revenni.base

Ansible role providing minimum configuration for Debian / Ubuntu machines. Unattended updates and postfix configuration for external relay host.

Requirements

• None

Role Variables

Unattended update variables

• unattended_enabled (1) - enable unattended upgrades
• unattended_email (emailxyz@domain.com) - email address to send errors to
• unattended_email_errors_only (true) - only email errors
• unattended_reboot (false) - reboot automatically? bool.
• unattended_reboot_time (21:00) - time to reboot machine
• unattended_remove_deps (true) - automatically remove unused dependencies? bool.

Postfix variables

• postfix_enabled (0) - enable postfix?
• postfix_relayhost ([smtp.gmail.com]:587) - mailserver to connect to
• postfix_interfaces (127.0.0.1) - only used for system relaying
• postfix_protocols (ipv4) - ipv4
• postfix_sender_canonical () - specify {{ postfix_sasl_username }} to force mail to be sent from the username we authenticate as. Exchange enforces this.
• postfix_sasl_username (relay@somedomain.com) - username for sasl auth
• postfix_sasl_password (vault string) - replace with output of echo -n "password" | ansible-vault encrypt_string --stdin-name 'postfix_sasl_password'

Dependencies

• None

Example Playbook

- hosts: all
  become: true
  roles:
     - { role: revenni.base, tags: base }

License

MIT

Changelog

10/17/2021 v1.0.4 Added libsasl2-modules as postfix dep.
10/15/2021 v1.0.3 Added unattended support for bullseye security origin.
12/20/2020 v1.0.2 Added sender_canonical support. Disabled by default, define postfix_sender_canonical to enable.
09/01/2020 v1.0.1 Added support for Debian unattended. Moving away from Ubuntu.
05/11/2020 v1.0.0 First release, ubuntu minimum config.

Author Information

• Vince Hillier | @email | twitter