WIP: Setup of a mail server #9

Draft

otthorn wants to merge 151 commits from mailserver into master

pull from: mailserver

merge into: aurore:master

aurore:master

aurore:new-infra

aurore:bird

aurore:dns

aurore:aruba

aurore:radius

aurore:on-en-a-litteralement-rien-a-foutre

aurore:radvd

aurore:keepalived

aurore:ifupdown2

aurore:dhcp

aurore:cleanup_no_ldap_for_servers

aurore:infra_router

aurore:ask_vault_pass

aurore:borgfix

aurore:auditd

aurore:prometheus_apt_pending_and_reboot

aurore:move_host_vars

aurore:prometheus-ipmi-exporter

aurore:fix-portail

aurore:crans

aurore:apt

aurore:remove_old_db_servers

aurore:rspamd

aurore:wireguard-ovh

aurore:pass

aurore:nullmailer

aurore:logs

aurore:re2o-master

aurore:mail_server

Conversation 0 Commits 151 Files changed 29 +752 -173

151 commits

Author	SHA1	Message	Date
Solal Nathan	0283c0c589	🚨 fix risky-file-permissions	2021-02-20 14:18:09 +01:00
Solal Nathan	5d8874b489	🚨 fix trailling-spaces	2021-02-20 14:17:07 +01:00
Solal Nathan	6958bbf17a	🚨 fix risky-file-permission	2021-02-20 14:15:30 +01:00
Solal Nathan	6dae04fe62	🚨 fix trailling spaces and space in front of comment	2021-02-20 14:14:25 +01:00
otthorn	b06ac0647c	Merge branch 'master' into mailserver	2021-02-20 14:00:43 +01:00
Solal Nathan	a2cbf4a487	Merge branch 'mailserver' of ssh://gitea.auro.re:2222/Aurore/ansible into mailserver	2021-02-06 13:09:37 +01:00
Solal Nathan	4cd6a2d2c5	Correct typo, this one was sneaky!	2021-02-06 12:54:00 +01:00
Solal Nathan	11d5d19bb6	Add postfix quota check	2021-02-06 12:54:00 +01:00
Solal Nathan	18ca5b4805	Fix postfix cert variables	2021-02-06 12:54:00 +01:00
Solal Nathan	5dcb7eb0d1	Remove file since I did not git mv correclty...	2021-02-06 12:54:00 +01:00
Solal Nathan	402b203489	move files to the right place and fix small typo	2021-02-06 12:54:00 +01:00
Solal Nathan	a2fbe9b1e6	Post renewal hook for certbot to reload dovecot and postfix	2021-02-06 12:54:00 +01:00
Solal Nathan	9e6a127a8f	Fix broken vars	2021-02-06 12:54:00 +01:00
Solal Nathan	391d5ce9a0	fix yaml syntax	2021-02-06 12:54:00 +01:00
Solal Nathan	bf692f4501	Add additional role for mailserver	2021-02-06 12:54:00 +01:00
Otthorn	d0196c8c00	Postfix conf add certs and other security related modifications	2021-02-06 12:54:00 +01:00
Otthorn	59302b7fd8	Don't reinvent the whell, use existing roles (have to be tested)	2021-02-06 12:54:00 +01:00
Otthorn	95e67e8fe1	Use correct re2o API vars (don't add them twice in vault, reuse them)	2021-02-06 12:54:00 +01:00
Otthorn	cac03b51c0	Mail VM has a public addr now and FQDN is mail.auro.re	2021-02-06 12:54:00 +01:00
Otthorn	8b59794013	Add Re2o API vars	2021-02-06 12:54:00 +01:00
Otthorn	ed81571cb8	add re2o service mail cron	2021-02-06 12:54:00 +01:00
Otthorn	5ae66dae15	Re2o API config	2021-02-06 12:54:00 +01:00
Otthorn	3af1aa8a18	Add re2o mail server	2021-02-06 12:54:00 +01:00
Otthorn	49243202b2	Add re2o mail server to the roles of the mailserver playbook	2021-02-06 12:54:00 +01:00
Otthorn	4d769ff6d3	Add quota to dovecot	2021-02-06 12:54:00 +01:00
Otthorn	b8edf512f7	Enable Dovecot sieve	2021-02-06 12:54:00 +01:00
Solal Nathan	477781e293	Fix syntax: don't forget the underscore	2021-02-06 12:54:00 +01:00
