Project

General

Profile

Activity

From 2018-05-10 to 2018-06-08

2018-06-08

20:11 work
* nextcloud: upgraded 13.0.2->13.0.3 Marc Dequènes
20:02 Bug #550 (In Progress): Internet is slow (and probably ever was)
I plan to change ISP to try hosting Orfeo-NG (see #537), so let's see how it goes. The choice has been made and I now... Marc Dequènes
19:57 Enhancement #625 (In Progress): mail: setup multi-master sync
~3 days ago I finished building the stack on Toushirou and worked on this replication setup. After some initial diffi... Marc Dequènes
19:51 Bug #435: DSPAM has no future
The stack on Toushirou was done 3 days ago and works well.
Outgoing mails are also filtered so the dirty redirecti...
Marc Dequènes
19:47 Bug #595: Create missing systemd configuration for SYSV compatibility services
policyd-weight is no more so no need to continue working on this. Marc Dequènes
19:46 Bug #605 (Rejected): No mail since 2017-10-15 07:00:02
policyd-weight is not used anymore after switching to Rspamd (see #435) Marc Dequènes
09:23 Bug #629 (Rejected): Workaround for IMAP sync
IMAP sync is hindered by this bug: https://github.com/OfflineIMAP/offlineimap/issues/514
Unless there is a fix soo...
Marc Dequènes

2018-06-07

06:32 Revision efd4f1ce (duckcorp-infra): mail: deliver mail using Dovecot LMTP support and disengage D...
Marc Dequènes

2018-06-06

20:10 Revision 8fc53372 (duckcorp-infra): mail: add Dovecot replication with Toushirou
Marc Dequènes
20:10 Revision 3e664f4c (duckcorp-infra): dc-dovecot: add SIEVE to protocols
Marc Dequènes
20:10 Revision d38a9d33 (duckcorp-infra): fix Dovecot files permissions
thanks Pilou Marc Dequènes
20:10 Revision e2d75bbf (duckcorp-infra): mail: also scan outgoing mail using Rspamd
Marc Dequènes
20:10 Revision 2bf72045 (duckcorp-infra): dc-postfix: disengage MLs from DSPAM
Marc Dequènes
20:10 Revision 6cc96b74 (duckcorp-infra): mail: remove obsolete retraining addresses
Marc Dequènes
20:10 Revision 52a0e319 (duckcorp-infra): mail: update LDAP reference to the new spamfilter websites
Marc Dequènes
18:22 Revision 62fd10a7 (duckcorp-infra): mail: also scan outgoing mail using Rspamd
Marc Dequènes
18:22 Revision 232f5773 (duckcorp-infra): dc-postfix: disengage MLs from DSPAM
Marc Dequènes
18:22 Revision 992a9e85 (duckcorp-infra): mail: remove obsolete retraining addresses
Marc Dequènes
18:22 Revision 039f52f0 (duckcorp-infra): mail: update LDAP reference to the new spamfilter websites
Marc Dequènes
18:00 Revision d84d159b (duckcorp-infra): mail: retrain both Rspamd and DSPAM
Marc Dequènes
18:00 Revision 949d34be (duckcorp-infra): mail: add Rspamd on Toushirou
Marc Dequènes
18:00 Revision bff5a8b2 (duckcorp-infra): mail: Redis listen on ::1 too, so we can connect using localhost
Marc Dequènes
18:00 Revision 2324a57a (duckcorp-infra): mail: switch back to opportunistic DANE on our domains
Marc Dequènes
18:00 Revision b8ccab99 (duckcorp-infra): mail: add Dovecot replication with Toushirou
Marc Dequènes
18:00 Revision 67b8d6cd (duckcorp-infra): dc-dovecot: add SIEVE to protocols
Marc Dequènes
18:00 Revision f53628d8 (duckcorp-infra): fix Dovecot files permissions
thanks Pilou Marc Dequènes
18:00 Revision 8e231da8 (duckcorp-infra): mail: also scan outgoing mail using Rspamd
Marc Dequènes
18:00 Revision 71a0747a (duckcorp-infra): dc-postfix: disengage MLs from DSPAM
Marc Dequènes
18:00 Revision a5adac86 (duckcorp-infra): mail: remove obsolete retraining addresses
Marc Dequènes
17:08 Enhancement #614: new Toushirou: Install system disks
Thanks for the new disks Pilou :-)
It's a good thing we did because the need increased even more. The mails are go...
Marc Dequènes
15:03 Revision ef0dd654 (duckcorp-infra): mail: add Dovecot replication with Toushirou
Marc Dequènes
15:03 Revision 4e4b75ed (duckcorp-infra): dc-dovecot: add SIEVE to protocols
Marc Dequènes
15:03 Revision e9f1cc8d (duckcorp-infra): fix Dovecot files permissions
thanks Pilou Marc Dequènes
15:03 Revision a5c1c99f (duckcorp-infra): mail: also scan outgoing mail using Rspamd
Marc Dequènes
12:53 Revision ff00a9b1 (duckcorp-infra): fix Dovecot files permissions
thanks Pilou Marc Dequènes
12:18 Revision af8f67d8 (duckcorp-infra): mail: add Dovecot replication with Toushirou
Marc Dequènes
12:18 Revision d33ab79c (duckcorp-infra): dc-dovecot: add SIEVE to protocols
Marc Dequènes
06:47 Revision 1b2e40a7 (duckcorp-infra): dc-dovecot: add SIEVE to protocols
Marc Dequènes
05:50 Revision fa520440 (duckcorp-infra): mail: add Dovecot replication with Toushirou
Marc Dequènes
03:48 Revision 8aa3a2d4 (duckcorp-infra): mail: switch back to opportunistic DANE on our domains
Marc Dequènes
03:31 Revision 3c36c1b5 (duckcorp-infra): mail: Redis listen on ::1 too, so we can connect using localhost
Marc Dequènes
03:30 Revision ea433a07 (ansible-role-redis): Initial release
Marc Dequènes
03:30 Revision ebb4a8b2 (ansible-role-redis): add replication
Marc Dequènes
03:30 Revision 655e6a24 (ansible-role-redis): also bind on ::1 to be able to reply on 'localhost'
Marc Dequènes

