feat(mail): fleet mail-env audit + map; PMG VIP proposal [#696][#694]

Audit findings note (55/64 systems, read-only): https://projects.knownelement.com/issues/696#note-4088 Map + deploy plan: https://community.turnsys.com/t/322 Key: relayhost empty fleet-wide (direct-to-MX today); prod PMG pair already installed (VM 604/711, PMG 9.1, unclustered); VIP slot proposed 192.168.3.249; open PQs in questions-v8.md.
2026-09-03 12:49:59 -05:00
parent 7ca87c1200
commit d3b9099d5f
5 changed files with 309 additions and 0 deletions
@@ -0,0 +1,75 @@
+# audit-targets.txt — fleet targets for run-mail-audit.sh (#696 mail audit)
+# format: mode|name|user   (user only applies to vm mode; default root)
+#   prox = PVE host            -> tests/remote.sh prox-file
+#   vm   = Linux VM / physical -> tests/remote.sh vm-file
+#   dns  = DNS infra alias     -> remote-dns.sh <alias>-file
+# Deliberately NOT targeted (no ssh path / dark / not Linux):
+#   pfv-bms (HAOS core_ssh only; HA SMTP notify lives in KNEL/pfv-bms repo),
+#   tsys-umbrel, kali-tsys (sshd gated), subopi3 (#733 key-denied),
+#   siter-bizoffice (Windows), stlp-3dscanner (offline 184d+)
+prox|pfv-tsys1|
+prox|pfv-tsys3|
+prox|pfv-tsys4|
+prox|pfv-tsys5|
+prox|pfv-tsys6|
+prox|pfv-tsys7|
+prox|pfv-tsys9|
+dns|netinfra01|
+dns|netinfra02|
+vm|tsys-ca|
+vm|tsys-librenms|
+vm|tsys-proxmox-datacenter|
+vm|tsys-proxmox-mailgw-01|
+vm|tsys-proxmox-mailgw-02|
+vm|tsys-ucs-01|
+vm|tsys-ucs-02|
+vm|tsys-awx|
+vm|pfv-rr-middleware-02|
+vm|rr-middleware-01|
+vm|hfnoc-uisp|
+vm|hfnoc-uisp-preprod|
+vm|tsys-siem|
+vm|tsys-voip|
+vm|devbox-cloudron|
+vm|ultix-streaming|
+vm|kali-rd|
+vm|pfv-k8s-cnode1|localuser
+vm|pfv-k8s-wnode-tsys3|localuser
+vm|pfv-k8s-cnode2|localuser
+vm|pfv-k8s-cnode3|localuser
+vm|pfv-k8s-wnode-tsys6|localuser
+vm|pfv-k8s-wnode-tsys7|localuser
+vm|pfv-k8s-wnode-tsys9|localuser
+vm|pfv-proxmox-backup-server|
+vm|pfvsvrpi|localuser
+vm|pfv-jetson-nano-1|
+vm|stlpc-artroom|localuser
+vm|stlpc-garage|localuser
+vm|subopi-dev-3|localuser
+vm|subopi-dev-4|localuser
+vm|netbird|
+vm|sectestbed-sandbox|
+vm|sectestbed-siem|
+vm|sectestbed-proxmox-pve|
+vm|sectestbed-proxmox-datacenter|
+vm|sectestbed-proxmox-pbs|
+vm|sectestbed-awx|
+vm|sectestbed-k8s-cnode|
+vm|sectestbed-k8s-wnode|
+vm|sectestbed-librenms|
+vm|sectestbed-netinfra|
+vm|sectestbed-cloudron|
+vm|sectestbed-proxmox-mailgw|
+vm|sectestbed-ca|
+vm|sectestbed-voip|
+vm|sectestbed-hfnoc-uisp|
+vm|sectestbed-rancherplatform|
+vm|preprod-awx|
+vm|preprod-siem|
+vm|preprod-rancherplatform|
+vm|preprod-proxmox-mailgw|
+vm|preprod-ca|
+vm|preprod-proxmox-datacenter|
+vm|preprod-librenms|
+vm|preprod-voip|
+vm|preprod-cloudron|