update..

roles/common/files/b.mx/etc/postfix/postfwd.bl-sender

@@ -0,0 +1,5 @@
+# *** [ Ansible managed: DO NOT EDIT DIRECTLY ] ***
+
+# ---
+# Sender addresses blocked by postfwd
+# ---

roles/common/files/b.mx/etc/postfix/postfwd.bl-user

@@ -0,0 +1,6 @@
+# *** [ Ansible managed: DO NOT EDIT DIRECTLY ] ***
+
+# ---
+# SASL Users blocked by postfwd
+# ---
+

roles/common/files/b.mx/etc/postfix/postfwd.wl-user

@@ -0,0 +1,7 @@
+# *** [ Ansible managed: DO NOT EDIT DIRECTLY ] ***
+
+# ---
+# SASL Users whitelisted by postfwd
+# ---
+
+kanzlei-kiel@b.mx.oopen.de

roles/common/files/b.mx/root/bin/monitoring/conf/check_webservice_load.conf

@@ -0,0 +1,154 @@
+# *** [ Ansible managed: DO NOT EDIT DIRECTLY ] ***
+
+#---------------------------------------
+#-----------------------------
+# Settings
+#-----------------------------
+#---------------------------------------
+
+
+# ---
+# - LOGGING
+# -
+# - This Parameter is now obsolete. If script is running in a terminal, then output ist verbose,
+# - the output will be verbos. If running as cronjob, output will only be written, if warnings or
+# - errors occurs.
+# ---
+
+
+# - What to check
+# -
+check_load=true
+check_mysql=false
+check_apache=true
+check_php_fpm=false
+check_website=false
+
+
+# - Additional Settings for check_mysql
+# -
+# - MySQL / MariaDB credentials
+# -
+# - Giving password on command line is insecure an sind mysql 5.5
+# - you will get a warning doing so.
+# -
+# - Reading username/password fro file ist also possible, using MySQL/MariaDB
+# - commandline parameter '--defaults-file'.
+# -
+# - Since Mysql Version 5.6, you can read username/password from
+# - encrypted file.
+# -
+# -    Create (encrypted) option file:
+# -    $ mysql_config_editor set --login-path=local --socket=/tmp/mysql.sock  --user=root --password
+# -    $ Password:
+# -
+# -    Use of option file:
+# -    $ mysql --login-path=local ...
+# -
+# - Example
+# -    mysql_credential_args="--login-path=local"
+# -    mysql_credential_args="--defaults-file=/etc/mysql/debian.cnf" (Debian default)
+# -    mysql_credential_args="--defaults-file=/usr/local/mysql/sys-maint.cnf"
+# -
+mysql_credential_args=""
+
+
+# - Additional Settings for check_php_fpm
+# -
+# - On Linux Vserver System set
+# -    curl_check_host=localhost
+# -
+# - On LX-Container set
+# -    curl_check_host=127.0.0.1
+# -
+curl_check_host=127.0.0.1
+
+# - Which PHP versions should be supported by this script. If more than one,
+# - give a blank separated list
+# -
+# - Example:
+# -    php_versions="5.4 5.6 7.0 7.1"
+# -
+php_versions=""
+
+# - If PHP-FPM's ping.path setting does not match ping-$php_major_version,
+# - set the value given in your ping.path setting here. Give ping_path also
+# - the concerning php_version in form
+# -    <php-version>:<ping-path>
+# -
+# - Multiple settings are possible, give a blank separated list.
+# -
+# - Example:
+# -
+# -    ping_path="5.4:ping-site36_net 5.6:ping-oopen_de"
+# -
+ping_path=""
+
+
+# - Additional Settings for check_website - checking (expected) website response
+# -
+# - example:
+# -    is_working_url="https://www.outoflineshop.de/"
+# -    check_string='ool-account-links'
+# -    include_cleanup_function=true
+# -    extra_alert_address="ilker@so36.net"
+# -    cleanup_function='
+# -    rm -rf /var/www/www.outoflineshop.de/htdocs/var/cache/*
+# -    rm -rf /var/www/www.outoflineshop.de/htdocs/var/session/*
+# -    /usr/local/bin/redis-cli flushall > /dev/null 2>&1
+# -    if [[ "$?" = "0" ]]; then
+# -       ok "I have cleaned up directory \"/var/www/www.outoflineshop.de/htdocs/var/cache/\""
+# -    else
+# -       error "Cleaning up directory \"/var/www/www.outoflineshop.de/htdocs/var/cache/\" failed!"
+# -     fi
+# -    /etc/init.d/redis_6379 restart
+# -    if [[ "$?" = "0" ]]; then
+# -       ok "I restarted the redis service"
+# -       echo -e "\t[ Ok ]:    I restarted the redis service" >> $LOCK_DIR/extra_msg.txt
+# -    else
+# -       error "Restarting the redis server failed!"
+# -       echo -e "\t[ Error ]: Restarting the redis server failed!" >> $LOCK_DIR/extra_msg.txt
+# -    fi
+# -    '
+# -
+is_working_url=''
+
+check_string=''
+
+include_cleanup_function=true
+
+# - An extra e-mail address, which will be informed, if the given check URL
+# - does not response as expected (check_string) AFTER script checking, restarting
+# - servervices (webserver, php-fpm) and cleaning up (cleanup_function) was done.
+# -
+extra_alert_address=''
+
+# - php_version_of_working_url
+# -
+# - If given website (is_working_url) does not response as expected, this PHP FPM
+# - engines will be restarted.
+# -
+# - Type "None" if site does not support php
+# -
+# - If php_version_of_working_url is not set, PHP FPM processes of ALL versions (php_versions)
+# - will be restarted
+# -
+php_version_of_working_url=''
+
+# - Notice:
+# - If single qoutes "'" not needed inside cleanup function, then use single quotes
+# - to enclose variable "cleanup_function". Then you don't have do masquerade any
+# - sign inside.
+# -
+# - Otherwise use double quotes and masq any sign to prevent bash from interpreting.
+# -
+cleanup_function='
+'
+
+
+# - E-Mail settings for sending script messages
+# -
+from_address="root@`hostname -f`"
+content_type='Content-Type: text/plain;\n charset="utf-8"'
+to_addresses="root"
+

