Files
@ eeec809e0f90
Branch filter:
Location: majic-ansible-roles/roles/mail_server/templates/main.cf.j2 - annotation
eeec809e0f90
3.7 KiB
text/plain
MAR-151: Added support for Debian 10 Buster to backup_client role:
- Updated tests.
- Refactored one of the test to determine hostname dynamically.
- Update role reference documentation.
- Updated tests.
- Refactored one of the test to determine hostname dynamically.
- Update role reference documentation.
f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b f7579be2c24b 572151ddf642 572151ddf642 572151ddf642 572151ddf642 572151ddf642 572151ddf642 572151ddf642 572151ddf642 572151ddf642 572151ddf642 572151ddf642 f7579be2c24b f7579be2c24b f7579be2c24b 3a9692d96170 f7579be2c24b f7579be2c24b f7579be2c24b c0df2fc4a827 f7579be2c24b 298c0dbe1698 298c0dbe1698 f7579be2c24b f7579be2c24b f7579be2c24b 572151ddf642 74ed4756d5a6 74ed4756d5a6 cf897f8c1941 cf897f8c1941 cf897f8c1941 107417b217e0 572151ddf642 cf897f8c1941 cf897f8c1941 d9dae92d436c a9e97d3e2306 a9e97d3e2306 a9e97d3e2306 cf897f8c1941 cf897f8c1941 a9e97d3e2306 12abf97ac229 12abf97ac229 cf897f8c1941 cf897f8c1941 18cd76ec050d 18cd76ec050d a7cd31c6886d a7cd31c6886d 08e3c2b79063 08e3c2b79063 08e3c2b79063 c063f27000b9 12abf97ac229 572151ddf642 572151ddf642 572151ddf642 cf897f8c1941 572151ddf642 572151ddf642 572151ddf642 572151ddf642 572151ddf642 572151ddf642 572151ddf642 572151ddf642 572151ddf642 12abf97ac229 12abf97ac229 7c58a0eb0e5a 7c58a0eb0e5a 7c58a0eb0e5a 7c58a0eb0e5a 36e1c9460cd6 36e1c9460cd6 36e1c9460cd6 36e1c9460cd6 35fff2909917 35fff2909917 35fff2909917 | # See /usr/share/postfix/main.cf.dist for a commented, more complete version
# Debian specific: Specifying a file name will cause the first
# line of that file to be used as the name. The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
# appending .domain is the MUA's job.
append_dot_mydomain = no
# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h
readme_directory = no
# See http://www.postfix.org/COMPATIBILITY_README.html -- default to 2 on
# fresh installs.
compatibility_level = 2
# TLS parameters
#smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
#smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
#smtpd_use_tls=yes
#smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
#smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.
myhostname = {{ inventory_hostname }}
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = {{ inventory_hostname }}, {{ inventory_hostname_short }}, localhost.localdomain, localhost
relayhost =
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128{% for network in smtp_allow_relay_from %} {{ network }}{% endfor %}
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
inet_protocols = all
# LDAP directory look-ups for domains, mailboxes and aliases.
virtual_mailbox_domains = ldap:/etc/postfix/ldap-virtual-mailbox-domains.cf
virtual_mailbox_maps = ldap:/etc/postfix/ldap-virtual-mailbox-maps.cf
virtual_alias_maps = ldap:/etc/postfix/ldap-virtual-alias-maps.cf
# Delivery of mails via Dovecot LDA for virtual domains.
virtual_transport = dovecot
dovecot_destination_recipient_limit = 1
# SMTP authentication configured, but disabled by default (for server-to-server
# communication). Users should connect via submission port instead to be able to
# authenticate.
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = no
# TLS configuration.
smtpd_tls_security_level = may
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/certs/{{ ansible_fqdn }}_smtp.pem
smtpd_tls_key_file = /etc/ssl/private/{{ ansible_fqdn }}_smtp.key
smtpd_tls_dh1024_param_file = /etc/ssl/private/{{ inventory_hostname }}_smtp.dh.pem
smtpd_tls_dh512_param_file = /etc/ssl/private/{{ inventory_hostname }}_smtp.dh.pem
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtp_tls_security_level = may
# Allow relaying only from trusted networks. Do not relay mails for
# domains for which the mail server is not responsible.
smtpd_relay_restrictions = permit_mynetworks
reject_unauth_destination
# Reject delivery of mails for domains for which the local server is
# not responsible, as well as any mails coming from addresses in one
# of the configured RBL's.
smtpd_recipient_restrictions = permit_mynetworks
{% for rbl in smtp_rbl %}
reject_rbl_client {{ rbl }}
{% endfor %}
smtpd_milters = unix:/var/run/clamav/clamav-milter.ctl
non_smtpd_milters = unix:/var/run/clamav/clamav-milter.ctl
# Deliver undeliverable bounces to domain's postmaster. Helps with application
# misconfigurations.
notify_classes = resource, software, 2bounce
# Fall-back to using native lookups (/etc/hosts etc) if DNS lookup fails. Useful
# for local overrides of mail servers.
smtp_host_lookup = dns, native
# Explicitly set maximum allowed mail size that should be accepted.
message_size_limit = {{ mail_message_size_limit }}
|