone/push Build is failing Details
9d4c630c7e
Add the mail-certificate role
continuous-integration/drone/push Build is failing Details
ee16220591
Please linter
continuous-integration/drone/push Build is failing Details
851e459b6f
Starting to try out postfix config
continuous-integration/drone/push Build is failing Details
241997396b
Config outside of conf.d
continuous-integration/drone/push Build is failing Details
e1d8382fed
fix typo
continuous-integration/drone/push Build is failing Details
d3cf2c7e5f
dovecot handlers
continuous-integration/drone/push Build is failing Details
79b75cae00
maildir conf
continuous-integration/drone/push Build is failing Details
f991befbc6
renamed to fit jinja template
continuous-integration/drone/push Build is failing Details
026e35adc7
Add IMAP/POP/SMTP auth conf
continuous-integration/drone/push Build is failing Details
1297884ce1
Add ssl conf
continuous-integration/drone/push Build is failing Details
ad1a1602eb
dovecot ldap conf
continuous-integration/drone/push Build is failing Details
645f0fd445
Add dovecot bind password into the vault
continuous-integration/drone/push Build is failing Details
094334e069
Fix mode, shoudl always be set
continuous-integration/drone/push Build is failing Details
b8e4ece8a7
use underscores instead of dashes inside role names
continuous-integration/drone/push Build is failing Details
99a46af244
User handlers to run when something changed
continuous-integration/drone/push Build is failing Details
24fa5a969c
add local_network variable
continuous-integration/drone/push Build is failing Details
8612f835af
fix typo and indentation problem
continuous-integration/drone/push Build is failing Details
b50ef60e8a
fix conf.d template files path
continuous-integration/drone/push Build is failing Details
fcb53b7cf5
Add sane logging timestamp format
continuous-integration/drone/push Build is failing Details
af4d66c85b
remove non-existant conf file from the role
continuous-integration/drone/push Build is failing Details
809f5f9cc9
Add config in the right section
continuous-integration/drone/push Build is failing Details
b2a49c1e42
Add LMTP for Postfix-Dovecot communication
continuous-integration/drone/push Build is failing Details
52a29ff010
Fix syntax: don't forget the underscore
continuous-integration/drone/push Build is failing Details
c85b2b58fe
Add quota to dovecot
continuous-integration/drone/push Build is failing Details
cf58c2bac5
Add re2o mail server
continuous-integration/drone/push Build is failing Details
1c7b4f8560
add re2o service mail cron
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
1e59bec323
Add Re2o API vars
otthorn added 1 commit 3 years ago
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
0a7de4fc78
Mail VM has a public addr now and FQDN is mail.auro.re
otthorn added 1 commit 3 years ago
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
ebf712d0bc
Use correct re2o API vars (don't add them twice in vault, reuse them)
otthorn added 1 commit 3 years ago
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
27cfcc1320
Don't reinvent the whell, use existing roles (have to be tested)
otthorn added 1 commit 3 years ago
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
2c531d1af2
Postfix conf add certs and other security related modifications
otthorn added 2 commits 3 years ago
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
efa34dab42
fix yaml syntax
otthorn added 1 commit 3 years ago
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
43053e57f9
Fix broken vars
otthorn added 1 commit 3 years ago
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
256d2d5df4
Post renewal hook for certbot to reload dovecot and postfix
otthorn added 1 commit 3 years ago
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
77918e00ce
move files to the right place and fix small typo
otthorn added 1 commit 3 years ago
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
b35922346e
Remove file since I did not git mv correclty...
otthorn added 1 commit 3 years ago
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
c0cd3946fb
Fix postfix cert variables
otthorn added 1 commit 3 years ago
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
5f48a46522
Add postfix quota check
otthorn added 1 commit 3 years ago
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
faba1d2005
Correct typo, this one was sneaky!
