/[adm]/puppet/modules/postfix/templates/main.cf
ViewVC logotype

Annotation of /puppet/modules/postfix/templates/main.cf

Parent Directory Parent Directory | Revision Log Revision Log


Revision 3271 - (hide annotations) (download)
Fri Jul 5 16:29:57 2013 UTC (10 years, 9 months ago) by boklm
File size: 4092 byte(s)
postfix: enable opportunistic TLS when sending (from Dan Fandrich)
1 misc 33 # Please be sure to read the /usr/share/doc/postfix/README.MDK file
2     # to learn about differences from stock postfix to Mandriva package.
3     # This file contains only the parameters changed from a default install
4     # see /etc/postfix/main.cf.dist for a commented, fuller version of this file.
5    
6 misc 37
7 misc 33 # These are changed by postfix install script
8     readme_directory = /usr/share/doc/postfix/README_FILES
9     html_directory = /usr/share/doc/postfix/html
10     sendmail_path = /usr/sbin/sendmail.postfix
11     setgid_group = postdrop
12     command_directory = /usr/sbin
13     manpage_directory = /usr/share/man
14 misc 340 daemon_directory = <%= lib_dir %>/postfix/
15 misc 33 data_directory = /var/lib/postfix
16     newaliases_path = /usr/bin/newaliases
17     mailq_path = /usr/bin/mailq
18     queue_directory = /var/spool/postfix
19     mail_owner = postfix
20    
21     # User configurable parameters
22    
23 misc 329 <% if all_tags.include?('postfix::simple_relay') %>
24 misc 33 inet_interfaces = localhost
25 misc 294 <% else %>
26     inet_interfaces = all
27     <% end %>
28    
29 misc 33 inet_protocols = all
30     mynetworks_style = host
31 boklm 275 myhostname = <%= fqdn %>
32     mydomain = <%= domain %>
33     myorigin = $mydomain
34 pterjan 2677 <%- if all_tags.include?('postfix::server::secondary') -%>
35 misc 1403 relay_domains = <%= domain %>,
36     ml.<%= domain %>,
37     group.<%= domain %>
38 misc 330 <%- end -%>
39    
40     mydestination = <%= fqdn %>
41 misc 1359 <%- if classes.include?('sympa::server') -%>
42     ml.<%= domain %>
43     <%- end -%>
44    
45 pterjan 2677 <%- if all_tags.include?('postfix::server::primary') -%>
46 misc 332
47 misc 1378 virtual_mailbox_domains = <%= domain %>,
48     group.<%= domain %>
49 misc 1346
50 misc 1360 # postfix complain if not set
51     # Mar 22 23:51:20 alamut postfix/virtual[22952]: fatal: bad string length 0 < 1: virtual_mailbox_base =
52     virtual_mailbox_base = /var/lib/mail
53    
54 misc 1080 # local_recipient_maps is disabled, as we need to route all
55     # non local email to ryu as long as mageia ml are hosted
56     # there. Hence the use of fallback_transport , but this is
57     # taken in account only of local_recipient_maps is empty
58     local_recipient_maps =
59     # route ml to ryu ( ml being mageia-*@mageia )
60 misc 1302 fallback_transport_maps = regexp:/etc/postfix/transport_regexp
61 misc 1080
62 misc 1401 # needed by sympa to handle bounce, according to the doc
63     recipient_delimiter = +
64 misc 1080
65 misc 1401
66 misc 463 alias_maps = hash:/etc/postfix/aliases
67 misc 1346
68     virtual_alias_maps = ldap:/etc/postfix/ldap_aliases.conf
69 misc 1378 ldap:/etc/postfix/group_aliases.conf
70 misc 1347 hash:/etc/postfix/virtual_aliases
71 misc 1401 <%- if classes.include?('sympa::server') -%>
72     regexp:/etc/postfix/sympa_aliases
73 misc 287 <%- end -%>
74 misc 1401 <%- end -%>
75 misc 332
76 misc 333
77 pterjan 2677 <%- if all_tags.include?('postfix::server') -%>
78 misc 287 transport_maps = regexp:/etc/postfix/transport_regexp
79 misc 472 content_filter = smtp-filter:[127.0.0.1]:10025
80 misc 327 <%- end -%>
81 misc 326
82 misc 552 <%- if classes.include?('sympa::server') -%>
83 misc 287 sympa_destination_recipient_limit = 1
84     sympabounce_destination_recipient_limit = 1
85 misc 329 <%- end -%>
86 misc 326
87 misc 33 #delay_warning_time = 4h
88 boklm 2739 smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) (<%= lsbdistid %>)
89 misc 33 unknown_local_recipient_reject_code = 450
90     smtp-filter_destination_concurrency_limit = 2
91     lmtp-filter_destination_concurrency_limit = 2
92 misc 653 # disabled for the time being, as the certificate do not exist
93     # FIXME create the cert in puppet
94     smtpd_use_tls = no
95     #smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem
96     #smtpd_tls_key_file = /etc/pki/tls/private/postfix.pem
97     #smtpd_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
98 boklm 3271 # enable opportunistic TLS when sending
99     smtp_tls_security_level = may
100     smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
101 misc 294
102 pterjan 2677 <%- if all_tags.include?('postfix::server') -%>
103 misc 326 smtpd_etrn_restrictions = reject
104    
105     smtpd_helo_required = yes
106    
107 misc 1381 smtpd_data_restrictions = permit_mynetworks
108     reject_unauth_pipelining
109 misc 326 reject_multi_recipient_bounce
110    
111 misc 329 smtpd_recipient_restrictions = reject_non_fqdn_recipient
112     reject_non_fqdn_sender
113     # not done yet, not sure if we need to offer this kind of service
114 misc 294 # permit_sasl_authenticated
115     permit_mynetworks
116     reject_unauth_destination
117 misc 326 reject_non_fqdn_helo_hostname
118 misc 294 reject_unknown_sender_domain
119     reject_unknown_client
120 misc 329 <%- if classes.include?('postgrey') -%>
121 misc 294 check_policy_service unix:extern/postgrey/socket
122 misc 329 <%- end -%>
123     <%- end -%>
124 misc 294

  ViewVC Help
Powered by ViewVC 1.1.30