chore(ansible): clean up host_vars YAML and normalize mail text blocks

This commit is contained in:
2026-07-28 21:24:03 +02:00
parent ae60fa01a5
commit 4d92340f9b
306 changed files with 2049 additions and 2484 deletions
@@ -0,0 +1,34 @@
# *** [ Ansible managed: DO NOT EDIT DIRECTLY ] ***
# ---
# Block messages exeeds 20 MB for listed recipients
#
# This file is called with '=~'. This means perl regexp is possible
#
#
# To increase performance use ^ and/or $ in regular expressions
#
# @acieu\.co\.uk$
# ^error@mailfrom\.com$
#
# instedt of
#
# @acieu.co.uk
# error@mailfrom.com
#
#
# Example:
#
# # # annoying spammer domains
# # block all senders of maildomaindomain 'oopen.de'
# @acieu\.co\.uk$
#
# # annoying spammer addresses
# # block sender address
# error@mailfrom.com
# sqek@eike\.se$
#
# ---
# MBR / VDK
info@mbr-berlin.de
@@ -0,0 +1,19 @@
# *** [ Ansible managed: DO NOT EDIT DIRECTLY ] ***
# ---
# SASL Users whitelisted by postfwd
#
# example:
#
# # give trusted sasl usernames here
# ckubu@oopen.de
# vertrieb@akweb.de
#
# ---
# give trusted sasl usernames here
abo@akweb.de
vertrieb@akweb.de
prokla@akweb.de
presse@mbr-berlin.de
@@ -0,0 +1,51 @@
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
@@ -0,0 +1 @@
ssh-rsa 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 root@a.mx
@@ -0,0 +1,51 @@
-----BEGIN RSA PRIVATE KEY-----
MIIJKQIBAAKCAgEAtVNqSzdtAtSD4faC34QLBYRU2huoBXa7qnjkQxXSzfGRsvJc
QHgvv+Nh+VztXSVN12L1VNy/zVcLZPDUrVbmJJMZ9zDtePJic2U8AHUxDZVJx+bu
g5+lM7Opas8oMnzAAFW4/PeSm5mrbAGG6BJRuRW2JWtUCGxMI1ZFpPfm8WcizmTz
3rgoTJWnjgW0cS7m0+VDCEImUzU4hNWX4EMVQDXIHuDCvs2IYXe1+fSbhV/+Zwdz
9RMpFpzxOkDdo3gtC6K+/Lr5ZfXx7NMatBX4SfVLeYVKqtZwrbgdU6BldUHG4AYT
tADyveMAPQbtzsvZ6k12eND5jmzIpAyovD25bcaNdsQZ3XQlqNVxJMQIkdw2FZb3
+zwspAYkPDb96qDEnpaSvYRP7XsANcEuSJbIY9SH0VN3XGPmDRuH8zxlNBGISs6l
hc8qGzPRfImHoJpIGhid0oVy7naHnJqBBHbsB6hs7a59yKOStWfD+OpEk1YIxDSl
Qm4pgrWcfl/XOs6LSkqfX7ZeJgANFM4ippe3dip1cg/vmDYAa9KgHGgVxuCpDxWe
nRtofewD2nKm+YneOPN2AOdfyLbtNP91j2sF8VqYVjTjglAQvY6RaY3bU6KY1+gy
/MWWkeKPnnYj975yl7hZsAUNpeaRmMNz4yL6u8ckER3qQluZ2BhpDR4VvHkCAwEA
AQKCAgEAqC5QXqdv8roOAN3WEV61ok5VLV+NflPcSIeMoDRzrBStYN6udhWDpGVQ
kCuC9WwOQQJGLon5VImxxdQiTwxUtgPCh6XX/OBENGfnOT15W/Hl1wX4oBjI76Vq
M+kkjX9rzmO0Ct3OG4hymODpsgKbziG3KgncjVt1Wyk/u307tRhGDk1QbHk+15nP