Solal Nathan	0d9de57a78	Add LMTP for Postfix-Dovecot communication	2021-02-06 12:54:00 +01:00
Solal Nathan	3b19ef06ee	Add config in the right section	2021-02-06 12:54:00 +01:00
Solal Nathan	4bcdbec9c4	Don't add conf.d/*.conf into a file that is itself already there! dumb dumb	2021-02-06 12:54:00 +01:00
Solal Nathan	c1fc197da7	remove non-existant conf file from the role	2021-02-06 12:54:00 +01:00
Solal Nathan	c36e52c263	Add sane logging timestamp format	2021-02-06 12:54:00 +01:00
Solal Nathan	012a6076f3	fix conf.d template files path	2021-02-06 12:54:00 +01:00
Solal Nathan	ab124e560a	Fix indentation... again	2021-02-06 12:54:00 +01:00
Solal Nathan	e26bc5f8c1	fix typo and indentation problem	2021-02-06 12:54:00 +01:00
Solal Nathan	32adecd5c1	add local_network variable	2021-02-06 12:54:00 +01:00
Solal Nathan	495f4c4343	User handlers to run when something changed	2021-02-06 12:54:00 +01:00
Solal Nathan	486216b8ff	use command instead of shell when no shell functionality is required	2021-02-06 12:54:00 +01:00
Otthorn	f8774587c2	use underscores instead of dashes inside role names	2021-02-06 12:54:00 +01:00
Otthorn	522d286bdd	Fix mode, shoudl always be set	2021-02-06 12:54:00 +01:00
Otthorn	5732fef21e	rename roles to match regex set by linter	2021-02-06 12:54:00 +01:00
Otthorn	b8aa507166	fix typo	2021-02-06 12:54:00 +01:00
Otthorn	8436e64b3a	reload -> restart	2021-02-06 12:54:00 +01:00
Otthorn	5c7537f4ac	Add dovecot role to the mailserver	2021-02-06 12:54:00 +01:00
Otthorn	482bf1f8bc	Add dovecot bind password into the vault	2021-02-06 12:53:50 +01:00
Otthorn	f14da45305	dovecot vars	2021-02-06 12:51:12 +01:00
Otthorn	637d7b02d3	dovecot ldap conf	2021-02-06 12:51:12 +01:00
Otthorn	910838c416	Add ssl conf	2021-02-06 12:51:12 +01:00
Otthorn	f0a2bfd740	Add IMAP/POP/SMTP auth conf	2021-02-06 12:51:12 +01:00
Otthorn	f3eeb243bb	renamed to fit jinja template	2021-02-06 12:51:12 +01:00
Otthorn	05e16f3226	maildir conf	2021-02-06 12:51:12 +01:00
Otthorn	9260b902d6	auth config	2021-02-06 12:51:12 +01:00
Otthorn	1ec03eda87	dovecot handlers	2021-02-06 12:51:12 +01:00
Otthorn	74e722fef8	fix typo	2021-02-06 12:51:12 +01:00
Otthorn	46c8b82a57	Config outside of conf.d	2021-02-06 12:51:12 +01:00
Otthorn	946b3c973e	Apt retry mechanism	2021-02-06 12:51:12 +01:00
otthorn	cbdde70c2a	Starting to try out postfix config	2021-02-06 12:51:12 +01:00
otthorn	facb7365fc	Please linter	2021-02-06 12:51:12 +01:00
otthorn	769dc5619b	Add the mail-certificate role	2021-02-06 12:51:12 +01:00
otthorn	155daedd24	Agree to Letsencrypt TOS	2021-02-06 12:51:05 +01:00
otthorn	d49ad0f8d8	oupsie, reverse this	2021-02-06 12:47:49 +01:00
otthorn	3a2f073db5	fix typo	2021-02-06 12:47:49 +01:00
otthorn	9543c2f10d	dashes are evil, use underscore in var names	2021-02-06 12:47:49 +01:00
otthorn	a0a6124481	add sain defaults for NFS client	2021-02-06 12:47:49 +01:00
otthorn	ed9557d342	fix ansible-lint	2021-02-06 12:47:49 +01:00
otthorn	f7ee1403d9	Fix yaml lint	2021-02-06 12:47:49 +01:00
otthorn	8cb8548139	mail is no longer in adm	2021-02-06 12:46:39 +01:00
otthorn	b6355ebb0a	Added NFS host_var for mail.auro.re	2021-02-06 12:46:39 +01:00
otthorn	2605266137	fix var names for better hierarchy	2021-02-06 12:46:39 +01:00
