infra/roles
Jeremie Fraeys 3e0e97a00c
fix(postfix): enable TLS and fix Postmark authentication
- Add Python script to extract certificates from Traefik acme.json
- Mount extracted certs to /etc/ssl in container for TLS support
- Enable smtpd_tls_security_level: may for incoming STARTTLS
- Remove failed_when: false on cert extraction to catch failures early
- Fix relayhost username to default to password (Postmark server token auth)
- Change default Postmark port from 2525 to 587 (blocked on some networks)
- Create SSL directory before extraction

Fixes: SMTP authentication failures and enables TLS for Authelia password reset
2026-03-06 14:25:10 -05:00
..
airflow/tasks initial infra commit 2026-01-19 15:02:13 -05:00
alertmanager refactor(monitoring): update Alertmanager and exporter configurations 2026-03-06 10:31:52 -05:00
app_core initial infra commit 2026-01-19 15:02:13 -05:00
app_deployer Add app deployer role for automated deployments 2026-02-21 18:31:12 -05:00
app_ssh_access fix(ssh): allow dual-stack runner source for restricted keys 2026-01-21 15:08:36 -05:00
authelia fix(authelia): resolve 502 error and SMTP authentication issues 2026-03-06 14:24:56 -05:00
backups Add core infrastructure security and utility roles 2026-02-21 18:30:42 -05:00
docker/tasks initial infra commit 2026-01-19 15:02:13 -05:00
exporters refactor(monitoring): update Alertmanager and exporter configurations 2026-03-06 10:31:52 -05:00
fail2ban Add core infrastructure security and utility roles 2026-02-21 18:30:42 -05:00
firewall/tasks Add core infrastructure security and utility roles 2026-02-21 18:30:42 -05:00
forgejo feat(forgejo): add AI scrapers blocklist, OIDC config, and UI settings 2026-03-06 10:31:46 -05:00
forgejo_runner Update Forgejo and runner with new features 2026-02-21 18:31:06 -05:00
grafana refactor(monitoring): update Alertmanager and exporter configurations 2026-03-06 10:31:52 -05:00
hardening initial infra commit 2026-01-19 15:02:13 -05:00
infra_controller fix(ssh): allow dual-stack runner source for restricted keys 2026-01-21 15:08:36 -05:00
lldap Update authentication stack (Authelia, LLDAP) 2026-02-21 18:31:01 -05:00
loki refactor(monitoring): update Alertmanager and exporter configurations 2026-03-06 10:31:52 -05:00
postfix fix(postfix): enable TLS and fix Postmark authentication 2026-03-06 14:25:10 -05:00
prometheus refactor(monitoring): update Alertmanager and exporter configurations 2026-03-06 10:31:52 -05:00
spark/tasks initial infra commit 2026-01-19 15:02:13 -05:00
traefik fix(traefik): add Docker provider and file provider fallback for service discovery 2026-03-06 10:31:05 -05:00
watchtower chore(deps): bump watchtower to v1.14 and update Docker API version 2026-03-06 10:31:58 -05:00