KUldTcWEz3DLtbM1POQWIg7CqX1PDplTnmA2ASc9obmZDde1EAYzPniJMvyslY7H
p5JWgLKMhUhUALGjdNCjrVc4Y2QlQOPFN1dMJBx1soscmF4i/JkfztWUHNbsTvdn
VzNACxjEbC+g/PpHHbUEfDRJpR9TBk8j+goCedGZ+jlRb5ux3CCyQ3FwqVAIOkwv
aa+nhWPkxVooSnusrth0U3syY6vRNbpLTklcPMSTq2Glnly1DsO9ZdOGpMvF/8il
sTbQxGrA10RJ28oisbSObWBb3NyzDPsRrTQeUmshxg7wnmZsFMzQhHicZGOzUuTK
T1u7INO9tpAoy8EFROB+0SdywokR2Kzf7Pt+jKtKlu1hce4R8PTTQksQxBosWfGG
qEe0KpxDngPdCwSo3gk/ABrP7NdHnBbCZjGR/x0+6jj8vDqZLeKlxUQXWsHfRWrM
qk1AN+FbYWxGrfJqoZ5YT1VqLvaahjchaZ4LMzWUg2sj4y6DxwECggEBAO1JoTd1
8/22k7Ul5SVcHGabPL7pfOLovOhkYd3rjJlukJLhTfy2fotcsNBor80MeCc5Dr0E
ljC+ailxUGm2ZlSK4GFPfLILZKJCEZt29f4j2V4ovmgFbtbhdbSH1LEFuKB1d5r6
4o4KXU6p59p84/V5JedFVq+afAHVrufi6lv46MoYmGEx0Jt0Q1YjOj5PjD50Ebpm
mbW9b3n2Gi606quVTKUYTyjhIzCS2/1AGy6rzgc5/49Sf24JRf138m+VDMIecJXF
rEOaB10ZGu3CZbZdssY7idtVhBt0saG00gHYwHqcyJGPQVzIY6ziW9dvsgsPkJ3h
Cin4rrOATCVlZfECggEBAMOgBvvlvQXJIir78TBGl4cumBspgucReROVhyZI0UqV
qxltCcwDr+xQre/uG5Z5+HLFnVAqKLhaq+1tIbbHp1nvUUWrlAHTfUF+U/mjbGh8
jQ2A2Fy9x1tjd6eYjYs5tut4CXzktExQnvuipfNTO2fZiqNi+43OwIV6kJuMQRa5
p++HAaVWwrdJaGHjQ+cas4Xu2tC3Bm1/lG6Yk3SViINkrKxU8wJApr3l+1LfxVi4
OWGFJZS2+zp3QSZLLHABP7SfrbFpFZHVUAOrjCh8JnNAx8f/fUDZzKJQLda9aLoA
WGaY796ZGhVSUXU8jB4/FZ74x1tMxmmtYz6nprCklwkCggEAeuoVFMGI7ffRc5h5
pmycWZo4UTxpcLDWihrVhzsozaG0SiFjYHC4BECzZoGT70dyRf8MX2Us13sLSwRj
fx74yvpVWJLwKNo1+sb2j+2DZ23yfw/j8cY+sBiB/E4QItKv3I58sk8bZDCCPOlO
LKNdAh8LP01vpe8EJX8m5v9oHtRE4crzxAUl5iDHcKs21GgoYYGGXWQgY0AJqseM
sH0OwmrIFQ0OlEJrFBI+2mSGsBpW0u98LiWx1LIBC1dCwgIXZcaW0z5eCXaUMel7
RYXZYioPHRhiRLd7gy1jhjxAPKymp9znGF94oDM9TqTCpko5k/kwFFgqB6vF8z2W
NBjeQQKCAQEAvlRtVxnPzdhCURXtNO4JsbGotgyuWsjKRz6dTqdcUbfKz6Mh/Ae+
WyqoAJ9m4gHrsycHhp5uHefCDO+39JDOBxdruGBWUWyGGnmhlGnnKMW9qtyoJZtT
YlwlZ79qP4I4sWKJwKT3sqRh+ivmUBaz3rduRscgPnlhILz+AwjzrvuVI9vzwvzl
19QpJcwrHagB8JZS+OyJ6XFOZkg2dyChwEzsH4NLJ+7lDC+9VYV4CXi8A2C7DrT1
O44ZqftL0fG1HLSbFthJ7yhegCOg6ybXdh0aA0FViQofKfDemGaShR2e5Lt57daB
5SrBLFJrdWYlUBV2SSMqjFjxDV2qNYT9mQKCAQBdyS5/4yRfTL7YAJzEwtT1NF49
VzNIYF7+axDW51wn0qcsghk5yzYbr91vDvWbROobiLq/Ed75xq8i7vuZDjw367Kg
d8gB6lstq29RwCRmVso7OEuNs1vC+4uDoEHsUPowI9fnn03142qo0z0HS05p0i1E
Zf9CRso7i4a+Z3IjJxn1/wuHvzX8FaEoXBTjRLejJarfHWZ+wkZrWwCoYt+eqZup
jhF2xNTjGQqSrcVzPsvdtj9JVJ4Qi3yZOqWu41ONh3Yg0TIXovGzLwYYA5LlJwf0
1NY4bdqXsdO2bBRRJMlWzea++fuyETdCoWphMVzvtZn7DNp6/DItnu97O9rA
-----END RSA PRIVATE KEY-----
