update..

roles/common/files/a.mx/root/bin/monitoring/conf/check_cert_for_dovecot.conf

@@ -0,0 +1,133 @@
+#---------------------------------------
+#-----------------------------
+# Settings for script check_cert_for_dovecot.sh
+#-----------------------------
+#---------------------------------------
+
+# - service_domain
+# -
+# - The main domain for which the certificate was issued
+# -
+# - Example:
+# -    service_domain="a.mx.oopen.de"
+# -    service_domain="mail.cadus.org"
+# -    service_domain="mx.warenform.de"
+# -
+#service_domain=""
+service_domain="a.mx.oopen.de"
+
+
+# - service_name
+# -
+# - Name of service.
+# -
+# - Note: this var will also be used to determin systemd service file
+# - or sysVinit script.
+# -
+# - Example: 
+# -    service_name="Mumble"
+# -    service_name="Prosody"
+# -
+# - Defaults to:
+# -    service_name="Dovecot"
+# -
+#service_name=""
+
+
+# - check_string_ps
+# -
+# - String wich (clearly) identifies the service at the process list (ps)
+# -
+# - Example:
+# -    check_string_ps="[[:digit:]]\ /usr/sbin/murmurd"
+# -    check_string_ps=""
+# -
+# - Defaults to:
+# -    check_string_ps="[[:digit:]]\ /usr/local/dovecot-[[:digit:]]{1,2}\.[[:digit:]]{1,2}\.[[:digit:]]{1,2}(\.[[:digit:]]{1,2})?/sbin/dovecot"
+# -
+#check_string_ps=""
+
+
+# - service_user
+# -
+# - User under which the service is running.
+# -
+# - Example:
+# -    service_user="mumble-server"
+# -    service_user="prosody"
+# -
+# - Defaults to:
+# -    service_user="prosody"
+# -
+#service_user=""
+
+
+# - service_group
+# -
+# - Group under which the service is running.
+# -
+# - Example:
+# -    service_group="mumble-server"
+# -    service_group="prosody"
+# -
+# - Defaults to:
+# -    service_group="prosody"
+# -
+#service_group=""
+
+
+# - cert_installed
+# -
+# - Locataion of certificate read by service
+# -
+# - Example:
+# -    cert_installed="/var/lib/mumble-server/fullchain.pem"
+# -    cert_installed="/var/lib/dehydrated/certs/jabber.so36.net/fullchain.pem"
+# -
+# - Defaults to:
+# -    /etc/dovecot/ssl/mailserver.crt
+# -
+#cert_installed=""
+
+
+# - key_installed
+# -
+# - Location of the key read by service
+# -
+# - Example:
+# -    key_installed="/var/lib/mumble-server/privkey.pem"
+# -    key_installed="/etc/prosody/certs/privkey_jabber.so36.pem"
+# -
+# - Defaults to:
+# -    /etc/dovecot/ssl/mailserver.key
+# -
+#key_installed=""
+
+
+# - cert_newest
+# -
+# - Location of the newest certificate.
+# -
+# - Example:
+# -    cert_newest="/var/lib/dehydrated/certs/il-mumble.oopen.de/fullchain.pem"
+# -    cert_newest="/var/lib/dehydrated/certs/jabber.so36.net/fullchain.pem"
+# -
+# - Defaults to: 
+# -    /var/lib/dehydrated/certs/${service_domain}/fullchain.pem
+# -
+#cert_newest=""
+
+
+# - key_newest
+# -
+# - Location of the newest Key
+# -
+# - Example:
+# -    key_newest="/var/lib/dehydrated/certs/il-mumble.oopen.de/privkey.pem"
+# -    key_newest="/var/lib/dehydrated/certs/jabber.so36.net/privkey.pem"
+# -
+# - Defaults to:
+# -    /var/lib/dehydrated/certs/${service_domain}/privkey.pem
+# -
+#key_newest=""
+

roles/common/files/a.mx/root/bin/monitoring/conf/check_webservice_load.conf

@@ -0,0 +1,145 @@
+#---------------------------------------
+#-----------------------------
+# Settings
+#-----------------------------
+#---------------------------------------
+
+#LOGGING=true
+LOGGING=false
+
+# - What to check
+# -
+check_load=true
+check_mysql=false
+check_apache=true
+check_php_fpm=true
+check_website=false
+
+
+# - Additional Settings for check_mysql
+# -
+# - MySQL / MariaDB credentials
+# -
+# - Giving password on command line is insecure an sind mysql 5.5
+# - you will get a warning doing so.
+# - 
+# - Reading username/password fro file ist also possible, using MySQL/MariaDB
+# - commandline parameter '--defaults-file'.
+# - 
+# - Since Mysql Version 5.6, you can read username/password from
+# - encrypted file.
+# -
+# -    Create (encrypted) option file:
+# -    $ mysql_config_editor set --login-path=local --socket=/tmp/mysql.sock  --user=root --password
+# -    $ Password:
+# -
+# -    Use of option file:
+# -    $ mysql --login-path=local ...
+# -
+# - Example
+# -    mysql_credential_args="--login-path=local"
+# -    mysql_credential_args="--defaults-file=/etc/mysql/debian.cnf" (Debian default)
+# -    mysql_credential_args="--defaults-file=/usr/local/mysql/sys-maint.cnf"
+# -
+mysql_credential_args="--login-path=local"
+
+
+# - Additional Settings for check_php_fpm
+# -
+# - On Linux Vserver System set
+# -    curl_check_host=localhost
+# -
+# - On LX-Container set
+# -    curl_check_host=127.0.0.1
+# -
+curl_check_host=127.0.0.1
+
+# - Which PHP versions should be supported by this script. If more than one,
+# - give a blank separated list
+# -
+# - Example:
+# -    php_versions="5.4 5.6 7.0 7.1"
+# -
+php_versions="7.4"
+
+# - If PHP-FPM's ping.path setting does not match ping-$php_major_version,
+# - set the value given in your ping.path setting here. Give ping_path also
+# - the concerning php_version in form
+# -    <php-version>:<ping-path>
+# -
+# - Multiple settings are possible, give a blank separated list.
+# -
+# - Example:
+# -
+# -    ping_path="5.4:ping-site36_net 5.6:ping-oopen_de"
+# -
+ping_path=""
+
+
+# - Additional Settings for check_website - checking (expected) website response
+# -
+# - example:
+# -    is_working_url="https://www.outoflineshop.de/"
+# -    check_string='ool-account-links'
+# -    include_cleanup_function=true
+# -    extra_alert_address="ilker@so36.net"
+# -    cleanup_function='
+# -    rm -rf /var/www/www.outoflineshop.de/htdocs/var/cache/*
+# -    rm -rf /var/www/www.outoflineshop.de/htdocs/var/session/*
+# -    /usr/local/bin/redis-cli flushall > /dev/null 2>&1
+# -    if [[ "$?" = "0" ]]; then
+# -       ok "I have cleaned up directory \"/var/www/www.outoflineshop.de/htdocs/var/cache/\""
+# -    else
+# -       error "Cleaning up directory \"/var/www/www.outoflineshop.de/htdocs/var/cache/\" failed!"
+# -     fi
+# -    /etc/init.d/redis_6379 restart
+# -    if [[ "$?" = "0" ]]; then
+# -       ok "I restarted the redis service"
+# -       echo -e "\t[ Ok ]:    I restarted the redis service" >> $LOCK_DIR/extra_msg.txt
+# -    else
+# -       error "Restarting the redis server failed!"
+# -       echo -e "\t[ Error ]: Restarting the redis server failed!" >> $LOCK_DIR/extra_msg.txt
+# -    fi
+# -    '
+# -
+is_working_url=''
+
+check_string=''
+
+include_cleanup_function=true
+
+# - An extra e-mail address, which will be informed, if the given check URL
+# - does not response as expected (check_string) AFTER script checking, restarting
+# - servervices (webserver, php-fpm) and cleaning up (cleanup_function) was done.
+# -
+extra_alert_address=''
+
+# - php_version_of_working_url
+# -
+# - If given website (is_working_url) does not response as expected, this PHP FPM
+# - engines will be restarted.
+# -
+# - Type "None" if site does not support php
+# -
+# - If php_version_of_working_url is not set, PHP FPM processes of ALL versions (php_versions)
+# - will be restarted
+# -
+php_version_of_working_url=''
+
+# - Notice:
+# - If single qoutes "'" not needed inside cleanup function, then use single quotes
+# - to enclose variable "cleanup_function". Then you don't have do masquerade any 
+# - sign inside.
+# -
+# - Otherwise use double quotes and masq any sign to prevent bash from interpreting.
+# -
+cleanup_function='
+'
+
+
+# - E-Mail settings for sending script messages
+# -
+from_address="root@`hostname -f`"
+content_type='Content-Type: text/plain;\n charset="utf-8"'
+to_addresses="root"
+

roles/common/files/a.mx/root/bin/postfix/conf/create_opendkim_key.conf

@@ -0,0 +1,170 @@
+# ---------------------------------------------------------
+# - Parameter Settings for script 'create_opendkim_key.sh'.
+# ---------------------------------------------------------
+ 
+ 
+# ---------- 
+# DNS Server 
+# ---------- 
+ 
+# - dns_dkim_zone_master_server
+# - 
+# - The DNS Server who is serving the update zone and is used 
+# - for the dynamic updates (nsupdate) 
+# - 
+dns_dkim_zone_master_server="b.ns.oopen.de"
+
+# - update_dns
+# -
+# - Possible Values are 'true' or 'false'
+# -
+#update_dns=true
+
+# - update_zone
+# -
+# - Zone containing the DKIM TXT record.
+# -
+# - Defaults to '_domainkey.<dkim_domaini>'
+# -
+# - Note:
+# -    do NOT change/set this option unless you know what you do.
+# -
+#update_zone=""
+
+# - TTL
+# -
+# - TTL for the DKIM TXT Record.
+# -
+# - Defaults to "" if update_dns=false
+# - Defaults to "43200" if update_dns=true
+# -
+#TTL=
+
+
+# ----------
+# TSIG Key
+# ----------
+
+# - key_secret
+# -
+# - Sectret Key used by 'nsupdate' to create/update the
+# - DKIM TXT record.
+# -
+# - Example:
+# -    key_secret="EtvvMdW0PXD4GMHP+onuHZ0dT/Z8OSJGlce/xH10OwI="
+# -
+key_secret="4woPu0jqf9Jp1IX+gduJ3BVW/1ZMeyCPTQMqEsMXLFw="
+
+# - key_algo
+# -
+# - The key algorithm used for key creation. Available choices are: hmac-md5, 
+# - hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384 and hmac-sha512. The 
+# - default is hmac-sha256. Options are case-insensitive.
+# -
+# - Example:
+# -    key_algo="hmac-md5"
+# -
+# - Defaults to 'hmac-sha256'
+# -
+key_algo="hmac-sha256"
+
+# - key_name
+# -
+# - Name of the Key
+# -
+# - Defaults to "$update_zone"
+# -
+key_name="update-dkim"
+
+
+# ----------
+# Access Credentials DNS Server
+# ----------
+
+# - dns_ssh_user
+# -
+# - Defaults to 'manage-bind'
+# -
+#dns_ssh_user="manage-bind"
+
+# - dns_ssh_port
+# -
+# - Defaults to '22'
+# -
+#dns_ssh_port=22
+
+# - dns_ssh_key
+# -
+# - Defaults to '/root/.ssh/id_rsa-opendkim'
+# -
+#dns_ssh_key="/root/.ssh/id_rsa-opendkim"
+
+
+# ----------
+# Scripts envoked at DNS Server
+# ----------
+
+# - set_new_serial_script
+# -
+# - Script increases the serial for a given domain or a given 
+# - hostname's concerning domain.
+# -
+# - Defaults to /root/bin/bind/bind_set_new_serial.sh
+# -
+#set_new_serial_script="/root/bin/bind/bind_set_new_serial.sh"
+
+# - create_dkim_delegation_script
+# -
+# - Script adds DKIM subdomain delegation for a given domain
+# -
+# - Defaults to '/root/bin/bind/bind_create_dkim_delegation.sh'
+# -
+#create_dkim_delegation_script="/root/bin/bind/bind_create_dkim_delegation.sh"
+
+# - add_dkim_zone_master_script
+# -
+# - Script adds zone _domainkey.<dkim domain> as master zone
+# -
+# - Defaults to '/root/bin/bind/bind_add_dkim_zone_master.sh'
+# -
+#add_dkim_zone_master_script="/root/bin/bind/bind_add_dkim_zone_master.sh"
+
+# - add_dkim_zone_slave_script
+# -
+# - Script adds zone _domainkey.<dkim domain> as slave zone
+# -
+# - Defaults to '/root/bin/bind/bind_add_dkim_zone_slave.sh'
+# -
+#add_dkim_zone_slave_script="/root/bin/bind/bind_add_dkim_zone_slave.sh"
+
+
+
+# ----------
+# OpenDKIM Installation
+# ----------
+
+# - opendkim_dir
+# -
+# - OpenDKIM's etc-directory
+# -
+# - Defaults to opendkim_dir="/etc/opendkim"
+# -
+#opendkim_dir="/etc/opendkim"
+
+# - key_base_dir
+# -
+# - Defaults to "${opendkim_dir}/keys"
+# -
+#key_base_dir=${opendkim_dir}/keys
+
+# - signing_table_file
+# -
+# - Defaults to "${opendkim_dir}/signing.table"
+# -
+#signing_table_file="${opendkim_dir}/signing.table"
+
+# - key_table_file
+# -
+# - Defaults to "${opendkim_dir}/key.table"
+# -
+#key_table_file="${opendkim_dir}/key.table"

roles/common/files/a.mx/root/bin/postfix/conf/postfix_add_mailboxes.conf

@@ -0,0 +1,84 @@
+# ----------------------------------------------------
+# ---
+# - Parameter Settings for script 'postfix_add_mailboxes.sh'.
+# ---
+# ----------------------------------------------------
+
+# - dovecot_enc_method
+# -
+# - The (dovecot) password  scheme  which  should  be  used  to  generate  the  hashed  
+# - passwords of EXISTING users.
+# -
+# - Possible values are: 
+# -
+# -    See output of 'doveadm pw -l'
+# -
+# - DEFAULTS to: dovecot_enc_method="SHA512-CRYPT"
+# -
+#dovecot_enc_method="SHA512-CRYPT"
+
+# - in_file
+# -
+# - The file from wich the script reads the e-mail-address/password
+# - kombination(s). Each line in this file must only contain
+# -    <emal-address> <password>
+# -
+# - Defaults to: in_file="${conf_dir}/mailboxes_new.lst"
+# -
+#in_file="${conf_dir}/mailboxes_new.lst"
+
+# - db_type
+# -
+# - Type of Postfix Database
+# -
+# - Possible values are 'pgsql' (PostgeSQL) or 'mysql' (MySQL)
+# - 
+# - Defaults to: db_type="pgsql"
+# -
+#db_type="pgsql"
+
+# - db_name
+# -
+# - Database name for the postfix database
+# - 
+# - Defaults to: db_name="postfix"
+# -
+#db_name="postfix"
+
+# - db_name
+# -
+# - Database name for the postfix database
+# - 
+# - Defaults to: db_name="postfix"
+# -
+#db_name="postfix"
+
+# - mysql_credential_args (root access to MySQL Database)
+# -
+# - Example
+# -    mysql_credential_args="--login-path=local"
+# -    mysql_credential_args="--defaults-file=/etc/mysql/debian.cnf" (Debian default)
+# -    mysql_credential_args="--defaults-file=/usr/local/mysql/sys-maint.cnf"
+# -
+# - Defaults to:
+# -    '/etc/mysql/debian.cnf' if MySQL is installed from debian package system
+# -    '/usr/local/mysql/sys-maint.cnf' otherwise
+# -
+#mysql_credential_args=""
+
+# - quota
+# -
+# - The quota setting for the new mailboxes.
+# -
+# - Defaults to: quota="536870912"
+# -
+#quota="536870912"
+quota=1073741824
+
+# - log_file
+# -
+# - Where to write logging informations?
+# -
+# - Defaults to: log_file="${script_dir}/log/postfix_add_mailboxes.log"
+# -
+#log_file="${script_dir}/log/postfix_add_mailboxes.log"