otthorn	991e306320	Add nfs-client role	2021-02-06 12:46:39 +01:00
otthorn	40df593f11	Added the certificates gestion	2021-02-06 12:46:39 +01:00
otthorn	3714396b6b	commented unused tasks for the moment	2021-02-06 12:46:39 +01:00
otthorn	750753f16d	Starting the dovecot task	2021-02-06 12:46:39 +01:00
otthorn	673d77d1be	fix yaml lint	2021-02-06 12:46:39 +01:00
otthorn	de83af936d	Add (initial) mailserver playbook	2021-02-06 12:46:39 +01:00
otthorn	5377378bf7	Add (initial) mail-utils role	2021-02-06 12:46:39 +01:00
otthorn	f01533409f	Add (initial) postfix role	2021-02-06 12:46:39 +01:00
otthorn	4b3e491983	Add mail vars	2021-02-06 12:46:39 +01:00
Solal Nathan	faba1d2005	Correct typo, this one was sneaky!	2021-02-05 01:50:56 +01:00
Solal Nathan	5f48a46522	Add postfix quota check	2021-02-05 01:35:46 +01:00
Solal Nathan	c0cd3946fb	Fix postfix cert variables	2021-02-05 01:17:58 +01:00
Solal Nathan	b35922346e	Remove file since I did not git mv correclty...	2021-02-05 00:09:12 +01:00
Solal Nathan	77918e00ce	move files to the right place and fix small typo	2021-02-05 00:07:36 +01:00
Solal Nathan	256d2d5df4	Post renewal hook for certbot to reload dovecot and postfix	2021-02-05 00:05:26 +01:00
Solal Nathan	43053e57f9	Fix broken vars	2021-02-04 23:44:32 +01:00
Solal Nathan	efa34dab42	fix yaml syntax	2021-02-04 23:35:12 +01:00
Solal Nathan	e316679e13	Add additional role for mailserver	2021-02-04 23:34:53 +01:00
Otthorn	2c531d1af2	Postfix conf add certs and other security related modifications	2021-02-04 23:18:23 +01:00
Otthorn	27cfcc1320	Don't reinvent the whell, use existing roles (have to be tested)	2021-02-04 14:47:40 +01:00
Otthorn	ebf712d0bc	Use correct re2o API vars (don't add them twice in vault, reuse them)	2021-02-04 13:02:52 +01:00
Otthorn	0a7de4fc78	Mail VM has a public addr now and FQDN is mail.auro.re	2021-02-04 02:24:35 +01:00
Otthorn	1e59bec323	Add Re2o API vars	2021-02-04 02:14:52 +01:00
Otthorn	1c7b4f8560	add re2o service mail cron	2021-02-04 01:46:55 +01:00
Otthorn	9e91f2e9d5	Re2o API config	2021-02-04 01:38:49 +01:00
Otthorn	cf58c2bac5	Add re2o mail server	2021-02-04 01:30:14 +01:00
Otthorn	1c20193fc8	Add re2o mail server to the roles of the mailserver playbook	2021-02-04 01:03:18 +01:00
Otthorn	c85b2b58fe	Add quota to dovecot	2021-02-03 23:20:10 +01:00
Otthorn	2673f771d9	Enable Dovecot sieve	2021-02-03 20:18:46 +01:00
Solal Nathan	52a29ff010	Fix syntax: don't forget the underscore	2021-01-30 01:14:53 +01:00
Solal Nathan	b2a49c1e42	Add LMTP for Postfix-Dovecot communication	2021-01-30 01:10:31 +01:00
Solal Nathan	809f5f9cc9	Add config in the right section	2021-01-30 01:05:37 +01:00
Solal Nathan	c45dab323a	Don't add conf.d/*.conf into a file that is itself already there! dumb dumb	2021-01-30 00:56:17 +01:00
Solal Nathan	af4d66c85b	remove non-existant conf file from the role	2021-01-30 00:46:00 +01:00
Solal Nathan	fcb53b7cf5	Add sane logging timestamp format	2021-01-30 00:41:30 +01:00
Solal Nathan	b50ef60e8a	fix conf.d template files path	2021-01-30 00:38:15 +01:00
Solal Nathan	d05425745f	Fix indentation... again	2021-01-30 00:34:54 +01:00
Solal Nathan	8612f835af	fix typo and indentation problem	2021-01-30 00:30:35 +01:00
