Commit Graph

120 Commits

Author SHA1 Message Date
Jim Hague
8671b42c97 Convert backups to restic. 2025-08-03 23:10:06 +01:00
Jim Hague
b1be8d26d2 Add secrets backup script. 2025-07-29 21:58:39 +01:00
Jim Hague
c396f97822 Add backup for social. 2025-07-28 11:52:19 +01:00
Jim Hague
d28734d3b9 Apply Snac2 theme. 2025-07-28 09:45:18 +01:00
Jim Hague
1dcb206a76 Correct Snac2 proxy setup. 2025-07-28 09:44:22 +01:00
Jim Hague
94b7725470 Social now using PROXY protocol. 2025-07-26 18:17:35 +01:00
Jim Hague
5b59b1e5de Add social.lunch.org.uk with snac2. 2025-07-25 15:45:24 +01:00
Jim Hague
a20ba37a53 Apache mod_evasive doesn't work with proxies. Remove. 2025-07-25 10:18:02 +01:00
Jim Hague
4b3b14f218 Tweaks for first social install. 2025-07-20 18:40:35 +01:00
Jim Hague
af52c82122 Add social host.
It's a container, so firewall and time are handled by the host.
Also it's Trixie, so no need for Bookworm backports.
2025-07-13 12:54:18 +00:00
Jim Hague
991efa35dc Parameterise hostnames in exim4 satellite setup. 2025-07-13 12:53:33 +00:00
Jim Hague
b7b8461619 Ensure cron is installed for collecting certificates. 2025-07-11 16:37:55 +00:00
Jim Hague
9724bc97fe Add subdomain social.lunch.org.uk. 2025-07-08 13:44:57 +01:00
Jim Hague
a759b44350 Create the gpodder data directory.
The gpodder source doesn't have it but it must exist.
2025-05-13 09:50:38 +01:00
Jim Hague
81f76d1c7a Update gpodder version. 2025-05-13 09:18:18 +01:00
Jim Hague
1705f89046 dmarcts-report-parser needs a path when run from run-dmarcts. 2025-03-31 10:22:17 +01:00
Jim Hague
517d210336 Add mod_evasive to Apache to try and combat bad actors. 2025-03-28 20:13:51 +00:00
Jim Hague
1448e455b2 Stop public signup for gitea.
Bastard robots created over 1000 accounts, now deleted.
2025-03-28 20:13:09 +00:00
Jim Hague
a77e1a9d28 Allow & in outgoing email local parts.
Thanks, Oxfordshire Homes for Ukraine.
2024-12-10 17:01:23 +00:00
Jim Hague
e32d194cab To receive email, dmarc cannot be a system account. 2024-08-24 09:42:04 +01:00
Jim Hague
4379bceed8 Enable dmarc.lunch.org.uk website. 2024-08-23 15:20:13 +01:00
Jim Hague
b0432f257f Add subdomain dmarc.lunch.org.uk. 2024-08-22 15:49:33 +01:00
Jim Hague
e7b7f7ba4a Initial add of dmarcts-report-viewer. 2024-08-22 15:43:37 +01:00
Jim Hague
49bc737669 Run DMARC report update every day. 2024-08-22 15:22:59 +01:00
Jim Hague
b0aa95a3a9 DMARC report gen needs IMAP hostname matching certificate. 2024-08-22 14:37:38 +01:00
Jim Hague
3c54552109 Move DMARC report config into ~dmarc. Expected in current dir. 2024-08-22 14:27:30 +01:00
Jim Hague
f97a72fb96 Correct source of DMARC reports config. 2024-08-22 14:11:54 +01:00
Jim Hague
bb0c4c9190 Ensure unattended-upgrades is installed. 2024-08-22 14:08:42 +01:00
Jim Hague
57e1024645 Correct path to DMARC report config. 2024-08-22 13:37:05 +01:00
Jim Hague
02ff612b94 Scabbers now needs its own database for DMARC reports. 2024-08-22 13:35:31 +01:00
Jim Hague
ac559873c3 Add DMARC report parser configuration. 2024-08-22 13:26:37 +01:00
Jim Hague
d9b0808871 Update MySQL Python interface for salt minion.
The Salt packaging recently changed to their own Python, away from
using the system Python.
2024-08-22 13:21:19 +01:00
Jim Hague
0d2185a673 Initial stage of dmarcts support. 2024-08-22 12:53:55 +01:00
Jim Hague
27e8fdd5fc Add hedwig host cert for satellite email use. 2024-07-25 10:31:05 +01:00
Jim Hague
3c10b09ada Set /etc/mailname on all systems. 2024-07-25 10:13:34 +01:00
Jim Hague
20e4355aed Add satellite email setup for Hedwig. 2024-07-25 09:51:25 +01:00
Jim Hague
96e556e10b Fix typo. 2024-07-14 16:10:37 +01:00
Jim Hague
2e3ebbcd03 Use php-fpm for PHP access. 2024-07-14 15:08:31 +01:00
Jim Hague
3000db5ed6 Fix up Apache MPM module selection. 2024-07-13 13:12:08 +01:00
Jim Hague
844d6fbe88 Ensure we're using mpm_event, not mpm_prefork.
We'll end up with prefork if we use mod_php, so... don't.
2024-07-13 13:04:56 +01:00
Jim Hague
59fad00c36 Leave details of PHP handling to outside gpodder.
We'll use plain CGI for now, with the option to move to php-fpm in
the future.
2024-07-13 13:04:00 +01:00
Jim Hague
8daf3c4d06 Add multi-domain to sending SMTP transport.
It's not important because we are sending via the proxies, but in case
we ever move to direct sending, Google insists on this.
2024-06-24 10:16:42 +01:00
Jim Hague
8d1523d232 Gitea rewrites app.ini and reformats it, so match what it does. 2024-06-24 10:16:11 +01:00
Jim Hague
7b679e207d Ensure mailman3-web gets restarted on config change. 2024-06-17 13:24:08 +01:00
Jim Hague
f05e731a7a Correct list of IP addresses that are sources for archive. 2024-06-15 21:23:54 +01:00
Jim Hague
d0bcf2da6c Correct Postorius and Hyperkitty URLs in config. 2024-06-12 12:51:15 +01:00
Jim Hague
c812c8d4a5 Ensure HyperKitty is enabled. 2024-06-07 18:37:44 +01:00
Jim Hague
968796fe17 Update config to full scabbers Mailman config. 2024-06-07 17:10:55 +01:00
Jim Hague
e7d98ef1ec Add DKIM signing to SRS smarthost transport. 2024-05-20 16:18:44 +01:00
Jim Hague
b6c2186adc /var/lib/gitea is created by the gitea package. 2024-05-12 12:06:12 +01:00