@@ -0,0 +1 @@
ssh-rsa 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 root@a.mx
@@ -0,0 +1,135 @@
# *** [ Ansible managed: DO NOT EDIT DIRECTLY ] ***
#---------------------------------------
#-----------------------------
# Settings for script check_cert_for_dovecot.sh
#-----------------------------
#---------------------------------------
# - service_domain
# -
# - The main domain for which the certificate was issued
# -
# - Example:
# - service_domain="a.mx.oopen.de"
# - service_domain="mail.cadus.org"
# - service_domain="mx.warenform.de"
# -
#service_domain=""
service_domain="a.mx.oopen.de"
# - service_name
# -
# - Name of service.
# -
# - Note: this var will also be used to determin systemd service file
# - or sysVinit script.
# -
# - Example:
# - service_name="Mumble"
# - service_name="Prosody"
# -
# - Defaults to:
# - service_name="Dovecot"
# -
#service_name=""
# - check_string_ps
# -
# - String wich (clearly) identifies the service at the process list (ps)
# -
# - Example:
# - check_string_ps="[[:digit:]]\ /usr/sbin/murmurd"
# - check_string_ps=""
# -
# - Defaults to:
# - check_string_ps="[[:digit:]]\ /usr/local/dovecot-[[:digit:]]{1,2}\.[[:digit:]]{1,2}\.[[:digit:]]{1,2}(\.[[:digit:]]{1,2})?/sbin/dovecot"
# -
#check_string_ps=""
# - service_user
# -
# - User under which the service is running.
# -
# - Example:
# - service_user="mumble-server"
# - service_user="prosody"
# -
# - Defaults to:
# - service_user="prosody"
# -
#service_user=""
# - service_group
# -
# - Group under which the service is running.
# -
# - Example:
# - service_group="mumble-server"
# - service_group="prosody"
# -
# - Defaults to:
# - service_group="prosody"
# -
#service_group=""
# - cert_installed
# -
# - Locataion of certificate read by service
# -
# - Example:
# - cert_installed="/var/lib/mumble-server/fullchain.pem"
# - cert_installed="/var/lib/dehydrated/certs/jabber.so36.net/fullchain.pem"
# -
# - Defaults to:
# - /etc/dovecot/ssl/mailserver.crt
# -
#cert_installed=""
# - key_installed
# -
# - Location of the key read by service
# -
# - Example:
# - key_installed="/var/lib/mumble-server/privkey.pem"
# - key_installed="/etc/prosody/certs/privkey_jabber.so36.pem"
# -
# - Defaults to:
# - /etc/dovecot/ssl/mailserver.key
# -
#key_installed=""