2018-06-05

21:06 Revision c7bc5460 (duckcorp-infra): mail: add Rspamd on Toushirou
Marc Dequènes
21:06 Revision 65baf7c7 (duckcorp-infra): mail: Redis listen on ::1 too, so we can connect using localhost
Marc Dequènes
16:48 Revision 7533a270 (duckcorp-infra): mail: retrain both Rspamd and SPAM
Marc Dequènes
16:14 Bug #435: DSPAM has no future
I forgot to say I modified the training script to train both DSPAM and Rspamd, so we can later disengage DSPAM and se... Marc Dequènes
16:13 Bug #435: DSPAM has no future
Rspamd has been deployed with Ansible rules. So far it seems to work well and I've activated a few more features.
...
Marc Dequènes
14:33 Revision 02b6ddc7 (duckcorp-infra): mail: add Redis replication
Marc Dequènes
14:27 Revision 98da6c91 (duckcorp-infra): mail: add Redis replication
Marc Dequènes
14:26 Revision 581d1918 (ansible-role-stunnel): Initial release
Marc Dequènes

2018-06-04

19:52 Revision 9149c8ae (duckcorp-infra): mail: add Redis replication
Marc Dequènes
17:29 Revision 438a1f19 (duckcorp-infra): add Rspamd integration
Marc Dequènes
12:11 Revision f60f5cdb (duckcorp-infra): add Rspamd integration
Marc Dequènes
12:11 Revision c9b408fe (duckcorp-infra): update submodules
Marc Dequènes
12:08 Revision a67c1a6c (duckcorp-infra): user HTTPS for NTP info URL
Marc Dequènes
12:07 Revision f1cd74fc (duckcorp-infra): change remote_tmp as service users may not have permissions o...
Marc Dequènes
08:01 Revision 2fb7395d (duckcorp-infra): add Rspamd integration
Marc Dequènes

