From 28b3243e5d9a3c27f0ae8a6e7f95fc4dba4e738b Mon Sep 17 00:00:00 2001 From: Jeremy Lecour Date: Sun, 19 Nov 2017 22:58:09 +0100 Subject: [PATCH 1/7] split amazon-ec2 tasks --- amazon-ec2/README | 1 + amazon-ec2/amazon-ec2-evolinux.yml | 3 +++ amazon-ec2/tasks/create-instance.yml | 19 ------------------- amazon-ec2/tasks/setup.yml | 20 ++++++++++++++++++++ 4 files changed, 24 insertions(+), 19 deletions(-) create mode 100644 amazon-ec2/tasks/setup.yml diff --git a/amazon-ec2/README b/amazon-ec2/README index 80442d05..15f8b129 100644 --- a/amazon-ec2/README +++ b/amazon-ec2/README @@ -14,6 +14,7 @@ machine and an Amazon security access key pair created for your account. By default, this role does nothing (no `main.yml` file). +* `setup.yml`: create a security group and ssh keys * `create-instance.yml`: create new EC2 instances * `post-install.yml`: remove admin user created on Debian instances diff --git a/amazon-ec2/amazon-ec2-evolinux.yml b/amazon-ec2/amazon-ec2-evolinux.yml index 282b8353..5c7a5e4e 100644 --- a/amazon-ec2/amazon-ec2-evolinux.yml +++ b/amazon-ec2/amazon-ec2-evolinux.yml @@ -9,6 +9,9 @@ aws_region: ca-central-1 tasks: + - include_role: + name: amazon-ec2 + tasks_from: setup.yml - include_role: name: amazon-ec2 tasks_from: create-instance.yml diff --git a/amazon-ec2/tasks/create-instance.yml b/amazon-ec2/tasks/create-instance.yml index 25b5c620..470cac72 100644 --- a/amazon-ec2/tasks/create-instance.yml +++ b/amazon-ec2/tasks/create-instance.yml @@ -1,23 +1,4 @@ --- -- name: Create default security group - ec2_group: - name: "{{ec2_security_group.name}}" - state: present - aws_access_key: "{{aws_access_key}}" - aws_secret_key: "{{aws_secret_key}}" - region: "{{aws_region}}" - description: "{{ec2_security_group.description}}" - rules: "{{ec2_security_group.rules}}" - -- name: Create key pair - ec2_key: - name: "{{ec2_keyname}}" - state: present - aws_access_key: "{{aws_access_key}}" - aws_secret_key: "{{aws_secret_key}}" - region: "{{aws_region}}" - key_material: "{{item}}" - with_file: "{{ssh_pubkey_file}}" - name: Launch new instance(s) ec2: diff --git a/amazon-ec2/tasks/setup.yml b/amazon-ec2/tasks/setup.yml new file mode 100644 index 00000000..27a1d8b0 --- /dev/null +++ b/amazon-ec2/tasks/setup.yml @@ -0,0 +1,20 @@ +--- +- name: Create default security group + ec2_group: + name: "{{ec2_security_group.name}}" + state: present + aws_access_key: "{{aws_access_key}}" + aws_secret_key: "{{aws_secret_key}}" + region: "{{aws_region}}" + description: "{{ec2_security_group.description}}" + rules: "{{ec2_security_group.rules}}" + +- name: Create key pair + ec2_key: + name: "{{ec2_keyname}}" + state: present + aws_access_key: "{{aws_access_key}}" + aws_secret_key: "{{aws_secret_key}}" + region: "{{aws_region}}" + key_material: "{{item}}" + with_file: "{{ssh_pubkey_file}}" From eefde217b1f7708a5ed26e66b5d366c9f704f82c Mon Sep 17 00:00:00 2001 From: Jeremy Lecour Date: Mon, 27 Nov 2017 14:27:13 +0100 Subject: [PATCH 2/7] Cherry-picked fcdb92dc. listupgrade: remount /usr as rw Pretty important issue fixed, need to be in stable!! --- listupgrade/tasks/main.