roles/common/files/a.mx/root/bin/postfix/conf/sent_userinfo_postfix.conf

@@ -0,0 +1,92 @@
+# ----------------------------------------------------
+# ---
+# - Parameter Settings for script 'sent_userinfo_postfix.sh'.
+# ---
+# ----------------------------------------------------
+
+# - message_body_file
+# -
+# - Full path to file containing the user info. This file must contain 
+# - the message body WITHOUT e-mail headers. If file is placed in the
+# - 'files' directory use '${file_dir}/<file-name>'
+# -
+# - Defaults to '${file_dir}/sent_userinfo_postfix.message'
+# -
+#message_body_file="${file_dir}/sent_userinfo_postfix.email"
+
+
+# - email_from
+# -
+# - From Address of user info
+# -
+# - Example: 'oo@oopen.de'
+# -
+#email_from=""
+email_from="oo@oopen.de"
+
+
+# - email_from_org
+# -
+# - Example: email_from_org="O.OPEN"
+# -
+#email_from_org=""
+email_from_org="O.OPEN"
+
+
+# - db_type
+# -
+# - Type of Postfix Database
+# -
+# - Possible values are 'pgsql' (PostgeSQL) or 'mysql' (MySQL)
+# - 
+# - Defaults to: db_type="pgsql"
+# -
+#db_type="pgsql"
+
+# - db_name
+# -
+# - Database name for the postfix database
+# - 
+# - Defaults to: db_name="postfix"
+# -
+#db_name="postfix"
+
+# - mysql_credential_args (root access to MySQL Database)
+# -
+# - Example
+# -    mysql_credential_args="--login-path=local"
+# -    mysql_credential_args="--defaults-file=/etc/mysql/debian.cnf" (Debian default)
+# -    mysql_credential_args="--defaults-file=/usr/local/mysql/sys-maint.cnf"
+# -
+# - Defaults to:
+# -    '/etc/mysql/debian.cnf' if MySQL is installed from debian package system
+# -    '/usr/local/mysql/sys-maint.cnf' otherwise
+# -
+#mysql_credential_args=""
+
+
+# - mail_user
+# -
+# - The owner of the mailbox directories and within the e-mails itself.
+# -
+# - defaults to mail_user="vmail"
+# -
+#mail_user="vmail"
+
+
+# - mail_group
+# -
+# - The group of the mailbox directories
+# -
+# - defaults to mail_group="vmail"
+# -
+#mail_group="vmail"
+
+
+# - mail_basedir - No more needed!
+# -
+# - The root directory where all mailbox-domains are located.
+# -
+# - Defaults to '/var/vmail'.
+# -
+#mail_basedir=/var/vmail

roles/common/files/a.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf

@@ -0,0 +1,42 @@
+# ======================================================
+# ---
+# Parameter Settings for Script 'whitelist_mb_sigs.conf'
+# ---
+# ======================================================
+
+# QUARANTINE_BASE_DIR
+#
+# Base directory where amavis stores quarantined e-mails, mostly in
+#
+#    virus e-mails:   $QUARANTINE_BASE_DIR/virus
+#    spam emails:     $QUARANTINE_BASE_DIR/spam
+#    ..
+#
+#    Defaults to:
+#       QUARANTINE_BASE_DIR="/var/QUARANTINE"
+#
+#QUARANTINE_BASE_DIR="/var/QUARANTINE"
+
+
+# CLAMAV_VIRUS_WHITE_LIST
+#
+# Full path to clamav's (personal) white list file
+#
+# Defaults to:
+#    CLAMAV_VIRUS_WHITE_LIST="/var/lib/clamav/my_whitelist.ign2"
+#
+#CLAMAV_VIRUS_WHITE_LIST="/var/lib/clamav/my_whitelist.ign2"
+
+
+# WHITE_LIST_STRINGS
+#
+# A blank separated list of strings to whitelist.
+#
+# Example:
+#    WHITE_LIST_STRINGS="google.com tinyurl.com"
+#
+# Defaults to:
+#    WHITE_LIST_STRINGS="google.com"
+#
+#WHITE_LIST_STRINGS="google.com"
+WHITE_LIST_STRINGS="google.com tinyurl.com"

roles/common/files/a.ns/root/bin/bind/conf/bind.conf

@@ -0,0 +1,86 @@
+# ----------------------------------------------------
+# ---
+# - Parameter Settings for bind administration scripts.
+# ---
+# ----------------------------------------------------
+
+
+# - BIND_USER
+# -
+# - The user under which the nameservice is running
+# -
+# - Defaults to 'bind'
+# -
+#BIND_USER="bind"
+
+
+# - BIND_GROUP
+# -
+# - The group under which the nameservice is running
+# -
+# - Defaults to 'bind'
+# -
+#BIND_GROUP="bind"
+
+
+# - CONF_FILE_DIR
+# -
+# - Directory containing bind configuration files
+# -
+# - Defaults to "/etc/bind"
+# -
+#CONF_FILE_DIR="/root/tmp/bind"
+CONF_FILE_DIR="/etc/bind"
+
+
+# - ZONE_FILE_MASTER_DIR
+# -
+# - Directory containing the zone files (master)
+# -
+# - Defaults to "${CONF_FILE_DIR}/master"
+# -
+#ZONE_FILE_MASTER_DIR="${CONF_FILE_DIR}/master"
+
+
+# - ZONE_FILE_SLAVE_DIR
+# -
+# - Directory containing the zone files (slave)
+# -
+# - Defaults to "${CONF_FILE_DIR}/slave"
+# -
+#ZONE_FILE_SLAVE_DIR="${CONF_FILE_DIR}/slave"
+
+
+# - ZONE_FILE_SUFFIX
+# -
+# - Defaults to 'zone'
+# -
+#ZONE_FILE_SUFFIX="zone"
+
+
+# - ZONES_DECLARATION_FILE
+# -
+# - File containing zone declarations
+# -
+# - Defaults to ${CONF_FILE_DIR}/named.conf.local
+# -
+#ZONES_DECLARATION_FILE="${CONF_FILE_DIR}/named.conf.local"
+
+
+
+# -----
+# - bind_change_SOA.sh
+# -----
+
+# - SOA_PRIMARY_MASTER
+# -
+# - Primary master for all zones
+# -
+SOA_PRIMARY_MASTER="a.ns.oopen.de"
+
+# - SOA_ADMIN_EMAIL
+# -
+# - mail address of the responsible of all zones
+# -
+SOA_ADMIN_EMAIL="domreg@oopen.de"
+

roles/common/files/a.ns/root/bin/bind/conf/bind_add_dkim_zone_slave.conf

@@ -0,0 +1,24 @@
+# --------------------------------------------------------------
+# - Parameter Settings for script 'bind_add_dkim_zone_slave.sh'.
+# ---------------------------------------------------------------
+
+# - DKIM_DNS_MASTER
+# -
+# - Primary master for new DKIM slave zones _domainkey.*
+# -
+# - Example: 
+# -    DKIM_DNS_MASTER="b.ns.oopen.de"
+# -
+# - This option is required and have no default value. But
+# - option can also set usinf commandline parameter flag '-M'
+# -
+DKIM_DNS_MASTER="b.ns.oopen.de"
+
+# - ALLOW_TRANSFER_OPTION
+# -
+# - Example:
+# -    ALLOW_TRANSFER_OPTION="oopen"
+# -
+# - Defaults to DKIM_DNS_MASTER IPv4 Address
+# -
+#ALLOW_TRANSFER_OPTION=""

roles/common/files/b.ns/root/bin/bind/conf/bind_add_dkim_zone_master.conf

@@ -0,0 +1,40 @@
+# --------------------------------------------------------------
+# - Parameter Settings for script 'bind_add_dkim_zone_master.sh'.
+# ---------------------------------------------------------------
+
+# - SOA_PRIMARY_MASTER
+# -
+# - Primary master for new DKIM zones _domainkey.*
+# -
+# - Example: SOA_PRIMARY_MASTER="a.ns.oopen.de"
+# -
+# - Defaults to '$(hostname --long)'
+# -
+SOA_PRIMARY_MASTER="b.ns.oopen.de"
+
+# - SOA_ADMIN_EMAIL
+# -
+# - mail address of the responsible of all zones
+# -
+# - Example: SOA_ADMIN_EMAIL="domreg@oopen.de"
+# -
+# - Defaults to 'domreg@oopen.de'
+# -
+SOA_ADMIN_EMAIL="domreg@oopen.de"
+
+# - TSIG_KEY_NAME
+# -
+# - Name of the key used for dynamical updates
+# -
+# - Defaults to 'update-dkim'
+# -
+TSIG_KEY_NAME='update-dkim'
+
+# - ALLOW_TRANSFER_OPTION
+# -
+# - Example:
+# -    ALLOW_TRANSFER_OPTION="oopen;"
+# -    ALLOW_TRANSFER_OPTION="83.223.90.93;"
+# -
+ALLOW_TRANSFER_OPTION="oopen;"
+