2018-06-03

15:35 Revision d43a3ec9 (duckcorp-infra): add Rspamd integration
Marc Dequènes
07:35 Revision f09da501 (duckcorp-infra): add Rspamd integration
Marc Dequènes

2018-06-02

20:59 Revision 92304e4c (duckcorp-infra): added duckcorp/webmail.duckcorp.org
Marc Dequènes
20:38 Bug #595 (In Progress): Create missing systemd configuration for SYSV compatibility services
I recently created one for _spoolinger_. It will be in the package when this is ready. Marc Dequènes
20:35 Enhancement #572 (Resolved): HTTPS for All
Marc Dequènes
20:33 Revision cc3ca958 (duckcorp-infra): added duckcorp/doc.duckcorp.org
Marc Dequènes
20:33 Revision 3a2d1b13 (duckcorp-infra): dc-web: missing Ansible managed header
Marc Dequènes
20:05 Revision cf90e5ac (duckcorp-infra): dc-dovecot: fixed location for shared mailbox
Marc Dequènes
19:28 Revision 54460067 (duckcorp-infra): dc-web: add DuckCorp base config
Marc Dequènes
18:52 Revision c80bd62d (duckcorp-infra): added duckcorp/static.perso.duckcorp.org
Marc Dequènes
18:15 Enhancement #625: mail: setup multi-master sync
Because this would impact retraining using the recommended method by moving mails in/out of the Junk folder, we would... Marc Dequènes
18:11 Bug #435 (In Progress): DSPAM has no future
I am looking at Rspamd which seems promising and using a similar learning system. It would also replace policyd-weigh... Marc Dequènes
18:08 Enhancement #624 (Resolved): mail: switch to mdbox
It took almost 3 hours but it's done and working. Marc Dequènes
11:42 Enhancement #624 (In Progress): mail: switch to mdbox
box migration is WIP since 09:36 CEST Marc Dequènes
17:56 Revision 84551f3d (duckcorp-infra): Merge branch 'mda_work'
Marc Dequènes
14:32 Revision 87b03c54 (duckcorp-infra): dc-dovecot: switch to mdbox
refs #624 Marc Dequènes
14:32 Revision a4bb92c4 (duckcorp-infra): dc-dovecot: enable imap-hibernate
Marc Dequènes
14:32 Revision dcf07bab (duckcorp-infra): increase mail quota for happypeng and duck
Marc Dequènes

2018-06-01

11:13 Revision a941225c (duckcorp-infra): redmine: DC is new maintainer
Marc Dequènes (Duck)
11:13 Revision d24f462a (ansible-role-redmine): update for new maintainer
Marc Dequènes (Duck)

2018-05-28

14:50 Revision 6a58bc5e (duckcorp-infra): update submodules
Marc Dequènes
14:44 Revision 448405f6 (duckcorp-infra): add tag for IRC core "services"
Marc Dequènes
14:43 Revision 9c9da2a5 (duckcorp-infra): dc-irc: add module to prevent non-registered users to create ...
Marc Dequènes
11:15 Bug #628 (Resolved): Permissions for Web directories were lost
Applied in changeset commit:duckcorp-infra|8e6129babefa745127f0bf7594818a13dc443b77. Marc Dequènes
11:04 Revision 8e6129ba (duckcorp-infra): add ACLs for web directories
fixes #628 Marc Dequènes
08:16 Revision 85b2883f (ansible-role-thelounge): package module: use 'present' instead of 'installed'
Marc Dequènes
08:16 Revision d4531f41 (ansible-role-httpd_php): package module: use 'present' instead of 'installed'
Marc Dequènes
08:12 Bug #594 (Blocked): slap_global_control: unrecognized control
It seems to work fine but… blocked by Debian#900253 Marc Dequènes
07:24 Revision 9a3446c9 (duckcorp-infra): dc-accounts: reenable ppolicy to work around Debian#900253
refs #594 Marc Dequènes

