Commit 03eab75d authored by Kristian Klausen's avatar Kristian Klausen 🎉
Browse files

Merge branch 'mailman' into 'master'

Migrate lists.al.org to a VPS

Closes #356

See merge request archlinux/infrastructure!424
parents c14c2c1a 06d4826a
......@@ -97,6 +97,17 @@
256 MD5:7b:38:67:01:59:c8:a7:b3:66:ec:78:df:ec:dd:30:72 root@build.archlinux.org (ED25519)
3072 MD5:f2:6a:ba:b0:53:9b:d4:73:83:21:d6:76:0f:70:71:72 root@build.archlinux.org (RSA)
# dashboards.archlinux.org
1024 SHA256:+3thWVH8prQwcpDSmAUGuJugpHWWk5IGvHjnOsKaeZY root@archlinux-packer (DSA)
256 SHA256:b9dVKP5g+tEvBDxSVeDy5st0K/3MrlHqoIZreusIag8 root@archlinux-packer (ECDSA)
256 SHA256:DvYeApOHuG/tZDiWHwAoOkY5ayT0S32fbCyJEMMCJ0M root@archlinux-packer (ED25519)
3072 SHA256:wqlRFmjOSlBuIbYMxCaSF0rmZ/dk322rS12rjXX+qqY root@archlinux-packer (RSA)
1024 MD5:c5:d6:c1:4f:14:90:8e:74:cb:dd:d5:06:05:88:3c:6d root@archlinux-packer (DSA)
256 MD5:da:b1:48:49:e4:78:e0:d4:88:01:be:20:cd:11:b9:1f root@archlinux-packer (ECDSA)
256 MD5:5b:6b:10:c6:78:b3:ad:cf:0b:3f:84:e4:24:7b:92:5a root@archlinux-packer (ED25519)
3072 MD5:2c:88:5f:24:07:2a:63:ef:86:27:1b:f1:18:2d:fe:dd root@archlinux-packer (RSA)
# europe.mirror.pkgbuild.com
1024 SHA256:Oq3eikchfo8Wt6AUzWAiU1mDR24rXudJR/zqKBFnrMo root@europe.mirror.pkgbuild.com (DSA)
256 SHA256:3S0HuO72jHUUrPM8BjfcjsB0FNXkubxovc7Sm5jZBjc root@europe.mirror.pkgbuild.com (ECDSA)
......@@ -142,15 +153,15 @@
3072 MD5:50:c8:93:43:05:d5:73:a4:84:b1:07:66:a7:20:a5:79 root@archlinux-packer (RSA)
# lists.archlinux.org
1024 SHA256:az7ZHreYtkvFBgA1goSjry0/e62JKhk4NRXXgT/+VFg root@archlinux-packer (DSA)
256 SHA256:vt22ZCpoWg0/L5uFfNsbrZ5EkdBnOh5G3jENuBpQeGo root@archlinux-packer (ECDSA)
256 SHA256:E0ivN9XqSi7U9GIPQ3JUvw6CP6uiS68M5No0DA/BFfI root@archlinux-packer (ED25519)
3072 SHA256:5YZCzd1C0bVsaye5l/lNiqsn1/IdOGjTmHqwyjV8lc0 root@archlinux-packer (RSA)
1024 SHA256:/o3BhNZ6MdfHXrqDzVxP5OgKcTmo1/e2v80Xb+Q2ypc root@archlinux-packer (DSA)
256 SHA256:Xe+YrG+IfhtQkNft+SB7UsTQCIgbqNnqMl/Pqs6uzBE root@archlinux-packer (ECDSA)
256 SHA256:fAKD+26rDZ74MOMWZI8L3k2c7RzTYd69+iwKp4zhw8c root@archlinux-packer (ED25519)
3072 SHA256:NyspEiVRnuRtL854ErcdybtjoBia+miQkpuToYZEl78 root@archlinux-packer (RSA)
1024 MD5:74:6b:bd:62:a9:52:52:e9:f7:78:fe:44:8a:fa:4f:d2 root@archlinux-packer (DSA)
256 MD5:ed:60:7c:e3:d6:4d:5a:f5:b9:cd:9e:30:4a:6a:64:c0 root@archlinux-packer (ECDSA)
256 MD5:a7:2e:f4:3a:3e:34:84:ca:6f:73:05:0e:2e:da:60:d0 root@archlinux-packer (ED25519)
3072 MD5:ae:ad:58:b8:0a:12:a7:d1:86:f0:c6:ba:fa:9e:ea:9f root@archlinux-packer (RSA)
1024 MD5:fb:bb:0e:a8:0c:5c:41:5a:b1:d9:61:4d:e5:c3:bf:b1 root@archlinux-packer (DSA)