# - cert_newest
# -
# - Location of the newest certificate.
# -
# - Example:
# - cert_newest="/var/lib/dehydrated/certs/il-mumble.oopen.de/fullchain.pem"
# - cert_newest="/var/lib/dehydrated/certs/jabber.so36.net/fullchain.pem"
# -
# - Defaults to:
# - /var/lib/dehydrated/certs/${service_domain}/fullchain.pem
# -
#cert_newest=""
# - key_newest
# -
# - Location of the newest Key
# -
# - Example:
# - key_newest="/var/lib/dehydrated/certs/il-mumble.oopen.de/privkey.pem"
# - key_newest="/var/lib/dehydrated/certs/jabber.so36.net/privkey.pem"
# -
# - Defaults to:
# - /var/lib/dehydrated/certs/${service_domain}/privkey.pem
# -
#key_newest=""
@@ -0,0 +1,172 @@
# *** [ Ansible managed: DO NOT EDIT DIRECTLY ] ***
# ---------------------------------------------------------
# - Parameter Settings for script 'create_opendkim_key.sh'.
# ---------------------------------------------------------
# ----------
# DNS Server
# ----------
# - dns_dkim_zone_master_server
# -
# - The DNS Server who is serving the update zone and is used
# - for the dynamic updates (nsupdate)
# -
dns_dkim_zone_master_server="b.ns.oopen.de"
# - update_dns
# -
# - Possible Values are 'true' or 'false'
# -
#update_dns=true
# - update_zone
# -
# - Zone containing the DKIM TXT record.
# -
# - Defaults to '_domainkey.<dkim_domaini>'
# -
# - Note:
# - do NOT change/set this option unless you know what you do.
# -
#update_zone=""
# - TTL
# -
# - TTL for the DKIM TXT Record.
# -
# - Defaults to "" if update_dns=false
# - Defaults to "43200" if update_dns=true
# -
#TTL=
# ----------
# TSIG Key
# ----------
# - key_secret
# -
# - Sectret Key used by 'nsupdate' to create/update the
# - DKIM TXT record.
# -
# - Example:
# - key_secret="EtvvMdW0PXD4GMHP+onuHZ0dT/Z8OSJGlce/xH10OwI="
# -
key_secret="4woPu0jqf9Jp1IX+gduJ3BVW/1ZMeyCPTQMqEsMXLFw="
# - key_algo
# -
# - The key algorithm used for key creation. Available choices are: hmac-md5,
# - hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384 and hmac-sha512. The
# - default is hmac-sha256. Options are case-insensitive.
# -
# - Example:
# - key_algo="hmac-md5"
# -
# - Defaults to 'hmac-sha256'
# -
key_algo="hmac-sha256"
# - key_name
# -
# - Name of the Key
# -
# - Defaults to "$update_zone"
# -
key_name="update-dkim"
# ----------
# Access Credentials DNS Server
# ----------
# - dns_ssh_user
# -
# - Defaults to 'manage-bind'
# -
#dns_ssh_user="manage-bind"
# - dns_ssh_port
# -
# - Defaults to '22'
# -
#dns_ssh_port=22
# - dns_ssh_key
# -
# - Defaults to '/root/.ssh/id_rsa-opendkim'
# -
#dns_ssh_key="/root/.ssh/id_rsa-opendkim"