roles/common/files/e.mx/root/bin/monitoring/conf/check_cert_for_dovecot.conf

@@ -0,0 +1,133 @@
+#---------------------------------------
+#-----------------------------
+# Settings for script check_cert_for_dovecot.sh
+#-----------------------------
+#---------------------------------------
+
+# - service_domain
+# -
+# - The main domain for which the certificate was issued
+# -
+# - Example:
+# -    service_domain="a.mx.oopen.de"
+# -    service_domain="mail.cadus.org"
+# -    service_domain="mx.warenform.de"
+# -
+#service_domain=""
+service_domain="a.mx.oopen.de"
+
+
+# - service_name
+# -
+# - Name of service.
+# -
+# - Note: this var will also be used to determin systemd service file
+# - or sysVinit script.
+# -
+# - Example: 
+# -    service_name="Mumble"
+# -    service_name="Prosody"
+# -
+# - Defaults to:
+# -    service_name="Dovecot"
+# -
+#service_name=""
+
+
+# - check_string_ps
+# -
+# - String wich (clearly) identifies the service at the process list (ps)
+# -
+# - Example:
+# -    check_string_ps="[[:digit:]]\ /usr/sbin/murmurd"
+# -    check_string_ps=""
+# -
+# - Defaults to:
+# -    check_string_ps="[[:digit:]]\ /usr/local/dovecot-[[:digit:]]{1,2}\.[[:digit:]]{1,2}\.[[:digit:]]{1,2}(\.[[:digit:]]{1,2})?/sbin/dovecot"
+# -
+#check_string_ps=""
+
+
+# - service_user
+# -
+# - User under which the service is running.
+# -
+# - Example:
+# -    service_user="mumble-server"
+# -    service_user="prosody"
+# -
+# - Defaults to:
+# -    service_user="prosody"
+# -
+#service_user=""
+
+
+# - service_group
+# -
+# - Group under which the service is running.
+# -
+# - Example:
+# -    service_group="mumble-server"
+# -    service_group="prosody"
+# -
+# - Defaults to:
+# -    service_group="prosody"
+# -
+#service_group=""
+
+
+# - cert_installed
+# -
+# - Locataion of certificate read by service
+# -
+# - Example:
+# -    cert_installed="/var/lib/mumble-server/fullchain.pem"
+# -    cert_installed="/var/lib/dehydrated/certs/jabber.so36.net/fullchain.pem"
+# -
+# - Defaults to:
+# -    /etc/dovecot/ssl/mailserver.crt
+# -
+#cert_installed=""
+
+
+# - key_installed
+# -
+# - Location of the key read by service
+# -
+# - Example:
+# -    key_installed="/var/lib/mumble-server/privkey.pem"
+# -    key_installed="/etc/prosody/certs/privkey_jabber.so36.pem"
+# -
+# - Defaults to:
+# -    /etc/dovecot/ssl/mailserver.key
+# -
+#key_installed=""
+
+
+# - cert_newest
+# -
+# - Location of the newest certificate.
+# -
+# - Example:
+# -    cert_newest="/var/lib/dehydrated/certs/il-mumble.oopen.de/fullchain.pem"
+# -    cert_newest="/var/lib/dehydrated/certs/jabber.so36.net/fullchain.pem"
+# -
+# - Defaults to: 
+# -    /var/lib/dehydrated/certs/${service_domain}/fullchain.pem
+# -
+#cert_newest=""
+
+
+# - key_newest
+# -
+# - Location of the newest Key
+# -
+# - Example:
+# -    key_newest="/var/lib/dehydrated/certs/il-mumble.oopen.de/privkey.pem"
+# -    key_newest="/var/lib/dehydrated/certs/jabber.so36.net/privkey.pem"
+# -
+# - Defaults to:
+# -    /var/lib/dehydrated/certs/${service_domain}/privkey.pem
+# -
+#key_newest=""
+

roles/common/files/e.mx/root/bin/monitoring/conf/check_webservice_load.conf

@@ -0,0 +1,145 @@
+#---------------------------------------
+#-----------------------------
+# Settings
+#-----------------------------
+#---------------------------------------
+
+#LOGGING=true
+LOGGING=false
+
+# - What to check
+# -
+check_load=true
+check_mysql=false
+check_apache=true
+check_php_fpm=true
+check_website=false
+
+
+# - Additional Settings for check_mysql
+# -
+# - MySQL / MariaDB credentials
+# -
+# - Giving password on command line is insecure an sind mysql 5.5
+# - you will get a warning doing so.
+# - 
+# - Reading username/password fro file ist also possible, using MySQL/MariaDB
+# - commandline parameter '--defaults-file'.
+# - 
+# - Since Mysql Version 5.6, you can read username/password from
+# - encrypted file.
+# -
+# -    Create (encrypted) option file:
+# -    $ mysql_config_editor set --login-path=local --socket=/tmp/mysql.sock  --user=root --password
+# -    $ Password:
+# -
+# -    Use of option file:
+# -    $ mysql --login-path=local ...
+# -
+# - Example
+# -    mysql_credential_args="--login-path=local"
+# -    mysql_credential_args="--defaults-file=/etc/mysql/debian.cnf" (Debian default)
+# -    mysql_credential_args="--defaults-file=/usr/local/mysql/sys-maint.cnf"
+# -
+mysql_credential_args=""
+
+
+# - Additional Settings for check_php_fpm
+# -
+# - On Linux Vserver System set
+# -    curl_check_host=localhost
+# -
+# - On LX-Container set
+# -    curl_check_host=127.0.0.1
+# -
+curl_check_host=127.0.0.1
+
+# - Which PHP versions should be supported by this script. If more than one,
+# - give a blank separated list
+# -
+# - Example:
+# -    php_versions="5.4 5.6 7.0 7.1"
+# -
+php_versions="7.4"
+
+# - If PHP-FPM's ping.path setting does not match ping-$php_major_version,
+# - set the value given in your ping.path setting here. Give ping_path also
+# - the concerning php_version in form
+# -    <php-version>:<ping-path>
+# -
+# - Multiple settings are possible, give a blank separated list.
+# -
+# - Example:
+# -
+# -    ping_path="5.4:ping-site36_net 5.6:ping-oopen_de"
+# -
+ping_path=""
+
+
+# - Additional Settings for check_website - checking (expected) website response
+# -
+# - example:
+# -    is_working_url="https://www.outoflineshop.de/"
+# -    check_string='ool-account-links'
+# -    include_cleanup_function=true
+# -    extra_alert_address="ilker@so36.net"
+# -    cleanup_function='
+# -    rm -rf /var/www/www.outoflineshop.de/htdocs/var/cache/*
+# -    rm -rf /var/www/www.outoflineshop.de/htdocs/var/session/*
+# -    /usr/local/bin/redis-cli flushall > /dev/null 2>&1
+# -    if [[ "$?" = "0" ]]; then
+# -       ok "I have cleaned up directory \"/var/www/www.outoflineshop.de/htdocs/var/cache/\""
+# -    else
+# -       error "Cleaning up directory \"/var/www/www.outoflineshop.de/htdocs/var/cache/\" failed!"
+# -     fi
+# -    /etc/init.d/redis_6379 restart
+# -    if [[ "$?" = "0" ]]; then
+# -       ok "I restarted the redis service"
+# -       echo -e "\t[ Ok ]:    I restarted the redis service" >> $LOCK_DIR/extra_msg.txt
+# -    else
+# -       error "Restarting the redis server failed!"
+# -       echo -e "\t[ Error ]: Restarting the redis server failed!" >> $LOCK_DIR/extra_msg.txt
+# -    fi
+# -    '
+# -
+is_working_url=''
+
+check_string=''
+
+include_cleanup_function=true
+
+# - An extra e-mail address, which will be informed, if the given check URL
+# - does not response as expected (check_string) AFTER script checking, restarting
+# - servervices (webserver, php-fpm) and cleaning up (cleanup_function) was done.
+# -
+extra_alert_address=''
+
+# - php_version_of_working_url
+# -
+# - If given website (is_working_url) does not response as expected, this PHP FPM
+# - engines will be restarted.
+# -
+# - Type "None" if site does not support php
+# -
+# - If php_version_of_working_url is not set, PHP FPM processes of ALL versions (php_versions)
+# - will be restarted
+# -
+php_version_of_working_url=''
+
+# - Notice:
+# - If single qoutes "'" not needed inside cleanup function, then use single quotes
+# - to enclose variable "cleanup_function". Then you don't have do masquerade any 
+# - sign inside.
+# -
+# - Otherwise use double quotes and masq any sign to prevent bash from interpreting.
+# -
+cleanup_function='
+'
+
+
+# - E-Mail settings for sending script messages
+# -
+from_address="root@`hostname -f`"
+content_type='Content-Type: text/plain;\n charset="utf-8"'
+to_addresses="root"
+

