TODO

not (yet) puppet-ized configuration data:

- /etc/locale.gen

    root@gpl:~/puppet# grep -v ^# /etc/locale.gen 
    en_US.UTF-8 UTF-8
    fr_FR.UTF-8 UTF-8
    it_IT.UTF-8 UTF-8

- timezone

    root@gpl:/etc# git show bcd4955b893e15cb84c381be5a276eac71c9c03e
    commit bcd4955b893e15cb84c381be5a276eac71c9c03e
    Author: Stefano Zacchiroli <zack@upsilon.cc>
    Date:   Wed Jun 17 21:45:14 2015 +0000
    
        set timezone to UTC
    
    diff --git a/localtime b/localtime
    index fd8ea7d..5583f5b 100644
    Binary files a/localtime and b/localtime differ
    diff --git a/timezone b/timezone
    index 7cd9492..7f39493 100644
    --- a/timezone
    +++ b/timezone
    @@ -1 +1 @@
    -Europe/Paris
    +Etc/UTC

- # vim-addon-manager --system-wide install puppet

- /opt/gsutil/virt/

  virtualenv with Google's gsutil https://cloud.google.com/storage/docs/gsutil
  (waiting for a proper Debian package)

  note: puppet handles /usr/local/bin/gsutil , but that script requires the
  above /opt dir to work properly

- munin
  - /var/www/munin/etc/htpasswd
  - apt-get install munin

- dovecot-imapd

  - /etc/dovecot/conf.d/10-master.conf
  - /etc/dovecot/conf.d/10-ssl.conf

    commit 9515f34727e33bcbf2a78908eeeb0d431a65c892
    commit 865687a7e8303a76731ffc02d344be6ab48d973b
    commit 55c16b331587d8cc266c8cae6ecea72768b4e6b9

- unix user "mailing", for civicrm bounce processing
  - user with password but nologin

- postfix SSL certificate

    commit 9e4930dd955aa8c3f5d2fa982a71d23b5a942cae
    Author: Stefano Zacchiroli <zack@upsilon.cc>
    Date:   Sat Apr 23 22:32:07 2016 +0000
    
        postfix: use opensource.org SSL certificate
    
    diff --git a/postfix/main.cf b/postfix/main.cf
    index c780e7e..d7b667a 100644
    --- a/postfix/main.cf
    +++ b/postfix/main.cf
    @@ -18,8 +18,8 @@ append_dot_mydomain = no
     readme_directory = no
     
     # TLS parameters
    -smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
    -smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
    +smtpd_tls_cert_file=/etc/ssl/certs/opensourceorg.pem
    +smtpd_tls_key_file=/etc/ssl/private/opensourceorg.key
     smtpd_use_tls=yes
     smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
     smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache