infra/roles/services/templates
jack 1e638055c8
Some checks failed
CI/CD / syntax-check (push) Successful in 1m23s
CI/CD / deploy (push) Has been cancelled
feat(mail): rename mail→mx, webmail→mail.csrx.ru + reliability
Rename:
- docker-mailserver: hostname mail → mx, OVERRIDE_HOSTNAME → mx.csrx.ru
- Traefik route: webmail/domain_webmail → mail/domain_mail
- domain_webmail removed, domain_mail + domain_mx added to main.yml
- certbot cert: mail.csrx.ru → mx.csrx.ru

Email reliability improvements:
- certbot renewal cron (03:15 + 15:15 daily)
- deploy-hook: auto-reload Postfix+Dovecot after cert renewal
- POSTFIX_MESSAGE_SIZE_LIMIT=26214400 (25 MB)
- SPF hardened: ~all → -all
- DMARC hardened: p=none → p=quarantine, added ruf + fo=1 + adkim/aspf strict
- autodiscover/autoconfig CNAME records for mail client setup
- dns-zone.zone fully updated with architecture comments

Docs:
- STATUS.md: full mail architecture section, client settings, DNS table
- BACKLOG.md: rDNS task + DNS migration steps
- DECISIONS.md: mx/mail split rationale

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-22 20:07:59 +07:00
..
authelia chore: full project cleanup + documentation 2026-03-22 19:58:12 +07:00
crowdsec feat: comprehensive security hardening 2026-03-22 03:44:54 +07:00
grafana/provisioning feat: major infrastructure improvements 2026-03-22 03:28:16 +07:00
logrotate feat: Cloudflare DNS-01 ACME + Docker hardening + sysctl 2026-03-22 04:06:46 +07:00
loki feat: major infrastructure improvements 2026-03-22 03:28:16 +07:00
prometheus fix: correct invalid PromQL in ContainerHighMemory alert rule 2026-03-22 03:59:56 +07:00
traefik feat(mail): rename mail→mx, webmail→mail.csrx.ru + reliability 2026-03-22 20:07:59 +07:00
act_runner_config.yaml.j2 Fix CI workflow: remove container directive, use runner image directly 2026-03-21 22:34:56 +07:00
docker-compose.yml.j2 fix: remove promtail nested /var/log/traefik volume mount 2026-03-22 15:55:39 +07:00
env.j2 chore: full project cleanup + documentation 2026-03-22 19:58:12 +07:00