roles/common/files/e.mx/root/bin/postfix/conf/create_opendkim_key.conf

@@ -0,0 +1,170 @@
+# ---------------------------------------------------------
+# - Parameter Settings for script 'create_opendkim_key.sh'.
+# ---------------------------------------------------------
+ 
+ 
+# ---------- 
+# DNS Server 
+# ---------- 
+ 
+# - dns_dkim_zone_master_server
+# - 
+# - The DNS Server who is serving the update zone and is used 
+# - for the dynamic updates (nsupdate) 
+# - 
+dns_dkim_zone_master_server="b.ns.oopen.de"
+
+# - update_dns
+# -
+# - Possible Values are 'true' or 'false'
+# -
+#update_dns=true
+
+# - update_zone
+# -
+# - Zone containing the DKIM TXT record.
+# -
+# - Defaults to '_domainkey.<dkim_domaini>'
+# -
+# - Note:
+# -    do NOT change/set this option unless you know what you do.
+# -
+#update_zone=""
+
+# - TTL
+# -
+# - TTL for the DKIM TXT Record.
+# -
+# - Defaults to "" if update_dns=false
+# - Defaults to "43200" if update_dns=true
+# -
+#TTL=
+
+
+# ----------
+# TSIG Key
+# ----------
+
+# - key_secret
+# -
+# - Sectret Key used by 'nsupdate' to create/update the
+# - DKIM TXT record.
+# -
+# - Example:
+# -    key_secret="EtvvMdW0PXD4GMHP+onuHZ0dT/Z8OSJGlce/xH10OwI="
+# -
+key_secret="4woPu0jqf9Jp1IX+gduJ3BVW/1ZMeyCPTQMqEsMXLFw="
+
+# - key_algo
+# -
+# - The key algorithm used for key creation. Available choices are: hmac-md5, 
+# - hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384 and hmac-sha512. The 
+# - default is hmac-sha256. Options are case-insensitive.
+# -
+# - Example:
+# -    key_algo="hmac-md5"
+# -
+# - Defaults to 'hmac-sha256'
+# -
+key_algo="hmac-sha256"
+
+# - key_name
+# -
+# - Name of the Key
+# -
+# - Defaults to "$update_zone"
+# -
+key_name="update-dkim"
+
+
+# ----------
+# Access Credentials DNS Server
+# ----------
+
+# - dns_ssh_user
+# -
+# - Defaults to 'manage-bind'
+# -
+#dns_ssh_user="manage-bind"
+
+# - dns_ssh_port
+# -
+# - Defaults to '22'
+# -
+#dns_ssh_port=22
+
+# - dns_ssh_key
+# -
+# - Defaults to '/root/.ssh/id_rsa-opendkim'
+# -
+#dns_ssh_key="/root/.ssh/id_rsa-opendkim"
+
+
+# ----------
+# Scripts envoked at DNS Server
+# ----------
+
+# - set_new_serial_script
+# -
+# - Script increases the serial for a given domain or a given 
+# - hostname's concerning domain.
+# -
+# - Defaults to /root/bin/bind/bind_set_new_serial.sh
+# -
+#set_new_serial_script="/root/bin/bind/bind_set_new_serial.sh"
+
+# - create_dkim_delegation_script
+# -
+# - Script adds DKIM subdomain delegation for a given domain
+# -
+# - Defaults to '/root/bin/bind/bind_create_dkim_delegation.sh'
+# -
+#create_dkim_delegation_script="/root/bin/bind/bind_create_dkim_delegation.sh"
+
+# - add_dkim_zone_master_script
+# -
+# - Script adds zone _domainkey.<dkim domain> as master zone
+# -
+# - Defaults to '/root/bin/bind/bind_add_dkim_zone_master.sh'
+# -
+#add_dkim_zone_master_script="/root/bin/bind/bind_add_dkim_zone_master.sh"
+
+# - add_dkim_zone_slave_script
+# -
+# - Script adds zone _domainkey.<dkim domain> as slave zone
+# -
+# - Defaults to '/root/bin/bind/bind_add_dkim_zone_slave.sh'
+# -
+#add_dkim_zone_slave_script="/root/bin/bind/bind_add_dkim_zone_slave.sh"
+
+
+
+# ----------
+# OpenDKIM Installation
+# ----------
+
+# - opendkim_dir
+# -
+# - OpenDKIM's etc-directory
+# -
+# - Defaults to opendkim_dir="/etc/opendkim"
+# -
+#opendkim_dir="/etc/opendkim"
+
+# - key_base_dir
+# -
+# - Defaults to "${opendkim_dir}/keys"
+# -
+#key_base_dir=${opendkim_dir}/keys
+
+# - signing_table_file
+# -
+# - Defaults to "${opendkim_dir}/signing.table"
+# -
+#signing_table_file="${opendkim_dir}/signing.table"
+
+# - key_table_file
+# -
+# - Defaults to "${opendkim_dir}/key.table"
+# -
+#key_table_file="${opendkim_dir}/key.table"

roles/common/files/e.mx/root/bin/postfix/conf/postfix_add_mailboxes.conf

@@ -0,0 +1,84 @@
+# ----------------------------------------------------
+# ---
+# - Parameter Settings for script 'postfix_add_mailboxes.sh'.
+# ---
+# ----------------------------------------------------
+
+# - dovecot_enc_method
+# -
+# - The (dovecot) password  scheme  which  should  be  used  to  generate  the  hashed  
+# - passwords of EXISTING users.
+# -
+# - Possible values are: 
+# -
+# -    See output of 'doveadm pw -l'
+# -
+# - DEFAULTS to: dovecot_enc_method="SHA512-CRYPT"
+# -
+#dovecot_enc_method="SHA512-CRYPT"
+
+# - in_file
+# -
+# - The file from wich the script reads the e-mail-address/password
+# - kombination(s). Each line in this file must only contain
+# -    <emal-address> <password>
+# -
+# - Defaults to: in_file="${conf_dir}/mailboxes_new.lst"
+# -
+#in_file="${conf_dir}/mailboxes_new.lst"
+
+# - db_type
+# -
+# - Type of Postfix Database
+# -
+# - Possible values are 'pgsql' (PostgeSQL) or 'mysql' (MySQL)
+# - 
+# - Defaults to: db_type="pgsql"
+# -
+#db_type="pgsql"
+
+# - db_name
+# -
+# - Database name for the postfix database
+# - 
+# - Defaults to: db_name="postfix"
+# -
+#db_name="postfix"
+
+# - db_name
+# -
+# - Database name for the postfix database
+# - 
+# - Defaults to: db_name="postfix"
+# -
+#db_name="postfix"
+
+# - mysql_credential_args (root access to MySQL Database)
+# -
+# - Example
+# -    mysql_credential_args="--login-path=local"
+# -    mysql_credential_args="--defaults-file=/etc/mysql/debian.cnf" (Debian default)
+# -    mysql_credential_args="--defaults-file=/usr/local/mysql/sys-maint.cnf"
+# -
+# - Defaults to:
+# -    '/etc/mysql/debian.cnf' if MySQL is installed from debian package system
+# -    '/usr/local/mysql/sys-maint.cnf' otherwise
+# -
+#mysql_credential_args=""
+
+# - quota
+# -
+# - The quota setting for the new mailboxes.
+# -
+# - Defaults to: quota="536870912"
+# -
+#quota="536870912"
+quota=1073741824
+
+# - log_file
+# -
+# - Where to write logging informations?
+# -
+# - Defaults to: log_file="${script_dir}/log/postfix_add_mailboxes.log"
+# -
+#log_file="${script_dir}/log/postfix_add_mailboxes.log"