otthorn force-pushed mailserver from faba1d2005 to 659847bbfa 3 years ago
otthorn force-pushed mailserver from 659847bbfa to 4cd6a2d2c5 3 years ago
otthorn added 74 commits 3 years ago
continuous-integration/drone/push Build is failing Details
9c0f7010a7
Add (initial) mailserver playbook
continuous-integration/drone/push Build is failing Details
bb8bd718a9
fix yaml lint
continuous-integration/drone/push Build is failing Details
ca6d4a9839
commented unused tasks for the moment
continuous-integration/drone/push Build is failing Details
8557db5e89
Added the certificates gestion
continuous-integration/drone/push Build is failing Details
1847a5a698
Add nfs-client role
continuous-integration/drone/push Build is failing Details
f901669341
fix var names for better hierarchy
continuous-integration/drone/push Build is failing Details
807ecda890
Added NFS host_var for mail.auro.re
continuous-integration/drone/push Build is failing Details
17a64241d6
mail is no longer in adm
continuous-integration/drone/push Build is failing Details
d873b3f3a8
fix ansible-lint
continuous-integration/drone/push Build is failing Details
e77047a532
add sain defaults for NFS client
continuous-integration/drone/push Build is failing Details
a5a0e5ccfe
oupsie, reverse this
continuous-integration/drone/push Build is failing Details
06917ce46b
Agree to Letsencrypt TOS
continuous-integration/drone/push Build is failing Details
9d4c630c7e
Add the mail-certificate role
continuous-integration/drone/push Build is failing Details
ee16220591
Please linter
continuous-integration/drone/push Build is failing Details
851e459b6f
Starting to try out postfix config
continuous-integration/drone/push Build is failing Details
241997396b
Config outside of conf.d
continuous-integration/drone/push Build is failing Details
e1d8382fed
fix typo
continuous-integration/drone/push Build is failing Details
d3cf2c7e5f
dovecot handlers
continuous-integration/drone/push Build is failing Details
79b75cae00
maildir conf
continuous-integration/drone/push Build is failing Details
f991befbc6
renamed to fit jinja template
continuous-integration/drone/push Build is failing Details
026e35adc7
Add IMAP/POP/SMTP auth conf
continuous-integration/drone/push Build is failing Details
1297884ce1
Add ssl conf
continuous-integration/drone/push Build is failing Details
ad1a1602eb
dovecot ldap conf
continuous-integration/drone/push Build is failing Details
645f0fd445
Add dovecot bind password into the vault
continuous-integration/drone/push Build is failing Details
094334e069
Fix mode, shoudl always be set
continuous-integration/drone/push Build is failing Details
b8e4ece8a7
use underscores instead of dashes inside role names
continuous-integration/drone/push Build is failing Details
99a46af244
User handlers to run when something changed
continuous-integration/drone/push Build is failing Details
24fa5a969c
add local_network variable
continuous-integration/drone/push Build is failing Details
8612f835af
fix typo and indentation problem
continuous-integration/drone/push Build is failing Details
b50ef60e8a
fix conf.d template files path
continuous-integration/drone/push Build is failing Details
fcb53b7cf5
Add sane logging timestamp format
continuous-integration/drone/push Build is failing Details
af4d66c85b
remove non-existant conf file from the role
continuous-integration/drone/push Build is failing Details
809f5f9cc9
Add config in the right section
continuous-integration/drone/push Build is failing Details
b2a49c1e42
Add LMTP for Postfix-Dovecot communication
continuous-integration/drone/push Build is failing Details
52a29ff010
Fix syntax: don't forget the underscore
continuous-integration/drone/push Build is failing Details
c85b2b58fe
Add quota to dovecot
continuous-integration/drone/push Build is failing Details
cf58c2bac5
Add re2o mail server
continuous-integration/drone/push Build is failing Details
1c7b4f8560
add re2o service mail cron
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
1e59bec323
Add Re2o API vars
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
0a7de4fc78
Mail VM has a public addr now and FQDN is mail.auro.re
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
ebf712d0bc
Use correct re2o API vars (don't add them twice in vault, reuse them)
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
27cfcc1320
Don't reinvent the whell, use existing roles (have to be tested)
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
2c531d1af2
Postfix conf add certs and other security related modifications
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
efa34dab42
fix yaml syntax
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
43053e57f9
Fix broken vars
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
256d2d5df4
Post renewal hook for certbot to reload dovecot and postfix
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
77918e00ce
move files to the right place and fix small typo
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
b35922346e
Remove file since I did not git mv correclty...
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
c0cd3946fb
Fix postfix cert variables
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
5f48a46522
Add postfix quota check
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
faba1d2005
Correct typo, this one was sneaky!
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
a2cbf4a487
Merge branch 'mailserver' of ssh://gitea.auro.re:2222/Aurore/ansible into mailserver
otthorn added 1 commit 3 years ago
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
b06ac0647c
Merge branch 'master' into mailserver
otthorn added 4 commits 3 years ago
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
This pull request has changes conflicting with the target branch.
  • group_vars/all/vault.yml
  • hosts
  • roles/certbot/templates/letsencrypt/conf.d/certname.ini.j2
  • group_vars/all/vars.yml
Sign in to join this conversation.
No reviewers
No Label
No Milestone
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: aurore/ansible#9
Loading…
There is no content yet.