Commit Graph

17 Commits

Author SHA1 Message Date
Jim Hague b0432f257f Add subdomain dmarc.lunch.org.uk. 2024-08-22 15:49:33 +01:00
Jim Hague 27e8fdd5fc Add hedwig host cert for satellite email use. 2024-07-25 10:31:05 +01:00
Jim Hague 18a4347a8d Fix dehydrated-mythic-dns01 install. 2024-05-11 09:27:31 +01:00
Jim Hague b423b7c259 Add imap/smtp.cryhavoc.org.uk to the domains known to deyhdrated. 2024-03-09 17:20:20 +00:00
Jim Hague 5a222dce42 Add cryhavoc.org.uk hosts to mail certificate. 2024-03-09 17:05:13 +00:00
Jim Hague 39ab8ea933 Add micro gpodder service at gpodder.lunch.org.uk. 2023-12-07 15:02:28 +00:00
Jim Hague 46549c6863 Ensure new certificates are readably by ssl-cert group members. 2023-09-06 14:22:51 +01:00
Jim Hague f6185d6443 Small certificate hook updates
1. Preserve mode, owndership, timestamps when copying certificates.
   Ownership is updated after copying.
2. Reload dovecot on mail.lunch.org.uk.
2023-08-06 11:07:16 +01:00
Jim Hague 3a790075ff Deploy dephydrated certs into /var/local/certificates.
This way we can ensure we get the ownership and permissions right.
Also explicitly restart exim on mail cert updates.
2023-07-10 17:54:59 +01:00
Jim Hague ffa92ca891 Set certificate ownership and add www-data to ssl-cert group.
ssl-cert has permissions to read certificates. No other regular user
does.
2023-05-24 15:30:46 +01:00
Jim Hague 53c53b17e7 Copy specific files in dehydrated to avoid copying the subrepo .git. 2023-05-24 15:30:46 +01:00
Jim Hague bba4cc40c2 Replace dehydrated-mythic-dns01 with git submodule. 2023-05-24 15:30:46 +01:00
Jim Hague 9f414d0180 Change webmail cert path to client path and add symlink on server.
So webmail can be moved between servers if necessary.
2023-05-24 15:30:46 +01:00
Jim Hague f18932407f Add Roundcube webmail. 2023-05-24 15:30:38 +01:00
Jim Hague 021d064552 Add mechanism for copying certificates to other servers. 2023-03-07 15:09:25 +00:00
Jim Hague e7c3209a8a Add Gitea to scabbers. 2023-02-27 18:02:28 +00:00
Jim Hague 061cf5bc6c Add certificate management via Mythic Beasts DNSAPI. 2023-02-20 15:50:20 +00:00