roles/common/files/e.mx/root/bin/postfix/conf/sent_userinfo_postfix.conf

@@ -0,0 +1,92 @@
+# ----------------------------------------------------
+# ---
+# - Parameter Settings for script 'sent_userinfo_postfix.sh'.
+# ---
+# ----------------------------------------------------
+
+# - message_body_file
+# -
+# - Full path to file containing the user info. This file must contain 
+# - the message body WITHOUT e-mail headers. If file is placed in the
+# - 'files' directory use '${file_dir}/<file-name>'
+# -
+# - Defaults to '${file_dir}/sent_userinfo_postfix.message'
+# -
+#message_body_file="${file_dir}/sent_userinfo_postfix.email"
+
+
+# - email_from
+# -
+# - From Address of user info
+# -
+# - Example: 'oo@oopen.de'
+# -
+#email_from=""
+email_from="oo@oopen.de"
+
+
+# - email_from_org
+# -
+# - Example: email_from_org="O.OPEN"
+# -
+#email_from_org=""
+email_from_org="O.OPEN"
+
+
+# - db_type
+# -
+# - Type of Postfix Database
+# -
+# - Possible values are 'pgsql' (PostgeSQL) or 'mysql' (MySQL)
+# - 
+# - Defaults to: db_type="pgsql"
+# -
+#db_type="pgsql"
+
+# - db_name
+# -
+# - Database name for the postfix database
+# - 
+# - Defaults to: db_name="postfix"
+# -
+#db_name="postfix"
+
+# - mysql_credential_args (root access to MySQL Database)
+# -
+# - Example
+# -    mysql_credential_args="--login-path=local"
+# -    mysql_credential_args="--defaults-file=/etc/mysql/debian.cnf" (Debian default)
+# -    mysql_credential_args="--defaults-file=/usr/local/mysql/sys-maint.cnf"
+# -
+# - Defaults to:
+# -    '/etc/mysql/debian.cnf' if MySQL is installed from debian package system
+# -    '/usr/local/mysql/sys-maint.cnf' otherwise
+# -
+#mysql_credential_args=""
+
+
+# - mail_user
+# -
+# - The owner of the mailbox directories and within the e-mails itself.
+# -
+# - defaults to mail_user="vmail"
+# -
+#mail_user="vmail"
+
+
+# - mail_group
+# -
+# - The group of the mailbox directories
+# -
+# - defaults to mail_group="vmail"
+# -
+#mail_group="vmail"
+
+
+# - mail_basedir - No more needed!
+# -
+# - The root directory where all mailbox-domains are located.
+# -
+# - Defaults to '/var/vmail'.
+# -
+#mail_basedir=/var/vmail

roles/common/files/e.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf

@@ -0,0 +1,42 @@
+# ======================================================
+# ---
+# Parameter Settings for Script 'whitelist_mb_sigs.conf'
+# ---
+# ======================================================
+
+# QUARANTINE_BASE_DIR
+#
+# Base directory where amavis stores quarantined e-mails, mostly in
+#
+#    virus e-mails:   $QUARANTINE_BASE_DIR/virus
+#    spam emails:     $QUARANTINE_BASE_DIR/spam
+#    ..
+#
+#    Defaults to:
+#       QUARANTINE_BASE_DIR="/var/QUARANTINE"
+#
+#QUARANTINE_BASE_DIR="/var/QUARANTINE"
+
+
+# CLAMAV_VIRUS_WHITE_LIST
+#
+# Full path to clamav's (personal) white list file
+#
+# Defaults to:
+#    CLAMAV_VIRUS_WHITE_LIST="/var/lib/clamav/my_whitelist.ign2"
+#
+#CLAMAV_VIRUS_WHITE_LIST="/var/lib/clamav/my_whitelist.ign2"
+
+
+# WHITE_LIST_STRINGS
+#
+# A blank separated list of strings to whitelist.
+#
+# Example:
+#    WHITE_LIST_STRINGS="google.com tinyurl.com"
+#
+# Defaults to:
+#    WHITE_LIST_STRINGS="google.com"
+#
+#WHITE_LIST_STRINGS="google.com"
+WHITE_LIST_STRINGS="google.com tinyurl.com"

roles/common/files/root/.ssh/a.mx-id_rsa-dehydrated

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIJKAIBAAKCAgEA0UjqDwJ76w3kDmYue5zflICaB2AtBIxM8WDEXEBtQgFIFviV
+4wURBWL/Z4P3iTrci7nTWQcSn2+tuIysfQ4VKigju8T+wGgCOx8D/u4ZDcFzIryl
+zkP585Z0b/7OlXKniLHcqczvbxrlSxQJ+L8mEj3GDGf2/EZwHSomhpAh0X81n0r6
+4R4hnLhVmpBudC8kI4ZkjIyCKs0KMzmCY7yIr1HccdKuUhRS4wYy+TTgvQtVT59/
++Bwea47BxOMKqnDJojCeR9qXjNtMLO+jqWka1PNFxBXHg61/fJ5Cufv2zrx9tSpx
+JsUNzO8AYC2iMBvzzpJkecegykoHdyh1MsTQUdG2dHTTorosMnV4jg1+GK425zha
+JoJtTOdoxujga7MJSZYwEYSCYA56kDyctV3yP9V06l7kk8OhgHhvnhJZN3jMN9xy
+xy3uCzMphCFsNiQwgFUZITnUK2qamwppnAliDQiFCN+Hp3vdTvmaGQdYtHXoD4Wf
+Wel3anIP8DteQjUffZss5+JvmMGj36N8kYYnBvHohz9n+kgGyP5CczvDUgypipBZ
+vQ9SQOme92jrcG2eKd3RpKuUUijxZrP2GCPjNFsSpT5jW1yaGqT9/yA7yh8aM+hV
+VACCNzN6a33foQcjmNjsW1HKXUnNLn3bG02E10I3N2BFm2uaX7sW69taLQ8CAwEA
+AQKCAgBkfHj9ifjLzJiinUdWTOVBHVpXjkMvOto6z3aYwMp09b6SYPs+zJD2oCj3
+n/J7rop0gF3NEktLyEiGIu0zAk8BNdKqdpTG92mSz3qQrevTof3RQPjvh838ulHf
+8F1qfmmYhaXo1aBlHWnY2Z9MEyOJgKWWEVkSmhN8vV9QHuZN+6FYgZzh+CC1agCY
+PR77pCLa981ReqmJOXfbTpKfpseOPmT1Ne5DNMTzgmd5Jn1953Inz/KWw5GLnTjG
+eykE2zDFMkjdQUSg+i6iKNHRJskeVEw8MSThwa1DvY1WVXeUngZRtTYtIlJVArCQ
+fXixVsqCdeHOYx594nuhKAjVvpAyyo69j2m6G60B6WlpMKm0bHQ9+b/lYhA1urmy
+KHUzskRoxukyV8p37pUXbahtAPc3rqyKZ9bq98H4sDR7BK7AVbNiITaly9dNLlX1
+vZ3CMyQKRHULPtRrFPQIiepJZG5BFFFl+WuOuUjbDUqLPTzuuHV2sJ+dNacu/Lgj
+KgAmTPi0XgHGTZvTxndpvYbR5cXdVfSihlAxzqaGOFw0jx4kSu06aIcRhrCql0x6
+wD5SQzBnvfDVsXnZMEqYR76MCHyEcBUmK++1a1GODowuZoH8OVpPA7YPxCKQEgF0
+sG8wEi5x+wgp4H8lU/QYfewOrkRfA8aProoEHIbAFbpR/Q2I6QKCAQEA6j77wT4O
+9QIOJIR/zYTVVUf/yOJUUf6vCtAx4szIJ5rPbXndwi8bRxJgd8RTLeRI/JUqdMN2
+5TWLCv5XjOYCQrZcMGWotSOX77z6iOv/kBzcB3Xj286DWK2MVa5zm9657V/EQZVX
+U+eKY0WA0S1be68mtKRFfx4YvgUMto/vv9TKFxXRcwSTZOPqahS5vzcfQHQoNjVL
+Cwm0L0ghKlFjRVKA/CkQpv7yTm40XiCpjL8vexPHjISxZpdbgtlve/60IRQRoqt8
+/vAwfaWyzH4uRDpjDA1eQr3dwqTgc7dyN+u6D80Fy3gS24ZrSclJ9zwnt3R4IPln
+TP0DGyjzgLJbbQKCAQEA5Lh/ZVGA0b29VWSIRABp2fkkpaS4RyZVmDKF7EjDMB4l
+lnv9lbhF8zVW72+RhFQWSJ0HnBUyISp47axHzizaEtpQ0YqeBkQ46yDPwoAZzc/9
+4y6YYVYC+zXylPrIgRstiBenqxKqtrWE4pA9Y3l9TJ4CF7dvMocqaNppA2AoIM30
+7YRej79bzszLRy7AqMfejOK942LtVnuKaH/frBIof+GwKdrsvr08uYLMyFlMd6g+
+MT2T8rOs0JteABrlLPPULAVgNRsmxYvVqusk/IAfca2G/WqY1x9oj17dZXRiT/Vc
+dYVQOzKvi9I1qWU55muXxusJ22/Qx9euJ6aj67lA6wKCAQAjZGzJX8UGw867OcHN
+nZpWDlDZW0j+MorkCVzgNaywPzXEBru40UE/1cj5j5I5xto4P5lwlu/p5dMiUBeO
+VFpXFhKLxXBeHgig0l7QPUgZ0CJ2hhttZKB3z5D6iScyj85rzSJr/lJ5fOxt31x9
+PmsqHuasOH2/nR6D52NqWgkRZOc74bIJvNFAVydd68+80mlIZcSFnDvAaTDuS+mm
+6TEkkjim4NWBRdf6fbAv4KN9fo1//RcTZiEfrRLIjG3JwEwbC1s2xs5V/ph1A4om
+V5JKAMBiW8q4LtPIyvyWv0rkpBsys/mCKpw+yup+9YjVcCNYFqLn6IbxHPFRMzjH
+YytpAoIBADk0J7CodMaAZQUhcq9HRzIcDN1c2DX7UXcSU8pn3GGBeLctZZv3jY8p
+bQfPaJ6nBTe+BnQ0HOiMndgbuY3IS/ZhIct2ltVMZMvx1eR4c3u1JHOYaMYXZAF+
+WaCHJHSd3oJmICo6LfYqagTcPG5PqVXrQuy5lRcXFTVKQu90MjUaLcLl01yyaHzN
+XZ39BHRyIKgt4X4odOGnXlOKf9+iXvy07oFZXtLJs5FWNG97XhOjQYLBOup9o6A8
+64KtN1pJ1Wv5IDnIA6dutM7dps98H+EnnFZvPbC4C0eoW0kPlbMX07sUz58uqxcW
+SROH3LZTfI9ko399dMM2nzkNhXvkRmcCggEBAIGkY2KlHJAqivcefDDi9/2SQXgT
+0wY65gVK0ihxcrGwwpS+t1zzFbLzz87m3dSh6BYFElGMvBGsTol2w16YnsRQQYL7
+HCgkQDau9SJCbK+6ula+7SI4kVF0SFTXIKffRkSC/KRoBBf2EIV3RwBUF0SIwSE6
+MG99OqV9E7u+o7AQtHCZYjmdDyqYmbt1XBfh2kV8if8OG0kCizrqijBxPCLzMItB
+HBr7v10ZJQxKVU614PHI3rjEzekLC3ypEAdZWSIFvRQceWxpFefN/lfOZcjcPEQD
+j1BDDwX18O7W2OtePYs4PxnJUWQ2M5QMcuAYwviy/p72HokwocmoSor60Mg=
+-----END RSA PRIVATE KEY-----

