From d5927fb7247e881655488b850812e8186ae444a4 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Sun, 10 Jul 2016 05:39:25 +0200
Subject: Postfix lists/MDA instances: only include the MX:es' IPs in
 $mynetworks.

---
 roles/IMAP/templates/etc/postfix/main.cf.j2 | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'roles/IMAP/templates/etc/postfix/main.cf.j2')

diff --git a/roles/IMAP/templates/etc/postfix/main.cf.j2 b/roles/IMAP/templates/etc/postfix/main.cf.j2
index faf17de..a879d28 100644
--- a/roles/IMAP/templates/etc/postfix/main.cf.j2
+++ b/roles/IMAP/templates/etc/postfix/main.cf.j2
@@ -19,7 +19,9 @@ append_dot_mydomain = no
 
 mynetworks = 127.0.0.0/8, [::1]/128
 {%- if groups.all | length > 1 -%}
-           , {{ ipsec_subnet }}
+{%- for mx in groups.MX | sort -%}
+           , {{ ipsec[ hostvars[mx].inventory_hostname_short ] | ipaddr }}
+{%- endfor %}
 {% endif %}
 
 queue_directory       = /var/spool/postfix-{{ postfix_instance[inst].name }}
-- 
cgit v1.2.3