|
|
9c01e4 |
/etc/postfix/master.cf:
|
|
|
9c01e4 |
file.managed:
|
|
|
9c01e4 |
- source: salt://profile/mailserver/files/master.cf
|
|
|
9c01e4 |
- user: root
|
|
|
9c01e4 |
- group: root
|
|
|
9c01e4 |
- mode: 0644
|
|
|
9c01e4 |
- template: jinja
|
|
|
9c01e4 |
- replace: True
|
|
|
9c01e4 |
- require:
|
|
|
9c01e4 |
- pkg: postfix
|
|
|
9c01e4 |
- watch_in:
|
|
|
9c01e4 |
- service: postfix
|
|
|
9c01e4 |
|
|
|
9c01e4 |
{% for file in [
|
|
|
9c01e4 |
'handling_special_recipients',
|
|
|
9c01e4 |
'no-internal-tls',
|
|
|
9c01e4 |
'ratelimit',
|
|
|
9c01e4 |
'transport',
|
|
|
9c01e4 |
'virtual-domains',
|
|
|
9c01e4 |
'virtual-opensuse-aliases',
|
|
|
9c01e4 |
'virtual-opensuse-mailinglists'
|
|
|
9c01e4 |
] %}
|
|
|
9c01e4 |
/etc/postfix/{{file}}:
|
|
|
9c01e4 |
file.managed:
|
|
|
9c01e4 |
- source: salt://profile/mailserver/files/{{file}}
|
|
|
9c01e4 |
- user: root
|
|
|
9c01e4 |
- group: root
|
|
|
9c01e4 |
- mode: 0644
|
|
|
9c01e4 |
- replace: True
|
|
|
9c01e4 |
cmd.run:
|
|
|
9c01e4 |
- name: postmap /etc/postfix/{{file}}
|
|
|
9c01e4 |
- runas: root
|
|
|
9c01e4 |
- onchanges:
|
|
|
9c01e4 |
- file: /etc/postfix/{{file}}
|
|
|
9c01e4 |
- watch_in:
|
|
|
9c01e4 |
- service: postfix
|
|
|
9c01e4 |
- require:
|
|
|
9c01e4 |
- pkg: postfix
|
|
|
9c01e4 |
{% endfor %}
|
|
|
9c01e4 |
|
|
|
9c01e4 |
/etc/sysconfig/postgrey:
|
|
|
9c01e4 |
file.line:
|
|
|
9c01e4 |
- match: ^POSTGREY_EXTRA_OPTIONS=
|
|
|
9c01e4 |
- content: POSTGREY_EXTRA_OPTIONS="--auto-whitelist-clients --greylist-text='Service temporarily unavailable, please retry later'"
|
|
|
9c01e4 |
- mode: replace
|
|
|
9c01e4 |
|
|
|
9c01e4 |
/etc/postfix/header_checks:
|
|
|
9c01e4 |
file.managed:
|
|
|
9c01e4 |
- source: salt://profile/mailserver/files/header_checks
|
|
|
9c01e4 |
- user: root
|
|
|
9c01e4 |
- group: root
|
|
|
9c01e4 |
- mode: 0644
|
|
|
9c01e4 |
- replace: True
|
|
|
9c01e4 |
|
|
|
9c01e4 |
{% for file in [
|
|
|
9c01e4 |
'bounce-old-mlmmj.pcre',
|
|
|
9c01e4 |
'greylist_helos.pcre',
|
|
|
9c01e4 |
'suspicious_client.pcre',
|
|
|
9c01e4 |
'virtual-opensuse-mm3-bounces.pcre'
|
|
|
9c01e4 |
] %}
|
|
|
9c01e4 |
/etc/postfix/{{file}}:
|
|
|
9c01e4 |
file.managed:
|
|
|
9c01e4 |
- source: salt://profile/mailserver/files/{{file}}
|
|
|
9c01e4 |
- user: root
|
|
|
9c01e4 |
- group: root
|
|
|
9c01e4 |
- mode: 0644
|
|
|
9c01e4 |
- replace: True
|
|
|
9c01e4 |
- require:
|
|
|
9c01e4 |
- pkg: postfix
|
|
|
9c01e4 |
- watch_in:
|
|
|
9c01e4 |
- service: postfix
|
|
|
9c01e4 |
{% endfor %}
|
|
|
9c01e4 |
|
|
|
9c01e4 |
/etc/clamd.conf:
|
|
|
9c01e4 |
file.managed:
|
|
|
9c01e4 |
- source: salt://profile/mailserver/files/clamd.conf
|
|
|
9c01e4 |
- user: root
|
|
|
9c01e4 |
- group: root
|
|
|
9c01e4 |
- mode: 0644
|
|
|
9c01e4 |
- replace: True
|
|
|
9c01e4 |
- require:
|
|
|
9c01e4 |
- pkg: clamav
|
|
|
9c01e4 |
- watch_in:
|
|
|
9c01e4 |
- service: clamd
|
|
|
9c01e4 |
|
|
|
9c01e4 |
/etc/freshclam.conf:
|
|
|
9c01e4 |
file.managed:
|
|
|
9c01e4 |
- source: salt://profile/mailserver/files/freshclam.conf
|
