/[adm]/puppet/modules/postfix/templates/main.cf
ViewVC logotype

Annotation of /puppet/modules/postfix/templates/main.cf

Parent Directory Parent Directory | Revision Log Revision Log


Revision 340 - (hide annotations) (download)
Sat Nov 20 11:52:54 2010 UTC (13 years, 5 months ago) by misc
File size: 2916 byte(s)
- do not let file with passwords to be world readable 
    ( even if being readable by apache is not good either, but needed as the password is used by apache )
- use ldaps for sympa
- use the 2 new facter macro and remove the version copied everywhere
- remove hardcoded domain in bugzilla and others

1 misc 33 # Please be sure to read the /usr/share/doc/postfix/README.MDK file
2     # to learn about differences from stock postfix to Mandriva package.
3     # This file contains only the parameters changed from a default install
4     # see /etc/postfix/main.cf.dist for a commented, fuller version of this file.
5    
6 misc 37
7 misc 33 # These are changed by postfix install script
8     readme_directory = /usr/share/doc/postfix/README_FILES
9     html_directory = /usr/share/doc/postfix/html
10     sendmail_path = /usr/sbin/sendmail.postfix
11     setgid_group = postdrop
12     command_directory = /usr/sbin
13     manpage_directory = /usr/share/man
14 misc 340 daemon_directory = <%= lib_dir %>/postfix/
15 misc 33 data_directory = /var/lib/postfix
16     newaliases_path = /usr/bin/newaliases
17     mailq_path = /usr/bin/mailq
18     queue_directory = /var/spool/postfix
19     mail_owner = postfix
20    
21     # User configurable parameters
22    
23 misc 329 <% if all_tags.include?('postfix::simple_relay') %>
24 misc 33 inet_interfaces = localhost
25 misc 294 <% else %>
26     inet_interfaces = all
27     <% end %>
28    
29 misc 33 inet_protocols = all
30     mynetworks_style = host
31 boklm 275 myhostname = <%= fqdn %>
32     mydomain = <%= domain %>
33     mydestination = <%= fqdn %>
34     myorigin = $mydomain
35 misc 330 <%- if all_tags.include?('postfix::secondary_smtp') -%>
36     relay_domains = <%= domain %>, ml.<%= domain %>
37     <%- end -%>
38    
39     mydestination = <%= fqdn %>
40 misc 329 <%- if all_tags.include?('postfix::primary_smtp') -%>
41 misc 331 <%= domain %>,
42     <%- if classes.include?('sympa') -%>
43     ml.<%= domain %>
44     <%- end -%>
45 misc 332
46     alias_maps = hash:/etc/aliases
47     # uncomment if we want to enable ldap based alias
48     # and create the file
49     #ldap:/etc/postfix/ldap_aliases.conf
50 misc 287 <%- end -%>
51 misc 332
52 misc 333
53     <%- if all_tags.include?('postfix::smtp_server') -%>
54 misc 287 transport_maps = regexp:/etc/postfix/transport_regexp
55 misc 327 <%- end -%>
56 misc 326
57 misc 329 <%- if classes.include?('sympa') -%>
58 misc 287 sympa_destination_recipient_limit = 1
59     sympabounce_destination_recipient_limit = 1
60 misc 329 <%- end -%>
61 misc 326
62 misc 33 #delay_warning_time = 4h
63     smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) (Mandriva Linux)
64     unknown_local_recipient_reject_code = 450
65     smtp-filter_destination_concurrency_limit = 2
66     lmtp-filter_destination_concurrency_limit = 2
67     smtpd_use_tls = yes
68     smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem
69     smtpd_tls_key_file = /etc/pki/tls/private/postfix.pem
70     smtpd_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
71 misc 294
72 misc 329 <%- if all_tags.include?('postfix::smtp_server') -%>
73 misc 326 smtpd_etrn_restrictions = reject
74    
75     smtpd_helo_required = yes
76    
77     smtpd_data_restrictions = reject_unauth_pipelining
78     reject_multi_recipient_bounce
79    
80 misc 329 smtpd_recipient_restrictions = reject_non_fqdn_recipient
81     reject_non_fqdn_sender
82     # not done yet, not sure if we need to offer this kind of service
83 misc 294 # permit_sasl_authenticated
84     permit_mynetworks
85     reject_unauth_destination
86 misc 326 reject_non_fqdn_helo_hostname
87 misc 294 reject_unknown_sender_domain
88     reject_unknown_client
89 misc 329 <%- if classes.include?('postgrey') -%>
90 misc 294 check_policy_service unix:extern/postgrey/socket
91 misc 329 <%- end -%>
92     <%- end -%>
93 misc 294

  ViewVC Help
Powered by ViewVC 1.1.30