59 commits

Author	SHA1	Message	Date
Franzi	ee58509e93	bundles/postfix: add feature to block email recipients	2024-01-21 11:43:43 +01:00
Franzi	cd48cf495d	rework firewall setup	2023-09-24 21:01:51 +02:00
Franzi	dda3c4162c	bundles/postfix: ensure /etc/mailname exists before installing postfix	2023-09-20 17:46:04 +02:00
Franzi	4122a7ccf8	isort the repo	2023-02-05 17:30:58 +01:00
Franzi	90823b7984	bundles/postfix: lessen smtpd security restrictions	2022-12-20 08:55:44 +01:00
Franzi	3db6078d9b	bundles/postfix: set tls ciphers to medium to increase compatibility with centos	2022-11-04 07:08:33 +01:00
Franzi	22759ca52a	bundles/postfix: enable smtps	2022-02-15 18:21:12 +01:00
Franzi	d44c87e8a7	move SPAM BLOCKLIST check to icinga2 itself ... somehow, we tend to get false positives if we run that check on the node itself.	2021-11-28 07:26:41 +01:00
Franzi	c6fe9d5eb2	bundles/postfix: fix .provides()	2021-08-21 12:32:47 +02:00
Franzi	12ca6f4ff7	bundles/postfix: open up SMTPS	2021-08-21 08:12:21 +02:00
Franzi	6cadf33ae3	bundles/postfix: support having postfixadmin without setting myhostname	2021-07-18 07:55:19 +02:00
Franzi	ce9f6dd7ba	bundles: add zfs dataset to bundles	2021-07-17 10:17:39 +02:00
Franzi	b193971625	bundles/postfix: fix some needed files not being present in chroot on arch	2021-07-10 16:16:56 +02:00
Franzi	8f4db6f2ba	bundles/postfix: install pkg_pacman:s-nail	2021-07-10 15:59:03 +02:00
Franzi	7b00e7484e	fix monitoring for arch linux hosts	2021-06-28 19:59:54 +02:00
Franzi	5369490b79	bundles/postfix: fix spam blocklist timeout	2021-06-03 14:31:03 +02:00
Franzi	d569b00960	modify nodes and bundles for new nftables syntax	2021-06-03 13:59:36 +02:00
Franzi	6b90d568cf	bundles/postfix: use dig in check_spam_blocklist instead of a python library ... The library isn't available as a debian package, so we would have to manually install that every time the python package updates its minor version number.	2021-05-29 09:29:40 +02:00
Franzi	5a182fadef	make some bundles arch-compatible, more default packages for arch	2021-05-23 14:36:16 +02:00
Franzi	ae0bb8ed58	bundles/postfix: rework exporter for better usability	2021-05-02 12:06:53 +02:00
Franzi	6772b3b5d0	bundles: various fixes for telegraf plugins	2021-04-24 11:45:58 +02:00
Franzi	c97d9ab948	bundles/postfix: use own postqueue exporter	2021-04-24 10:17:05 +02:00
Franzi	a37d31973a	bundles: add some telegraf plugins	2021-04-24 09:14:25 +02:00
Franzi	bc8050cd3c	bundles/postfix: fix connection limits for smtpd	2021-04-11 21:56:37 +02:00
Franzi	69279ba34f	bundles/postfix: be a bit more relaxed when checking for smtp errors	2021-04-10 16:50:16 +02:00
Franzi	e36a352a42	bundles: fix usage of set() vs {}	2021-04-04 10:34:55 +02:00
Franzi	f8bbe00d47	overall better handling and usage of exceptions	2021-04-02 18:57:13 +02:00
Franzi	5d5930265a	bundles/postfix: remove print statement	2021-04-02 18:29:33 +02:00
Franzi	957cac5ebc	bundles/postfix: disable SPAM BLOCKLIST check if relayhost is set	2021-04-01 17:00:53 +02:00
Franzi	61c6188454	bundles/postfix: mynetworks now supports identifiers	2021-04-01 16:59:49 +02:00
Franzi	35e4bbf04b	bundles/postfix: remove postscreen usage ... postscreen isn't able to share its cache file between instances, which leads to the server simply accepting mails for the port on which postscreen starts up later. Since we can't predict which port this will be, we simply remove postscreen alltogether. Yes, i know i could just remove postscreen for port 2525.	2021-03-28 09:00:37 +02:00
Franzi	ce39850bda	bundles/postfix: fix .provides() for iptables reactor	2021-03-28 08:56:22 +02:00
Franzi	9fe4e2933d	bundles/postfix: add firewalling for port 2525	2021-03-28 08:37:51 +02:00
Franzi	27753d50c4	bundles/postfix: use threading in check_spam_blocklist	2021-03-25 17:42:59 +01:00
Franzi	fdcec012f3	bundles/postfix: add SPAM BLOCKLIST check for every non-private IP attached to the server	2021-03-22 20:24:14 +01:00
Franzi	5775001301	bundles/postfix: add iptables config	2021-03-21 11:11:49 +01:00
Franzi	3fcd81960e	bundles/postfix: allow configuring mynetworks	2021-03-15 11:41:35 +01:00
Franzi	ad5c8cc0ab	bundles/postfix: only get certificate if actually needed	2021-02-20 17:30:38 +01:00
Franzi	b06532241b	bundles: use metastack syntax for metadata.get()	2021-02-18 18:12:25 +01:00
Franzi	fbb8840dff	add .editorconfig, format files correctly	2021-02-17 10:56:18 +01:00
Franzi	b42e39ed0a	get rid of check_rbl	2021-02-17 10:51:49 +01:00
Franzi	f52df58517	bundles: code style improvements	2021-02-12 20:45:41 +01:00
Franzi	eb431d8da8	bundles/postfix: also set alias_maps ... fixes "warning: dict_nis_init: NIS domain name not set - NIS lookups disabled"	2021-02-06 10:24:19 +01:00
Franzi	2d42e5f7dd	update bw to 4.3, add .provides() to metadata reactors	2021-01-07 18:44:38 +01:00
Franzi	4f57a6c0e3	icinga2: more checks should send sms	2021-01-02 12:26:37 +01:00
Franzi	4a57926577	bundles/icinga2: set some notification options for checks	2020-11-22 08:24:44 +01:00
Franzi	5419bf31fb	bundles: fix some icinga checks	2020-11-21 10:30:05 +01:00
Franzi	f04dac11e5	Merge branch 'kunsi-icinga2' into main	2020-11-13 13:03:16 +01:00
Franzi	0749fc75c5	bundles: add backup paths	2020-11-13 12:37:26 +01:00
Franzi	087f4bb74d	groups/{gce,home}: send mail via mx0.kunbox.net	2020-11-11 13:31:01 +01:00