nudeldudel
8605ceba5e
Update master.cf.j2
...
Add submission-header-cleanup to reduce the meta-data
2024-01-05 12:13:31 +01:00
link2xt
70b0e9d5e5
postfix: increase compatibility_level to 3.6
2023-12-27 00:29:12 +01:00
missytake
fdd533aa3b
acmetool: stop nginx so acmetool-redirector can start
2023-12-25 23:45:40 +01:00
link2xt
a44ed0aeb3
Use dig +short option to simplify DNS parsing
...
Without this option parsing of answer was flaky
as for long records like
_submission._tcp.nine.testrun.org.
dig printed the result with a space rather
than tab as a separator and .split("\t") did not work.
This change makes the `dig` command print the answer
in the form we need so there is no need for complex parsing
other than taking the first line.
`-r` option is added to make sure options are not changed by .digrc
in the root home directory.
2023-12-22 21:49:12 +00:00
link2xt
f5bfa6bd56
test: test scanning QR code
2023-12-21 22:22:38 +00:00
link2xt
81a6f8808b
fix: escape login and password when passed from dovecot to doveauth
...
This should allow to use / in the password
2023-12-21 22:22:38 +00:00
missytake
46d5dbb07d
DNS: nicer output for reverse DNS/PTR records. fixes #143
2023-12-20 19:26:50 +01:00
missytake
d2e0d1fecc
DNS: flush_zone before validating DNS entries. fixes #140
2023-12-20 19:26:50 +01:00
missytake
d333cfdd5a
lint: fix 1 issue
2023-12-20 19:26:50 +01:00
missytake
40a3a2cc86
tests: make test init work with reachable chatmail_domain
2023-12-20 19:26:50 +01:00
missytake
fe978a1971
DNS: increase SSH command's timeout to 10 seconds (the default)
2023-12-20 19:26:50 +01:00
missytake
b426c2e7ff
DNS: error if can't connect with SSH. fixes #144
2023-12-20 19:26:50 +01:00
missytake
b626464453
cmdeploy: fail init and run if SSH doesn't connect
2023-12-20 19:26:50 +01:00
missytake
76c3316f02
cmdeploy init: make output green if DNS is correct
2023-12-19 19:39:49 +01:00
missytake
a6a9406228
DNS: making CLI output slightly prettier
2023-12-19 19:39:49 +01:00
missytake
7921f5dd0b
DNS: fix some crashes in cmdeploy dns
2023-12-19 19:39:49 +01:00
missytake
39fc9d628f
cmdeploy: only run cmdeploy dns after cmdeploy run
2023-12-19 19:39:49 +01:00
link2xt
85a9183b61
Do not call show_dns with run args
2023-12-19 19:39:49 +01:00
missytake
36a4381484
DNS: use local dig if ssh fails
2023-12-19 19:39:49 +01:00
missytake
5ff98a571c
DNS: commit hpk's suggestion
2023-12-19 19:39:49 +01:00
missytake
0a91aeb4a3
cmdeploy: simplify check_necessary_dns output
2023-12-19 19:39:49 +01:00
missytake
c38f1d7e54
DNS: fix reverse DNS checking
2023-12-19 19:39:49 +01:00
missytake
03aab4043c
DNS: fix CNAME resolving, don't print ssh commands for DNS requests
2023-12-19 19:39:49 +01:00
missytake
146def2f06
cmdeploy: show DNS info at begin and end of cmdeploy run
2023-12-19 19:39:49 +01:00
missytake
d642224a73
DNS: flush cache in the beginning
2023-12-19 19:39:49 +01:00
missytake
0238437ce7
DNS: get DNS records with server-side dig
2023-12-19 19:39:49 +01:00
missytake
7ed59ea8bc
DNS: move getting IPs to dns.py
2023-12-19 19:39:49 +01:00
missytake
49d0a0bbb0
DNS: fix parsing
2023-12-19 19:39:49 +01:00
missytake
330a034329
DNS: ignore DNS resolvers which don't give us JSON
2023-12-19 19:39:49 +01:00
missytake
aee18215fc
DNS: Also check A and CNAME entries
2023-12-19 19:39:49 +01:00
missytake
336f87770d
cmdeploy: write --zonefile to file
2023-12-19 19:39:49 +01:00
missytake
4199e04ab3
cmdeploy: fixing DNS CLI output
2023-12-19 19:39:49 +01:00
missytake
d2fe417715
DNS: try other resolvers if the first doesn't have it
2023-12-19 19:39:49 +01:00
missytake
2b731bf909
DNS: also add IPv4 entry to zonefile
2023-12-19 19:39:49 +01:00
missytake
2669babb53
DNS: added checks for PTR records
2023-12-19 19:39:49 +01:00
missytake
fe675a9a72
cmdeploy: dns --zonefile subcommand to just print the zonefile
2023-12-19 19:39:49 +01:00
missytake
79f766b28e
tests: mark test as xfail until we can test for CLI output
2023-12-19 19:39:49 +01:00
missytake
0eeb692c4b
DNS: re-use HTTP session to reduce query time by 7 seconds
2023-12-19 19:39:49 +01:00
missytake
6c401173db
DNS: also generate AAAA entry
2023-12-19 19:39:49 +01:00
missytake
b474b86e7b
cmdeploy: only output DNS entries which are not correct yet
2023-12-19 19:39:49 +01:00
missytake
6a9beb8ff7
DNS: ensure mta-sts.@ is also pointing to @
2023-12-19 19:39:49 +01:00
missytake
d0f5d08443
cmdeploy run: don't run if crucial DNS entries are missing
2023-12-19 19:39:49 +01:00
missytake
49848ec01e
cmdeploy init: show DNS entries required for deployment if not set
2023-12-19 19:39:49 +01:00
missytake
0ffe4d4996
Revert "pyinfra: only install unbound-anchor on Debian systems"
...
This reverts commit c1d3de926ee561fd92b2696b45909b21b1a84a9c.
2023-12-19 17:45:00 +01:00
missytake
7a2a889585
pyinfra: only install unbound-anchor on Debian systems
2023-12-19 17:45:00 +01:00
missytake
1e4b776de5
unbound: generate root.key manually if it doesn't exist
2023-12-19 17:45:00 +01:00
link2xt
485bbb9cbd
Let acmetool manage port 80
...
This avoids circular dependency with nginx.
nginx needs a certificate to start
and getting a certificate requires someone
listening on port 80.
2023-12-18 16:36:36 +01:00
missytake
a1355c10ca
fix: check config failed for non-testrun domains
2023-12-15 20:25:58 +01:00
link2xt
92ca3283fd
Add metrics
2023-12-14 22:22:10 +00:00
missytake
cea1f3f5f7
dovecot: remove -depth from expunge find commands
2023-12-14 19:11:43 +01:00
