infra - The PyDis DevOps boiler house, the engine room, where the magic happens.

	Commit message (Collapse)	Author	Age	Lines
*	Explicitly install moreutils for chronic utility	Joe Banks	2024-08-26	-0/+8
\|
*	Harden security permissions on git-mirrors owned files	Joe Banks	2024-08-26	-4/+4
\|
*	Improve formatting of git clone command for mirrors	Joe Banks	2024-08-26	-3/+7
\|
*	Make git-mirrors a system user	Joe Banks	2024-08-26	-0/+1
\|
*	Update indentation of new postfix prometheus rules	Joe Banks	2024-08-26	-21/+21
\|
*	Install prometheus-postfix-exporter	Johannes Christ	2024-08-26	-0/+21
\| \| \| \| \| \| \| \|	As a data-obsessed administrator I want to have more data such that I can widen my sense of power. This also installs rsyslog, because prometheus-postfix-exporter doesn't work with journald's binary log format.
*	Install prometheus-postfix-exporter	Johannes Christ	2024-08-26	-0/+18
\| \| \| \| \| \| \| \|	As a data-obsessed administrator I want to have more data such that I can widen my sense of power. This also installs rsyslog, because prometheus-postfix-exporter doesn't work with journald's binary log format.
*	Stop installing libsasl2-modules-ldap	Johannes Christ	2024-08-26	-2/+0
\| \| \| \| \|	This caused problems in postfix's logfile, our most holy daemon. We must not disturb it, and as an aside, everything works fine.
*	Prune branhes that are deleted upstream	Joe Banks	2024-08-25	-2/+2
\|
*	Add cgit customisation values to git-mirrors vars	Joe Banks	2024-08-25	-0/+4
\|
*	Add dependencies for formatting	Joe Banks	2024-08-25	-0/+10
\|
*	Deploy git-mirrors role to NGINX hosts	Joe Banks	2024-08-25	-0/+5
\|
*	Add template NGINX service for cgit deployment	Joe Banks	2024-08-25	-0/+25
\|
*	Add script for updating mirrors in a cronjob	Joe Banks	2024-08-25	-0/+19
\|
*	Add dependency on NGINX to git-mirrors role for handlers	Joe Banks	2024-08-25	-0/+3
\|
*	Add cgitrc config template	Joe Banks	2024-08-25	-0/+36
\|
*	Add variables for cgit and git mirrors	Joe Banks	2024-08-25	-0/+66
\|
*	Add new tasks for installing cgit and git mirroring cronjob	Joe Banks	2024-08-25	-0/+140
\|
*	Add myself to some email aliases	Joe Banks	2024-08-25	-2/+2
\|
*	Configure alertmanager to send e-mails	Johannes Christ	2024-08-25	-0/+1
\|
*	Bind NGINX hosts on IPv6 as well	Johannes Christ	2024-08-25	-0/+3
\| \| \| \|	Previously only Jitsi would answer when requesting on IPv6.
*	Kill remaining turing host variables	Johannes Christ	2024-08-25	-6/+0
\|
*	Fix incorrect module causing crash when copying	Johannes Christ	2024-08-25	-1/+1
\|
*	Correct old handler name	Johannes Christ	2024-08-25	-2/+1
\|
*	Correct sieve user log location	Joe Banks	2024-08-24	-1/+1
\|
*	Run spamassassin as debian-spamd instead of spamd	Joe Banks	2024-08-24	-10/+2
\|
*	Explicitly run spamc hooks as debian-spamd	Joe Banks	2024-08-24	-2/+2
\|
*	More progress on Dovecot ham/spam marking	Joe Banks	2024-08-24	-2/+109
\|
*	Enable spamc ham and spam learning	Joe Banks	2024-08-24	-4/+105
\|
*	Add sieve script to move spam to folder	Joe Banks	2024-08-24	-0/+45
\|
*	Run inbound mail through spamassassin	Joe Banks	2024-08-24	-0/+15
\|
*	Run spamassassin role on mail hosts	Joe Banks	2024-08-24	-0/+1
\|
*	Add role for spamassassin	Joe Banks	2024-08-24	-0/+177
\|
*	Address horrible inefficiencies in SSH handlers	Johannes Christ	2024-08-24	-11/+2
\|
*	Run saslauthd under the "sasl" user & group	Mark	2024-08-24	-1/+26
\| \| \| \| \| \| \| \| \| \| \|	To improve security, run it as a new "sasl" user rather than as root. The existing "sasl" group is re-used. Note that Ansible does not provide an agnostic way to configure the user and group for a service. This change couples the configuration to systemd. Resolves #478
*	Add Dovecot to fail2ban config	Joe Banks	2024-08-24	-0/+8
\|
*	Clean up SASL logic from postfix	Johannes Christ	2024-08-23	-19/+16
\| \| \| \| \| \|	Per Joe's comment here [1]. [1]: https://github.com/python-discord/infra/issues/478#issuecomment-2306107672
*	Configure Postfix to reject mail on the sender blocklist	Joe Banks	2024-08-23	-0/+16
\|
*	Add sender blocklist	Joe Banks	2024-08-23	-0/+3
\|
*	Fix pcre rewriting for postfix headers	Joe Banks	2024-08-23	-3/+7
\|
*	Preserve privacy in e-mail headers	Johannes Christ	2024-08-23	-0/+38
\| \| \| \| \| \| \|	Similar to how the big e-mail providers do it, strip out some personally identifying information from e-mails. I have used this on my own e-mail server for a while and it works fine.
*	Update neomutt folders	Joe Banks	2024-08-23	-1/+1
\|
*	Use variable for vmail user ID	Joe Banks	2024-08-23	-5/+4
\|
*	Add some missing aliases for staff email	Joe Banks	2024-08-23	-0/+2
\|
*	Enable welcome plugin on mailbox creation	Joe Banks	2024-08-23	-1/+14
\|
*	Copy welcome script in Dovecot tasks	Joe Banks	2024-08-23	-0/+10
\|
*	Add Welcome script	Joe Banks	2024-08-23	-0/+29
\|
*	Explicitly template sieve parameter to point to Sieve locations	Joe Banks	2024-08-23	-1/+1
\|
*	Template new LMTP config and install Sieve packages	Joe Banks	2024-08-23	-0/+3
\|
*	Add LMTP config to enable Sieve	Joe Banks	2024-08-23	-0/+42
\|