diff options
Diffstat (limited to 'roles/lists/templates/etc/postfix/main.cf.j2')
| -rw-r--r-- | roles/lists/templates/etc/postfix/main.cf.j2 | 76 |
1 files changed, 76 insertions, 0 deletions
diff --git a/roles/lists/templates/etc/postfix/main.cf.j2 b/roles/lists/templates/etc/postfix/main.cf.j2 new file mode 100644 index 0000000..dff9d0a --- /dev/null +++ b/roles/lists/templates/etc/postfix/main.cf.j2 @@ -0,0 +1,76 @@ +######################################################################## +# Lists configuration +# +# {{ ansible_managed }} +# Do NOT edit this file directly! + +smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) +biff = no +readme_directory = no +mail_owner = postfix + +delay_warning_time = 4h +maximal_queue_lifetime = 5d + +myorigin = /etc/mailname +myhostname = lists{{ listsno | default('') }}.$mydomain +mydomain = {{ ansible_domain }} +append_dot_mydomain = no + +# Turn off all TCP/IP listener ports except that necessary for the list server. +# XXX: mlmmj is not compatible with the MX, see +# http://mlmmj.org/bugs/bug.php?id=51 +master_service_disable = !127.0.0.1:smtp.inet !2527.inet inet + +queue_directory = /var/spool/postfix-{{ postfix_instance[inst].name }} +data_directory = /var/lib/postfix-{{ postfix_instance[inst].name }} +multi_instance_group = {{ postfix_instance[inst].group | default('') }} +multi_instance_name = postfix-{{ postfix_instance[inst].name }} +multi_instance_enable = yes + +# This server is a Mail Delivery Agent +mynetworks_style = host +inet_interfaces = 172.16.0.1 +{% if 'MX' in group_names %} + 127.0.0.1 +{% endif %} +inet_protocols = ipv4 + +# No local delivery +mydestination = +local_transport = error:5.1.1 Mailbox unavailable +alias_maps = +alias_database = +local_recipient_maps = + +message_size_limit = 67108864 +recipient_delimiter = + + +# Forward everything to our internal mailhub +{% if 'MTA-out' in group_names %} +relayhost = [127.0.0.1]:{{ MTA_out.port }} +{% else %} +relayhost = [{{ MTA_out.host }}]:{{ MTA_out.port }} +{% endif %} +relay_domains = + +# Virtual transport (the alias resolution is already done by the MX:es) +transport_maps = ldap:$config_directory/virtual/transport_lists_maps.cf +mlmmj_destination_recipient_limit = 1 + +# Don't rewrite remote headers +local_header_rewrite_clients = +# Avoid splitting the envelope and scanning messages multiple times +smtp_destination_recipient_limit = 1000 +# Tolerate occasional high latency +smtp_data_done_timeout = 1200s +smtpd_timeout = 1200s + +# Tunnel everything through IPSec +smtp_tls_security_level = none +{% if 'MTA-out' in group_names %} +smtp_bind_address = 127.0.0.1 +{% else %} +smtp_bind_address = 172.16.0.1 +{% endif %} +smtpd_tls_security_level = none |