256 MD5:56:43:80:27:a7:4e:4c:1f:a4:14:dd:d1:eb:37:13:a9 root@archlinux-packer (ECDSA)
256 MD5:3c:91:d8:b0:4b:5c:36:40:79:27:8a:c7:24:d6:26:af root@archlinux-packer (ED25519)
3072 MD5:88:99:f2:47:b1:e3:3c:99:52:67:d5:d5:55:b0:af:2c root@archlinux-packer (RSA)
# luna.archlinux.org
1024 SHA256:9Nqu9y1LhT3L3Kd6J9CSyuOc1AdGWo0eLsPxoc5bpaw root@alderaan (DSA)
......@@ -174,17 +185,6 @@
256 MD5:dd:20:c1:f1:f2:fa:70:86:3a:e2:39:86:b1:01:2f:61 root@archlinux-packer (ED25519)
3072 MD5:b6:14:30:bd:fe:43:46:6a:20:a2:8b:b0:aa:d4:35:19 root@archlinux-packer (RSA)
# mailman3.archlinux.org
1024 SHA256:Vs/PxyU74qe6uR5EUUMWhDLA+B8lBQO2PEbRSmZwzYA root@archlinux-packer (DSA)
256 SHA256:ARXQTmcvjHISznthbjI04GBOUEuQAIT2v/fRdAg3Zqw root@archlinux-packer (ECDSA)
256 SHA256:R6sapXFYhonwFNXA90p6OMy3vhKD9P9oPd00/BeuPTA root@archlinux-packer (ED25519)
3072 SHA256:xIJSPj5r2b3WEwwyx1qG7cCysqFHQfELUGE3vaRlxsM root@archlinux-packer (RSA)
1024 MD5:93:7b:7f:47:09:5b:b5:bf:a3:ad:f7:5f:a2:a1:e5:dd root@archlinux-packer (DSA)
256 MD5:e5:30:24:b4:03:0a:8b:07:23:5b:8b:9e:68:f3:7e:45 root@archlinux-packer (ECDSA)
256 MD5:91:95:e9:e2:1f:17:24:66:10:ae:29:ea:90:41:d9:fb root@archlinux-packer (ED25519)
3072 MD5:97:9f:77:0e:f5:99:44:f3:ab:db:4b:f4:4a:98:cd:dc root@archlinux-packer (RSA)
# man.archlinux.org
1024 SHA256:11C7Qa1GSNBBspSlber3Sp+LEMRpfr/VWkypfu6OnhA root@archlinux-packer (DSA)
256 SHA256:fL79NVaEiwXGfUhTXWLkue/D1seSADYbui+jwQ2dvW0 root@archlinux-packer (ECDSA)
......@@ -372,17 +372,6 @@
256 MD5:2b:7f:a8:75:ef:38:e3:c3:f7:2e:ea:9e:73:fd:3e:d5 root@archlinux-packer (ED25519)
2048 MD5:f8:a9:75:e2:99:4f:ae:2b:70:72:a2:ae:9e:fb:f1:a2 root@archlinux-packer (RSA)
# svn2gittest.archlinux.org
1024 SHA256:R5uXRsoC0CXMxAE+dV6Ola8K1amyK84VFknjM9QgonI root@archlinux-packer (DSA)
256 SHA256:CVc0FXXE1DY1wmwoHCseGg5TnzYOgbf6adTbgstVWx0 root@archlinux-packer (ECDSA)
256 SHA256:kcuaxYVB/oCraE0q+ZsnUeozpVJYYDZ24tW5MEObj1E root@archlinux-packer (ED25519)
3072 SHA256:YMH0JwP+KqyNZ0JR1T0e4SrugZUGpwiUCHKwndHaAYw root@archlinux-packer (RSA)
1024 MD5:be:c7:a8:0d:86:b6:08:b6:bc:3b:f5:ae:d6:9d:2d:55 root@archlinux-packer (DSA)
256 MD5:62:eb:27:c4:a1:6f:a4:21:ed:50:6f:dd:bf:37:4e:ab root@archlinux-packer (ECDSA)
256 MD5:9a:97:48:f7:11:b3:32:ba:fa:ab:9f:0c:41:41:da:e4 root@archlinux-packer (ED25519)
3072 MD5:f3:11:d6:58:f9:32:d1:34:fa:4e:d9:e3:d7:c8:6b:f2 root@archlinux-packer (RSA)
# wiki.archlinux.org
1024 SHA256:MnCkxFpWB/mTDRHPVB4RLuSPMNfPQyotpFaWuc55DCk root@archlinux-packer (DSA)
256 SHA256:26K98Dg4laIWFt++vxGPiANR6w+AvxgQUTb1TzeLilY root@archlinux-packer (ECDSA)
......
