revenni.base

Ansible role that sets up basic configurations for Debian and Ubuntu systems. It includes settings for automatic updates and configuring Postfix to use an external mail relay.

Requirements

• None

Role Variables

Unattended Update Settings

• unattended_enabled (1) - Turn on automatic updates
• unattended_email (emailxyz@domain.com) - Email to receive error reports
• unattended_email_errors_only (true) - Send only error emails
• unattended_reboot (false) - Should the machine restart automatically? (true/false)
• unattended_reboot_time (21:00) - Scheduled time for reboot
• unattended_remove_deps (true) - Automatically remove unused packages? (true/false)

Postfix Settings

• postfix_enabled (0) - Should Postfix be enabled?
• postfix_relayhost ([smtp.gmail.com]:587) - Mail server to connect to
• postfix_interfaces (127.0.0.1) - Used for internal mail relaying
• postfix_protocols (ipv4) - Use IPv4
• postfix_sender_canonical () - Set this to {{ postfix_sasl_username }} to ensure emails are sent from the authenticated username. Required by Exchange.
• postfix_sasl_username (relay@somedomain.com) - Username for SASL authentication
• postfix_sasl_password (vault string) - Replace this with the output of echo -n "password" | ansible-vault encrypt_string --stdin-name 'postfix_sasl_password' for secure storage

Dependencies

• None

Example Playbook

- hosts: all
  become: true
  roles:
     - { role: revenni.base, tags: base }

License

MIT

Changelog

10/17/2021 v1.0.4 - Added libsasl2-modules as a dependency for Postfix.
10/15/2021 v1.0.3 - Added support for unattended updates for Bullseye version.
12/20/2020 v1.0.2 - Added support for sender_canonical, which is off by default. Enable it by setting postfix_sender_canonical.
09/01/2020 v1.0.1 - Added support for Debian unattended settings, moving away from Ubuntu.
05/11/2020 v1.0.0 - Initial release with minimum configuration for Ubuntu.

Author Information

• Vince Hillier | Email | Twitter