postfix-formula/postfix/config.sls

{% from "postfix/map.jinja" import postfix with context %}
include:
  - postfix

{{ postfix.config_path }}:
  file.directory:
    - user: root
    - group: {{ postfix.root_grp }}
    - dir_mode: 755
    - file_mode: 644
    - makedirs: True

{{ postfix.config_path }}/main.cf:
  file.managed:
    - source: salt://postfix/files/main.cf
    - user: root
    - group: {{ postfix.root_grp }}
    - mode: 644
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja
    - context:
        postfix: {{ postfix|tojson }}

{% if 'vmail' in pillar.get('postfix', '') %}
{{ postfix.config_path }}/virtual_alias_maps.cf:
  file.managed:
    - source: salt://postfix/files/virtual_alias_maps.cf
    - user: root
    - group: postfix
    - mode: 640
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja

{{ postfix.config_path }}/virtual_mailbox_domains.cf:
  file.managed:
    - source: salt://postfix/files/virtual_mailbox_domains.cf
    - user: root
    - group: postfix
    - mode: 640
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja

{{ postfix.config_path }}/virtual_mailbox_maps.cf:
  file.managed:
    - source: salt://postfix/files/virtual_mailbox_maps.cf
    - user: root
    - group: postfix
    - mode: 640
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja
{% endif %}

{% if salt['pillar.get']('postfix:manage_master_config', True) %}
{% import_yaml "postfix/services.yaml" as postfix_master_services %}
{{ postfix.config_path }}/master.cf:
  file.managed:
    - source: salt://postfix/files/master.cf
    - user: root
    - group: {{ postfix.root_grp }}
    - mode: 644
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja
    - context:
        postfix: {{ postfix|tojson }}
        postfix_master_services: {{ postfix_master_services|tojson }}
{% endif %}

{% if 'transport' in pillar.get('postfix', '') %}
{{ postfix.config_path }}/transport:
  file.managed:
    - source: salt://postfix/files/transport
    - user: root
    - group: {{ postfix.root_grp }}
    - mode: 644
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja

run-postmap:
  cmd.wait:
    - name: {{ postfix.xbin_prefix }}/sbin/postmap {{ postfix.config_path }}/transport
    - cwd: /
    - watch:
      - file: {{ postfix.config_path }}/transport
{% endif %}

{%- for domain in salt['pillar.get']('postfix:certificates', {}).keys() %}

postfix_{{ domain }}_ssl_certificate:

  file.managed:
    - name: {{ postfix.config_path }}/ssl/{{ domain }}.crt
    - makedirs: True
    - contents_pillar: postfix:certificates:{{ domain }}:public_cert
    - watch_in:
       - service: postfix

postfix_{{ domain }}_ssl_key:
  file.managed:
    - name: {{ postfix.config_path }}/ssl/{{ domain }}.key
    - mode: 600
    - makedirs: True
    - contents_pillar: postfix:certificates:{{ domain }}:private_key
    - watch_in:
       - service: postfix

{% endfor %}
Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`{% from "postfix/map.jinja" import postfix with context %}`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`include:`
			`- postfix`

Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`{{ postfix.config_path }}:`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`file.directory:`
			`- user: root`
Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`- group: {{ postfix.root_grp }}`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`- dir_mode: 755`
			`- file_mode: 644`
			`- makedirs: True`

Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`{{ postfix.config_path }}/main.cf:`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`file.managed:`
			`- source: salt://postfix/files/main.cf`
			`- user: root`
Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`- group: {{ postfix.root_grp }}`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`- mode: 644`
Make postfix.config state work with latest changes 2014-08-20 03:42:08 +02:00			`- require:`
			`- pkg: postfix`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`- watch_in:`
Change watch_in to be followed by a list 2014-08-20 03:46:15 +02:00			`- service: postfix`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`- template: jinja`
fix: make necessary modifications to get working on `salt-ssh` * Similar situation to https://github.com/saltstack-formulas/logrotate-formula/pull/53 - https://freenode.logbot.info/saltstack-formulas/20200507#c3819526-c3819581 - https://freenode.logbot.info/saltstack-formulas/20200508#c3826763-c3826995 * Send template values by `context` 2020-05-08 08:33:10 +02:00			`- context:`
			`postfix: {{ postfix\|tojson }}`
Added config files for virtual users 2015-06-21 01:18:55 +02:00
			`{% if 'vmail' in pillar.get('postfix', '') %}`
Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`{{ postfix.config_path }}/virtual_alias_maps.cf:`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`file.managed:`
			`- source: salt://postfix/files/virtual_alias_maps.cf`
			`- user: root`
			`- group: postfix`
			`- mode: 640`
			`- require:`
			`- pkg: postfix`
			`- watch_in:`
			`- service: postfix`
			`- template: jinja`

Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`{{ postfix.config_path }}/virtual_mailbox_domains.cf:`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`file.managed:`
			`- source: salt://postfix/files/virtual_mailbox_domains.cf`
			`- user: root`
			`- group: postfix`
			`- mode: 640`
			`- require:`
			`- pkg: postfix`
			`- watch_in:`
			`- service: postfix`
			`- template: jinja`

Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`{{ postfix.config_path }}/virtual_mailbox_maps.cf:`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`file.managed:`
			`- source: salt://postfix/files/virtual_mailbox_maps.cf`
			`- user: root`
			`- group: postfix`
			`- mode: 640`
			`- require:`
			`- pkg: postfix`
			`- watch_in:`
			`- service: postfix`
			`- template: jinja`
			`{% endif %}`

Optimized manage_master_config conditional 2015-03-26 09:43:44 +01:00			`{% if salt['pillar.get']('postfix:manage_master_config', True) %}`
fix: make necessary modifications to get working on `salt-ssh` * Similar situation to https://github.com/saltstack-formulas/logrotate-formula/pull/53 - https://freenode.logbot.info/saltstack-formulas/20200507#c3819526-c3819581 - https://freenode.logbot.info/saltstack-formulas/20200508#c3826763-c3826995 * Send template values by `context` 2020-05-08 08:33:10 +02:00			`{% import_yaml "postfix/services.yaml" as postfix_master_services %}`
Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`{{ postfix.config_path }}/master.cf:`
add spf handling 2015-02-05 09:57:18 +01:00			`file.managed:`
			`- source: salt://postfix/files/master.cf`
			`- user: root`
Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`- group: {{ postfix.root_grp }}`
add spf handling 2015-02-05 09:57:18 +01:00			`- mode: 644`
			`- require:`
			`- pkg: postfix`
			`- watch_in:`
			`- service: postfix`
			`- template: jinja`
fix: make necessary modifications to get working on `salt-ssh` * Similar situation to https://github.com/saltstack-formulas/logrotate-formula/pull/53 - https://freenode.logbot.info/saltstack-formulas/20200507#c3819526-c3819581 - https://freenode.logbot.info/saltstack-formulas/20200508#c3826763-c3826995 * Send template values by `context` 2020-05-08 08:33:10 +02:00			`- context:`
			`postfix: {{ postfix\|tojson }}`
			`postfix_master_services: {{ postfix_master_services\|tojson }}`
Add option to let the module (not) manage the master.cf 2015-03-25 12:49:57 +01:00			`{% endif %}`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`{% if 'transport' in pillar.get('postfix', '') %}`
Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`{{ postfix.config_path }}/transport:`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`file.managed:`
			`- source: salt://postfix/files/transport`
			`- user: root`
Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`- group: {{ postfix.root_grp }}`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`- mode: 644`
			`- require:`
			`- pkg: postfix`
			`- watch_in:`
			`- service: postfix`
			`- template: jinja`

			`run-postmap:`
			`cmd.wait:`
Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`- name: {{ postfix.xbin_prefix }}/sbin/postmap {{ postfix.config_path }}/transport`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`- cwd: /`
			`- watch:`
Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`- file: {{ postfix.config_path }}/transport`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`{% endif %}`

Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`{%- for domain in salt['pillar.get']('postfix:certificates', {}).keys() %}`

			`postfix_{{ domain }}_ssl_certificate:`
Added config files for virtual users 2015-06-21 01:18:55 +02:00
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00			`file.managed:`
Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`- name: {{ postfix.config_path }}/ssl/{{ domain }}.crt`
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`- makedirs: True`
			`- contents_pillar: postfix:certificates:{{ domain }}:public_cert`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00			`- watch_in:`
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`- service: postfix`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`postfix_{{ domain }}_ssl_key:`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00			`file.managed:`
Template paths and groups to make them work on FreeBSD, too. 2017-08-24 13:02:46 +02:00			`- name: {{ postfix.config_path }}/ssl/{{ domain }}.key`
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`- mode: 600`
			`- makedirs: True`
			`- contents_pillar: postfix:certificates:{{ domain }}:private_key`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00			`- watch_in:`
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`- service: postfix`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`{% endfor %}`