roles/common/files/root/.ssh/a.mx-id_rsa-dehydrated.pub

@@ -0,0 +1 @@
+ssh-rsa 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 root@a.mx

roles/common/files/root/.ssh/a.mx-id_rsa-opendkim

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIJKQIBAAKCAgEAtVNqSzdtAtSD4faC34QLBYRU2huoBXa7qnjkQxXSzfGRsvJc
+QHgvv+Nh+VztXSVN12L1VNy/zVcLZPDUrVbmJJMZ9zDtePJic2U8AHUxDZVJx+bu
+g5+lM7Opas8oMnzAAFW4/PeSm5mrbAGG6BJRuRW2JWtUCGxMI1ZFpPfm8WcizmTz
+3rgoTJWnjgW0cS7m0+VDCEImUzU4hNWX4EMVQDXIHuDCvs2IYXe1+fSbhV/+Zwdz
+9RMpFpzxOkDdo3gtC6K+/Lr5ZfXx7NMatBX4SfVLeYVKqtZwrbgdU6BldUHG4AYT
+tADyveMAPQbtzsvZ6k12eND5jmzIpAyovD25bcaNdsQZ3XQlqNVxJMQIkdw2FZb3
++zwspAYkPDb96qDEnpaSvYRP7XsANcEuSJbIY9SH0VN3XGPmDRuH8zxlNBGISs6l
+hc8qGzPRfImHoJpIGhid0oVy7naHnJqBBHbsB6hs7a59yKOStWfD+OpEk1YIxDSl
+Qm4pgrWcfl/XOs6LSkqfX7ZeJgANFM4ippe3dip1cg/vmDYAa9KgHGgVxuCpDxWe
+nRtofewD2nKm+YneOPN2AOdfyLbtNP91j2sF8VqYVjTjglAQvY6RaY3bU6KY1+gy
+/MWWkeKPnnYj975yl7hZsAUNpeaRmMNz4yL6u8ckER3qQluZ2BhpDR4VvHkCAwEA
+AQKCAgEAqC5QXqdv8roOAN3WEV61ok5VLV+NflPcSIeMoDRzrBStYN6udhWDpGVQ
+kCuC9WwOQQJGLon5VImxxdQiTwxUtgPCh6XX/OBENGfnOT15W/Hl1wX4oBjI76Vq
+M+kkjX9rzmO0Ct3OG4hymODpsgKbziG3KgncjVt1Wyk/u307tRhGDk1QbHk+15nP
+KUldTcWEz3DLtbM1POQWIg7CqX1PDplTnmA2ASc9obmZDde1EAYzPniJMvyslY7H
+p5JWgLKMhUhUALGjdNCjrVc4Y2QlQOPFN1dMJBx1soscmF4i/JkfztWUHNbsTvdn
+VzNACxjEbC+g/PpHHbUEfDRJpR9TBk8j+goCedGZ+jlRb5ux3CCyQ3FwqVAIOkwv
+aa+nhWPkxVooSnusrth0U3syY6vRNbpLTklcPMSTq2Glnly1DsO9ZdOGpMvF/8il
+sTbQxGrA10RJ28oisbSObWBb3NyzDPsRrTQeUmshxg7wnmZsFMzQhHicZGOzUuTK
+T1u7INO9tpAoy8EFROB+0SdywokR2Kzf7Pt+jKtKlu1hce4R8PTTQksQxBosWfGG
+qEe0KpxDngPdCwSo3gk/ABrP7NdHnBbCZjGR/x0+6jj8vDqZLeKlxUQXWsHfRWrM
+qk1AN+FbYWxGrfJqoZ5YT1VqLvaahjchaZ4LMzWUg2sj4y6DxwECggEBAO1JoTd1
+8/22k7Ul5SVcHGabPL7pfOLovOhkYd3rjJlukJLhTfy2fotcsNBor80MeCc5Dr0E
+ljC+ailxUGm2ZlSK4GFPfLILZKJCEZt29f4j2V4ovmgFbtbhdbSH1LEFuKB1d5r6
+4o4KXU6p59p84/V5JedFVq+afAHVrufi6lv46MoYmGEx0Jt0Q1YjOj5PjD50Ebpm
+mbW9b3n2Gi606quVTKUYTyjhIzCS2/1AGy6rzgc5/49Sf24JRf138m+VDMIecJXF
+rEOaB10ZGu3CZbZdssY7idtVhBt0saG00gHYwHqcyJGPQVzIY6ziW9dvsgsPkJ3h
+Cin4rrOATCVlZfECggEBAMOgBvvlvQXJIir78TBGl4cumBspgucReROVhyZI0UqV
+qxltCcwDr+xQre/uG5Z5+HLFnVAqKLhaq+1tIbbHp1nvUUWrlAHTfUF+U/mjbGh8
+jQ2A2Fy9x1tjd6eYjYs5tut4CXzktExQnvuipfNTO2fZiqNi+43OwIV6kJuMQRa5
+p++HAaVWwrdJaGHjQ+cas4Xu2tC3Bm1/lG6Yk3SViINkrKxU8wJApr3l+1LfxVi4
+OWGFJZS2+zp3QSZLLHABP7SfrbFpFZHVUAOrjCh8JnNAx8f/fUDZzKJQLda9aLoA
+WGaY796ZGhVSUXU8jB4/FZ74x1tMxmmtYz6nprCklwkCggEAeuoVFMGI7ffRc5h5
+pmycWZo4UTxpcLDWihrVhzsozaG0SiFjYHC4BECzZoGT70dyRf8MX2Us13sLSwRj
+fx74yvpVWJLwKNo1+sb2j+2DZ23yfw/j8cY+sBiB/E4QItKv3I58sk8bZDCCPOlO
+LKNdAh8LP01vpe8EJX8m5v9oHtRE4crzxAUl5iDHcKs21GgoYYGGXWQgY0AJqseM
+sH0OwmrIFQ0OlEJrFBI+2mSGsBpW0u98LiWx1LIBC1dCwgIXZcaW0z5eCXaUMel7
+RYXZYioPHRhiRLd7gy1jhjxAPKymp9znGF94oDM9TqTCpko5k/kwFFgqB6vF8z2W
+NBjeQQKCAQEAvlRtVxnPzdhCURXtNO4JsbGotgyuWsjKRz6dTqdcUbfKz6Mh/Ae+
+WyqoAJ9m4gHrsycHhp5uHefCDO+39JDOBxdruGBWUWyGGnmhlGnnKMW9qtyoJZtT
+YlwlZ79qP4I4sWKJwKT3sqRh+ivmUBaz3rduRscgPnlhILz+AwjzrvuVI9vzwvzl
+19QpJcwrHagB8JZS+OyJ6XFOZkg2dyChwEzsH4NLJ+7lDC+9VYV4CXi8A2C7DrT1
+O44ZqftL0fG1HLSbFthJ7yhegCOg6ybXdh0aA0FViQofKfDemGaShR2e5Lt57daB
+5SrBLFJrdWYlUBV2SSMqjFjxDV2qNYT9mQKCAQBdyS5/4yRfTL7YAJzEwtT1NF49
+VzNIYF7+axDW51wn0qcsghk5yzYbr91vDvWbROobiLq/Ed75xq8i7vuZDjw367Kg
+d8gB6lstq29RwCRmVso7OEuNs1vC+4uDoEHsUPowI9fnn03142qo0z0HS05p0i1E
+Zf9CRso7i4a+Z3IjJxn1/wuHvzX8FaEoXBTjRLejJarfHWZ+wkZrWwCoYt+eqZup
+jhF2xNTjGQqSrcVzPsvdtj9JVJ4Qi3yZOqWu41ONh3Yg0TIXovGzLwYYA5LlJwf0
+1NY4bdqXsdO2bBRRJMlWzea++fuyETdCoWphMVzvtZn7DNp6/DItnu97O9rA
+-----END RSA PRIVATE KEY-----