......@@ -43,6 +43,11 @@ build.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
build.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILmifn4KBLX24gBH4RwdBzYwLCSyVM1UbjGWxdtvoN1k
build.archlinux.org ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC9B5/QjC8I8co2r7HmqHLXFo1VdAsrGHxZkdqK5xcU2AMkkWE3orjza83em6+rX43NbHytOs/59h3wN8y5T0sfSD37gn/1WVkyP+/H+QvqNPSx7pgx4yu7tcVjAuxgm2UsObSymRJlxMZ4/k26JY/r8lbWAamYpzFI0aSJAvxkTvhyWU6O3VoVWm9TaUjXTATGBPanWaxAfrVnW4x3CplDPEi1QcwUuPfbJLgtYSyw8M7Brklftr1/stoViK6lVP6uRkAqThY9qsxgbfKhPVlsNMQ3YBHzEWGtrRghHTiDJh8JVTkVfpL7pB9hkFeJiutemwKs0b/4eeikLnUwCIX9cluJPPdJiZEhE2gWA1yB3nHFVp/qLN9nSO+UyKxfUSiOPgkfmp8tbEPkzDUW1H1xLwRZKKQ6OfiWk+IUmkbm2VqLv1SuMpVjgsHjKexMgZrejvh3YfE0PR4+JHpTjnaTL1Ywfr+YH/uJ1cwd2xQHXhIQtUicEpcvnRGPEeNAOyM=
# dashboards.archlinux.org
dashboards.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCAfVE0DIkafjiLvlCYuHqdqQSLpFHusNjF8DcXcpQjZxlxwBFpApqoPdNbN2Bry/k7lwonciJ2qE1uglrgKY6w=
dashboards.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBlMtNCc3M9ZlCFCXVzdRscvJfB6DJpCEeOoraVD4/b
dashboards.archlinux.org ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCfE077N+TtbUCXn4vau12+OhnrSM7GY3vyEDF5+GkVKAQA3M2Cvme8K0o64sAnEegpGDAysVVCg81vlHonqERFxCp0Reu0qvbIqMc4nsesGUyM8Mqps7BJtZOiYUv6cWZAEeTvRvU1717M+43Os/q/3YFOPSvC5y7Sud4JSmOKp1+zTbDZF+9kL0EjlS452FaCcAA5PG74LsZzqmOwbw+TyFwE73Dt1D7CifFoTwejDFhY5mQoGHuopwO3BA+cqfM2v3LNq0j2AuJebq5PajK9YzdNPEMqEoxw6U3VWpQAU9QNkxLrxsIT8Vu18YAFg84520ie3GQ49F8Lj6dw9qBhUzSMHoLdsMFKwUfHJrYeXNsRpQNiPOlqXX7QCw62joF211Er5cGf19rFGC7y1F2iG8MWrSEW6x9rgrgisBT05ecGtyEx0LXH/vINAhA5/zvWjDuefn/wCSy7IR0I9n7nSTXMXm0/qr4brtsFA0V+O7mmAA9ErclGE6lIBHpWfd0=
# europe.mirror.pkgbuild.com
europe.mirror.pkgbuild.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBASkHNbJZvfME9OAFLZpxoVMt7JfKhN8/VpH6JPRD8eRXfXc2Wt0YOZQGzJsrUNoFchEUUGeNxs7vmj8nwtfqGI=
europe.mirror.pkgbuild.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF6sVYSrTIVj+xwyC5uJdFVU+X50tAIDEndsnGta75C7
......@@ -64,9 +69,9 @@ homedir.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPxEHvFCXujU6s4eW0U79o
homedir.archlinux.org ssh-rsa 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
# lists.archlinux.org
lists.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBMaKy4TZsOKC5tAJvfEXdIeLU+TMVHiwlJAWxSl9MKikkyf1Qmh0NAMFv0tYd+sJSwwaW+AqEuVnsO+JponGIqc=
lists.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIWh0NnauWbG40MJHmMisPPGrMkY+jumTBajLllb9CBQ
lists.archlinux.org ssh-rsa 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
lists.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBKBHMlX50Jr2HiVJ/qDSH3mAjobpbBrGvBRXTKB/xXFBiVXCbJQCQ9HKXQZunLALaIm+jAgpskbXqLQMEpWzST8=
lists.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOVKwNsXUXpgNhlwPVlBRNlpvOt0U9deANS/n//nxbe1
lists.archlinux.org ssh-rsa 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
# luna.archlinux.org
luna.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBOZAVWmj2k+dHTfyum7FyIivGcVUkDFHaXmPNxDwF7l8TvkAN8VDQJHEEGJhALMYtNsQ+kt0gksSh4HZqj9n5hI=
......@@ -78,11 +83,6 @@ mail.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzd
mail.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICTOoGxsf23f6AjIHcQQuvbTOaeIt48Y0PiBj9qlJi1H
mail.archlinux.org ssh-rsa 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
# mailman3.archlinux.org
mailman3.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBE6mE3BtsReBFLagZwLn1Mo3N7RIqILAzFMOMUINFi41EEmGBNinjwOfX0qNx8AHo41g+M6Yu3CiDcC/BimCWto=
mailman3.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIxf1nIo36jwbX9nkuYIcbE6t/jVxY7Fnlf99u9MWSvt
mailman3.archlinux.org ssh-rsa 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
# man.archlinux.org
man.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBPhnsStoFw6rbVpE1S1vsXNk8de1SyMag1C+v0DWVSuNYzTylYg4322WbYzw45z2XhxrF6XmCSDMvgxvFwnfLQA=
