From ab83789bd70d294623e62e0b366b6b649cb5b0af Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Tue, 14 Jan 2014 08:06:54 +0100
Subject: Mailing lists (using mlmmj).

Right now the list server cannot be hosted with a MX, due to bug 51:

    http://mlmmj.org/bugs/bug.php?id=51

Web archive can be compiled with MHonArc, but the web server
configuration is not there yet.
---
 roles/lists/templates/etc/postfix/main.cf.j2 | 76 ++++++++++++++++++++++++++++
 1 file changed, 76 insertions(+)
 create mode 100644 roles/lists/templates/etc/postfix/main.cf.j2

(limited to 'roles/lists/templates/etc/postfix/main.cf.j2')

diff --git a/roles/lists/templates/etc/postfix/main.cf.j2 b/roles/lists/templates/etc/postfix/main.cf.j2
new file mode 100644
index 0000000..dff9d0a
--- /dev/null
+++ b/roles/lists/templates/etc/postfix/main.cf.j2
@@ -0,0 +1,76 @@
+########################################################################
+# Lists configuration
+#
+# {{ ansible_managed }}
+# Do NOT edit this file directly!
+
+smtpd_banner     = $myhostname ESMTP $mail_name (Debian/GNU)
+biff             = no
+readme_directory = no
+mail_owner       = postfix
+
+delay_warning_time     = 4h
+maximal_queue_lifetime = 5d
+
+myorigin            = /etc/mailname
+myhostname          = lists{{ listsno | default('') }}.$mydomain
+mydomain            = {{ ansible_domain }}
+append_dot_mydomain = no
+
+# Turn off all TCP/IP listener ports except that necessary for the list server.
+# XXX: mlmmj is not compatible with the MX, see
+# http://mlmmj.org/bugs/bug.php?id=51
+master_service_disable = !127.0.0.1:smtp.inet !2527.inet inet
+
+queue_directory       = /var/spool/postfix-{{ postfix_instance[inst].name }}
+data_directory        = /var/lib/postfix-{{ postfix_instance[inst].name }}
+multi_instance_group  = {{ postfix_instance[inst].group | default('') }}
+multi_instance_name   = postfix-{{ postfix_instance[inst].name }}
+multi_instance_enable = yes
+
+# This server is a Mail Delivery Agent
+mynetworks_style = host
+inet_interfaces  = 172.16.0.1
+{% if 'MX' in group_names %}
+                   127.0.0.1
+{% endif %}
+inet_protocols   = ipv4
+
+# No local delivery
+mydestination        =
+local_transport      = error:5.1.1 Mailbox unavailable
+alias_maps           =
+alias_database       =
+local_recipient_maps =
+
+message_size_limit  = 67108864
+recipient_delimiter = +
+
+# Forward everything to our internal mailhub
+{% if 'MTA-out' in group_names %}
+relayhost     = [127.0.0.1]:{{ MTA_out.port }}
+{% else %}
+relayhost     = [{{ MTA_out.host }}]:{{ MTA_out.port }}
+{% endif %}
+relay_domains =
+
+# Virtual transport (the alias resolution is already done by the MX:es)
+transport_maps = ldap:$config_directory/virtual/transport_lists_maps.cf
+mlmmj_destination_recipient_limit = 1
+
+# Don't rewrite remote headers
+local_header_rewrite_clients     =
+# Avoid splitting the envelope and scanning messages multiple times
+smtp_destination_recipient_limit = 1000
+# Tolerate occasional high latency
+smtp_data_done_timeout       = 1200s
+smtpd_timeout                = 1200s
+
+# Tunnel everything through IPSec
+smtp_tls_security_level  = none
+{% if 'MTA-out' in group_names %}
+smtp_bind_address        = 127.0.0.1
+{% else %}
+smtp_bind_address        = 172.16.0.1
+{% endif %}
+smtpd_tls_security_level = none
-- 
cgit v1.2.3