postfix-formula/postfix/config.sls

include:
  - postfix

/etc/postfix:
  file.directory:
    - user: root
    - group: root
    - dir_mode: 755
    - file_mode: 644
    - makedirs: True

/etc/postfix/main.cf:
  file.managed:
    - source: salt://postfix/files/main.cf
    - user: root
    - group: root
    - mode: 644
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja
{% if salt['pillar.get']('postfix:manage_master_config', True) %}
/etc/postfix/master.cf:
  file.managed:
    - source: salt://postfix/files/master.cf
    - user: root
    - group: root
    - mode: 644
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja
{% endif %}

{%- for domain in salt['pillar.get']('postfix:certificates', {}).keys() %}

postfix_{{ domain }}_ssl_certificate:
  file.managed:
    - name: /etc/postfix/ssl/{{ domain }}.crt
    - makedirs: True
    - contents_pillar: postfix:certificates:{{ domain }}:public_cert
    - watch_in:
       - service: postfix

postfix_{{ domain }}_ssl_key:
  file.managed:
    - name: /etc/postfix/ssl/{{ domain }}.key
    - mode: 600
    - makedirs: True
    - contents_pillar: postfix:certificates:{{ domain }}:private_key
    - watch_in:
       - service: postfix

{% endfor %}
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`include:`
			`- postfix`

			`/etc/postfix:`
			`file.directory:`
			`- user: root`
			`- group: root`
			`- dir_mode: 755`
			`- file_mode: 644`
			`- makedirs: True`

			`/etc/postfix/main.cf:`
			`file.managed:`
			`- source: salt://postfix/files/main.cf`
			`- user: root`
			`- group: root`
			`- mode: 644`
Make postfix.config state work with latest changes 2014-08-20 03:42:08 +02:00			`- require:`
			`- pkg: postfix`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`- watch_in:`
Change watch_in to be followed by a list 2014-08-20 03:46:15 +02:00			`- service: postfix`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`- template: jinja`
Optimized manage_master_config conditional 2015-03-26 09:43:44 +01:00			`{% if salt['pillar.get']('postfix:manage_master_config', True) %}`
add spf handling 2015-02-05 09:57:18 +01:00			`/etc/postfix/master.cf:`
			`file.managed:`
			`- source: salt://postfix/files/master.cf`
			`- user: root`
			`- group: root`
			`- mode: 644`
			`- require:`
			`- pkg: postfix`
			`- watch_in:`
			`- service: postfix`
			`- template: jinja`
Add option to let the module (not) manage the master.cf 2015-03-25 12:49:57 +01:00			`{% endif %}`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`{%- for domain in salt['pillar.get']('postfix:certificates', {}).keys() %}`

			`postfix_{{ domain }}_ssl_certificate:`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00			`file.managed:`
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`- name: /etc/postfix/ssl/{{ domain }}.crt`
			`- makedirs: True`
			`- contents_pillar: postfix:certificates:{{ domain }}:public_cert`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00			`- watch_in:`
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`- service: postfix`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`postfix_{{ domain }}_ssl_key:`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00			`file.managed:`
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`- name: /etc/postfix/ssl/{{ domain }}.key`
			`- mode: 600`
			`- makedirs: True`
			`- contents_pillar: postfix:certificates:{{ domain }}:private_key`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00			`- watch_in:`
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`- service: postfix`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`{% endfor %}`