unattended-upgrades was already active on the host, just never documented or closed. Adds a generic, reusable systemd timer + script that fires before the daily update window and notifies via email and a Matrix thread reply if any packages are actually pending - reusing the mas-cli bot account pattern established for Draupnir. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
25 lines
891 B
Plaintext
25 lines
891 B
Plaintext
# Template for /etc/msmtprc (host-level, NOT deployed via GitOps/Flux - copy
|
|
# manually to the target host and fill in the placeholders yourself).
|
|
#
|
|
# Copy to /etc/msmtprc, replace the __PLACEHOLDER__ values below with your own
|
|
# transactional-mail provider's SMTP details, then:
|
|
# chmod 600 /etc/msmtprc
|
|
# The password itself is NOT stored here - it's read at send-time from
|
|
# /etc/maintenance-notify/mail-password (chmod 600, plain text, one line, no
|
|
# trailing newline needed either way).
|
|
|
|
account maintenance-notify
|
|
host __SMTP_HOST__
|
|
port __SMTP_PORT__
|
|
tls on
|
|
# Port 465 = implicit TLS (tls_starttls off, as below). If your provider uses
|
|
# port 587/STARTTLS instead, flip this to "tls_starttls on".
|
|
tls_starttls off
|
|
auth on
|
|
user __MAIL_FROM__
|
|
passwordeval "cat /etc/maintenance-notify/mail-password"
|
|
from __MAIL_FROM__
|
|
logfile /var/log/msmtp.log
|
|
|
|
account default : maintenance-notify
|