David McKeone dmckeone

Based on: https://mebsd.com/freebsd-security-hardening/openssl-upgrade-freebsd.html

Update ports tree:

portsnap fetch update

(OPTIONAL) If the ports tree snapshot is corrupt you may need to rebuild it from scratch:

getting started with salt

a little adventurous tale of setting up salt on osx...

salt osx docs: http://goo.gl/E6ZtA

overall, seemed pretty straight forward...(?)

preliminary steps:
- brew update (I did this to make sure I was up to date)
- brew upgrade (I did this to upgrade what I was not up to date with)
brew doctor (I did this to make sure I was 'raring to brew')

(All of this code tested in Enterprise DB PostgreSQL 9.4 Beta 1 and Python 3.3)

As of Virtualenv 1.3 (https://pypi.python.org/pypi/virtualenv) (and excluding Python 3.4's venv) there is an activate_this.py file within a virtualenv package that allows activation of a virtual environment within an embedded version of Python (like PostgreSQL's PL/Python). A Python 2/3 compatible version looks like this:

exec(open('/Some/VirtualEnv/Directory/myvirtualenv/bin/activate_this.py').read(), 
     dict(__file__='/Some/VirtualEnv/Directory/myvirtualenv/bin/activate_this.py'))

Where /Some/VirtualEnv/Directory is a directory and myvirtualenv is the name of the virtual environment in use. On Windows replace bin with Scripts.

	# Dovecot 2.4.2 primary server w/ LDAP (lldap), rspamd education, and Full Text Search (fts_flatcurve)
	#
	# This configuration is intended to be used with Jinja2, so all variables look like: {{ variable }}
	#
	# For gateway/relay see: https://gist.github.com/dmckeone/20b09040909fb010ae97f1139e2cf827
	#
	# On Ubuntu 24.04 LTS this requires the PPA: https://repo.dovecot.org/
	#
	# Generic settings reference: https://doc.dovecot.org/2.4.2/core/summaries/settings.html
	#

	require ["fileinto", "mailbox", "spamtest", "spamtestplus", "relational", "comparator-i;ascii-numeric"];

	# See dovecot.conf for matching configuration: https://gist.github.com/dmckeone/7cdf170624d77c4ddcdce1721c6f760e
	# This configuration is intended to be used with Jinja2, so all variables look like: {{ variable }}

	# Must install spamtest & spamtestplus and normalize spam headers in dovecot.conf: https://doc.dovecot.org/main/core/config/sieve/extensions/spamtest_virustest.html
	# :percent normalizes the rspamd score ratio to a percent, so "X-Spamd-Result: default: False [12.00 / 15.00]" would be 12 / 15 = 0.8 or 80%.
	#
	# Don't create INBOX/Junk; only sort mail if it already exists
	if mailboxexists "INBOX/Junk" {

	require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables"];

	# See dovecot.conf for matching configuration: https://gist.github.com/dmckeone/7cdf170624d77c4ddcdce1721c6f760e
	# This configuration is intended to be used with Jinja2, so all variables look like: {{ variable }}

	# NOTE: When moving from Trash to Junk assume that the user is intentionally flagging an email as Junk

	if environment :matches "imap.user" "*" {
	set "username" "${1}";
	}

	require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables", "imap4flags"];

	# See dovecot.conf for matching configuration: https://gist.github.com/dmckeone/7cdf170624d77c4ddcdce1721c6f760e
	# This configuration is intended to be used with Jinja2, so all variables look like: {{ variable }}

	if environment :matches "imap.mailbox" "*" {
	set "mailbox" "${1}";
	}

	# If moving from Junk to Trash then the email is being deleted, not marked as ham

	# Dovecot 2.4.2 gateway/relay w/ LDAP
	#
	# This configuration is intended to be used with Jinja2, so all variables look like: {{ variable }}
	#
	# For primary server see: https://gist.github.com/dmckeone/7cdf170624d77c4ddcdce1721c6f760e
	#
	# On Ubuntu 24.04 LTS this requires the PPA: https://repo.dovecot.org/
	#
	# This file was created as a "minimal" configuration since it only requires authorization and nothing else
	#

	"""
	Sanic Compress Extension

	Compress responses using gzip, deflate or brotli (if [brotli](https://pypi.org/project/Brotli/) or
	[brotlicffi](https://pypi.org/project/brotlicffi/) is installed).

	Limitations:
	* No compression on streaming responses
	* No compression on chunked responess

	LL Bean: http://www.llbean.com/
	American Eagle: http://www.ae.com/web/canada/store.jsp
	J. Crew: https://www.jcrew.com/ca/index.jsp
	Eddie Bauer: http://www.eddiebauer.com
	Gap: http://www.gap.com
	Macy's: http://www1.macys.com
	Land's End: http://www.landsend.com
	Banana Republic: http://bananarepublic.gap.com
	Quicksilver: http://www.quiksilver.com
	Columbia: http://www.columbiasportswear.ca