include:

  - profile.cron

  - zypper.packages

/etc/postfix/master.cf:

  file.managed:

    - source: salt://profile/mailserver/files/master.cf

    - user: root

    - group: root

    - mode: '0644'

    - template: jinja

    - replace: True

    - require:

      - pkg: zypper_packages

    - watch_in:

      - service: postfix

{% for file in [

  'handling_special_recipients',

  'manually-blocked-users',

  'no-internal-tls',

  'ratelimit',

  'transport',

  'virtual-domains',

  'virtual-opensuse-aliases',

  'virtual-opensuse-mailinglists'

] %}

/etc/postfix/{{ file }}:

  file.managed:

    - source: salt://profile/mailserver/files/{{ file }}

    - user: root

    - group: root

    - mode: '0644'

    - replace: True

    - template: jinja

  cmd.run:

    - name: postmap /etc/postfix/{{ file }}

    - runas: root

    - onchanges:

      - file: /etc/postfix/{{ file }}

    - watch_in:

      - service: postfix

    - require:

      - pkg: zypper_packages

{% endfor %}

/etc/sysconfig/postgrey:

  file.line:

    - match: ^POSTGREY_EXTRA_OPTIONS=

    - content: POSTGREY_EXTRA_OPTIONS="--auto-whitelist-clients --greylist-text='Service temporarily unavailable, please retry later'"

    - mode: replace

/etc/postfix/header_checks:

  file.managed:

    - source: salt://profile/mailserver/files/header_checks

    - user: root

    - group: root

    - mode: '0644'

    - replace: True

    - template: jinja

{% for file in [

  'bounce-old-mlmmj.pcre',

  'greylist_helos.pcre',

  'suspicious_client.pcre',

  'virtual-opensuse-mm3-bounces.pcre'

] %}

/etc/postfix/{{ file }}:

  file.managed:

    - source: salt://profile/mailserver/files/{{ file }}

    - user: root

    - group: root

    - mode: '0644'

    - replace: True

    - template: jinja

    - require:

      - pkg: zypper_packages

    - watch_in:

      - service: postfix

{% endfor %}

/etc/clamd.conf:

  file.managed:

    - source: salt://profile/mailserver/files/clamd.conf

    - user: root

    - group: root

    - mode: '0644'

    - replace: True

    - template: jinja

    - require:

      - pkg: zypper_packages

    - watch_in:

      - service: clamd

/etc/freshclam.conf:

  file.managed:

    - source: salt://profile/mailserver/files/freshclam.conf

    - user: root

    - group: root

    - mode: '0644'

    - replace: True

    - template: jinja

    - require:

      - pkg: zypper_packages

    - watch_in:

      - service: freshclam

/etc/postgrey/whitelist_clients.local:

  file.managed:

    - source: salt://profile/mailserver/files/whitelist_clients.local

    - user: root

    - group: root

    - mode: '0644'

    - replace: True

    - template: jinja

    - require:

      - pkg: zypper_packages

    - watch_in:

      - service: postgrey

{%- for file, dir in [

  ('spampd', 'sysconfig'),

  ('local.cf', 'mail/spamassassin'),

  ('opensuse.cf', 'mail/spamassassin'),

  ('opensuse-rules.cf', 'mail/spamassassin'),

] %}

/etc/{{ dir }}/{{ file }}:

  file.managed:

    - source: salt://profile/mailserver/files/spamassassin/{{ file }}

    - user: root

    - group: root

    - mode: '0644'

    - replace: True

    - template: jinja

    - require:

      - pkg: zypper_packages

    - watch_in:

      - service: spampd

{%- endfor %}

/etc/default/postsrsd:

  file.line:

    - match: ^SRS_LISTEN_ADDR=

    - content: SRS_LISTEN_ADDR=ipv6-localhost

    - mode: replace

    - watch_in:

      - service: service postsrsd

# MAYBE: remove override for clamd, seems to be standard now?

{%- for svc in ['clamd', 'spampd'] %}

/etc/systemd/system/{{ svc }}.service.d/override.conf:

  file.managed:

    - user: root

    - group: root

    - mode: '0644'

    - replace: True

    - makedirs: True

    - contents:

        - {{ pillar['managed_by_salt'] | yaml_encode }}

        - '[Service]'

        - 'RestartSec=10'

        - 'Restart=always'

{%- endfor %}

{%- for svc in ['clamd', 'freshclam', 'spampd', 'postsrsd', 'postgrey'] %}

service {{ svc }}:

  service.running:

    - name: {{ svc }}

    - enable: True

{%- endfor %}

{%- for file, dir in [

  ('dhprimes','/etc/cron.d'),

  ('regen_dh_primes','/usr/local/bin'),

  ('member_aliases','/etc/cron.d'),

  ('get_member_aliases', '/usr/local/bin')

] %}

{{ dir }}/{{ file }}:

  file.managed:

    - source: salt://profile/mailserver/files/cron/{{ file }}

    - user: root

    - group: root

    - mode: {{ '0755' if dir.endswith('/bin') else '0644' }}

    - replace: True

    - template: jinja

{% endfor %}

/root/.my.cnf:

  file.managed:

    - contents:

      - {{ pillar['managed_by_salt'] | yaml_encode }}

      - '[client]'

      - 'host=mysql.infra.opensuse.org'

      - 'port=3307'

      - 'user={{ pillar.profile.mailserver.members.user }}'

      - 'password={{ salt['pillar.get']('profile:mailserver:members:password', '') }}'

    - user: root

    - group: root

    - mode: '0600'

# make sure the user database exists and is ready to use

/etc/postfix/virtual-opensuse-users:

  cmd.run:

    - name: /usr/local/bin/get_member_aliases

    - runas: root

    - unless:

      - test -f /etc/postfix/virtual-opensuse-users

    - require:

      - pkg: zypper_packages

      - file: /root/.my.cnf