postfix-formula/postfix/config.sls

include:
  - postfix

{% from "postfix/map.jinja" import postfix with context %}

{{ postfix.config_dir }}:
  file.directory:
    - user: {{ postfix.root_user }}
    - group: {{ postfix.root_group }}
    - dir_mode: 755
    - file_mode: 644
    - makedirs: True

{{ postfix.config_dir }}/main.cf:
  file.managed:
    - source: salt://postfix/files/main.cf
    - user: {{ postfix.root_user }}
    - group: {{ postfix.root_group }}
    - mode: 644
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja

{% if 'vmail' in pillar.get('postfix', '') %}
{{ postfix.config_dir }}/virtual_alias_maps.cf:
  file.managed:
    - source: salt://postfix/files/virtual_alias_maps.cf
    - user: {{ postfix.root_user }}
    - group: postfix
    - mode: 640
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja

{{ postfix.config_dir }}/virtual_mailbox_domains.cf:
  file.managed:
    - source: salt://postfix/files/virtual_mailbox_domains.cf
    - user: {{ postfix.root_user }}
    - group: postfix
    - mode: 640
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja

{{ postfix.config_dir }}/virtual_mailbox_maps.cf:
  file.managed:
    - source: salt://postfix/files/virtual_mailbox_maps.cf
    - user: {{ postfix.root_user }}
    - group: postfix
    - mode: 640
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja
{% endif %}

{% if salt['pillar.get']('postfix:manage_master_config', True) %}
{{ postfix.config_dir }}/master.cf:
  file.managed:
    - source: salt://postfix/files/master.cf
    - user: {{ postfix.root_user }}
    - group: {{ postfix.root_group }}
    - mode: 644
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja
{% endif %}

{% if 'transport' in pillar.get('postfix', '') %}
{{ postfix.config_dir }}/transport:
  file.managed:
    - source: salt://postfix/files/transport
    - user: {{ postfix.root_user }}
    - group: {{ postfix.root_group }}
    - mode: 644
    - require:
      - pkg: postfix
    - watch_in:
      - service: postfix
    - template: jinja

run-postmap:
  cmd.wait:
    - name: /usr/sbin/postmap {{ postfix.config_dir }}/transport
    - cwd: /
    - watch:
      - file: {{ postfix.config_dir }}/transport
{% endif %}

{%- for domain in salt['pillar.get']('postfix:certificates', {}).keys() %}

postfix_{{ domain }}_ssl_certificate:

  file.managed:
    - name: {{ postfix.config_dir }}/ssl/{{ domain }}.crt
    - makedirs: True
    - contents_pillar: postfix:certificates:{{ domain }}:public_cert
    - watch_in:
       - service: postfix

postfix_{{ domain }}_ssl_key:
  file.managed:
    - name: {{ postfix.config_dir }}/ssl/{{ domain }}.key
    - mode: 600
    - makedirs: True
    - contents_pillar: postfix:certificates:{{ domain }}:private_key
    - watch_in:
       - service: postfix

{% endfor %}
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`include:`
			`- postfix`

FreeBSD support 2017-12-08 02:54:21 +01:00			`{% from "postfix/map.jinja" import postfix with context %}`

			`{{ postfix.config_dir }}:`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`file.directory:`
FreeBSD support 2017-12-08 02:54:21 +01:00			`- user: {{ postfix.root_user }}`
			`- group: {{ postfix.root_group }}`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`- dir_mode: 755`
			`- file_mode: 644`
			`- makedirs: True`

FreeBSD support 2017-12-08 02:54:21 +01:00			`{{ postfix.config_dir }}/main.cf:`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`file.managed:`
			`- source: salt://postfix/files/main.cf`
FreeBSD support 2017-12-08 02:54:21 +01:00			`- user: {{ postfix.root_user }}`
			`- group: {{ postfix.root_group }}`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`- mode: 644`
Make postfix.config state work with latest changes 2014-08-20 03:42:08 +02:00			`- require:`
			`- pkg: postfix`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`- watch_in:`
Change watch_in to be followed by a list 2014-08-20 03:46:15 +02:00			`- service: postfix`
Add config state and main.cf config file 2014-08-20 02:32:47 +02:00			`- template: jinja`
Added config files for virtual users 2015-06-21 01:18:55 +02:00
			`{% if 'vmail' in pillar.get('postfix', '') %}`
FreeBSD support 2017-12-08 02:54:21 +01:00			`{{ postfix.config_dir }}/virtual_alias_maps.cf:`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`file.managed:`
			`- source: salt://postfix/files/virtual_alias_maps.cf`
FreeBSD support 2017-12-08 02:54:21 +01:00			`- user: {{ postfix.root_user }}`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`- group: postfix`
			`- mode: 640`
			`- require:`
			`- pkg: postfix`
			`- watch_in:`
			`- service: postfix`
			`- template: jinja`

