saltstack-formulas/postfix-formula
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
961c1e10c4
postfix-formula/pillar.example

134 lines
4.0 KiB
Plaintext
Raw Normal View History

Update pillar.example to have settings for config file
2014-08-20 02:33:16 +02:00
postfix:
Add option to let the module (not) manage the master.cf
2015-03-25 12:49:57 +01:00
manage_master_config: True
Conditionally enable submission service
2015-07-11 11:58:18 +02:00
master_config:
enable_submission: False
option to make postfix service enabled or disabled
2016-05-18 19:29:37 +02:00
enable_service: True
Handle postgrey setup in main.cf
2015-08-22 13:26:26 +02:00
postgrey:
enabled: True
option to make postgrey service enabled or disabled
2016-05-19 13:55:15 +02:00
enable_service: True
Handle postgrey setup in main.cf
2015-08-22 13:26:26 +02:00
location: inet:172.16.0.5:6379
Restore policyd-spf support
2015-08-22 13:59:29 +02:00
policyd-spf:
enabled: True
time_limit: 7200s
Add option to let the module (not) manage the master.cf
2015-03-25 12:49:57 +01:00
config:
smtpd_banner: $myhostname ESMTP $mail_name
Update pillar.example
2016-03-14 22:43:30 +01:00
smtp_tls_CApath: /etc/ssl/certs
Add option to let the module (not) manage the master.cf
2015-03-25 12:49:57 +01:00
biff: 'no'
append_dot_mydomain: 'no'
readme_directory: 'no'
myhostname: localhost
mydestination: localhost, localhost.localdomain
relayhost:
mynetworks: 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_size_limit: 0
recipient_delimiter: +
inet_interfaces: all
- Fix virtual handling - can't just dump json to virtual - Add in handling for sender_canonical - Add examples to pillar
2015-08-31 22:34:51 +02:00
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
# Alias
alias_maps: hash:/etc/aliases
alias_database: hash:/etc/aliases
Added config files for virtual users
2015-06-21 01:18:55 +02:00
# Virtual users
virtual_alias_maps: proxy:mysql:/etc/postfix/virtual_alias_maps.cf
virtual_mailbox_domains: proxy:mysql:/etc/postfix/virtual_mailbox_domains.cf
virtual_mailbox_maps: proxy:mysql:/etc/postfix/virtual_mailbox_maps.cf
virtual_mailbox_base: /home/vmail
virtual_mailbox_limit: 512000000
virtual_minimum_uid: 5000
virtual_transport: virtual
virtual_uid_maps: static:5000
virtual_gid_maps: static:5000
local_transport: virtual
local_recipient_maps: $virtual_mailbox_maps
transport_maps: hash:/etc/postfix/transport
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
# SMTP server
smtpd_tls_session_cache_database: btree:${data_directory}/smtpd_scache
smtpd_use_tls: 'yes'
Added config files for virtual users
2015-06-21 01:18:55 +02:00
smtpd_sasl_auth_enable: 'yes'
smtpd_sasl_type: dovecot
smtpd_sasl_path: /var/run/dovecot/auth-client
smtpd_recipient_restrictions: permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_relay_restrictions: permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_sasl_security_options: noanonymous
smtpd_sasl_tls_security_options: $smtpd_sasl_security_options
smtpd_tls_auth_only: 'yes'
smtpd_sasl_local_domain: $mydomain
smtpd_tls_loglevel: 1
smtpd_tls_session_cache_timeout: 3600s
relay_domains: '$mydestination'
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
# SMTP server certificate and key (from pillar data)
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
smtpd_tls_cert_file: /etc/postfix/ssl/server-cert.crt
smtpd_tls_key_file: /etc/postfix/ssl/server-cert.key
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
# SMTP client
smtp_tls_session_cache_database: btree:${data_directory}/smtp_scache
smtp_use_tls: 'yes'
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
smtp_tls_cert_file: /etc/postfix/ssl/example.com-relay-client-cert.crt
smtp_tls_key_file: /etc/postfix/ssl/example.com-relay-client-cert.key
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
Replace postmap_macro by generic handling of map files Merge existing handling of postfix lookup table/map files into a single template. Mappings are read from pillar in `postfix:mapping`. Configuration is written to the file pointed to by the relevant directive in `postfix:config`. A single target file is supported at the moment. The file is postmap'ed if needed. The pillar accepts a dict or an OrderedDict.
2016-04-08 17:50:52 +02:00
smtp_sasl_password_maps: hash:/etc/postfix/sasl_passwd
sender_canonical_maps: hash:/etc/postfix/sender_canonical
relay_recipient_maps: hash:/etc/postfix/relay_domains
virtual_alias_maps: hash:/etc/postfix/virtual
Added config files for virtual users
2015-06-21 01:18:55 +02:00
transport:
DOMAIN_NAME: ':[IP_ADDRESS]'
vmail:
user: postfix_user
password: DB_PASSWD
hosts: DB_HOST
dbname: postfix_db
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
certificates:
server-cert:
public_cert: |
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
-----BEGIN CERTIFICATE-----
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
(Your primary SSL certificate: smtp.example.com.crt)
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
(Your intermediate certificate: example-ca.crt)
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
-----END CERTIFICATE-----
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
-----BEGIN CERTIFICATE-----
(Your root certificate: trusted-root.crt)
-----END CERTIFICATE-----
private_key: |
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
-----BEGIN RSA PRIVATE KEY-----
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
(Your Private key)
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
-----END RSA PRIVATE KEY-----
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
example.com-relay-client-cert:
public_cert: |
-----BEGIN CERTIFICATE-----
(Your primary SSL certificate: smtp.example.com.crt)
-----END CERTIFICATE-----
private_key: |
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
-----BEGIN RSA PRIVATE KEY-----
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
(Your Private key)
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
-----END RSA PRIVATE KEY-----
Replace postmap_macro by generic handling of map files Merge existing handling of postfix lookup table/map files into a single template. Mappings are read from pillar in `postfix:mapping`. Configuration is written to the file pointed to by the relevant directive in `postfix:config`. A single target file is supported at the moment. The file is postmap'ed if needed. The pillar accepts a dict or an OrderedDict.
2016-04-08 17:50:52 +02:00
mapping:
smtp_sasl_password_maps:
- smtp.example.com: myaccount:somepassword
sender_canonical_maps:
- root: servers@example.com
- nagios: alerts@example.com
relay_recipient_maps:
- example.com: OK
virtual_alias_maps:
- groupaliasexample:
- someuser_1@example.com
- someuser_2@example.com
- singlealiasexample: someuser_3@example.com
Reference in New Issue Copy Permalink