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/listupgrade/tasks/main.yml b/listupgrade/tasks/main.yml index de9fdb2c..9bfe764e 100644 --- a/listupgrade/tasks/main.yml +++ b/listupgrade/tasks/main.yml @@ -1,4 +1,8 @@ --- + +- include_role: + name: remount-usr + - name: Scripts dir is present file: path: "/usr/share/scripts" From 516aafbaa4c26e1dc2c1d3c99fbebf57d28d825e Mon Sep 17 00:00:00 2001 From: Bruno TATU Date: Tue, 26 Dec 2017 14:27:00 +0100 Subject: [PATCH 3/7] evoacme: more explicit -> readme.md --- evoacme/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/evoacme/README.md b/evoacme/README.md index cada7e08..8f5e047d 100644 --- a/evoacme/README.md +++ b/evoacme/README.md @@ -21,7 +21,7 @@ Evoacme is open source software licensed under the AGPLv3 License. ### 2 - Install evoacme prerequisite with ansible ~~~ -# ansible-playbook playbook.yml -K --limit hostname +# ansible-playbook playbook.yml -K --diff --check --limit hostname ~~~ ### 3 - Include letsencrypt.conf in your webserver From e9afd493730158d68475d5c6d7fc8388ff919164 Mon Sep 17 00:00:00 2001 From: Bruno TATU Date: Wed, 9 May 2018 15:44:16 +0200 Subject: [PATCH 4/7] Whiteliste de domaines par defaut pour squid --- squid/files/evolinux-whitelist-defaults.conf | 45 ++++++++++++------ squid/files/whitelist-evolinux.conf | 50 +++++++++++++------- 2 files changed, 64 insertions(+), 31 deletions(-) diff --git a/squid/files/evolinux-whitelist-defaults.conf b/squid/files/evolinux-whitelist-defaults.conf index 125eda7d..e4dc240d 100644 --- a/squid/files/evolinux-whitelist-defaults.conf +++ b/squid/files/evolinux-whitelist-defaults.conf @@ -5,9 +5,9 @@ ^backports\.debian\.org$ ^www\.kernel\.org$ ^hwraid\.le-vert\.net$ -^.*clamav\.net$ +^.*\.clamav\.net$ ^spamassassin\.apache\.org$ -^.*sa-update.*$ +^.*\.sa-update.*$ ^pear\.php\.net$ ^repo\.mysql\.com$ @@ -18,12 +18,15 @@ ^ocsp\.usertrust\.com$ ### CMS / Wordpress / Drupal / ... + # Wordpress -^.*akismet\.com$ -^.*wordpress\.(org|com)$ -^.*gravatar\.com$ +^.*\.akismet\.com$ +^.*\.wordpress\.(org|com)$ +^.*\.gravatar\.com$ ^www\.wordpress-fr\.net$ ^pixel\.wp\.com$ +^wp-updates\.com$ + # Wordpress pingback ^rpc\.pingomatic\.com$ ^blo\.gs$ @@ -53,12 +56,13 @@ ^geourl\.org$ ^ipings\.com$ ^www\.weblogalot\.com$ + # Wordpress plugins -^.*wpml\.org$ +^.*\.wpml\.org$ ^www\.wpcube\.co\.uk$ -^.*wp-rocket\.me$ +^.*\.wp-rocket\.me$ ^www\.yithemes\.com$ -^.*yoast\.com$ +^.*\.yoast\.com$ ^yarpp\.org$ ^repository\.kreaturamedia\.com$ ^api\.wp-events-plugin\.com$ @@ -69,21 +73,27 @@ ^vimeo\.com$ ^api\.genesistheme\.com$ ^www\.bolderelements\.net$ +^wpbakery\.com$ +^backwpup\.com$ + # Magento Plugins ^extensions\.activo\.com$ ^amasty\.com$ + # Joomla -^.*.joomla\.org$ +^.*\.joomla\.org$ ^getk2\.org$ ^miwisoft\.com$ ^mijosoft\.com$ ^www\.joomlaworks\.net$ ^cdn\.joomlaworks\.org$ ^download\.regularlabs\.com$ + # Prestashop -^.*.prestashop\.com$ +^.*\.prestashop\.com$ ^www\.presta-module\.com$ ^www\.presteamshop\.com$ + # Others ^.*.drupal\.org$ ^.*\.dotclear\.(net|org)$ @@ -92,7 +102,9 @@ ^www\.spip\.net$ ### Feeds / API / WS Tools / ... + # Google + ^.