Solal Nathan	24fa5a969c	add local_network variable	2021-01-30 00:25:15 +01:00
Solal Nathan	99a46af244	User handlers to run when something changed	2021-01-30 00:02:28 +01:00
Solal Nathan	8b66ba059b	use command instead of shell when no shell functionality is required	2021-01-29 23:59:53 +01:00
Otthorn	b8e4ece8a7	use underscores instead of dashes inside role names	2021-01-29 23:44:20 +01:00
Otthorn	094334e069	Fix mode, shoudl always be set	2021-01-29 01:03:18 +01:00
Otthorn	de2758f4d6	rename roles to match regex set by linter	2021-01-29 01:01:10 +01:00
Otthorn	58064df056	fix typo	2021-01-29 00:57:24 +01:00
Otthorn	bd8942eff2	reload -> restart	2021-01-29 00:56:08 +01:00
Otthorn	418da50049	Add dovecot role to the mailserver	2021-01-29 00:55:02 +01:00
Otthorn	645f0fd445	Add dovecot bind password into the vault	2021-01-29 00:27:00 +01:00
Otthorn	eb257b966b	dovecot vars	2021-01-29 00:20:02 +01:00
Otthorn	ad1a1602eb	dovecot ldap conf	2021-01-29 00:16:42 +01:00
Otthorn	1297884ce1	Add ssl conf	2021-01-28 03:15:45 +01:00
Otthorn	026e35adc7	Add IMAP/POP/SMTP auth conf	2021-01-28 01:34:09 +01:00
Otthorn	f991befbc6	renamed to fit jinja template	2021-01-28 01:27:22 +01:00
Otthorn	79b75cae00	maildir conf	2021-01-28 01:24:50 +01:00
Otthorn	765ce39625	auth config	2021-01-28 01:11:32 +01:00
Otthorn	d3cf2c7e5f	dovecot handlers	2021-01-28 00:15:51 +01:00
Otthorn	e1d8382fed	fix typo	2021-01-28 00:13:08 +01:00
Otthorn	241997396b	Config outside of conf.d	2021-01-28 00:11:36 +01:00
Otthorn	a54c5832a3	Apt retry mechanism	2021-01-28 00:07:23 +01:00
otthorn	851e459b6f	Starting to try out postfix config	2021-01-17 23:48:36 +01:00
otthorn	a8cbe4549c	fix ansible lint v2 -- we actually git add the file this time	2021-01-17 23:45:09 +01:00
otthorn	ee16220591	Please linter	2021-01-17 17:02:52 +01:00
otthorn	9d4c630c7e	Add the mail-certificate role	2021-01-17 17:02:05 +01:00
otthorn	06917ce46b	Agree to Letsencrypt TOS	2021-01-17 16:40:28 +01:00
otthorn	a5a0e5ccfe	oupsie, reverse this	2021-01-17 13:27:55 +01:00
otthorn	72d486119e	fix typo	2021-01-17 13:27:43 +01:00
otthorn	7e03eafeaa	dashes are evil, use underscore in var names	2021-01-17 13:27:24 +01:00
otthorn	e77047a532	add sain defaults for NFS client	2021-01-17 13:03:09 +01:00
otthorn	d873b3f3a8	fix ansible-lint	2021-01-17 12:51:52 +01:00
otthorn	5c9ae10a8c	Fix yaml lint	2021-01-17 12:47:58 +01:00
otthorn	17a64241d6	mail is no longer in adm	2021-01-17 12:42:15 +01:00
otthorn	807ecda890	Added NFS host_var for mail.auro.re	2021-01-17 12:41:37 +01:00
otthorn	f901669341	fix var names for better hierarchy	2021-01-17 12:34:25 +01:00
otthorn	1847a5a698	Add nfs-client role	2021-01-17 12:31:30 +01:00
otthorn	8557db5e89	Added the certificates gestion	2021-01-15 19:52:55 +01:00
otthorn	ca6d4a9839	commented unused tasks for the moment	2021-01-14 22:48:13 +01:00
otthorn	9a04934bd2	Starting the dovecot task	2021-01-14 22:47:29 +01:00
otthorn	bb8bd718a9	fix yaml lint	2021-01-14 12:25:23 +01:00
otthorn	9c0f7010a7	Add (initial) mailserver playbook	2021-01-14 12:16:20 +01:00
otthorn	846665961a	Add (initial) mail-utils role	2021-01-14 12:16:00 +01:00
otthorn	b412210d56	Add (initial) postfix role	2021-01-14 12:15:48 +01:00
otthorn	b2fb30d46d	Add mail vars	2021-01-14 12:14:57 +01:00