cspark
/
Client-Ansible-Setup
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

File size limit increase for git, message size limit of mail increase

This commit is contained in:
cspark 2024-06-26 16:19:00 +01:00
parent 3adbcfc8d6
commit be1405766c
5 changed files with 14 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
proxy_resources/etc/nginx/sites-available/git.domain
View File

@ -14,6 +14,8 @@ server {
include proxy_params; include proxy_params;
} }
client_max_body_size 512M;
listen [::]:443 ssl; listen [::]:443 ssl;
listen 443 ssl; listen 443 ssl;
ssl_certificate /etc/letsencrypt/live/{{ domain_name }}/fullchain.pem; ssl_certificate /etc/letsencrypt/live/{{ domain_name }}/fullchain.pem;

2
root_resources/etc/ssh/sshd_config
View File

@ -58,7 +58,7 @@ PermitRootLogin no
#IgnoreRhosts yes #IgnoreRhosts yes
# To disable tunneled clear text passwords, change to no here! # To disable tunneled clear text passwords, change to no here!
PasswordAuthentication no PasswordAuthentication yes
#PermitEmptyPasswords no #PermitEmptyPasswords no
# Change to yes to enable challenge-response passwords (beware issues with # Change to yes to enable challenge-response passwords (beware issues with

2
services/service_mail/certbot-docker-compose-initrenew.yml
View File

@ -30,5 +30,5 @@ services:
- ./data/certbot/certs:/etc/letsencrypt - ./data/certbot/certs:/etc/letsencrypt
- ./data/certbot/logs:/var/log/letsencrypt - ./data/certbot/logs:/var/log/letsencrypt
- /etc/localtime:/etc/localtime:ro - /etc/localtime:/etc/localtime:ro
entrypoint: sh -c "sleep 15 && certbot certonly --standalone -d mail.{{ domain_name }} --noninteractive --agree-tos --email alerts@{{ domain_name }} --no-eff-email" entrypoint: sh -c "sleep 15 && certbot certonly --standalone -d *.{{ domain_name }} --noninteractive --agree-tos --email alerts@{{ domain_name }} --no-eff-email"

2
services/service_mail/deploy-service.yml
View File

@ -44,7 +44,7 @@
group: service_mail group: service_mail
loop: loop:
- docker-compose.yml - docker-compose.yml
# - certbot-docker-compose-initrenew.yml # - certbot-docker-compose-initrenew.yml
- myconfig.org - myconfig.org
- name: Copy SSL certificates - name: Copy SSL certificates

15
services/service_mail/docker-compose.yml
View File

@ -22,9 +22,10 @@ services:
- "993:993" # IMAPS Implicit TLS / Appears to not be used - "993:993" # IMAPS Implicit TLS / Appears to not be used
- "143:143" # IMAPS IMAP+STARTTLS Explicit TLS / Appears to be used - "143:143" # IMAPS IMAP+STARTTLS Explicit TLS / Appears to be used
deploy: deploy:
limits: resources:
cpus: '0.10' limits:
memory: 512M cpus: '0.10'
memory: 512M
mailserver: mailserver:
network_mode: "service:mailserver-gluetun" network_mode: "service:mailserver-gluetun"
@ -59,10 +60,12 @@ services:
- ENABLE_AMAVIS=0 - ENABLE_AMAVIS=0
- ENABLE_SPAMASSASSIN=0 - ENABLE_SPAMASSASSIN=0
- ENABLE_CLAMAV=0 - ENABLE_CLAMAV=0
- POSTFIX_MESSAGE_SIZE_LIMIT=0
cap_add: cap_add:
- NET_ADMIN # For Fail2Ban to work - NET_ADMIN # For Fail2Ban to work
deploy: deploy:
limits: resources:
cpus: '0.25' limits:
memory: 512M cpus: '0.25'
memory: 512M
restart: always restart: always