saltstack-formulas/postfix-formula
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
b2fc0f1c0b
postfix-formula/postfix/config.sls

118 lines
2.5 KiB
Plaintext
Raw Normal View History

Add config state and main.cf config file
2014-08-20 02:32:47 +02:00
include:
- postfix
/etc/postfix:
file.directory:
- user: root
- group: root
- dir_mode: 755
- file_mode: 644
- makedirs: True
/etc/postfix/main.cf:
file.managed:
- source: salt://postfix/files/main.cf
- user: root
- group: root
- mode: 644
Make postfix.config state work with latest changes
2014-08-20 03:42:08 +02:00
- require:
- pkg: postfix
Add config state and main.cf config file
2014-08-20 02:32:47 +02:00
- watch_in:
Change watch_in to be followed by a list
2014-08-20 03:46:15 +02:00
- service: postfix
Add config state and main.cf config file
2014-08-20 02:32:47 +02:00
- template: jinja
Added config files for virtual users
2015-06-21 01:18:55 +02:00
{% if 'vmail' in pillar.get('postfix', '') %}
/etc/postfix/virtual_alias_maps.cf:
file.managed:
- source: salt://postfix/files/virtual_alias_maps.cf
- user: root
- group: postfix
- mode: 640
- require:
- pkg: postfix
- watch_in:
- service: postfix
- template: jinja
/etc/postfix/virtual_mailbox_domains.cf:
file.managed:
- source: salt://postfix/files/virtual_mailbox_domains.cf
- user: root
- group: postfix
- mode: 640
- require:
- pkg: postfix
- watch_in:
- service: postfix
- template: jinja
/etc/postfix/virtual_mailbox_maps.cf:
file.managed:
- source: salt://postfix/files/virtual_mailbox_maps.cf
- user: root
- group: postfix
- mode: 640
- require:
- pkg: postfix
- watch_in:
- service: postfix
- template: jinja
{% endif %}
Optimized manage_master_config conditional
2015-03-26 09:43:44 +01:00
{% if salt['pillar.get']('postfix:manage_master_config', True) %}
add spf handling
2015-02-05 09:57:18 +01:00
/etc/postfix/master.cf:
file.managed:
- source: salt://postfix/files/master.cf
- user: root
- group: root
- mode: 644
- require:
- pkg: postfix
- watch_in:
- service: postfix
- template: jinja
Add option to let the module (not) manage the master.cf
2015-03-25 12:49:57 +01:00
{% endif %}
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
Added config files for virtual users
2015-06-21 01:18:55 +02:00
{% if 'transport' in pillar.get('postfix', '') %}
/etc/postfix/transport:
file.managed:
- source: salt://postfix/files/transport
- user: root
- group: root
- mode: 644
- require:
- pkg: postfix
- watch_in:
- service: postfix
- template: jinja
run-postmap:
cmd.wait:
- name: /usr/sbin/postmap /etc/postfix/transport
- cwd: /
- watch:
- file: /etc/postfix/transport
{% endif %}
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
{%- for domain in salt['pillar.get']('postfix:certificates', {}).keys() %}
postfix_{{ domain }}_ssl_certificate:
Added config files for virtual users
2015-06-21 01:18:55 +02:00
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
file.managed:
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
- name: /etc/postfix/ssl/{{ domain }}.crt
- makedirs: True
- contents_pillar: postfix:certificates:{{ domain }}:public_cert
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
- watch_in:
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
- service: postfix
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
postfix_{{ domain }}_ssl_key:
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
file.managed:
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
- name: /etc/postfix/ssl/{{ domain }}.key
- mode: 600
- makedirs: True
- contents_pillar: postfix:certificates:{{ domain }}:private_key
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
- watch_in:
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
- service: postfix
Allow certs and keys to be specified in the pillar
2015-06-20 22:49:09 +02:00
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder.
2015-08-30 19:30:08 +02:00
{% endfor %}
Reference in New Issue Copy Permalink