roles/common/files/root/.ssh/a.mx-id_rsa-opendkim.pub

@@ -0,0 +1 @@
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC1U2pLN20C1IPh9oLfhAsFhFTaG6gFdruqeORDFdLN8ZGy8lxAeC+/42H5XO1dJU3XYvVU3L/NVwtk8NStVuYkkxn3MO148mJzZTwAdTENlUnH5u6Dn6Uzs6lqzygyfMAAVbj895KbmatsAYboElG5FbYla1QIbEwjVkWk9+bxZyLOZPPeuChMlaeOBbRxLubT5UMIQiZTNTiE1ZfgQxVANcge4MK+zYhhd7X59JuFX/5nB3P1EykWnPE6QN2jeC0Lor78uvll9fHs0xq0FfhJ9Ut5hUqq1nCtuB1ToGV1QcbgBhO0APK94wA9Bu3Oy9nqTXZ40PmObMikDKi8Pbltxo12xBnddCWo1XEkxAiR3DYVlvf7PCykBiQ8Nv3qoMSelpK9hE/tewA1wS5Ilshj1IfRU3dcY+YNG4fzPGU0EYhKzqWFzyobM9F8iYegmkgaGJ3ShXLudoecmoEEduwHqGztrn3Io5K1Z8P46kSTVgjENKVCbimCtZx+X9c6zotKSp9ftl4mAA0UziKml7d2KnVyD++YNgBr0qAcaBXG4KkPFZ6dG2h97APacqb5id4483YA51/Itu00/3WPawXxWphWNOOCUBC9jpFpjdtTopjX6DL8xZaR4o+ediP3vnKXuFmwBQ2l5pGYw3PjIvq7xyQRHepCW5nYGGkNHhW8eQ== root@a.mx

roles/common/files/root/.ssh/c.mx-id_rsa

@@ -0,0 +1,49 @@
+-----BEGIN OPENSSH PRIVATE KEY-----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+-----END OPENSSH PRIVATE KEY-----

roles/common/files/root/.ssh/c.mx-id_rsa-dehydrated

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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==
+-----END RSA PRIVATE KEY-----

roles/common/files/root/.ssh/c.mx-id_rsa-dehydrated.pub

@@ -0,0 +1 @@
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC49uHTwod9KCj0occ/0ATEbLokI+Z6x7TZYKJdRMR7t5smd3Nk28GbEXBBiFS+rVHLUFo7G1Q3+//Wh4n5LTCacK0Wby6IDIOJFKRTqjT5yElIx8IW73//q58g1kNcl2CosjaImlBct/dWoTcL3dgXGM19PscLMWGNG9OQ8i0t7Yjxk9oPeJsDSdOjchHN8O/cTL7PxvcJM9wurP2vY3PbfkBUoIzPoYOraFZiG+lv3vAhfl0PJRwwmeSjZlravnbCT0EYBIHNj6Gw7sqperiOfEA4s0Cnomxrf5F4W4ESxlYlWaG5L0IljF8PQh7Tg6VkDZlE+wVSL7Ni039GAhwjJ3GAvKgIPBOM+QL2pibW9/zS3a9+tqMSPbQuk3SWyCvx28TNVLDMsFbmp1jvoqEvLdjRfnvaa204J0PFMAW6UoRAJlmOqsQomCztCKi1bZsjrCW8thSs/6ezV9NUYIAmtEFmNHRPbSK9Vq2OXcdsmQyvpzgj3U2ZPiMUjxlOuIJEP5jP5xlL/KenMpcd8js5EhKHJP1hmM8Upyu7hyWHb33F06BjeZJFvJxV9WoR97r87jqxatYWR9EviY0Rn4gkLefpIX+rT9sr0XKC8YaMhUN7X419RpMwsP748wnmfgADhdQoliAseyOpVzFvyDto9TxNAVDK39QNOWpv2+Pzcw== root@c.mx

roles/common/files/root/.ssh/c.mx-id_rsa-opendkim

@@ -0,0 +1,49 @@
+-----BEGIN OPENSSH PRIVATE KEY-----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+-----END OPENSSH PRIVATE KEY-----

roles/common/files/root/.ssh/c.mx-id_rsa-opendkim.pub

@@ -0,0 +1 @@
+ssh-rsa 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 root@c.mx-opendkim

roles/common/files/root/.ssh/c.mx-id_rsa.pub

@@ -0,0 +1 @@
+ssh-rsa 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 root@c.mx

roles/common/files/root/.ssh/e.mx-id_rsa-dehydrated

@@ -0,0 +1,49 @@
+-----BEGIN OPENSSH PRIVATE KEY-----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+-----END OPENSSH PRIVATE KEY-----

roles/common/files/root/.ssh/e.mx-id_rsa-dehydrated.pub

@@ -0,0 +1 @@
+ssh-rsa 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 root@e.mx-dehydrated

roles/common/files/root/.ssh/e.mx-id_rsa-opendkim

@@ -0,0 +1,49 @@
+-----BEGIN OPENSSH PRIVATE KEY-----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+-----END OPENSSH PRIVATE KEY-----

roles/common/files/root/.ssh/e.mx-id_rsa-opendkim.pub

@@ -0,0 +1 @@
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDRIzOUFGlC9R4f2iR3NzJ4syl8hnsxmK3tyPLN8LCCJUY1McVH80zjiB8V+OADZ8rI2NczX5QNG20sayw9DJQOhuPWlKZuz+1pzP+lPANzWVFX7NyqLipdjklFM5D29go1Gq61PhAFACU8XaXZRiPvYkQQwHYPttjlCsD9R4uOfbXaXU1gP2RHkKgseGI7L2vuSxTDSbaFyJ03A6GPViti3YlqpT5H8UGyb1TbiCl/sleJq+2bpyPbPfpmL7fzZ/4gbbmxKN4GAit491/2CcApceTP98F+kv8EbIhkfngUp2KL8IEOM1SzXioSK/4iqIS5ynM47O/sUIIxwCcx4URdE8ax6Alo88ixI7dC+k0VqppASHheyy45l9zs3KjtxmEvbRYOodZfm0yidA5iyB9FW7BTr1XBSvjBL186GakwC/m7t5Z1ez9pQgPf1HclBJt69gULuZ/d+PrWylhcIIicaiucLD+xnZeefdiAVI7z04M+g8wBsQtR2YzK1SZoLb6nzPQT6lZqc1F9M1j32CyJ7cWNgPJ8Lc4IRKSqxSo9JmhfTmMkhiSopgRyk+s36PJiTtK5PgIb0P8vtS7gpzAtOub/x00aX0tYGEX89Dvl99Lps5nj4W4g92DOT27g19+EdJwyeryTISaem7T2oEB5LVqa/ibnCDfADQnLFmoRZQ== root@e.mx-opendkim