2018-05-27

17:59 Enhancement #572: HTTPS for All
Remains:
* doc.duckcorp.org
* static.perso.duckcorp.org
Marc Dequènes
17:53 Revision ffbb7e6d (duckcorp-infra): add guihome/www.collectioneuro.eu
Marc Dequènes
17:50 Bug #628 (Resolved): Permissions for Web directories were lost
When Ansibilized the specific permissions were lost.
Known cases:
* group access: we can use httpd/document_root_...
Marc Dequènes
16:02 Revision 9581073f (duckcorp-infra): update fail2ban role to support LXC/LXD
Marc Dequènes
16:01 Revision c95280c9 (ansible-role-fail2ban): support LXC/LXD
Marc Dequènes
15:30 Revision fc319140 (duckcorp-infra): dc-base: support firewalling for LXC/LXD
Marc Dequènes
15:28 Revision 20ea92c6 (duckcorp-infra): dc-base: ensure firewalling init script is executable
Marc Dequènes

2018-05-26

19:26 Bug #594 (In Progress): slap_global_control: unrecognized control
I disabled ppolicy in nslcd as we do not use password expiration and such.
Marc Dequènes
19:24 Revision 6a6bd3eb (duckcorp-infra): dc-accounts: disable ppolicy in nslcd
See #594. Marc Dequènes
17:34 Revision 8731d268 (duckcorp-infra): added duckcorp/webmail.duckcorp.org
Marc Dequènes
17:32 Revision 9be7207e (ansible-role-roundcube): Initial release
Marc Dequènes
15:43 Revision f0cc8bb0 (duckcorp-infra): update submodules
Marc Dequènes
15:20 Revision 853f8400 (duckcorp-infra): switch httpd role to OSAS
Marc Dequènes
14:52 Revision 0083e8a8 (duckcorp-infra): update APT source.list for Debian Unstable
Marc Dequènes
14:50 Revision a1797b69 (duckcorp-infra): remount /proc after adding hidepid
Marc Dequènes
14:27 Revision c80529bd (duckcorp-infra): install Python if the OS image is minimal
Marc Dequènes
12:23 Revision 0db301ee (duckcorp-infra): dc-ldap: removing what seemed to be the default db files is n...
Marc Dequènes
12:23 Revision 6b8f5f09 (duckcorp-infra): dc-ldap: added deref control
See #594 Marc Dequènes
12:23 Revision e4b59bc9 (duckcorp-infra): perso.duckcorp.org: allow users to require auth
Marc Dequènes
12:23 Revision f0768cb5 (duckcorp-infra): perso.duckcorp.org: add symlink to user directories
Marc Dequènes

2018-05-25

20:42 Revision 6f55d8c4 (duckcorp-infra): document a better way to access DC's VCS as a commiter
Marc Dequènes
20:09 Revision 1cc1da6d (duckcorp-infra): fix smokeping submodule name
Marc Dequènes
20:04 Revision a52f100c (duckcorp-infra): Merge branch 'turn'
Marc Dequènes
20:03 Revision 649c7189 (duckcorp-infra): added TURN/STUN server
Marc Dequènes
19:58 Revision 2ba96b58 (ansible-role-coturn): Initial Release
Marc Dequènes

