Commit Graph

14 Commits

Author SHA1 Message Date
ad155d765e renovate.json: Fix regex matcher for Containerfile 2023-12-20 23:55:21 +00:00
renovate[bot]
ddefd2a959 chore(deps): pin dependencies 2023-12-20 23:17:49 +00:00
952df3d324 Update service versions with Renovate
This adds basic configuration for Renovate, and sets up most services
for automated updates to package versions.
2023-12-20 23:00:19 +00:00
8de75fe927 postfix: Start on health-check pass 2023-11-05 18:03:42 +00:00
5163fd4da0 Allow clients to choose own ciphers
This changes a previously updated default in Dovecot and Postfix, as it
resulted in too many issues in older clients.
2023-10-30 22:16:00 +00:00
0a7985b8ca postfix: Exclude anonymous ciphers for TLS 2023-10-21 17:33:03 +01:00
a5ce4675d5 Improve TLS security for Dovecot and Postfix 2023-10-21 17:19:35 +01:00
c285828395 postfix: Update to version 3.7.6, move to Quadlet 2023-08-13 16:30:09 +01:00
1801b7d8aa postfix: Allow for messages up to 20MB in size
This is lower than most other services (e.g. Gmail allows for receiving
up to 50MB and sending up to 25MB) but more than most will need.
2023-03-28 21:29:40 +01:00
e32a3a5228 postfix: Don't use RBL to reject mail
These checks are better implemented at the RSpamd level, and would, in
some cases, incorrectly reject email at the SMTP server level.
2022-10-01 15:33:56 +01:00
de1627f4a6 postfix: Use recommended method for service start
This commit updates Postfix to the latest version available for Debian
Bullseye, and switches the Docker entrypoint from an internal to a
publicly documented command, which is guaranteed to work in the future.
2022-07-11 21:22:38 +01:00
011650105b Implement metrics with Grafana and Prometheus
This commit adds two services, `grafana` and `prometheus`, and sets up
some existing services (`dovecot` and `prosody`) to expose metrics into
Grafana. In addition, systemd services have been added to facilitate
registering metrics for services into Prometheus, as well as
automatically provisioning Grafana dashboards based on static JSON
representations.

This work will continue to evolve as more services gain proper Grafana
dashboards, and Loki is also integrated for access to the systemd
journal.
2022-04-25 20:12:06 +01:00
0fbbc39e27 base: Only copy service directories if used
We no longer copy service directories into `/etc/coreos-home-server` if
these have not had their respective `spec.bu` files included; these
directories are not needed in these cases, and would be erroneously
considered as eligible in subsequent `coreos-home-server-update`
invocations.
2022-02-05 16:05:00 +00:00
f877a72e83 Flatten directory structures
This commit contains a fairly large diff for a fairly small change:
moving the `config/common` directory to `host/base` to better reflect
its intended use, and promoting `config/service` to the root directory.

These changes unlock some improvements in `coreos-home-server-update`
processes, which will (assuming `/etc/coreos-home-server/base` exists)
keep host-wide systemd services in sync in addition to service-specific
ones.

Changes have been make to the `Makefile` and a few other places where
`config/common` was referenced, but most of this work is renames that
are not intended to break compatibility with new or running servers.
2022-01-15 11:43:33 +00:00