96 lines
3.1 KiB
YAML
96 lines
3.1 KiB
YAML
---
|
|
loc_certbot:
|
|
- dns_rfc2136_server: '172.16.10.147'
|
|
dns_rfc2136_name: certbot_challenge.
|
|
dns_rfc2136_secret: "{{ vault.certbot_dns_secret }}"
|
|
mail: root@crans.org
|
|
certname: crans.org
|
|
domains: "*.crans.org"
|
|
|
|
loc_nginx:
|
|
service_name: mailman
|
|
default_server: lists.crans.org
|
|
default_ssl_server: lists.crans.org
|
|
auth_passwd:
|
|
Stop: "$apr1$NXaV5H7Q$J3ora3Jo5h775Y1nm93PN1"
|
|
deploy_robots_file: true
|
|
servers:
|
|
- server_name:
|
|
- lists.crans.org
|
|
ssl: crans.org
|
|
root: "/usr/lib/cgi-bin/mailman/"
|
|
index:
|
|
- index.htm
|
|
- index.html
|
|
locations:
|
|
- filter: "/error/"
|
|
params:
|
|
- "internal"
|
|
- "alias /var/www/html/"
|
|
- filter: "/create"
|
|
params:
|
|
- "default_type text/html"
|
|
- "alias /etc/mailman/create.html"
|
|
- filter: "~ ^/$"
|
|
params:
|
|
- "return 302 https://lists.crans.org/listinfo"
|
|
- filter: "/"
|
|
params:
|
|
- "include \"/etc/nginx/snippets/fastcgi-mailman.conf\""
|
|
- filter: "~ ^/listinfo"
|
|
params:
|
|
- "satisfy any"
|
|
- "include \"/etc/nginx/snippets/fastcgi-mailman.conf\""
|
|
- "allow 185.230.76.0/22"
|
|
- "allow 2a0c:700:0::/40"
|
|
- "deny all"
|
|
- "auth_basic \"On n'aime pas les spambots, donc on a mis un mot de passe. Le login est Stop et le mot de passe est Spam.\""
|
|
- "auth_basic_user_file /etc/nginx/passwd"
|
|
- "error_page 401 /error/401.html"
|
|
- filter: "~ ^/admin"
|
|
params:
|
|
- "satisfy any"
|
|
- "include \"/etc/nginx/snippets/fastcgi-mailman.conf\""
|
|
- "allow 185.230.76.0/22"
|
|
- "allow 2a0c:700:0::/40"
|
|
- "deny all"
|
|
- "auth_basic \"On n'aime pas les spambots, donc on a mis un mot de passe. Le login est Stop et le mot de passe est Spam.\""
|
|
- "auth_basic_user_file /etc/nginx/passwd"
|
|
- "error_page 401 /error/401.html"
|
|
- filter: "/images/mailman"
|
|
params:
|
|
- "alias /usr/share/images/mailman"
|
|
- filter: "/robots.txt"
|
|
params:
|
|
- "alias /var/www/robots.txt"
|
|
- filter: "/archives"
|
|
params:
|
|
- "alias /var/lib/mailman/archives/public"
|
|
- "autoindex on"
|
|
|
|
glob_mailman3:
|
|
site_owner: root@crans.org
|
|
database:
|
|
user: "mailman3"
|
|
pass: "{{ vault.mailman3_database_pass }}"
|
|
host: "{{ query('ldap', 'ip', 'tealc', 'adm') | ipv4 | first }}"
|
|
port: 5432
|
|
name: "mailman3"
|
|
web_database:
|
|
user: "mailman3web"
|
|
pass: "{{ vault.mailman3_web_database_pass }}"
|
|
host: "{{ query('ldap', 'ip', 'tealc', 'adm') | ipv4 | first }}"
|
|
port: 5432
|
|
name: "mailman3web"
|
|
smtp:
|
|
host: "{{ query('ldap', 'ip', 'redisdead', 'adm') | ipv4 | first }}"
|
|
port: 25
|
|
user: ""
|
|
pass: ""
|
|
restadmin_pass: "{{ vault.mailman3_restadmin_pass }}"
|
|
archiver_key: "{{ vault.mailman3_archiver_key }}"
|
|
web_secret_key: "{{ vault.mailman3_web_secret_key }}"
|
|
web_domain: "mailman.crans.org"
|
|
default_domain: "crans.org"
|
|
postfix_domain: "crans.org"
|