infra - The PyDis DevOps boiler house, the engine room, where the magic happens.

	Commit message (Collapse)	Author	Age	Lines
*	Accept mail for int.pydis.wtf	Joe Banks	2024-08-03	-0/+1
\|
*	Add service mail routing to Postfix	Joe Banks	2024-08-03	-0/+15
\|
*	remove discord cdn link	shtlrs	2024-08-03	-2/+1
\|
*	Add Events, Director & Admin email aliases	Joe Banks	2024-08-03	-5/+19
\|
*	Update LDAP Postfix lookups to support multiple domains	Joe Banks	2024-08-03	-3/+3
\|
*	Configure Postfix to accept mail for pydis.com and pythondiscord.com	Joe Banks	2024-08-03	-4/+13
\|
*	Install freeipa-client on Debian	Joe Banks	2024-08-02	-0/+9
\|
*	neomutt: configure neomutt folder used by postfix	Johannes Christ	2024-07-31	-3/+28
\|
*	postfix: basic anti-abuse parameters	Joe Banks	2024-07-31	-0/+16
\|
*	postfix: update security parameters for mail sending	Joe Banks	2024-07-31	-3/+9
\|
*	dkim: increase logging verbosity	Joe Banks	2024-07-31	-0/+4
\|
*	dmarc: reject failures	Joe Banks	2024-07-31	-1/+1
\|
*	postfix: run received messages through opendmarc	Joe Banks	2024-07-31	-2/+2
\|
*	dmarc: add opendmarc role	Joe Banks	2024-07-31	-0/+74
\|
*	dkim: add documentation on opendkim role	Joe Banks	2024-07-31	-0/+35
\|
*	dkim: enable dkim milter	Joe Banks	2024-07-31	-0/+3
\|
*	dkim: run opendkim role on mail hosts	Joe Banks	2024-07-31	-0/+1
\|
*	dkim: add opendkim role	Joe Banks	2024-07-31	-0/+133
\|
*	spf: run inbound mail through policyd-spf filter	Joe Banks	2024-07-31	-2/+9
\|
*	postfix: add handler to restart postfix	Joe Banks	2024-07-31	-0/+5
\|
*	spf: add policyd-spf to validate SPF of inbound mail	Joe Banks	2024-07-31	-1/+43
\|
*	postfix: add group email to alias maps and relay recipients	Joe Banks	2024-07-31	-0/+2
\|
*	ldap: handle group-directed email	Joe Banks	2024-07-31	-0/+13
\|
*	postfix: add new aliases to relay restrictions and alias maps	Joe Banks	2024-07-31	-3/+5
\|
*	postfix: add variable for postmaster email	Joe Banks	2024-07-31	-0/+2
\|
*	postfix: template virtual address table and regenerate on changes	Joe Banks	2024-07-31	-0/+13
\|
*	postfix: add handler for regenerating aliases	Joe Banks	2024-07-31	-0/+4
\|
*	postfix: add alias table for manual aliases	Joe Banks	2024-07-31	-0/+7
\|
*	postfix: remove unused alias map	Joe Banks	2024-07-31	-2/+0
\|
*	postfix: add tasks to configure postfix server	Joe Banks	2024-07-31	-2/+49
\|
*	postfix: allow access to certificates	Joe Banks	2024-07-31	-0/+1
\|
*	postfix: add firewall rules	Joe Banks	2024-07-31	-0/+18
\|
*	postfix: add reload handlers	Joe Banks	2024-07-31	-0/+5
\|
*	postfix: add variables and vault	Joe Banks	2024-07-31	-0/+15
\|
*	ldap: add ldap configuration files to postfix	Joe Banks	2024-07-31	-0/+33
\|
*	postfix: add main.cf file	Joe Banks	2024-07-31	-0/+47
\|
*	Move mail hosts to dedicated group	Joe Banks	2024-07-31	-1/+8
\|
*	postfix: deploy postfix instead of opensmtpd	Johannes Christ	2024-07-31	-48/+8
\| \| \| \|	Per discussion in the PR, we have more experience with Postfix on deck.
*	Install a local MTA	Johannes Christ	2024-07-31	-0/+48
\| \| \| \| \| \| \|	Allow services and users on lovelace to exchange local mail messages. Later, we will want to expand the service to consolidate service mails or perhaps even allow forwarding e-mails to Python Discord e-mails via LDAP.
*	Prevent search engines from finding Joe's achievements	Johannes Christ	2024-07-30	-0/+2
\|
*	Fix typo in NGINX configuration	Johannes Christ	2024-07-30	-0/+10
\|
*	Add polonium db and user/password	Chris Lovering	2024-07-26	-49/+70
\|
*	Don't deploy pydis-users role to Rocky	Joe Banks	2024-07-26	-1/+1
\|
*	Install epel-release and tools on Rocky hosts	Joe Banks	2024-07-25	-0/+10
\|
*	chore(deps): update dependency community.crypto to v2.21.1 (#405)	renovate[bot]	2024-07-24	-1/+1
\| \| \| \| \| \| \|	\| datasource \| package \| from \| to \| \| ----------------- \| ---------------- \| ------ \| ------ \| \| galaxy-collection \| community.crypto \| 2.21.0 \| 2.21.1 \| Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
*	Remove Turing from fail2ban	Joe Banks	2024-07-23	-1/+1
\|
*	Remove Turing from Ansible Inventory	Joe Banks	2024-07-23	-1/+0
\|
*	Update certificate issuance to group together related certificates	Joe Banks	2024-07-23	-4/+5
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	We now can use CSV values to group different (but related) SANs into one issued certificate. As an example, when it was migrated in #402, certificates were configured in such a way that certbot attempted to issue one certificate for pydis.wtf and another for *.pydis.wtf, which is obviously not desirable. This restores previous behaviour to group together certificates served from the same NGINX vhost, using some Ansible filters to ensure the `creates` option of the task matches the certbot generated directory.
*	Remove deployments on turing	Johannes Christ	2024-07-22	-37/+12
\| \| \| \|	Files of the webserver have been migrated over.
*	Run the LDAP role on the LDAP host in Ansible	Joe Banks	2024-07-21	-0/+5
\| \| \| \|	Signed-off-by: Joe Banks <[email protected]>