man.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHzjkN+igIxSIv5N9+ANNoo6knPa51Tj5TAXs4EQ8lY2
......@@ -168,11 +168,6 @@ state.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
state.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFbZyVxaIdyd5f/dhPN7qGBnOSpLCYzoEqAKuakhi5ou
state.archlinux.org ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoH0lD8Je2KUktA0RWREiN9v2oIpl/kTZfXZw7LhBaJLdZorqGLI/Nu0Kzb+7Wp0RvcNi5eOpLtFctAwIEs2nEvkPHmKH70KoMBiNNzMWHK6IwTH0EdyYQzjOm4E7qWtbIdK6vSUqtLwgkfaUJ+EokJu51632hmTE2Bk0I12K93hjODmZnM7GhGmSx6h+3KrYfkCz4a2PXVpTptvTTl5t4SkFQMdioQ6k+1m2itjhhEujkewl4N6rar6jB6b4yGHlPZN5Y3lmYaQhraZwen6kuPHfjuMjtkf6lR0cqoK7FvwwrkiXcuGqS8xcVYmRsqRQdXZzLORcMSW4wjlizwQCd
# svn2gittest.archlinux.org
svn2gittest.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBPUurgjvGKpn7RCQwlSicMzwLowQ4M0Gtf60GE0Rl5nN2XUGe5lDl/A0bUi16dHCPEUbQWlmBxNBNoa0r4bwo6k=
svn2gittest.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFgvu1kXUUucO0ss+A+cDR1dsn71N77T9U/wWtcf+1w5
svn2gittest.archlinux.org ssh-rsa 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
# wiki.archlinux.org
wiki.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFtDdXEOfPTQfdsZGHIHRtYZaXZLV6lFddU0LkzyxlsYhHf84sWDSMKrQcJn6ywBInh00K8BE90N6H+mOgiLaeY=
wiki.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILFxxvRi7khrt6mUQGiXX35O1MBrrDeEmvaAnWo9ql/7
......
$ANSIBLE_VAULT;1.1;AES256
33663534393934353761333131636338343835616465386562393436663463343566376536303962
3463363464623530653630383464326232303565333039320a386364623664613931636531336233
34366536623139613733626539306462366139356562393166346234343261306631333763396462
3735643430396562650a646463303232633039313037346238636239616461373337656563393239
62386464396237303634336661363135333464363135343234626234336432333963666136346633
66636633633237383937393431326639623938356133323566663562653964613564343231323939
38336537656532353163366439393366373264366363303730663139383436356335613462653234
64313365643833333739
---
filesystem: btrfs
ipv4_address: 95.217.236.249
......@@ -46,6 +46,7 @@ wiki.archlinux.org
patchwork.archlinux.org
security.archlinux.org
md.archlinux.org
lists.archlinux.org
[borg_hosts]
prio.ch-s012.rsync.net
......@@ -144,6 +145,7 @@ runner1.archlinux.org
md.archlinux.org
man.archlinux.org
dashboards.archlinux.org
lists.archlinux.org
[kape_servers]
asia.mirror.pkgbuild.com
......
- name: setup mailman server
hosts: lists.archlinux.org
remote_user: root
roles:
- { role: common }
- { role: firewalld }
- { role: tools }
- { role: sshd }
- { role: root_ssh }
- { role: hardening }
- { role: borg_client, tags: ["borg"], when: "'borg_clients' in group_names" }
- { role: prometheus_exporters }
- { role: promtail }
- { role: certbot }
- { role: nginx }
- { role: fail2ban }
- { role: rspamd, rspamd_dkim_domain: lists.archlinux.org, rspamd_dkim_use_esld: false, tags: ["mail"] }
- { role: unbound, unbound_port: 5353, tags: ["mail"] }
- { role: uwsgi }
- { role: mailman }
......@@ -30,6 +30,3 @@
- { role: mariadb, mariadb_query_cache_type: '0', mariadb_innodb_file_per_table: true }
- { role: prometheus_exporters }
- { role: promtail }
# luna is hosting mailman lists; this postfix role does not cater to this yet
# TODO: make postfix role handle mailman config?
# - { role: postfix, tags: ["postfix"], postfix_relayhost: "mail.archlinux.org" }
......@@ -12,7 +12,7 @@
- { role: mta_sts }
- { role: postfix, postfix_server: true, postfix_smtpd_public: true, tags: ['mail'] }
- { role: dovecot }
- { role: rspamd, tags: ["mail"] }
- { role: rspamd, rspamd_dkim_domain: archlinux.org, tags: ["mail"] }
- { role: unbound, unbound_port: 5353, tags: ["mail"] }
- { role: postfwd, tags: ['mail'] }
- { role: archusers }
......
