add new drone config; fix small design issues

.drone.jsonnet

@@ -0,0 +1,69 @@
+local AnsibleVersions(version="latest", package="ansible") = {
+    name: "ansible-" + version,
+    image: "python:3.7",
+    pull: "always",
+    environment: {
+      PY_COLORS: 1
+    },
+    commands: [
+      "pip install " + package + " ansible-later~=0.2.0 -qq",
+      "git clone https://gitea.rknet.org/ansible/ansible-later-policy.git ~/policy",
+      "ansible-later -c ~/policy/config.yml"
+    ],
+    depends_on: [
+      "clone",
+    ],
+};
+
+local PipelineLinting = {
+  kind: "pipeline",
+  name: "linting",
+  platform: {
+    os: "linux",
+    arch: "amd64",
+  },
+  steps: [
+    AnsibleVersions(version="latest", package="ansible"),
+    AnsibleVersions(version="master", package="git+https://github.com/ansible/ansible.git@devel"),
+  ],
+  trigger: {
+    ref: ["refs/heads/master", "refs/tags/**", "refs/pull/**"],
+  },
+};
+
+local PipelineNotifications = {
+  kind: "pipeline",
+  name: "notifications",
+  platform: {
+    os: "linux",
+    arch: "amd64",
+  },
+  clone: {
+    disable: true,
+  },
+  steps: [
+    {
+      name: "matrix",
+      image: "plugins/matrix",
+      settings: {
+        homeserver: "https://matrix.rknet.org",
+        roomid: "MtidqQXWWAtQcByBhH:rknet.org",
+        template: "Status: **{{ build.status }}**<br/> Build: [{{ repo.Owner }}/{{ repo.Name }}]({{ build.link }}) ({{ build.branch }}) by {{ build.author }}<br/> Message: {{ build.message }}",
+        username: { "from_secret": "matrix_username" },
+        password: { "from_secret": "matrix_password" },
+      },
+    },
+  ],
+  depends_on: [
+    "linting",
+  ],
+  trigger: {
+    status: [ "success", "failure" ],
+    ref: ["refs/heads/master", "refs/tags/**"],
+  },
+};
+
+[
+  PipelineLinting,
+  PipelineNotifications,
+]

.drone.yml

@@ -1,22 +1,78 @@
 ---
 kind: pipeline
-name: default
+name: linting
+
+platform:
+  os: linux
+  arch: amd64
 
 steps:
-  - name: ansible-latest
+- name: ansible-latest
-    image: python:2.7
   pull: always
+  image: python:3.7
   commands:
-      - pip install ansible ansible-later -q
+  - pip install ansible ansible-later~=0.2.0 -qq
   - git clone https://gitea.rknet.org/ansible/ansible-later-policy.git ~/policy
-      - git ls-files *[^LICENSE,.md] | xargs ansible-later -c ~/policy/config.ini
+  - ansible-later -c ~/policy/config.yml
-    depends_on: [ clone ]
+  environment:
+    PY_COLORS: 1
+  depends_on:
+  - clone
 
-  - name: ansible-master
+- name: ansible-master
-    image: python:2.7
   pull: always
+  image: python:3.7
   commands:
-      - pip install ansible ansible-later -q
+  - "pip install git+https://github.com/ansible/ansible.git@devel ansible-later~=0.2.0 -qq"
   - git clone https://gitea.rknet.org/ansible/ansible-later-policy.git ~/policy
-      - git ls-files *[^LICENSE,.md] | xargs ansible-later -c ~/policy/config.ini
+  - ansible-later -c ~/policy/config.yml
-    depends_on: [ clone ]
+  environment:
+    PY_COLORS: 1
+  depends_on:
+  - clone
+
+trigger:
+  ref:
+  - refs/heads/master
+  - "refs/tags/**"
+  - "refs/pull/**"
+
+---
+kind: pipeline
+name: notifications
+
+platform:
+  os: linux
+  arch: amd64
+
+clone:
+  disable: true
+
+steps:
+- name: matrix
+  image: plugins/matrix
+  settings:
+    homeserver: https://matrix.rknet.org
+    password:
+      from_secret: matrix_password
+    roomid: MtidqQXWWAtQcByBhH:rknet.org
+    template: "Status: **{{ build.status }}**<br/> Build: [{{ repo.Owner }}/{{ repo.Name }}]({{ build.link }}) ({{ build.branch }}) by {{ build.author }}<br/> Message: {{ build.message }}"
+    username:
+      from_secret: matrix_username
+
+trigger:
+  ref:
+  - refs/heads/master
+  - "refs/tags/**"
+  status:
+  - success
+  - failure
+
+depends_on:
+- linting
+
+---
+kind: signature
+hmac: 687734cdf50961bf62d00f2fef97c004cd6b0f3dd6452da8ce4c9a08680992b5
+
+...

defaults/main.yml

@@ -10,3 +10,7 @@ postfix_relay_sasl_passwd: secure
 postfix_relay_smtpd_banner:
   - ESMTP
   - $mail_name
+
+postfix_relay_senders:
+  - user: root
+    address: "{{ ansible_hostname }}@{{ postfix_relay_sasl_domain }}"

tasks/install.yml

@@ -1,13 +1,8 @@
 ---
-- name: Install postfix mta
+- name: Install required postfix packages
-  block:
-    - name: Install required packages
   package:
     name: "{{ item }}"
     state: present
-      with_items:
+  loop: "{{ __postfix_relay_packages }}"
-        - postfix
-        - cyrus-sasl-plain
-        - mailx
   become: True
   become_user: root

templates/etc/postfix/sasl_passwd.j2

@@ -1,3 +1,4 @@
+#jinja2: lstrip_blocks: True
 # {{ ansible_managed }}
 
 [{{ postfix_relay_sasl_host }}]:{{ postfix_relay_sasl_port }} {{ postfix_relay_sasl_user }}@{{ postfix_relay_sasl_domain }}:{{ postfix_relay_sasl_passwd }}

templates/etc/postfix/sender_canonical.j2

@@ -1,3 +1,6 @@
+#jinja2: lstrip_blocks: True
 # {{ ansible_managed }}
 
-root {{ ansible_hostname }}@{{ postfix_relay_sasl_domain }}
+{% for sender in postfix_relay_senders %}
+{{ sender.name }} {{ sender.address }}
+{% endfor %}

vars/main.yml

@@ -0,0 +1,5 @@
+---
+__postfix_relay_packages:
+  - postfix
+  - cyrus-sasl-plain
+  - mailx