#1453 - Roundcube - Housekeeping - Disroot/Disroot-Project - Disroot Forgejo: Brace yourself, merge conflicts ahead.

meaz commented

2026-07-06 08:12:08 +02:00

Owner

Copy link

Ansibled - No manual config changes
- App Role working in production
- Cron role working in production
- Logrotate role working in production
- Base role working in production
- Apt role working in production
- Observatory score of A
Change hostname to new schema
Container backup weekly
App data backup up daily
Container clean of old packages
Documentation
- Setup documentation
- Procedures and guides
  - common issues list and how to fix
Proper role readme file
Utilize role releases as changelog

- [ ] **Ansibled** - No manual config changes - [ ] App Role working in production - [x] Cron role working in production - [x] Logrotate role working in production - [x] Base role working in production - [x] Apt role working in production - [ ] Observatory score of A - [x] Change hostname to new schema - [ ] Container backup weekly - [ ] App data backup up daily - [x] Container clean of old packages - [ ] Documentation - [x] Setup documentation - [ ] Procedures and guides - [ ] common issues list and how to fix - [x] Proper role readme file - [ ] Utilize role releases as changelog

meaz self-assigned this

2026-07-06 08:12:08 +02:00

meaz added this to the 2026.07 - Knock, knock... Housekeeping! project

2026-07-06 08:12:08 +02:00

meaz commented

2026-07-06 17:44:32 +02:00

Author

Owner

Copy link

There are PR on role, host_vars and documentation.

Once everything is merged, I'll run playbook on prod

@muppeth we get B+ on https://developer.mozilla.org/en-US/observatory/analyze?host=webmail.disroot.org but I'm not sure we can do better as otherwise, it means playing with CSP.

There are PR on role, host_vars and documentation. Once everything is merged, I'll run playbook on prod @muppeth we get B+ on https://developer.mozilla.org/en-US/observatory/analyze?host=webmail.disroot.org but I'm not sure we can do better as otherwise, it means playing with CSP.

muppeth commented

2026-07-06 23:16:13 +02:00

Owner

Copy link

Cool. I left you some comments about rolling this out. As for the score securityheaders.com gives A+ so it's ok. We could check csp stuff after we are done with the entire housekeeping. As long as we don't score poorly due to obvious header misconfiguration, it's ok :)

Rows
Columns

Roundcube - Housekeeping #1453