lists_domain: lists.archlinux.org
[uwsgi]
plugins = cgi
socket = /run/uwsgi/%n.sock
chmod-socket = 770
threads = 2
cgi = /=/usr/lib/mailman/cgi-bin/
cgi-index = listinfo
uid = mailman
gid = http
# We don't have a Junk folder for mailman so reject mails which are probably spam
/^X-Spam: Yes$/ REJECT Your message has been rejected by Rspamd
---
- name: reload mailman
service: name=mailman state=reloaded
- name: reload postfix
service: name=postfix state=reloaded
---
- name: create ssl cert
include_role:
name: certificate
vars:
domains: ["{{ lists_domain }}"]
- name: install mailman, uwsgi-plugin-cgi and postfx
pacman: name=mailman,uwsgi-plugin-cgi,postfix,postfix-pcre state=present
- name: install mailman configuration
template: src=mm_cfg.py.j2 dest=/etc/mailman/mm_cfg.py follow=yes owner=root group=root mode=0644
notify: reload mailman
- name: install postfix configuration
template: src=main.cf.j2 dest=/etc/postfix/main.cf owner=root group=root mode=0644
notify: reload postfix
- name: install postfix maps
copy: src={{ item }} dest=/etc/postfix/ owner=root group=root mode=0644
loop:
- milter_header_checks
- name: open firewall holes for postfix
ansible.posix.firewalld: service=smtp permanent=true state=enabled immediate=yes
when: configure_firewall
tags:
- firewall
- name: create mailman list
command: /usr/lib/mailman/bin/newlist -a mailman root@{{ lists_domain }} meG0n5Wq6dEWCA6s
args:
creates: /var/lib/mailman/lists/mailman
- name: configure mailman uwsgi service
copy: src=mailman.ini dest=/etc/uwsgi/vassals/ owner=mailman group=http mode=0644
- name: make nginx log dir
file: path=/var/log/nginx/{{ lists_domain }} state=directory owner=root group=root mode=0755
- name: set up nginx
template: src=nginx.d.conf.j2 dest="/etc/nginx/nginx.d/mailman.conf" owner=root group=root mode=644
notify: reload nginx
tags: ['nginx']
- name: start and enable postfix
systemd: name=postfix.service enabled=yes daemon_reload=yes state=started
- name: start and enable mailman{.service,-*.timer}
systemd: name={{ item }} enabled=yes daemon_reload=yes state=started
loop:
- mailman.service
- mailman-senddigests.timer
- mailman-nightlygzip.timer
- mailman-mailpasswds.timer
- mailman-gatenews.timer
- mailman-disabled.timer
- mailman-cullbadshunt.timer
- mailman-checkdbs.timer
#
# {{ansible_managed}}
#
compatibility_level = 3.6
biff = no
smtputf8_enable = no
smtpd_tls_cert_file = /etc/letsencrypt/live/{{ lists_domain }}/fullchain.pem
smtpd_tls_key_file = /etc/letsencrypt/live/{{ lists_domain }}/privkey.pem
smtpd_tls_loglevel = 1
smtpd_tls_security_level = may
smtp_tls_loglevel = 1
smtp_tls_security_level = may
mydomain = {{ lists_domain }}
myorigin = {{ lists_domain }}
mydestination = {{ lists_domain }}
# fatal: configuration error: mailbox_size_limit is smaller than message_size_limit
message_size_limit = 104857600
mailbox_size_limit = $message_size_limit
recipient_delimiter = +
disable_vrfy_command = yes
strict_rfc821_envelopes = yes
# enable for testing new config
soft_bounce = no
debug_peer_list =
smtpd_relay_restrictions =
permit_mynetworks
permit_sasl_authenticated
reject_unauth_destination
smtpd_reject_footer = For assistance contact <postmaster@archlinux.org>. Please provide the following information in your problem report: time ($localtime) and client ($client_address).
# rspamd
smtpd_milters = inet:localhost:11332
non_smtpd_milters = $smtpd_milters
alias_maps = hash:/var/lib/mailman/data/aliases
alias_database = $alias_maps
virtual_alias_maps = hash:/var/lib/mailman/data/virtual-mailman
milter_header_checks = pcre:/etc/postfix/milter_header_checks
delay_warning_time = 4h
# -*- python -*-
# Copyright (C) 1998-2018 by the Free Software Foundation, Inc.
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
"""This module contains your site-specific settings.
From a brand new distribution it should be copied to mm_cfg.py. If you
already have an mm_cfg.py, be careful to add in only the new settings you
want. Mailman's installation procedure will never overwrite your mm_cfg.py
file.
The complete set of distributed defaults, with documentation, are in the file
Defaults.py. In mm_cfg.py, override only those you want to change, after the
from Defaults import *
line (see below).
