Add mail.archlinux.org playbook

host_vars/mail.archlinux.org/misc

+filesystem: btrfs
+
+mail_domain: "mail.archlinux.org"
+
+fail2ban_jails:
+  sshd: true
+  postfix: true
+  dovecot: true

host_vars/mail.archlinux.org/wiki-bouncehandler

+$ANSIBLE_VAULT;1.1;AES256
+39396466326266613063333338356431653461636562643535363038613865343230303430363564
+3632646531646565336366396635353834633939316237610a343933366465663939303930376339
+37363636363531323866653962353335613366333137343737316639323661636363633364346138
+6462666365626134660a313632636537663137386437343662383335616665393561356165613333
+38353364356238386364303065343333636463333234326234643332343137373639366130656335
+64633533363034303664633435653937633566303537666164306130383738386235633232623965
+38663164633230613432356266313135383838343331326534353365656432376463313366356231
+61656338623134636265356561313630353935633037306430376430383034313631303538336637
+33623733376363366336373337366663356434303931313132356164643334363630333834313665
+32356336643436653763346333326432616438313530316530353937306237376563313032373333
+34353763396166636161633036343935356334353335623034383238316532663930613864623335
+61666165376662633934336232633634643961363064356566626235653530643261643039336436
+62616438376161643930613063323739393237383563646630373430373734386430353933353433
+35646463633034613166623233623164363638636533623037303465346239623962343337646665
+31363065306539383066386362613635346431333135326461636136336232643030336464613430
+35376537386236353236

playbooks/mail.archlinux.org.yml

+- name: setup mail.archlinux.org
+  hosts: mail.archlinux.org
+  remote_user: root
+  roles:
+    - { role: common }
+    - { role: tools }
+    - { role: sshd }
+    - { role: root_ssh }
+    - { role: borg_client, tags: ['borg'] }
+    - { role: opendkim, dkim_selector: mail, tags: ['mail'] }
+    - { role: dovecot }
+    - { role: spampd, tags: ["mail"] }
+    - { role: unbound, tags: ["mail"] }
+    - { role: postfwd, tags: ['mail'] }
+    - { role: postfix, postfix_server: true, postfix_smtpd_public: true, tags: ['mail'] }
+    - { role: archusers }
+    - { role: certbot }
+    - { role: fail2ban }