*\.googleapis\.com$ ^.*\.google-analytics\.com$ ^blogsearch\.google\.(com|fr)$ @@ -100,16 +112,19 @@ ^maps\.google\..*$ ^translate\.google\.com$ ^www\.google\.com$ + # Facebook ^.*\.facebook\.com$ ^.*\.fbcdn\.net$ + # Maxmind ^geolite\.maxmind\.com$ + # Others -#^.*amazon.com$ -^.*twitter\.com$ -^.*feedburner\.com$ -^.*openx\.(org|com|net)$ +#^.*\.amazon.com$ +^.*\.twitter\.com$ +^.*\.feedburner\.com$ +^.*\.openx\.(org|com|net)$ ^geoip-api\.meteor\.com$ ^www\.bing\.com$ ^www\.telize\.com$ @@ -125,3 +140,5 @@ ^jenkins\.mirror\.isppower\.de$ ^ftp\.icm\.edu\.pl$ ^apt\.newrelic\.com$ +^.*\.cloudfront\.net$ +^api\.mailjet\.com$ diff --git a/squid/files/whitelist-evolinux.conf b/squid/files/whitelist-evolinux.conf index 5c22f4a7..bd3f33e0 100644 --- a/squid/files/whitelist-evolinux.conf +++ b/squid/files/whitelist-evolinux.conf @@ -1,13 +1,13 @@ ### Evolix & System -http://.*evolix.(net|org|com|fr)/.* -http://.*debian.org/.* +http://.*.evolix.(net|org|com|fr)/.* +http://.*.debian.org/.* http://www.backports.org/.* http://backports.debian.org/.* http://www.kernel.org/.* http://hwraid.le-vert.net/.* -http://.*clamav.net/.* +http://.*.clamav.net/.* http://spamassassin.apache.org/.* -http://.*sa-update.* +http://.*.sa-update.* http://pear.php.net/.* http://repo.mysql.com/.* @@ -18,12 +18,15 @@ http://.*.letsencrypt.org/.* http://ocsp.usertrust.com/.* ### CMS / Wordpress / Drupal / ... + # Wordpress -http://.*akismet.com/.* -http://.*wordpress.(org|com)/.* -http://.*gravatar.com/.* +http://.*.akismet.com/.* +http://.*.wordpress.(org|com)/.* +http://.*.gravatar.com/.* http://www.wordpress-fr.net/.* http://pixel.wp.com/.* +http://wp-updates.com/.* + # Wordpress pingback http://rpc.pingomatic.com/.* http://blo.gs/ping.php @@ -53,12 +56,13 @@ http://www.pingmyblog.com/.* http://geourl.org/ping http://ipings.com/.* http://www.weblogalot.com/ping + # Wordpress plugins -http://.*wpml.org/.* +http://.*.wpml.org/.* http://www.wpcube.co.uk/.* -http://.*wp-rocket.me/.* +http://.*.wp-rocket.me/.* http://www.yithemes.com/.* -http://.*yoast.com/.* +http://.*.yoast.com/.* http://yarpp.org/.* http://repository.kreaturamedia.com/.* http://api.wp-events-plugin.com/.* @@ -66,12 +70,16 @@ http://updates.themepunch.com/.* http://themeisle.com/.* http://download.advancedcustomfields.com/.* http://wpcdn.io/.* -http://vimeo.com/channels/wpetourisme/videos/rss +http://vimeo.com/.* http://api.genesistheme.com/update-themes/ http://www.bolderelements.net/updates/.* + # Magento Plugins http://extensions.activo.com/.* http://amasty.com/.* +http://backwpup.com/.* +http://wpbakery.com/.* + # Joomla http://.*.joomla.org/.* http://getk2.org/.* @@ -80,10 +88,12 @@ http://mijosoft.com/.* http://www.joomlaworks.net/.* http://cdn.joomlaworks.org/.* http://download.regularlabs.com/.* + # Prestashop http://.*.prestashop.com/.* http://www.presta-module.com/.* http://www.presteamshop.com/.* + # Others http://.*.drupal.org/.* http://.*.dotclear.(net|org)/.* @@ -92,6 +102,7 @@ http://www.typolight.org/.* http://www.spip.net/.