Note that these are just default settings; many can be overridden via the
administrator and user interfaces on a per-list or per-user basis.
Also note that many of these settings will not be effective until Mailman
is restarted. Thus, you should always restart Mailman after changing this
file.
Further, settings which relate to a list's host_name and web_page_url only
affect lists created after the change. For existing lists, see the FAQ at
<http://wiki.list.org/x/mIA9>.
"""
###############################################
# Here's where we get the distributed defaults.
from Defaults import *
##################################################
# Put YOUR site-specific settings below this line.
# Please see: http://wiki.list.org/x/mIA9 if you change this
DEFAULT_URL_HOST = '{{ lists_domain }}'
DEFAULT_EMAIL_HOST = '{{ lists_domain }}'
MTA = 'Postfix'
VIRTUAL_HOSTS.clear()
add_virtualhost(DEFAULT_URL_HOST, DEFAULT_EMAIL_HOST)
POSTFIX_STYLE_VIRTUAL_DOMAINS = ['{{ lists_domain }}']
DEFAULT_URL_PATTERN = 'https://%s/'
PUBLIC_ARCHIVE_URL = 'https://%(hostname)s/pipermail/%(listname)s'
# bot protection
SUBSCRIBE_FORM_SECRET = '{{ vault_mailman_subscribe_form_secret }}'
VIRTUAL_HOST_OVERVIEW = Off
DEFAULT_SEND_REMINDERS = 0
PUBLIC_MBOX = Yes
DEFAULT_MSG_HEADER = ""
DEFAULT_MSG_FOOTER = ""
#DEFAULT_DMARC_MODERATION_ACTION = 1
REMOVE_DKIM_HEADERS = 1
server {
listen 80;
listen [::]:80;
server_name {{ lists_domain }};
access_log /var/log/nginx/{{ lists_domain }}/access.log main;
access_log /var/log/nginx/{{ lists_domain }}/access.log.json json_main;
error_log /var/log/nginx/{{ lists_domain }}/error.log;
include snippets/letsencrypt.conf;
location / {
access_log off;
return 301 https://$server_name$request_uri;
}
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name {{ lists_domain }};
access_log /var/log/nginx/{{ lists_domain }}/access.log main;
access_log /var/log/nginx/{{ lists_domain }}/access.log.json json_main;
error_log /var/log/nginx/{{ lists_domain }}/error.log;
ssl_certificate /etc/letsencrypt/live/{{ lists_domain }}/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/{{ lists_domain }}/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/{{ lists_domain }}/chain.pem;
# redirect old urls
location /mailman {
rewrite ^/mailman/(.*) /$1 permanent;
}
location /icons {
alias /usr/lib/mailman/icons;
}
location /pipermail {
alias /var/lib/mailman/archives/public;
autoindex on;
}
location / {
root /usr/lib/mailman/cgi-bin/;
index listinfo;
include uwsgi_params;
uwsgi_modifier1 9;
uwsgi_pass unix:/run/uwsgi/mailman.sock;
}
}
......@@ -6,6 +6,6 @@ mta_sts:
- aur.archlinux.org
- master-key.archlinux.org
- mx:
- luna.archlinux.org
- lists.archlinux.org
domains:
- lists.archlinux.org
#mailman@archlinux.org #mailman@lists.archlinux.org
#mailman-admin@archlinux.org #mailman-admin@lists.archlinux.org
#mailman-bounces@archlinux.org #mailman-bounces@lists.archlinux.org
#mailman-confirm@archlinux.org #mailman-confirm@lists.archlinux.org
#mailman-join@archlinux.org #mailman-join@lists.archlinux.org
#mailman-leave@archlinux.org #mailman-leave@lists.archlinux.org
#mailman-owner@archlinux.org #mailman-owner@lists.archlinux.org
#mailman-request@archlinux.org #mailman-request@lists.archlinux.org
#mailman-subscribe@archlinux.org #mailman-subscribe@lists.archlinux.org
#mailman-unsubscribe@archlinux.org #mailman-unsubscribe@lists.archlinux.org
arch-events@archlinux.org arch-events@lists.archlinux.org
arch-events-admin@archlinux.org arch-events-admin@lists.archlinux.org
arch-events-bounces@archlinux.org arch-events-bounces@lists.archlinux.org
arch-events-confirm@archlinux.org arch-events-confirm@lists.archlinux.org
arch-events-join@archlinux.org arch-events-join@lists.archlinux.org
arch-events-leave@archlinux.org arch-events-leave@lists.archlinux.org
arch-events-owner@archlinux.org arch-events-owner@lists.archlinux.org
arch-events-request@archlinux.org arch-events-request@lists.archlinux.org
arch-events-subscribe@archlinux.org arch-events-subscribe@lists.archlinux.org
