From 22aca135a5d1658b0d753e85cc7db8342fd96730 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Thu, 1 Jun 2017 19:12:37 +0200 Subject: postfix: don't rate-limit our IPsec subnet. --- roles/MSA/templates/etc/postfix/main.cf.j2 | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'roles/MSA/templates/etc/postfix/main.cf.j2') diff --git a/roles/MSA/templates/etc/postfix/main.cf.j2 b/roles/MSA/templates/etc/postfix/main.cf.j2 index ec6b242..45a47c6 100644 --- a/roles/MSA/templates/etc/postfix/main.cf.j2 +++ b/roles/MSA/templates/etc/postfix/main.cf.j2 @@ -17,7 +17,10 @@ myhostname = smtp{{ msano | default('') }}.$mydomain mydomain = fripost.org append_dot_mydomain = no -mynetworks_style = host +mynetworks = 127.0.0.0/8, [::1]/128 +{%- for h in groups.webmail | difference([inventory_hostname]) | sort -%} + , {{ ipsec[ hostvars[h].inventory_hostname_short ] | ipaddr }} +{% endfor %} queue_directory = /var/spool/postfix-{{ postfix_instance[inst].name }} data_directory = /var/lib/postfix-{{ postfix_instance[inst].name }} -- cgit v1.2.3