5 Commits

Author	SHA1	Message	Date
Joshua Tauberer	5faa1cae71	manage the nginx conf in the management daemon too so we can have nginx operate on all domains that we serve mail for	2014-06-20 01:55:12 +00:00
Joshua Tauberer	95e61bc110	add DANE TLSA records to the PUBLIC_HOSTNAME's DNS ... Postfix has a tls_security_level called "dane" which uses DNS-Based Authentication of Named Entities (DANE) to require, if specified in the DNS of the MX host, an encrpyted connection with a known certificate. This commit adds TLSA records.	2014-06-19 01:39:27 +00:00
Joshua Tauberer	88709506f8	add DNSSEC ... * sign zones * in a cron job, periodically re-sign zones because they expire (not tested)	2014-06-17 22:21:12 +00:00
Joshua Tauberer	cecda9cec5	management: shell out external programs in a more secure way	2014-06-09 08:09:45 -04:00
Joshua Tauberer	89730bd643	new backup script, see #11	2014-06-03 21:16:38 +00:00