roles/common/files/b.mx/root/bin/postfix/conf/create_opendkim_key.conf

@@ -0,0 +1,176 @@
+# *** [ Ansible managed: DO NOT EDIT DIRECTLY ] ***
+
+# ---------------------------------------------------------
+# - Parameter Settings for script 'create_opendkim_key.sh'.
+# ---------------------------------------------------------
+ 
+ 
+# ---------- 
+# DNS Server 
+# ---------- 
+ 
+# - dns_dkim_zone_master_server
+# - 
+# - The DNS Server who is serving the update zone and is used 
+# - for the dynamic updates (nsupdate) 
+# - 
+#dns_dkim_zone_master_server=""
+dns_dkim_zone_master_server="b.ns.oopen.de"
+
+# - update_dns
+# -
+# - Possible Values are 'true' or 'false'
+# -
+#update_dns=true
+
+# - update_zone
+# -
+# - Zone containing the DKIM TXT record.
+# -
+# - Defaults to '_domainkey.<dkim_domaini>'
+# -
+# - Note:
+# -    do NOT change/set this option unless you know what you do.
+# -
+#update_zone=""
+
+# - TTL
+# -
+# - TTL for the DKIM TXT Record.
+# -
+# - Defaults to "" if update_dns=false
+# - Defaults to "43200" if update_dns=true
+# -
+#TTL=
+
+
+# ----------
+# TSIG Key
+# ----------
+
+# - key_secret
+# -
+# - Sectret Key used by 'nsupdate' to create/update the
+# - DKIM TXT record.
+# -
+# - Example:
+# -    key_secret="EtvvMdW0PXD4GMHP+onuHZ0dT/Z8OSJGlce/xH10OwI="
+# -
+#key_secret=""
+key_secret="4woPu0jqf9Jp1IX+gduJ3BVW/1ZMeyCPTQMqEsMXLFw="
+
+# - key_algo
+# -
+# - The key algorithm used for key creation. Available choices are: hmac-md5, 
+# - hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384 and hmac-sha512. The 
+# - default is hmac-sha256. Options are case-insensitive.
+# -
+# - Example:
+# -    key_algo="hmac-md5"
+# -
+# - Defaults to 'hmac-sha256'
+# -
+#key_algo="hmac-sha256"
+key_algo="hmac-sha256"
+
+# - key_name
+# -
+# - Name of the Key
+# -
+# - Defaults to "$update_zone"
+# -
+#key_name=""
+key_name="update-dkim"
+
+
+# ----------
+# Access Credentials DNS Server
+# ----------
+
+# - dns_ssh_user
+# -
+# - Defaults to 'manage-bind'
+# -
+#dns_ssh_user="manage-bind"
+
+# - dns_ssh_port
+# -
+# - Defaults to '22'
+# -
+#dns_ssh_port=22
+
+# - dns_ssh_key
+# -
+# - Defaults to '/root/.ssh/id_rsa-opendkim'
+# -
+#dns_ssh_key="/root/.ssh/id_rsa-opendkim"
+
+
+# ----------
+# Scripts envoked at DNS Server
+# ----------
+
+# - set_new_serial_script
+# -
+# - Script increases the serial for a given domain or a given 
+# - hostname's concerning domain.
+# -
+# - Defaults to /root/bin/bind/bind_set_new_serial.sh
+# -
+#set_new_serial_script="/root/bin/bind/bind_set_new_serial.sh"
+
+# - create_dkim_delegation_script
+# -
+# - Script adds DKIM subdomain delegation for a given domain
+# -
+# - Defaults to '/root/bin/bind/bind_create_dkim_delegation.sh'
+# -
+#create_dkim_delegation_script="/root/bin/bind/bind_create_dkim_delegation.sh"
+
+# - add_dkim_zone_master_script
+# -
+# - Script adds zone _domainkey.<dkim domain> as master zone
+# -
+# - Defaults to '/root/bin/bind/bind_add_dkim_zone_master.sh'
+# -
+#add_dkim_zone_master_script="/root/bin/bind/bind_add_dkim_zone_master.sh"
+
+# - add_dkim_zone_slave_script
+# -
+# - Script adds zone _domainkey.<dkim domain> as slave zone
+# -
+# - Defaults to '/root/bin/bind/bind_add_dkim_zone_slave.sh'
+# -
+#add_dkim_zone_slave_script="/root/bin/bind/bind_add_dkim_zone_slave.sh"
+
+
+
+# ----------
+# OpenDKIM Installation
+# ----------
+
+# - opendkim_dir
+# -
+# - OpenDKIM's etc-directory
+# -
+# - Defaults to opendkim_dir="/etc/opendkim"
+# -
+#opendkim_dir="/etc/opendkim"
+
+# - key_base_dir
+# -
+# - Defaults to "${opendkim_dir}/keys"
+# -
+#key_base_dir=${opendkim_dir}/keys
+
+# - signing_table_file
+# -
+# - Defaults to "${opendkim_dir}/signing.table"
+# -
+#signing_table_file="${opendkim_dir}/signing.table"
+
+# - key_table_file
+# -
+# - Defaults to "${opendkim_dir}/key.table"
+# -
+#key_table_file="${opendkim_dir}/key.table"

