35331f5f4c
update ssl configuration of some bundles
2024-05-05 15:49:45 +02:00
ee58509e93
bundles/postfix: add feature to block email recipients
2024-01-21 11:43:43 +01:00
4122a7ccf8
isort the repo
2023-02-05 17:30:58 +01:00
90823b7984
bundles/postfix: lessen smtpd security restrictions
2022-12-20 08:55:44 +01:00
3db6078d9b
bundles/postfix: set tls ciphers to medium to increase compatibility with centos
2022-11-04 07:08:33 +01:00
22759ca52a
bundles/postfix: enable smtps
kunsi/bundlewrap/pipeline/head There was a failure building this commit
2022-02-15 18:21:12 +01:00
d44c87e8a7
move SPAM BLOCKLIST check to icinga2 itself
...
kunsi/bundlewrap/pipeline/head This commit looks good
somehow, we tend to get false positives if we run that check on the
node itself.
2021-11-28 07:26:41 +01:00
6cadf33ae3
bundles/postfix: support having postfixadmin without setting myhostname
2021-07-18 07:55:19 +02:00
b193971625
bundles/postfix: fix some needed files not being present in chroot on arch
bundlewrap/pipeline/head This commit looks good
2021-07-10 16:16:56 +02:00
5369490b79
bundles/postfix: fix spam blocklist timeout
2021-06-03 14:31:03 +02:00
d569b00960
modify nodes and bundles for new nftables syntax
2021-06-03 13:59:36 +02:00
6b90d568cf
bundles/postfix: use dig in check_spam_blocklist instead of a python library
...
bundlewrap/pipeline/head This commit looks good
The library isn't available as a debian package, so we would have to
manually install that every time the python package updates its minor
version number.
2021-05-29 09:29:40 +02:00
ae0bb8ed58
bundles/postfix: rework exporter for better usability
2021-05-02 12:06:53 +02:00
c97d9ab948
bundles/postfix: use own postqueue exporter
2021-04-24 10:17:05 +02:00
bc8050cd3c
bundles/postfix: fix connection limits for smtpd
bundlewrap/pipeline/head This commit looks good
2021-04-11 21:56:37 +02:00
61c6188454
bundles/postfix: mynetworks now supports identifiers
2021-04-01 16:59:49 +02:00
35e4bbf04b
bundles/postfix: remove postscreen usage
...
bundlewrap/pipeline/head This commit looks good
postscreen isn't able to share its cache file between
instances, which leads to the server simply accepting
mails for the port on which postscreen starts up later.
Since we can't predict which port this will be, we
simply remove postscreen alltogether.
Yes, i know i could just remove postscreen for port 2525.
2021-03-28 09:00:37 +02:00
27753d50c4
bundles/postfix: use threading in check_spam_blocklist
bundlewrap/pipeline/head This commit looks good
2021-03-25 17:42:59 +01:00
fdcec012f3
bundles/postfix: add SPAM BLOCKLIST check for every non-private IP attached to the server
bundlewrap/pipeline/head This commit looks good
2021-03-22 20:24:14 +01:00
5775001301
bundles/postfix: add iptables config
2021-03-21 11:11:49 +01:00
3fcd81960e
bundles/postfix: allow configuring mynetworks
bundlewrap/pipeline/head This commit looks good
2021-03-15 11:41:35 +01:00
b06532241b
bundles: use metastack syntax for metadata.get()
bundlewrap/pipeline/head This commit looks good
2021-02-18 18:12:25 +01:00
fbb8840dff
add .editorconfig, format files correctly
bundlewrap/pipeline/head This commit looks good
2021-02-17 10:56:18 +01:00
eb431d8da8
bundles/postfix: also set alias_maps
...
bundlewrap/pipeline/head This commit looks good
fixes "warning: dict_nis_init: NIS domain name not set - NIS lookups disabled"
2021-02-06 10:24:19 +01:00
087f4bb74d
groups/{gce,home}: send mail via mx0.kunbox.net
bundlewrap/pipeline/head This commit looks good
2020-11-11 13:31:01 +01:00
9dd7589f12
bundles/postfix: add submission_header_cleanup file
2020-11-10 20:34:27 +01:00
8180769120
bundles/postfix: add postmaster alias
2020-11-10 20:32:39 +01:00
f80896fa3b
bundles/postfix: add monitoring
2020-11-10 10:21:37 +01:00
3ff5d8a7dd
bundles/postfix: add alias database
bundlewrap/pipeline/head This commit looks good
2020-11-09 10:52:24 +01:00
b4b988e5f2
bundles/postfix: disable TLS1.0 and 1.1, disable weak ciphers
bundlewrap/pipeline/head This commit looks good
2020-11-08 12:24:37 +01:00
5550d2cc56
bundles/postfix: introduce
2020-11-07 22:31:18 +01:00