FreeBSD support 2017-12-08 02:54:21 +01:00			`{{ postfix.config_dir }}/virtual_mailbox_domains.cf:`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`file.managed:`
			`- source: salt://postfix/files/virtual_mailbox_domains.cf`
FreeBSD support 2017-12-08 02:54:21 +01:00			`- user: {{ postfix.root_user }}`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`- group: postfix`
			`- mode: 640`
			`- require:`
			`- pkg: postfix`
			`- watch_in:`
			`- service: postfix`
			`- template: jinja`

FreeBSD support 2017-12-08 02:54:21 +01:00			`{{ postfix.config_dir }}/virtual_mailbox_maps.cf:`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`file.managed:`
			`- source: salt://postfix/files/virtual_mailbox_maps.cf`
FreeBSD support 2017-12-08 02:54:21 +01:00			`- user: {{ postfix.root_user }}`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`- group: postfix`
			`- mode: 640`
			`- require:`
			`- pkg: postfix`
			`- watch_in:`
			`- service: postfix`
			`- template: jinja`
			`{% endif %}`

Optimized manage_master_config conditional 2015-03-26 09:43:44 +01:00			`{% if salt['pillar.get']('postfix:manage_master_config', True) %}`
FreeBSD support 2017-12-08 02:54:21 +01:00			`{{ postfix.config_dir }}/master.cf:`
add spf handling 2015-02-05 09:57:18 +01:00			`file.managed:`
			`- source: salt://postfix/files/master.cf`
FreeBSD support 2017-12-08 02:54:21 +01:00			`- user: {{ postfix.root_user }}`
			`- group: {{ postfix.root_group }}`
add spf handling 2015-02-05 09:57:18 +01:00			`- mode: 644`
			`- require:`
			`- pkg: postfix`
			`- watch_in:`
			`- service: postfix`
			`- template: jinja`
Add option to let the module (not) manage the master.cf 2015-03-25 12:49:57 +01:00			`{% endif %}`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`{% if 'transport' in pillar.get('postfix', '') %}`
FreeBSD support 2017-12-08 02:54:21 +01:00			`{{ postfix.config_dir }}/transport:`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`file.managed:`
			`- source: salt://postfix/files/transport`
FreeBSD support 2017-12-08 02:54:21 +01:00			`- user: {{ postfix.root_user }}`
			`- group: {{ postfix.root_group }}`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`- mode: 644`
			`- require:`
			`- pkg: postfix`
			`- watch_in:`
			`- service: postfix`
			`- template: jinja`

			`run-postmap:`
			`cmd.wait:`
FreeBSD support 2017-12-08 02:54:21 +01:00			`- name: /usr/sbin/postmap {{ postfix.config_dir }}/transport`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`- cwd: /`
			`- watch:`
FreeBSD support 2017-12-08 02:54:21 +01:00			`- file: {{ postfix.config_dir }}/transport`
Added config files for virtual users 2015-06-21 01:18:55 +02:00			`{% endif %}`

Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`{%- for domain in salt['pillar.get']('postfix:certificates', {}).keys() %}`

			`postfix_{{ domain }}_ssl_certificate:`
Added config files for virtual users 2015-06-21 01:18:55 +02:00
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00			`file.managed:`
FreeBSD support 2017-12-08 02:54:21 +01:00			`- name: {{ postfix.config_dir }}/ssl/{{ domain }}.crt`
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`- makedirs: True`
			`- contents_pillar: postfix:certificates:{{ domain }}:public_cert`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00			`- watch_in:`
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`- service: postfix`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`postfix_{{ domain }}_ssl_key:`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00			`file.managed:`
FreeBSD support 2017-12-08 02:54:21 +01:00			`- name: {{ postfix.config_dir }}/ssl/{{ domain }}.key`
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`- mode: 600`
			`- makedirs: True`
			`- contents_pillar: postfix:certificates:{{ domain }}:private_key`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00			`- watch_in:`
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`- service: postfix`
Allow certs and keys to be specified in the pillar 2015-06-20 22:49:09 +02:00
Switch to SSL management method used in nginx.ng formula Also change path to certificates since previous ones are distribution specific. They look like Debian path, Gentoo uses different ones. New path uses same logic as nginx's formula, use known to exist folder which server most likely has permission to read too since it is its configuration folder. 2015-08-30 19:30:08 +02:00			`{% endfor %}`