* ### Feeds / API / WS Tools / ... + # Google http://.*.googleapis.com/.* http://.*.google-analytics.com/.* @@ -100,21 +111,24 @@ http://csi.gstatic.com/.* http://maps.google.*/.* http://translate.google.com/.* http://www.google.com/webmasters/tools/.* + # Facebook http://.*.facebook.com/.* http://.*.fbcdn.net/.* + # Maxmind http://geolite.maxmind.com/.* + # Others -http://.*amazon.com/.* -http://.*twitter.com/.* -http://.*feedburner.com/.* -http://.*openx.(org|com|net)/.* +#http://.*.amazon.com/.* +http://.*.twitter.com/.* +http://.*.feedburner.com/.* +http://.*.openx.(org|com|net)/.* http://geoip-api.meteor.com/.* http://www.bing.com/.* http://www.telize.com/.* -http://.*ident.me/.* -http://.*icanhazip.com/.* +http://.*.ident.me/.* +http://.*.icanhazip.com/.* http://www.express-mailing.com/.* http://bot.whatismyipaddress.com/.* http://ipecho.net/.* @@ -125,3 +139,5 @@ http://mirrors.jenkins.io/.* http://jenkins.mirror.isppower.de/.* http://ftp.icm.edu.pl/.* http://apt.newrelic.com/.* +http://.*.cloudfront.net/.* +http://api.mailjet.com/.* From b14d15302dbf8494af4fec5949f789bc51382e95 Mon Sep 17 00:00:00 2001 From: Bruno TATU Date: Wed, 9 May 2018 15:52:26 +0200 Subject: [PATCH 5/7] Revert "Whiteliste de domaines par defaut pour squid" This reverts commit e9afd493730158d68475d5c6d7fc8388ff919164. --- squid/files/evolinux-whitelist-defaults.conf | 45 ++++++------------ squid/files/whitelist-evolinux.conf | 50 +++++++------------- 2 files changed, 31 insertions(+), 64 deletions(-) diff --git a/squid/files/evolinux-whitelist-defaults.conf b/squid/files/evolinux-whitelist-defaults.conf index e4dc240d..125eda7d 100644 --- a/squid/files/evolinux-whitelist-defaults.conf +++ b/squid/files/evolinux-whitelist-defaults.conf @@ -5,9 +5,9 @@ ^backports\.debian\.org$ ^www\.kernel\.org$ ^hwraid\.le-vert\.net$ -^.*\.clamav\.net$ +^.*clamav\.net$ ^spamassassin\.apache\.org$ -^.*\.sa-update.*$ +^.*sa-update.*$ ^pear\.php\.net$ ^repo\.mysql\.com$ @@ -18,15 +18,12 @@ ^ocsp\.usertrust\.com$ ### CMS / Wordpress / Drupal / ... - # Wordpress -^.*\.akismet\.com$ -^.*\.wordpress\.(org|com)$ -^.*\.gravatar\.com$ +^.*akismet\.com$ +^.*wordpress\.(org|com)$ +^.*gravatar\.com$ ^www\.wordpress-fr\.net$ ^pixel\.wp\.com$ -^wp-updates\.com$ - # Wordpress pingback ^rpc\.pingomatic\.com$ ^blo\.gs$ @@ -56,13 +53,12 @@ ^geourl\.org$ ^ipings\.com$ ^www\.weblogalot\.com$ - # Wordpress plugins -^.*\.wpml\.org$ +^.*wpml\.org$ ^www\.wpcube\.co\.uk$ -^.*\.wp-rocket\.me$ +^.*wp-rocket\.me$ ^www\.yithemes\.com$ -^.*\.yoast\.com$ +^.*yoast\.com$ ^yarpp\.org$ ^repository\.kreaturamedia\.com$ ^api\.wp-events-plugin\.com$ @@ -73,27 +69,21 @@ ^vimeo\.com$ ^api\.genesistheme\.com$ ^www\.bolderelements\.net$ -^wpbakery\.com$ -^backwpup\.com$ - # Magento Plugins ^extensions\.activo\.com$ ^amasty\.com$ - # Joomla -^.*\.joomla\.org$ +^.*.joomla\.org$ ^getk2\.org$ ^miwisoft\.com$ ^mijosoft\.com$ ^www\.joomlaworks\.net$ ^cdn\.joomlaworks\.org$ ^download\.regularlabs\.com$ - # Prestashop -^.*\.prestashop\.com$ +^.*.prestashop\.com$ ^www\.presta-module\.com$ ^www\.presteamshop\.com$ - # Others ^.*.drupal\.org$ ^.*\.dotclear\.