Merge pull request #257 from T3hUb3rK1tten/upstream-pr

Backup postgres to .sql without needing restart of service & Increase cipher suite level

roles/mailserver/templates/etc_postfix_main.cf.j2

@@ -45,6 +45,9 @@ smtp_tls_loglevel = 2
 smtpd_tls_received_header = yes
 smtp_tls_note_starttls_offer = yes
 smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
+# http://www.postfix.org/FORWARD_SECRECY_README.html
+smtp_tls_ciphers = medium
+
 
 smtpd_sasl_type = dovecot
 smtpd_sasl_path = private/auth

roles/tarsnap/files/tarsnap.sh

@@ -4,7 +4,7 @@
 # Written by Tim Bishop, 2009.
 
 # Directories to backup (relative to /)
-DIRS="home root decrypted var/www var/lib/postgresql/9.1/main"
+DIRS="home root decrypted var/www"
 
 # Number of daily backups to keep
 DAILY=7
@@ -54,8 +54,11 @@ else
 	BACKUP="$YEAR$MOY$DOM-$TIME-daily"
 fi
 
-# Stop postgres
-monit stop postgres
+# Below command complains to stderr if postgres user cannot write to CWD
+cd /home/
+
+# Dump PostgreSQL to file
+sudo -u postgres pg_dumpall -c > /decrypted/postgresql-backup.sql
 
 # Do backups
 for dir in $DIRS; do
@@ -63,9 +66,6 @@ for dir in $DIRS; do
 	$TARSNAP $EXTRA_FLAGS -c -f $BACKUP-$dir $dir
 done
 
-# Start postgres
-monit start postgres
-
 # Backups done, time for cleaning up old archives
 
 # using tail to find archives to delete, but its