roles/common/files/b.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf

@@ -0,0 +1,44 @@
+# *** [ Ansible managed: DO NOT EDIT DIRECTLY ] ***
+
+# ======================================================
+# ---
+# Parameter Settings for Script 'whitelist_mb_sigs.conf'
+# ---
+# ======================================================
+
+# QUARANTINE_BASE_DIR
+#
+# Base directory where amavis stores quarantined e-mails, mostly in
+#
+#    virus e-mails:   $QUARANTINE_BASE_DIR/virus
+#    spam emails:     $QUARANTINE_BASE_DIR/spam
+#    ..
+#
+#    Defaults to:
+#       QUARANTINE_BASE_DIR="/var/QUARANTINE"
+#
+#QUARANTINE_BASE_DIR="/var/QUARANTINE"
+
+
+# CLAMAV_VIRUS_WHITE_LIST
+#
+# Full path to clamav's (personal) white list file
+#
+# Defaults to:
+#    CLAMAV_VIRUS_WHITE_LIST="/var/lib/clamav/my_whitelist.ign2"
+#
+#CLAMAV_VIRUS_WHITE_LIST="/var/lib/clamav/my_whitelist.ign2"
+
+
+# WHITE_LIST_STRINGS
+#
+# A blank separated list of strings to whitelist.
+#
+# Example:
+#    WHITE_LIST_STRINGS="google.com tinyurl.com"
+#
+# Defaults to:
+#    WHITE_LIST_STRINGS="google.com"
+#
+#WHITE_LIST_STRINGS="google.com"
+WHITE_LIST_STRINGS="google.com tinyurl.com"

roles/common/files/root/.ssh/b.mx-id_rsa-dehydrated

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

roles/common/files/root/.ssh/b.mx-id_rsa-dehydrated.pub

@@ -0,0 +1 @@
+ssh-rsa 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 root@b.mx.oopen.de

roles/common/files/root/.ssh/b.mx-id_rsa-opendkim

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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==
+-----END RSA PRIVATE KEY-----

roles/common/files/root/.ssh/b.mx-id_rsa-opendkim.pub

@@ -0,0 +1 @@
+ssh-rsa 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 root@b.mx

roles/common/templates/usr/local/src/mailsystem/conf/install_amavis.conf.j2

@@ -12,11 +12,13 @@ _IPV6='{{ ipv6_address | default(omit) }}'
 _QUARANTINE_DIR=/var/QUARANTINE
 _QUARANTINE_ADMIN=postmaster\@$mydomain
 
-_DB_IN_USE=true
+_DB_IN_USE="{{ db_in_use | default('false') }}"
 {% if "PostgreSQL" == postfix_db_type %}
 _DB_TYPE=PostgreSQL
-{% else %}
+{% elif 'MySQL' == postfix_db_type %}
 _DB_TYPE=MySQL
+{% else %} 
+_DB_TYPE=None
 {% endif %}
 _DB_HOST={{ postfix_db_host | default(omit) }}
 _DB_NAME={{ postfix_db_name | default(omit) }}

roles/common/templates/usr/local/src/mailsystem/conf/install_postfix_advanced.conf.j2

@@ -13,8 +13,8 @@ _HOSTNAME={{ hostname }}
 _IPV4='{{ ipv4_address | default(omit) }}'
 _IPV6='{{ ipv6_address | default(omit) }}'
 _ADMIN_EMAIL=argus@oopen.de
-_SASL_AUTH=false
-_SASL_USER=
-_SASL_PASS=
-_RELAY_HOST=false
+_SASL_AUTH_ENABLED="{{ sasl_auth_enable | default('no') }}"
+_SASL_USER='{{ sasl_user | default(omit) }}'
+_SASL_PASS='{{ sasl_pass | default(omit) }}'
+_RELAY_HOST="{{ is_relay_host | default('false') }}"