(net|org)$ @@ -102,9 +92,7 @@ ^www\.spip\.net$ ### Feeds / API / WS Tools / ... - # Google - ^.*\.googleapis\.com$ ^.*\.google-analytics\.com$ ^blogsearch\.google\.(com|fr)$ @@ -112,19 +100,16 @@ ^maps\.google\..*$ ^translate\.google\.com$ ^www\.google\.com$ - # Facebook ^.*\.facebook\.com$ ^.*\.fbcdn\.net$ - # Maxmind ^geolite\.maxmind\.com$ - # Others -#^.*\.amazon.com$ -^.*\.twitter\.com$ -^.*\.feedburner\.com$ -^.*\.openx\.(org|com|net)$ +#^.*amazon.com$ +^.*twitter\.com$ +^.*feedburner\.com$ +^.*openx\.(org|com|net)$ ^geoip-api\.meteor\.com$ ^www\.bing\.com$ ^www\.telize\.com$ @@ -140,5 +125,3 @@ ^jenkins\.mirror\.isppower\.de$ ^ftp\.icm\.edu\.pl$ ^apt\.newrelic\.com$ -^.*\.cloudfront\.net$ -^api\.mailjet\.com$ diff --git a/squid/files/whitelist-evolinux.conf b/squid/files/whitelist-evolinux.conf index bd3f33e0..5c22f4a7 100644 --- a/squid/files/whitelist-evolinux.conf +++ b/squid/files/whitelist-evolinux.conf @@ -1,13 +1,13 @@ ### Evolix & System -http://.*.evolix.(net|org|com|fr)/.* -http://.*.debian.org/.* +http://.*evolix.(net|org|com|fr)/.* +http://.*debian.org/.* http://www.backports.org/.* http://backports.debian.org/.* http://www.kernel.org/.* http://hwraid.le-vert.net/.* -http://.*.clamav.net/.* +http://.*clamav.net/.* http://spamassassin.apache.org/.* -http://.*.sa-update.* +http://.*sa-update.* http://pear.php.net/.* http://repo.mysql.com/.* @@ -18,15 +18,12 @@ http://.*.letsencrypt.org/.* http://ocsp.usertrust.com/.* ### CMS / Wordpress / Drupal / ... - # Wordpress -http://.*.akismet.com/.* -http://.*.wordpress.(org|com)/.* -http://.*.gravatar.com/.* +http://.*akismet.com/.* +http://.*wordpress.(org|com)/.* +http://.*gravatar.com/.* http://www.wordpress-fr.net/.* http://pixel.wp.com/.* -http://wp-updates.com/.* - # Wordpress pingback http://rpc.pingomatic.com/.* http://blo.gs/ping.php @@ -56,13 +53,12 @@ http://www.pingmyblog.com/.* http://geourl.org/ping http://ipings.com/.* http://www.weblogalot.com/ping - # Wordpress plugins -http://.*.wpml.org/.* +http://.*wpml.org/.* http://www.wpcube.co.uk/.* -http://.*.wp-rocket.me/.* +http://.*wp-rocket.me/.* http://www.yithemes.com/.* -http://.*.yoast.com/.* +http://.*yoast.com/.* http://yarpp.org/.* http://repository.kreaturamedia.com/.* http://api.wp-events-plugin.com/.* @@ -70,16 +66,12 @@ http://updates.themepunch.com/.* http://themeisle.com/.* http://download.advancedcustomfields.com/.* http://wpcdn.io/.* -http://vimeo.com/.* +http://vimeo.com/channels/wpetourisme/videos/rss http://api.genesistheme.com/update-themes/ http://www.bolderelements.net/updates/.* - # Magento Plugins http://extensions.activo.com/.* http://amasty.com/.* -http://backwpup.com/.* -http://wpbakery.com/.* - # Joomla http://.*.joomla.org/.* http://getk2.org/.* @@ -88,12 +80,10 @@ http://mijosoft.com/.* http://www.joomlaworks.net/.* http://cdn.joomlaworks.org/.* http://download.regularlabs.com/.* - # Prestashop http://.*.prestashop.com/.* http://www.presta-module.com/.* http://www.presteamshop.com/.* - # Others http://.*.drupal.org/.* http://.*.dotclear.(net|org)/.* @@ -102,7 +92,6 @@ http://www.typolight.org/.