aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeLines
...
* Update indentation of new postfix prometheus rulesGravatar Joe Banks2024-08-26-21/+21
|
* Install prometheus-postfix-exporterGravatar Johannes Christ2024-08-26-0/+21
| | | | | | | | As a data-obsessed administrator I want to have more data such that I can widen my sense of power. This also installs rsyslog, because prometheus-postfix-exporter doesn't work with journald's binary log format.
* Install prometheus-postfix-exporterGravatar Johannes Christ2024-08-26-0/+40
| | | | | | | | As a data-obsessed administrator I want to have more data such that I can widen my sense of power. This also installs rsyslog, because prometheus-postfix-exporter doesn't work with journald's binary log format.
* Stop installing libsasl2-modules-ldapGravatar Johannes Christ2024-08-26-2/+0
| | | | | This caused problems in postfix's logfile, our most holy daemon. We must not disturb it, and as an aside, everything works fine.
* Improve alertmanager text e-mail formatGravatar Johannes Christ2024-08-26-1/+12
| | | | Already deployed.
* Update globs to subdirectory wildcards in PR labeller configGravatar Joe Banks2024-08-26-15/+15
|
* Prune branhes that are deleted upstreamGravatar Joe Banks2024-08-25-2/+2
|
* Add cgit customisation values to git-mirrors varsGravatar Joe Banks2024-08-25-0/+4
|
* Add dependencies for formattingGravatar Joe Banks2024-08-25-0/+10
|
* Deploy git-mirrors role to NGINX hostsGravatar Joe Banks2024-08-25-0/+5
|
* Add template NGINX service for cgit deploymentGravatar Joe Banks2024-08-25-0/+25
|
* Add script for updating mirrors in a cronjobGravatar Joe Banks2024-08-25-0/+19
|
* Add dependency on NGINX to git-mirrors role for handlersGravatar Joe Banks2024-08-25-0/+3
|
* Add cgitrc config templateGravatar Joe Banks2024-08-25-0/+36
|
* Add variables for cgit and git mirrorsGravatar Joe Banks2024-08-25-0/+66
|
* Add new tasks for installing cgit and git mirroring cronjobGravatar Joe Banks2024-08-25-0/+140
|
* Add new DNS record for Git hostGravatar Joe Banks2024-08-25-0/+8
|
* Add myself to some email aliasesGravatar Joe Banks2024-08-25-2/+2
|
* Update alertmanager config with mail portGravatar Joe Banks2024-08-25-1/+1
|
* Configure e-mail credentials for King ArthurGravatar Johannes Christ2024-08-25-0/+0
| | | | See python-discord/king-arthur#264.
* Configure alertmanager to send e-mailsGravatar Johannes Christ2024-08-25-0/+12
|
* Unify alertmanager namingGravatar Johannes Christ2024-08-25-31/+31
| | | | Closes #451.
* Automatically label pull requestsGravatar Johannes Christ2024-08-25-0/+47
|
* Bind NGINX hosts on IPv6 as wellGravatar Johannes Christ2024-08-25-0/+3
| | | | Previously only Jitsi would answer when requesting on IPv6.
* Kill remaining turing host variablesGravatar Johannes Christ2024-08-25-6/+0
|
* Document debugging of sieve scriptsGravatar Johannes Christ2024-08-25-0/+76
|
* Fix incorrect module causing crash when copyingGravatar Johannes Christ2024-08-25-1/+1
|
* Correct old handler nameGravatar Johannes Christ2024-08-25-2/+1
|
* Move rtex to owl-corp deploymentGravatar Joe Banks2024-08-25-1/+1
|
* Correct sieve user log locationGravatar Joe Banks2024-08-24-1/+1
|
* Run spamassassin as debian-spamd instead of spamdGravatar Joe Banks2024-08-24-10/+2
|
* Explicitly run spamc hooks as debian-spamdGravatar Joe Banks2024-08-24-2/+2
|
* More progress on Dovecot ham/spam markingGravatar Joe Banks2024-08-24-2/+109
|
* Enable spamc ham and spam learningGravatar Joe Banks2024-08-24-4/+105
|
* Add sieve script to move spam to folderGravatar Joe Banks2024-08-24-0/+45
|
* Run inbound mail through spamassassinGravatar Joe Banks2024-08-24-0/+15
|
* Run spamassassin role on mail hostsGravatar Joe Banks2024-08-24-0/+1
|
* Add role for spamassassinGravatar Joe Banks2024-08-24-0/+177
|
* Address horrible inefficiencies in SSH handlersGravatar Johannes Christ2024-08-24-11/+2
|
* Run saslauthd under the "sasl" user & groupGravatar Mark2024-08-24-1/+26
| | | | | | | | | | | To improve security, run it as a new "sasl" user rather than as root. The existing "sasl" group is re-used. Note that Ansible does not provide an agnostic way to configure the user and group for a service. This change couples the configuration to systemd. Resolves #478
* Move Keycloak to custom imageGravatar Joe Banks2024-08-24-3/+3
|
* Update quay.io/keycloak/keycloak Docker tag to v25.0.4Gravatar renovate[bot]2024-08-24-1/+1
| | | | | | | datasource | package | from | to | | ---------- | ------------------------- | ------ | ------ | | docker | quay.io/keycloak/keycloak | 25.0.2 | 25.0.4 |
* Add Dovecot to fail2ban configGravatar Joe Banks2024-08-24-0/+8
|
* Clean up SASL logic from postfixGravatar Johannes Christ2024-08-23-19/+16
| | | | | | Per Joe's comment here [1]. [1]: https://github.com/python-discord/infra/issues/478#issuecomment-2306107672
* Configure Postfix to reject mail on the sender blocklistGravatar Joe Banks2024-08-23-0/+16
|
* Add sender blocklistGravatar Joe Banks2024-08-23-0/+3
|
* Fix pcre rewriting for postfix headersGravatar Joe Banks2024-08-23-3/+7
|
* Preserve privacy in e-mail headersGravatar Johannes Christ2024-08-23-0/+38
| | | | | | | Similar to how the big e-mail providers do it, strip out some personally identifying information from e-mails. I have used this on my own e-mail server for a while and it works fine.
* Prefer port 465 for SMTPGravatar Joe Banks2024-08-23-9/+22
|
* Add note on sieve being DevOps only for nowGravatar Joe Banks2024-08-23-0/+9
|
generated by cgit v1.2.3 (git 2.39.1) at 2025-10-20 00:34:37 +0000