summaryrefslogtreecommitdiffstats
path: root/roles/lists/templates/etc
diff options
context:
space:
mode:
Diffstat (limited to 'roles/lists/templates/etc')
-rw-r--r--roles/lists/templates/etc/postfix/main.cf.j276
1 files changed, 76 insertions, 0 deletions
diff --git a/roles/lists/templates/etc/postfix/main.cf.j2 b/roles/lists/templates/etc/postfix/main.cf.j2
new file mode 100644
index 0000000..dff9d0a
--- /dev/null
+++ b/roles/lists/templates/etc/postfix/main.cf.j2
@@ -0,0 +1,76 @@
+########################################################################
+# Lists configuration
+#
+# {{ ansible_managed }}
+# Do NOT edit this file directly!
+
+smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
+biff = no
+readme_directory = no
+mail_owner = postfix
+
+delay_warning_time = 4h
+maximal_queue_lifetime = 5d
+
+myorigin = /etc/mailname
+myhostname = lists{{ listsno | default('') }}.$mydomain
+mydomain = {{ ansible_domain }}
+append_dot_mydomain = no
+
+# Turn off all TCP/IP listener ports except that necessary for the list server.
+# XXX: mlmmj is not compatible with the MX, see
+# http://mlmmj.org/bugs/bug.php?id=51
+master_service_disable = !127.0.0.1:smtp.inet !2527.inet inet
+
+queue_directory = /var/spool/postfix-{{ postfix_instance[inst].name }}
+data_directory = /var/lib/postfix-{{ postfix_instance[inst].name }}
+multi_instance_group = {{ postfix_instance[inst].group | default('') }}
+multi_instance_name = postfix-{{ postfix_instance[inst].name }}
+multi_instance_enable = yes
+
+# This server is a Mail Delivery Agent
+mynetworks_style = host
+inet_interfaces = 172.16.0.1
+{% if 'MX' in group_names %}
+ 127.0.0.1
+{% endif %}
+inet_protocols = ipv4
+
+# No local delivery
+mydestination =
+local_transport = error:5.1.1 Mailbox unavailable
+alias_maps =
+alias_database =
+local_recipient_maps =
+
+message_size_limit = 67108864
+recipient_delimiter = +
+
+# Forward everything to our internal mailhub
+{% if 'MTA-out' in group_names %}
+relayhost = [127.0.0.1]:{{ MTA_out.port }}
+{% else %}
+relayhost = [{{ MTA_out.host }}]:{{ MTA_out.port }}
+{% endif %}
+relay_domains =
+
+# Virtual transport (the alias resolution is already done by the MX:es)
+transport_maps = ldap:$config_directory/virtual/transport_lists_maps.cf
+mlmmj_destination_recipient_limit = 1
+
+# Don't rewrite remote headers
+local_header_rewrite_clients =
+# Avoid splitting the envelope and scanning messages multiple times
+smtp_destination_recipient_limit = 1000
+# Tolerate occasional high latency
+smtp_data_done_timeout = 1200s
+smtpd_timeout = 1200s
+
+# Tunnel everything through IPSec
+smtp_tls_security_level = none
+{% if 'MTA-out' in group_names %}
+smtp_bind_address = 127.0.0.1
+{% else %}
+smtp_bind_address = 172.16.0.1
+{% endif %}
+smtpd_tls_security_level = none