# ----------
# Scripts envoked at DNS Server
# ----------
# - set_new_serial_script
# -
# - Script increases the serial for a given domain or a given
# - hostname's concerning domain.
# -
# - Defaults to /root/bin/bind/bind_set_new_serial.sh
# -
#set_new_serial_script="/root/bin/bind/bind_set_new_serial.sh"
# - create_dkim_delegation_script
# -
# - Script adds DKIM subdomain delegation for a given domain
# -
# - Defaults to '/root/bin/bind/bind_create_dkim_delegation.sh'
# -
#create_dkim_delegation_script="/root/bin/bind/bind_create_dkim_delegation.sh"
# - add_dkim_zone_master_script
# -
# - Script adds zone _domainkey.<dkim domain> as master zone
# -
# - Defaults to '/root/bin/bind/bind_add_dkim_zone_master.sh'
# -
#add_dkim_zone_master_script="/root/bin/bind/bind_add_dkim_zone_master.sh"
# - add_dkim_zone_slave_script
# -
# - Script adds zone _domainkey.<dkim domain> as slave zone
# -
# - Defaults to '/root/bin/bind/bind_add_dkim_zone_slave.sh'
# -
#add_dkim_zone_slave_script="/root/bin/bind/bind_add_dkim_zone_slave.sh"
# ----------
# OpenDKIM Installation
# ----------
# - opendkim_dir
# -
# - OpenDKIM's etc-directory
# -
# - Defaults to opendkim_dir="/etc/opendkim"
# -
#opendkim_dir="/etc/opendkim"
# - key_base_dir
# -
# - Defaults to "${opendkim_dir}/keys"
# -
#key_base_dir=${opendkim_dir}/keys
# - signing_table_file
# -
# - Defaults to "${opendkim_dir}/signing.table"
# -
#signing_table_file="${opendkim_dir}/signing.table"
# - key_table_file
# -
# - Defaults to "${opendkim_dir}/key.table"
# -
#key_table_file="${opendkim_dir}/key.table"
@@ -0,0 +1,86 @@
# *** [ Ansible managed: DO NOT EDIT DIRECTLY ] ***
# ----------------------------------------------------
# ---
# - Parameter Settings for script 'postfix_add_mailboxes.sh'.
# ---
# ----------------------------------------------------
# - dovecot_enc_method
# -
# - The (dovecot) password scheme which should be used to generate the hashed
# - passwords of EXISTING users.
# -
# - Possible values are:
# -
# - See output of 'doveadm pw -l'
# -
# - DEFAULTS to: dovecot_enc_method="SHA512-CRYPT"
# -
#dovecot_enc_method="SHA512-CRYPT"
# - in_file
# -
# - The file from wich the script reads the e-mail-address/password
# - kombination(s). Each line in this file must only contain
# - <emal-address> <password>
# -
# - Defaults to: in_file="${conf_dir}/mailboxes_new.lst"
# -
#in_file="${conf_dir}/mailboxes_new.lst"
# - db_type
# -
# - Type of Postfix Database
# -
# - Possible values are 'pgsql' (PostgeSQL) or 'mysql' (MySQL)
# -
# - Defaults to: db_type="pgsql"
# -
#db_type="pgsql"
# - db_name
# -
# - Database name for the postfix database
# -
# - Defaults to: db_name="postfix"
# -
#db_name="postfix"
# - db_name
# -
# - Database name for the postfix database
# -
# - Defaults to: db_name="postfix"
# -
#db_name="postfix"
# - mysql_credential_args (root access to MySQL Database)
# -
# - Example
# - mysql_credential_args="--login-path=local"
# - mysql_credential_args="--defaults-file=/etc/mysql/debian.cnf" (Debian default)
# - mysql_credential_args="--defaults-file=/usr/local/mysql/sys-maint.cnf"
# -
# - Defaults to:
# - '/etc/mysql/debian.cnf' if MySQL is installed from debian package system
# - '/usr/local/mysql/sys-maint.cnf' otherwise
# -
#mysql_credential_args=""
# - quota
# -
# - The quota setting for the new mailboxes.
# -
# - Defaults to: quota="536870912"
# -
#quota="536870912"