|
|
9c01e4 |
- user: root
|
|
|
9c01e4 |
- group: root
|
|
|
9c01e4 |
- mode: 0644
|
|
|
9c01e4 |
- replace: True
|
|
|
9c01e4 |
- require:
|
|
|
9c01e4 |
- pkg: clamav
|
|
|
9c01e4 |
- watch_in:
|
|
|
9c01e4 |
- service: freshclam
|
|
|
9c01e4 |
|
|
|
9c01e4 |
/etc/postgrey/whitelist_clients.local:
|
|
|
9c01e4 |
file.managed:
|
|
|
9c01e4 |
- source: salt://profile/mailserver/files/whitelist_clients.local
|
|
|
9c01e4 |
- user: root
|
|
|
9c01e4 |
- group: root
|
|
|
9c01e4 |
- mode: 0644
|
|
|
9c01e4 |
- replace: True
|
|
|
9c01e4 |
- require:
|
|
|
9c01e4 |
- pkg: postgrey
|
|
|
9c01e4 |
- watch_in:
|
|
|
9c01e4 |
- service: postgrey
|
|
|
9c01e4 |
|
|
|
9c01e4 |
{% for file, dir in [
|
|
|
9c01e4 |
('spampd', 'sysconfig'),
|
|
|
9c01e4 |
('local.cf', 'mail/spamassassin'),
|
|
|
9c01e4 |
('opensuse.cf', 'mail/spamassassin'),
|
|
|
9c01e4 |
('opensuse-rules.cf', 'mail/spamassassin'),
|
|
|
9c01e4 |
]%}
|
|
|
9c01e4 |
/etc/{{dir}}/{{file}}:
|
|
|
9c01e4 |
file.managed:
|
|
|
9c01e4 |
- source: salt://profile/mailserver/files/spamassassin/{{file}}
|
|
|
9c01e4 |
- user: root
|
|
|
9c01e4 |
- group: root
|
|
|
9c01e4 |
- mode: 0644
|
|
|
9c01e4 |
- replace: True
|
|
|
9c01e4 |
- require:
|
|
|
9c01e4 |
- pkg: spamassassin
|
|
|
9c01e4 |
- watch_in:
|
|
|
9c01e4 |
- service: spampd
|
|
|
9c01e4 |
{% endfor %}
|
|
|
9c01e4 |
|
|
|
9c01e4 |
spampd-in:
|
|
|
9c01e4 |
host.present:
|
|
|
9c01e4 |
- ip: 127.0.0.98
|
|
|
9c01e4 |
|
|
|
9c01e4 |
spampd-out:
|
|
|
9c01e4 |
host.present:
|
|
|
9c01e4 |
- ip: 127.0.0.99
|
|
|
9c01e4 |
|
|
|
9c01e4 |
postsrsd:
|
|
|
9c01e4 |
host.present:
|
|
|
52ba96 |
- ip: 127.0.0.1
|
|
|
9c01e4 |
|
|
|
9c01e4 |
# MAYBE: remove override for clamd, seems to be standard now?
|
|
|
9c01e4 |
{% for svc in ['clamd', 'spampd'] %}
|
|
|
9c01e4 |
/etc/systemd/system/{{svc}}.service.d/override.conf:
|
|
|
9c01e4 |
file.managed:
|
|
|
9c01e4 |
- user: root
|
|
|
9c01e4 |
- group: root
|
|
|
9c01e4 |
- mode: 0644
|
|
|
9c01e4 |
- replace: True
|
|
|
9c01e4 |
- makedirs: True
|
|
|
9c01e4 |
- contents:
|
|
|
9c01e4 |
- '[Service]'
|
|
|
9c01e4 |
- 'RestartSec=10'
|
|
|
9c01e4 |
- 'Restart=always'
|
|
|
9c01e4 |
{% endfor %}
|
|
|
9c01e4 |
|
|
|
9c01e4 |
{% for svc in ['clamd', 'freshclam', 'spampd', 'postsrsd', 'postgrey'] %}
|
|
|
9c01e4 |
service {{svc}}:
|
|
|
9c01e4 |
service.running:
|
|
|
9c01e4 |
- name: {{svc}}
|
|
|
9c01e4 |
- enable: True
|
|
|
9c01e4 |
{% endfor %}
|
|
|
9c01e4 |
|
|
|
9c01e4 |
{% for file, dir in [
|
|
|
9c01e4 |
('dhprimes','/etc/cron.d'),
|
|
|
9c01e4 |
('regen_dh_primes','/usr/local/bin'),
|
|
|
9c01e4 |
('member_aliases','/etc/cron.d'),
|
|
|
9c01e4 |
('get_member_aliases', '/usr/local/bin')
|
|
|
9c01e4 |
]%}
|
|
|
9c01e4 |
{{dir}}/{{file}}:
|
|
|
9c01e4 |
file.managed:
|
|
|
9c01e4 |
- source: salt://profile/mailserver/files/cron/{{file}}
|
|
|
9c01e4 |
- user: root
|
|
|
9c01e4 |
- group: root
|
|
|
9cbb82 |
- mode: {{ '0755' if dir.endswith('/bin') else '0644' }}
|
|
|
9c01e4 |
- replace: True
|
|
|
9c01e4 |
{% endfor %}
|
|
|
9c01e4 |
|