diff --git a/host_vars/ticket.c3heaven.de b/host_vars/ticket.c3heaven.de new file mode 100644 index 0000000000000000000000000000000000000000..dfccdf128f343687c54692e4ba726572dc495eaa --- /dev/null +++ b/host_vars/ticket.c3heaven.de @@ -0,0 +1,23 @@ +# Before changing this, please make sure that the DNS entries exist, otherwise +# acmetool will fail horribly! +acmetool_cert_domains: + - ticket.c3heaven.de + +nginx_http_locations: + - location: "/" + config: |- + access_log off; + log_not_found off; + return 301 https://$host$request_uri; + +nginx_https_default_headers: + - 'Strict-Transport-Security "max-age=31536000; includeSubDomains"' + - 'X-XSS-Protection "1; mode=block"' + - 'X-Frame-Options "SAMEORIGIN"' + - 'X-Content-Type-Options "nosniff"' + - 'Referrer-Policy "same-origin"' + +postfix_mydestination: "localhost, $myhostname" +postfix_myorigin: "c3heaven.de" +postfix_alias_maps: + - "hash:/etc/aliases" diff --git a/inventory b/inventory index 21c781d6748f1a21d81c0ce85a5daa4116fe3b30..7d705f68fa8bdda63eedd773af5d7983346ccdc9 100644 --- a/inventory +++ b/inventory @@ -6,6 +6,7 @@ # configuration of the new machine. [hetzner] gabriel.c3heaven.de +ticket.c3heaven.de # Monitoring host diff --git a/roles/postfix/defaults/main.yml b/roles/postfix/defaults/main.yml index 9105874fec8db1c1442c71678b140a8a9d95201a..5475eb68a9788f90c49c9e57e9edfeebf6aec8ae 100644 --- a/roles/postfix/defaults/main.yml +++ b/roles/postfix/defaults/main.yml @@ -11,3 +11,5 @@ postfix_smtpd_tls_mandatory_protocols: "TLSv1.2" postfix_ssl_dhparam: "/etc/postfix/dh_2048.pem" postfix_ssl_dhparam_bits: 2048 postfix_additional_admin_aliases: [] + +rspamd_enabled: false