quota=2147483648
# - log_file
# -
# - Where to write logging informations?
# -
# - Defaults to: log_file="${script_dir}/log/postfix_add_mailboxes.log"
# -
#log_file="${script_dir}/log/postfix_add_mailboxes.log"
@@ -0,0 +1,94 @@
# *** [ Ansible managed: DO NOT EDIT DIRECTLY ] ***
# ----------------------------------------------------
# ---
# - Parameter Settings for script 'sent_userinfo_postfix.sh'.
# ---
# ----------------------------------------------------
# - message_body_file
# -
# - Full path to file containing the user info. This file must contain
# - the message body WITHOUT e-mail headers. If file is placed in the
# - 'files' directory use '${file_dir}/<file-name>'
# -
# - Defaults to '${file_dir}/sent_userinfo_postfix.message'
# -
#message_body_file="${file_dir}/sent_userinfo_postfix.email"
# - email_from
# -
# - From Address of user info
# -
# - Example: 'oo@oopen.de'
# -
#email_from=""
email_from="oo@oopen.de"
# - email_from_org
# -
# - Example: email_from_org="O.OPEN"
# -
#email_from_org=""
email_from_org="O.OPEN"
# - db_type
# -
# - Type of Postfix Database
# -
# - Possible values are 'pgsql' (PostgeSQL) or 'mysql' (MySQL)
# -
# - Defaults to: db_type="pgsql"
# -
#db_type="pgsql"
# - db_name
# -
# - Database name for the postfix database
# -
# - Defaults to: db_name="postfix"
# -
#db_name="postfix"
# - mysql_credential_args (root access to MySQL Database)
# -
# - Example
# - mysql_credential_args="--login-path=local"
# - mysql_credential_args="--defaults-file=/etc/mysql/debian.cnf" (Debian default)
# - mysql_credential_args="--defaults-file=/usr/local/mysql/sys-maint.cnf"
# -
# - Defaults to:
# - '/etc/mysql/debian.cnf' if MySQL is installed from debian package system
# - '/usr/local/mysql/sys-maint.cnf' otherwise
# -
#mysql_credential_args=""
# - mail_user
# -
# - The owner of the mailbox directories and within the e-mails itself.
# -
# - defaults to mail_user="vmail"
# -
#mail_user="vmail"
# - mail_group
# -
# - The group of the mailbox directories
# -
# - defaults to mail_group="vmail"
# -
#mail_group="vmail"
# - mail_basedir - No more needed!
# -
# - The root directory where all mailbox-domains are located.
# -
# - Defaults to '/var/vmail'.
# -
#mail_basedir=/var/vmail
@@ -0,0 +1,44 @@
# *** [ Ansible managed: DO NOT EDIT DIRECTLY ] ***
# ======================================================
# ---
# Parameter Settings for Script 'whitelist_mb_sigs.conf'
# ---
# ======================================================
# QUARANTINE_BASE_DIR
#
# Base directory where amavis stores quarantined e-mails, mostly in
#
# virus e-mails: $QUARANTINE_BASE_DIR/virus
# spam emails: $QUARANTINE_BASE_DIR/spam
# ..
#
# Defaults to:
# QUARANTINE_BASE_DIR="/var/QUARANTINE"
#
#QUARANTINE_BASE_DIR="/var/QUARANTINE"
# CLAMAV_VIRUS_WHITE_LIST
#
# Full path to clamav's (personal) white list file
#
# Defaults to:
# CLAMAV_VIRUS_WHITE_LIST="/var/lib/clamav/my_whitelist.ign2"
#
#CLAMAV_VIRUS_WHITE_LIST="/var/lib/clamav/my_whitelist.ign2"
# WHITE_LIST_STRINGS
#
# A blank separated list of strings to whitelist.
#
# Example:
# WHITE_LIST_STRINGS="google.com tinyurl.com"
#
# Defaults to:
# WHITE_LIST_STRINGS="google.com"
#
#WHITE_LIST_STRINGS="google.com"
WHITE_LIST_STRINGS="google.com tinyurl.com"