arch-events-unsubscribe@archlinux.org arch-events-unsubscribe@lists.archlinux.org
arch-general@archlinux.org arch-general@lists.archlinux.org
arch-general-admin@archlinux.org arch-general-admin@lists.archlinux.org
arch-general-bounces@archlinux.org arch-general-bounces@lists.archlinux.org
arch-general-confirm@archlinux.org arch-general-confirm@lists.archlinux.org
arch-general-join@archlinux.org arch-general-join@lists.archlinux.org
arch-general-leave@archlinux.org arch-general-leave@lists.archlinux.org
arch-general-owner@archlinux.org arch-general-owner@lists.archlinux.org
arch-general-request@archlinux.org arch-general-request@lists.archlinux.org
arch-general-subscribe@archlinux.org arch-general-subscribe@lists.archlinux.org
arch-general-unsubscribe@archlinux.org arch-general-unsubscribe@lists.archlinux.org
aur-dev@archlinux.org aur-dev@lists.archlinux.org
aur-dev-admin@archlinux.org aur-dev-admin@lists.archlinux.org
aur-dev-bounces@archlinux.org aur-dev-bounces@lists.archlinux.org
aur-dev-confirm@archlinux.org aur-dev-confirm@lists.archlinux.org
aur-dev-join@archlinux.org aur-dev-join@lists.archlinux.org
aur-dev-leave@archlinux.org aur-dev-leave@lists.archlinux.org
aur-dev-owner@archlinux.org aur-dev-owner@lists.archlinux.org
aur-dev-request@archlinux.org aur-dev-request@lists.archlinux.org
aur-dev-subscribe@archlinux.org aur-dev-subscribe@lists.archlinux.org
aur-dev-unsubscribe@archlinux.org aur-dev-unsubscribe@lists.archlinux.org
aur-general@archlinux.org aur-general@lists.archlinux.org
aur-general-admin@archlinux.org aur-general-admin@lists.archlinux.org
aur-general-bounces@archlinux.org aur-general-bounces@lists.archlinux.org
aur-general-confirm@archlinux.org aur-general-confirm@lists.archlinux.org
aur-general-join@archlinux.org aur-general-join@lists.archlinux.org
aur-general-leave@archlinux.org aur-general-leave@lists.archlinux.org
aur-general-owner@archlinux.org aur-general-owner@lists.archlinux.org
aur-general-request@archlinux.org aur-general-request@lists.archlinux.org
aur-general-subscribe@archlinux.org aur-general-subscribe@lists.archlinux.org
aur-general-unsubscribe@archlinux.org aur-general-unsubscribe@lists.archlinux.org
pacman-dev@archlinux.org pacman-dev@lists.archlinux.org
pacman-dev-admin@archlinux.org pacman-dev-admin@lists.archlinux.org
pacman-dev-bounces@archlinux.org pacman-dev-bounces@lists.archlinux.org
pacman-dev-confirm@archlinux.org pacman-dev-confirm@lists.archlinux.org
pacman-dev-join@archlinux.org pacman-dev-join@lists.archlinux.org
pacman-dev-leave@archlinux.org pacman-dev-leave@lists.archlinux.org
pacman-dev-owner@archlinux.org pacman-dev-owner@lists.archlinux.org
pacman-dev-request@archlinux.org pacman-dev-request@lists.archlinux.org
pacman-dev-subscribe@archlinux.org pacman-dev-subscribe@lists.archlinux.org
pacman-dev-unsubscribe@archlinux.org pacman-dev-unsubscribe@lists.archlinux.org
arch-releng@archlinux.org arch-releng@lists.archlinux.org
arch-releng-admin@archlinux.org arch-releng-admin@lists.archlinux.org
arch-releng-bounces@archlinux.org arch-releng-bounces@lists.archlinux.org
arch-releng-confirm@archlinux.org arch-releng-confirm@lists.archlinux.org
arch-releng-join@archlinux.org arch-releng-join@lists.archlinux.org
arch-releng-leave@archlinux.org arch-releng-leave@lists.archlinux.org
arch-releng-owner@archlinux.org arch-releng-owner@lists.archlinux.org
arch-releng-request@archlinux.org arch-releng-request@lists.archlinux.org
arch-releng-subscribe@archlinux.org arch-releng-subscribe@lists.archlinux.org
arch-releng-unsubscribe@archlinux.org arch-releng-unsubscribe@lists.archlinux.org
arch-announce@archlinux.org arch-announce@lists.archlinux.org
arch-announce-admin@archlinux.org arch-announce-admin@lists.archlinux.org
arch-announce-bounces@archlinux.org arch-announce-bounces@lists.archlinux.org
arch-announce-confirm@archlinux.org arch-announce-confirm@lists.archlinux.org
arch-announce-join@archlinux.org arch-announce-join@lists.archlinux.org
arch-announce-leave@archlinux.org arch-announce-leave@lists.archlinux.org