* http://www.spip.net/.* ### Feeds / API / WS Tools / ... - # Google http://.*.googleapis.com/.* http://.*.google-analytics.com/.* @@ -111,24 +100,21 @@ http://csi.gstatic.com/.* http://maps.google.*/.* http://translate.google.com/.* http://www.google.com/webmasters/tools/.* - # Facebook http://.*.facebook.com/.* http://.*.fbcdn.net/.* - # Maxmind http://geolite.maxmind.com/.* - # Others -#http://.*.amazon.com/.* -http://.*.twitter.com/.* -http://.*.feedburner.com/.* -http://.*.openx.(org|com|net)/.* +http://.*amazon.com/.* +http://.*twitter.com/.* +http://.*feedburner.com/.* +http://.*openx.(org|com|net)/.* http://geoip-api.meteor.com/.* http://www.bing.com/.* http://www.telize.com/.* -http://.*.ident.me/.* -http://.*.icanhazip.com/.* +http://.*ident.me/.* +http://.*icanhazip.com/.* http://www.express-mailing.com/.* http://bot.whatismyipaddress.com/.* http://ipecho.net/.* @@ -139,5 +125,3 @@ http://mirrors.jenkins.io/.* http://jenkins.mirror.isppower.de/.* http://ftp.icm.edu.pl/.* http://apt.newrelic.com/.* -http://.*.cloudfront.net/.* -http://api.mailjet.com/.* From 97719d28f202141e123e63e83229c909223fc629 Mon Sep 17 00:00:00 2001 From: Alexis Ben Miloud--Josselin Date: Wed, 8 Jan 2020 17:23:05 +0100 Subject: [PATCH 6/7] redis: add log2mail --- redis/tasks/log2mail.yml | 22 ++++++++++++++++++++++ redis/templates/log2mail.j2 | 4 ++++ 2 files changed, 26 insertions(+) create mode 100644 redis/tasks/log2mail.yml create mode 100644 redis/templates/log2mail.j2 diff --git a/redis/tasks/log2mail.yml b/redis/tasks/log2mail.yml new file mode 100644 index 00000000..63d0156a --- /dev/null +++ b/redis/tasks/log2mail.yml @@ -0,0 +1,22 @@ +--- + +- name: Is log2mail present ? + stat: + path: /etc/log2mail/config + check_mode: no + register: log2mail_config_dir + tags: + - redis + - log2mail + +- name: Copy log2mail config + template: + src: log2mail.j2 + dest: /etc/log2mail/config/redis.conf + owner: log2mail + group: adm + mode: "0640" + when: log2mail_config_dir.stat.exists + tags: + - redis + - log2mail diff --git a/redis/templates/log2mail.j2 b/redis/templates/log2mail.j2 new file mode 100644 index 00000000..48bb73b6 --- /dev/null +++ b/redis/templates/log2mail.j2 @@ -0,0 +1,4 @@ +file = /var/log/syslog +pattern = "Can't save in background: fork: Cannot allocate memory" +mailto = {{ log2mail_alert_email or general_alert_email | mandatory }} +template = /etc/log2mail/mail From 3ba846cc38272e2804ebb03584b36481c05fc8a0 Mon Sep 17 00:00:00 2001 From: Alexis Ben Miloud--Josselin Date: Wed, 8 Jan 2020 17:24:27 +0100 Subject: [PATCH 7/7] redis: change log path --- redis/templates/log2mail.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/redis/templates/log2mail.j2 b/redis/templates/log2mail.j2 index 48bb73b6..b742efa8 100644 --- a/redis/templates/log2mail.j2 +++ b/redis/templates/log2mail.j2 @@ -1,4 +1,4 @@ -file = /var/log/syslog +file = /var/log/redis/redis-server.log pattern = "Can't save in background: fork: Cannot allocate memory" mailto = {{ log2mail_alert_email or general_alert_email | mandatory }} template = /etc/log2mail/mail