2018-05-24

11:28 Bug #594: slap_global_control: unrecognized control
Added the deref control, as it can be useful:
https://www.openldap.org/lists/openldap-technical/201401/msg00025.ht...
Marc Dequènes
10:50 Enhancement #155 (Rejected): Experiment sudo-ldap and perhaps use it
We don't really need this now that we deploy with Ansible. Also some rules are needed to rescue the machine in case o... Marc Dequènes
10:46 Revision 8ba9e4a8 (duckcorp-infra): forgot files in dd6d5b8
Marc Dequènes
10:43 Revision 9f62125d (duckcorp-infra): added missing Ansible-managed mention
Marc Dequènes
10:41 Revision dd6d5b88 (duckcorp-infra): add multihoming rules
Marc Dequènes
10:24 Revision 07283e3c (duckcorp-infra): add firewalling rules
Marc Dequènes
10:24 Revision 1c1dfa97 (duckcorp-infra): ignore veth when disabling accept_ra
the name is autogenerated and keep changing after each reboot Marc Dequènes
10:23 Revision d1962ac5 (duckcorp-infra): fix action name
Marc Dequènes
09:42 Revision 9aa47140 (duckcorp-infra): removed unused cert
Marc Dequènes
09:11 Revision 57dac898 (duckcorp-infra): install certs in dc-postfix and dc-dovecot
Marc Dequènes
06:04 Revision 708a3d1d (duckcorp-infra): dc-ldap: restart if database was created
Marc Dequènes
05:56 Bug #619 (Resolved): LDAP servers: install slapd
With some modifications and cleanup this is done.
Also the schema file was unmaintained, so I reverse engineered f...
Marc Dequènes
05:51 Revision d4c51ba6 (duckcorp-infra): document regen_ldap_content
Marc Dequènes
05:46 Revision a66c5038 (duckcorp-infra): Merge branch 'ldap_config'
Marc Dequènes
05:33 Revision d3f827e8 (duckcorp-infra): create playbook to separate LDAP initial generation from updates
Marc Dequènes
05:10 Revision 40fa7e1b (duckcorp-infra): Install LDAP servers
Marc Dequènes

2018-05-23

21:12 Revision f23c8d11 (duckcorp-infra): Install LDAP servers
Marc Dequènes
18:47 Revision d44960f7 (duckcorp-infra): Install LDAP servers
Marc Dequènes
18:43 Revision 1efb8bbd (duckcorp-infra): Use static imports when possible
- static imports allow to use --list-tags, --list-tasks, --start-at-tasks
switches,
- since 2.5, tags applied to dyna...
Pierre-Louis Bonicoli
14:06 Revision 23e94c3f (duckcorp-infra): fixup! Install LDAP servers
Marc Dequènes
09:33 Revision 141ee3c5 (duckcorp-infra): Install LDAP servers
Marc Dequènes
09:03 Revision 07210d95 (duckcorp-infra): Install LDAP servers
Marc Dequènes
06:51 Revision d10b4b58 (duckcorp-infra): Install LDAP servers
Marc Dequènes
06:10 Revision cc22eb6d (duckcorp-infra): Install LDAP servers
Marc Dequènes

2018-05-22

22:09 Revision 395fb5ce (duckcorp-infra): Install LDAP servers
Marc Dequènes
20:23 Revision aaa448f1 (duckcorp-infra): Install LDAP servers
Marc Dequènes

2018-05-21

20:16 Revision 40db96d5 (duckcorp-infra): fixup! Install LDAP servers
Marc Dequènes
07:23 Bug #619: LDAP servers: install slapd
I read copying files did not always worked out well. Also there are a lot of parameters which were converted from the... Marc Dequènes

2018-05-20

12:25 Revision 0ecb13e1 (duckcorp-infra): add/remove email addresses for 'arnau' user account.
Arnaud Fontaine
11:39 Revision 0d59e7ec (duckcorp-infra): add/remove email addresses for 'arnau' user account.
Arnaud Fontaine

2018-05-19

15:38 work
* nextcloud: upgraded 13.0.1->13.0.2 Marc Dequènes
08:09 Revision f9a5fe89 (duckcorp-infra): add email address for 'arnau' user account.
Arnaud Fontaine
07:10 Revision 186dcf0f (duckcorp-infra): add/remove email addresses for 'arnau' user account.
Arnaud Fontaine
05:38 Bug #619: LDAP servers: install slapd
Working on a simple integration into the *dc-ldap* role for now. Marc Dequènes
05:36 Revision c60b7c6e (duckcorp-infra): Install LDAP servers
Marc Dequènes
04:55 Revision 6f7af526 (duckcorp-infra): SVN is no more
Marc Dequènes
04:31 Revision 887712d2 (duckcorp-infra): added missing Ansible-managed mention
Marc Dequènes
03:49 Revision bbaa529c (duckcorp-infra): added MDA deployment
Marc Dequènes

