0 Fork 0

mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-06 10:59:59 +00:00

Files

T

History

kevinveenbirkenbachandClaude Opus 5 7162b7bf4c Merge fork/feature/svc-net-tor into feature/ai-agent-employees

834 commits from the Tor onion-service branch against 299 of ours, from merge
base 7b646bdece: 127 conflicted files, 3506 files changed.

The two sides are largely orthogonal. Theirs adds svc-net-tor and a `tor` service
across the role tree, plus two sweeping refactors: shipped scripts sorted by
language (files/ruby/, files/python/, files/shell/, scripts/lint/*.sh) and the
unit suite moved under tests/unit/python/. Ours is requirement 036, the native AI
gateway, plus the MCP role work. Most conflicts were both sides appending to the
same service map, resolved as unions.

Resolutions that were not unions:

Credentials moved namespace. Theirs renamed meta/schema.yml to meta/secrets.yml
and re-addressed credentials as secrets.credentials.<name>. Git carried our
litellm_api_key blocks through the rename, but every consumer we added still read
'credentials.<name>', which no longer resolves. All 45 call sites are migrated.

plugins/filter/container_volumes.py is deleted by theirs and relocated to
plugins/lookup/container_volumes.py, where it carries the same tmpfs defect our
f85996b43 had just fixed: a hard-coded {"size": ...} that silently drops a per
mount `mode`. The fix is re-applied in the relocated file, as that commit's merge
note anticipated.

compose.yml keeps only INFINITO_PLAYWRIGHT_REPORTS_BASE_DIR. Theirs also forwards
INFINITO_PLAYWRIGHT_STAGE_BASE_DIR; that line is deliberately dropped, per the
analysis recorded in 45804e9ad -- STAGE has a drift-proof role-vars fallback,
while forwarding it promotes a setdefault-pinnable .env value above that SPOT.

tasks/stages/01_constructor.yml takes their include, ./tasks/utils/setup/group.yml,
because their refactor removed tasks/groups/*-roles.yml, leaving our include
target nonexistent. Our task name is kept, since svc-virt is in the loop.

Makefile swarm-zombie is a union: their validate plus teardown, then our
lab_subnet cleanup, which their side dropped while leaving lab_subnet.sh as the
only orphaned reference in the file.

01_bootstrap.sh keeps our deterministic --ip pinning, which distinguishes an
already-attached node from a real failure, over their `|| true`.

Their language-sorted layout orphaned references our side still held: zammad's
two scripts/apply/*.rb, jenkins' java-with-ca-trust.sh, and the notify topics
their handlers renamed to hyphenated form. All corrected.

roles/sys-svc-compose/files/shell/swarm/stack_ready.sh gains our latched-update
block: paused, rollback_paused, rollback_started and rollback_completed exit 2
rather than polling a state that cannot resolve without another deploy.

config_from_run is unioned to (title, logged, jobs); the production caller in
trigger/__main__.py now passes jobs, without which our suite suppression would
have been inert.

READMEs are regenerated rather than hand-merged: 15 LiteLLM rows and 91 Tor rows
now derive from the merged metadata, which is itself evidence the meta merge is
coherent.

Verified: 5161 unit tests pass. The single failure, test_query.py TestSortSpec,
also fails on fork/feature/svc-net-tor at b51d2f9919, measured in a baseline
worktree -- so this merge introduces no new unit-test failure. Two modules are
excluded from that run because `baudolo`, a dependency their branch introduces,
is not installed on this host.
Not verified: no deploy has run against the merged tree, and make quality has not
been run end to end here.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-24 16:32:30 +02:00

handlers

…

README.md

sys-svc-mail-smtp

Description

The sys-svc-mail-smtp role configures a local SMTP relay using Postfix, listening exclusively on localhost.
It is designed to be used as a fallback when no central Mailu instance is available, enabling applications and system services to send email via localhost:25 without additional configuration.

For general background on SMTP, see SMTP on Wikipedia.
For details about Postfix itself, see Postfix on Wikipedia.

Overview

This role:

Installs Postfix via pacman on Arch Linux.
Configures it as a loopback-only relay, so it:
- only listens on 127.0.0.1,
- does not perform local mailbox delivery,
- and is safe to use as a simple outbound relay for the local host.
Integrates seamlessly with the sys-svc-mail and sys-svc-mail-msmtp roles in the Infinito.Nexus stack.

Typically, sys-svc-mail decides whether to:

Use Mailu (via sys-svc-mail-msmtp), or
Fall back to this role (sys-svc-mail-smtp) and send via localhost.

Cosmos

The diagram places sys-svc-mail-smtp in the Infinito.Nexus cosmos: the components it deploys (capabilities), the central services it consumes (dependencies), and its outward reach (federation and bridged external networks).

flowchart LR
    subgraph role [sys-svc-mail-smtp 💻]
        svc_svc_mail_smtp["svc-mail-smtp"]
    end

Solid 1:1 edges are fixed relationships; dashed 0..1 edges are conditional (enabled only in matching deployments); red 0..0 edges are turned off in this role. Node markers show the role's deploy modes (💻 host, 🐳 compose, 🐝 swarm); ❌ marks a service that is explicitly turned off, and ⚙️ an Ansible role dependency declared in meta/main.yml.

Purpose

The main goals of this role are:

Provide a minimal, secure SMTP relay for hosts that do not run a full mail stack.
Enable msmtp (and any other sendmail-compatible client) to send mail by talking to localhost:25.
Avoid the complexity of a full MTA configuration while still supporting basic outbound notifications.

This is particularly useful for:

Monitoring nodes,
Utility hosts,
Development or test environments without Mailu.

Features

💾 Postfix Installation on Arch Linux
- Uses community.general.pacman to install the postfix package.
🔒 Loopback-Only Configuration
- Configures inet_interfaces = loopback-only to restrict the SMTP daemon to 127.0.0.1.
- Defines mynetworks = 127.0.0.0/8 for safe local relaying.
🚫 No Local Mailbox Delivery
- Sets local_transport = error: local delivery disabled to avoid storing mail locally.
- Focus is purely on relaying from localhost rather than full MTA behavior.
🧩 Integration with Infinito.Nexus
- Meant to be driven by sys-svc-mail, which decides when to enable this relay.
- Works hand in hand with sys-svc-mail-msmtp, which configures msmtp to talk to localhost:25 when Mailu is not present.

Further Resources

SMTP & Mail Transfer:
- SMTP (Wikipedia): https://en.wikipedia.org/wiki/Simple_Mail_Transfer_Protocol
Postfix:
- Official site: https://www.postfix.org/
- Postfix on Wikipedia: https://en.wikipedia.org/wiki/Postfix_(software)
Related Infinito.Nexus roles:
- sys-svc-mail: central mail orchestration
- sys-svc-mail-msmtp: msmtp client and sendmail replacement

Credits

Implemented by Kevin Veen-Birkenbach. Part of the Infinito.Nexus Project and maintained by Kevin Veen-Birkenbach. Licensed under the Infinito.Nexus Community License (Non-Commercial).