From a0d439f832721ab1b4bdcf9ab844ee20d4dc1682 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Tue, 11 Dec 2018 21:13:19 +0100
Subject: submission: Prospective SPF checking.

Cf. http://www.openspf.org/Best_Practices/Outbound .
---
 roles/MSA/tasks/main.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'roles/MSA/tasks')

diff --git a/roles/MSA/tasks/main.yml b/roles/MSA/tasks/main.yml
index 65d1dae..c78139a 100644
--- a/roles/MSA/tasks/main.yml
+++ b/roles/MSA/tasks/main.yml
@@ -4,6 +4,7 @@
     packages:
     - postfix
     - postfix-pcre
+    - postfix-policyd-spf-python
 
 - name: Copy Postfix sender login socketmap
   copy: src=usr/local/bin/postfix-sender-login.pl
@@ -59,6 +60,15 @@
   notify:
     - Reload Postfix
 
+- name: Configure policyd-spf
+  template: src=etc/postfix-policyd-spf-python/policyd-spf.conf.j2
+            dest=/etc/postfix-policyd-spf-python/policyd-spf.conf
+            owner=root group=root
+            mode=0644
+  # Reload Postifx to terminate spawn(8) daemon children
+  notify:
+    - Reload Postfix
+
 - name: Create directory /etc/postfix/ssl
   file: path=/etc/postfix-{{ postfix_instance[inst].name }}/ssl
         state=directory
-- 
cgit v1.2.3