2018-05-18

18:46 Revision 9adbc05d (duckcorp-infra): added MDA deployment
Marc Dequènes

2018-05-17

15:23 Revision 6dd945ba (duckcorp-infra): added MDA deployment
Marc Dequènes
08:52 Revision c2dd6a42 (duckcorp-infra): some cleanup in logcheck ignores
Marc Dequènes
08:44 work
* Mail: removed imapproxy (this is no more recommended upstream, and the performances are now slightly better without)
Marc Dequènes

2018-05-16

12:13 Revision 8fced959 (duckcorp-infra): remove unused xmpp account for 'arnau' user account.
Arnaud Fontaine
10:51 Revision b49e1e66 (duckcorp-infra): add/remove email addresses for 'arnau' user account.
Arnaud Fontaine
05:21 Revision 5a88fbb1 (duckcorp-infra): add email address for 'arnau' user account.
Arnaud Fontaine

2018-05-15

14:51 Revision 3b766e84 (duckcorp-infra): add a simplified view of the hosts<->services association
Marc Dequènes
07:02 Revision ca5fd28d (duckcorp-infra): dc-postfix: fix permissions
Marc Dequènes
06:43 Revision 5aee56cb (duckcorp-infra): dc-postfix: always handle main conffiles and only restart for...
Marc Dequènes

2018-05-14

18:50 Revision 0cbb4780 (duckcorp-infra): dc-postfix: add missing README and meta
Marc Dequènes
18:47 Revision baae2ab9 (duckcorp-infra): add policyd-weight
Marc Dequènes
18:10 Revision 3caf716f (duckcorp-infra): update submodules
Marc Dequènes
18:09 Revision ac6c3581 (ansible-role-oidentd): fix description in meta
Marc Dequènes
18:08 Revision d9f1c112 (ansible-role-opendnssec): add meta
Marc Dequènes
18:06 Revision 5c3f614d (duckcorp-infra): added oidentd
Marc Dequènes
18:04 Revision 49c8806e (ansible-role-oidentd): Initial release
Marc Dequènes
16:56 Revision 289fbce3 (duckcorp-infra): added duckcorp/ntp.duckcorp.org
Marc Dequènes
16:04 Revision a3a7125f (duckcorp-infra): remove obsolete mail redirection for KiBi
Marc Dequènes
15:59 Revision eb4ea1b9 (duckcorp-infra): remove obsolete mail redirection for KiBi
Marc Dequènes
15:56 Revision f7c792cb (duckcorp-infra): yoshi: ensure pid file is created
Marc Dequènes
15:10 Revision da31ea7a (duckcorp-infra): yoshi: autostart via crontab
Marc Dequènes
15:02 Revision ca124e3a (duckcorp-infra): added new Yoshi
Marc Dequènes
14:02 Revision 031c99d8 (duckcorp-infra): dc-postfix: script are run by non-root, don't restrict execut...
Marc Dequènes
12:07 Revision 14b161c8 (duckcorp-infra): Merge branch 'mta'
Marc Dequènes
12:07 Revision 9cc0ce38 (duckcorp-infra): restart_lsb_services: fix matching
Marc Dequènes
12:06 Revision 6904c077 (duckcorp-infra): added MTA deployment
Marc Dequènes

2018-05-13

20:53 Revision 7326f281 (duckcorp-infra): added MTA deployment
Marc Dequènes
20:53 Revision 0ea51fa2 (duckcorp-infra): update submodules
Marc Dequènes
19:59 Revision b918ff7b (ansible-role-opendnssec): fix POSIX ACLs
Marc Dequènes
17:25 Enhancement #626 (In Progress): Automate the WORLD!!!
Marc Dequènes
17:23 Revision 3b18658f (duckcorp-infra): install manpages
Marc Dequènes
17:21 Revision 7ee8a737 (duckcorp-infra): added root home conffiles
Marc Dequènes

2018-05-10

11:47 Revision 003003bc (duckcorp-infra): move common web settings into dc-web role
Marc Dequènes
11:47 Revision 6e6ec234 (duckcorp-infra): dc-web: httpd role is now handling all security settings
Marc Dequènes
11:47 Revision ed88df60 (duckcorp-infra): update submodules
Marc Dequènes
 

Also available in: Atom