|  | Commit message (Collapse) | Author | Age | Files | 
|---|
| | 
| 
| 
| 
| 
| | And drop -ldap from all roles other than MX.  -lmdb is included in
roles/common but it can be helpful to have it individual roles as well
as they can be run individually. | 
| | 
| 
| 
| | Run as a dedicated user, not ‘postfix’. | 
| | 
| 
| 
| | Cf. http://www.openspf.org/Best_Practices/Outbound . | 
| | |  | 
| | 
| 
| 
| | Cf. lmdb_table(5). | 
| | 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| | The following policy is now implemented:
    * users can use their SASL login name as sender address;
    * alias and/or list owners can use the address as envelope sender;
    * domain postmasters can use arbitrary sender addresses under their
      domains;
    * domain owners can use arbitrary sender addresses under their domains,
      unless it is also an existing account name;
    * for known domains without owner or postmasters, other sender addresses
      are not allowed; and
    * arbitrary sender addresses under unknown domains are allowed. | 
| | |  | 
| | |  | 
| | |  | 
| | |  | 
| | 
| 
| 
| | To avoid new commits upon cert renewal. | 
| | 
| 
| 
| 
| 
| | locally.
And use this to fetch all X.509 leaf certificates. | 
| | |  | 
| | |  | 
| | 
| 
| 
| 
| | Interhost communications are protected by stunnel4.  The graphs are only
visible on the master itself, and content is generated by Fast CGI. | 
| | 
| 
| 
| 
| 
| | (Unless a new instance is created, or the master.cf change is modified.)
Changing some variables, such as inet_protocols, require a full restart,
but most of the time it's overkill. | 
| | 
| 
| 
| 
| 
| | And don't restart or reload either upon change of pcre: files that are
used by smtpd(8), cleanup(8) or local(8), following the suggestion from
http://www.postfix.org/DATABASE_README.html#detect . | 
|  |  |