roles/core/certificates/files/letsencrypt-renewal.sh is sensible and so to test in different scenario, including a scenario where nginx returns 0 but raises a warning in stderr.

Patches for 3006 and 3007

Mumble isn't currently in scope.

Mumble isn't currently in scope.

Mumble isn't currently in scope.

Mumble isn't currently in scope.

Mumble isn't currently in scope.

Mumble isn't currently in scope.

Active development goes on with a fork:

Documentation source: https://devcentral.nasqueron.org/book/phabricator/article/configuring_outbound_email/

Created T2010 to follow-up this shellcheck -x idea.

The -x option allows shellcheck to source the external files (here /var/run/os-release), so it can know $VERSION exists for example:

Documentation: https://agora.nasqueron.org/index.php?title=Operations_grimoire%2FFreeBSD&diff=1586&oldid=1502

Unsure how to automate this, because for me this service should be run at boot time.

For reference, this choice is not only alphabetical: Postfix configuration requires Dovecot components.

Use of enable: True on FreeBSD is a drift from our standard practice

An example of custom port build: https://devcentral.nasqueron.org/source/operations/browse/main/roles/dbserver-pgsql/server/build.sls

Suggestion from Dorian: automate DKIM keys publishing to Vault

If we want to fix that at docker-py level, we can also apply this patch: https://github.com/docker/docker-py/pull/3257/files

Per discussion with @fauve.