arch-announce-owner@archlinux.org arch-announce-owner@lists.archlinux.org
arch-announce-request@archlinux.org arch-announce-request@lists.archlinux.org
arch-announce-subscribe@archlinux.org arch-announce-subscribe@lists.archlinux.org
arch-announce-unsubscribe@archlinux.org arch-announce-unsubscribe@lists.archlinux.org
arch-dev-public@archlinux.org arch-dev-public@lists.archlinux.org
arch-dev-public-admin@archlinux.org arch-dev-public-admin@lists.archlinux.org
arch-dev-public-bounces@archlinux.org arch-dev-public-bounces@lists.archlinux.org
arch-dev-public-confirm@archlinux.org arch-dev-public-confirm@lists.archlinux.org
arch-dev-public-join@archlinux.org arch-dev-public-join@lists.archlinux.org
arch-dev-public-leave@archlinux.org arch-dev-public-leave@lists.archlinux.org
arch-dev-public-owner@archlinux.org arch-dev-public-owner@lists.archlinux.org
arch-dev-public-request@archlinux.org arch-dev-public-request@lists.archlinux.org
arch-dev-public-subscribe@archlinux.org arch-dev-public-subscribe@lists.archlinux.org
arch-dev-public-unsubscribe@archlinux.org arch-dev-public-unsubscribe@lists.archlinux.org
arch-ports@archlinux.org arch-ports@lists.archlinux.org
arch-ports-admin@archlinux.org arch-ports-admin@lists.archlinux.org
arch-ports-bounces@archlinux.org arch-ports-bounces@lists.archlinux.org
arch-ports-confirm@archlinux.org arch-ports-confirm@lists.archlinux.org
arch-ports-join@archlinux.org arch-ports-join@lists.archlinux.org
arch-ports-leave@archlinux.org arch-ports-leave@lists.archlinux.org
arch-ports-owner@archlinux.org arch-ports-owner@lists.archlinux.org
arch-ports-request@archlinux.org arch-ports-request@lists.archlinux.org
arch-ports-subscribe@archlinux.org arch-ports-subscribe@lists.archlinux.org
arch-ports-unsubscribe@archlinux.org arch-ports-unsubscribe@lists.archlinux.org
arch-commits@archlinux.org arch-commits@lists.archlinux.org
arch-commits-admin@archlinux.org arch-commits-admin@lists.archlinux.org
arch-commits-bounces@archlinux.org arch-commits-bounces@lists.archlinux.org
arch-commits-confirm@archlinux.org arch-commits-confirm@lists.archlinux.org
arch-commits-join@archlinux.org arch-commits-join@lists.archlinux.org
arch-commits-leave@archlinux.org arch-commits-leave@lists.archlinux.org
arch-commits-owner@archlinux.org arch-commits-owner@lists.archlinux.org
arch-commits-request@archlinux.org arch-commits-request@lists.archlinux.org
arch-commits-subscribe@archlinux.org arch-commits-subscribe@lists.archlinux.org
arch-commits-unsubscribe@archlinux.org arch-commits-unsubscribe@lists.archlinux.org
arch-dev@archlinux.org arch-dev@lists.archlinux.org
arch-dev-admin@archlinux.org arch-dev-admin@lists.archlinux.org
arch-dev-bounces@archlinux.org arch-dev-bounces@lists.archlinux.org
arch-dev-confirm@archlinux.org arch-dev-confirm@lists.archlinux.org
arch-dev-join@archlinux.org arch-dev-join@lists.archlinux.org
arch-dev-leave@archlinux.org arch-dev-leave@lists.archlinux.org
arch-dev-owner@archlinux.org arch-dev-owner@lists.archlinux.org
arch-dev-request@archlinux.org arch-dev-request@lists.archlinux.org
arch-dev-subscribe@archlinux.org arch-dev-subscribe@lists.archlinux.org
arch-dev-unsubscribe@archlinux.org arch-dev-unsubscribe@lists.archlinux.org
arch-tu@archlinux.org arch-tu@lists.archlinux.org
arch-tu-admin@archlinux.org arch-tu-admin@lists.archlinux.org
arch-tu-bounces@archlinux.org arch-tu-bounces@lists.archlinux.org
arch-tu-confirm@archlinux.org arch-tu-confirm@lists.archlinux.org
arch-tu-join@archlinux.org arch-tu-join@lists.archlinux.org
arch-tu-leave@archlinux.org arch-tu-leave@lists.archlinux.org
arch-tu-owner@archlinux.org arch-tu-owner@lists.archlinux.org
arch-tu-request@archlinux.org arch-tu-request@lists.archlinux.org
arch-tu-subscribe@archlinux.org arch-tu-subscribe@lists.archlinux.org
arch-tu-unsubscribe@archlinux.org arch-tu-unsubscribe@lists.archlinux.org
repoman@archlinux.org repoman@lists.archlinux.org
repoman-admin@archlinux.org repoman-admin@lists.archlinux.org
repoman-bounces@archlinux.org repoman-bounces@lists.archlinux.org