include:

{% if salt['grains.get']('include_secrets', True) %}

  - secrets.role.mailman3

{% endif %}

  - role.common.nginx

# Special config for mailman in the postfix relay

profile:

  postfix:

    maincf:

      recipient_delimiter: '+'

      owner_request_special: 'no'

      transport_maps: 'hash://var/lib/mailman/data/postfix_lmtp,hash:/etc/postfix/transport,hash:/etc/postfix/ratelimit'

      local_recipient_maps: 'hash://var/lib/mailman/data/postfix_lmtp'

      relay_domains: 'hash://var/lib/mailman/data/postfix_domains'

    aliases:

      mailman: root

  mailman3:

    admin_user: mailman

    database_user: mailman

    database_host: 192.168.47.4

    server_list:

      - lists.opensuse.org

      - lists.uyuni-project.org

      - mailman3.infra.opensuse.org

nginx:

  ng:

    servers:

      managed:

        lists.opensuse.org.conf:

          config:

            - map $request_uri $mails_rewritemap:

                - include /etc/nginx/mails.rewritemap

            - map $request_uri $lists_rewritemap:

                - include /etc/nginx/lists.rewritemap

            - map $request_uri $feeds_rewritemap:

                - include /etc/nginx/feeds.rewritemap

            - map $request_uri $mboxs_rewritemap:

                - include /etc/nginx/mboxs.rewritemap

            - map $request_uri $miscs_rewritemap:

                - include /etc/nginx/miscs.rewritemap

            - server:

                - server_name: lists.opensuse.org lists.uyuni-project.org

                - listen:

                    - 80

                    - default_server

                - if ($mails_rewrite:map):

                    - rewrite: ^(.*)$ $mails_rewrite:map permanent

                - if ($lists_rewrite:map):

                    - rewrite: ^(.*)$ $lists_rewrite:map permanent

                - if ($feeds_rewrite:map):

                    - rewrite: ^(.*)$ $feeds_rewrite:map permanent

                - if ($mboxs_rewrite:map):

                    - rewrite: ^(.*)$ $mboxs_rewrite:map permanent

                - if ($miscs_rewrite:map):

                    - rewrite: ^(.*)$ $miscs_rewrite:map permanent

                - location /static/django-mailman3/img/login/opensuse.png:

                    - return: 301 https://static.opensuse.org/favicon-24.png

                - location /static/:

                    - alias: /var/lib/mailman_webui/static/

                - location /:

                    - include: /etc/nginx/uwsgi_params

                    - uwsgi_pass: 0.0.0.0:8000

          enabled: True

sudoers:

  included_files:

    /etc/sudoers.d/group_mailman3-admins:

      groups:

        mailman3-admins:

          - 'ALL=(ALL) ALL'