diff --git a/README.md b/README.md new file mode 100644 index 0000000..8f20082 --- /dev/null +++ b/README.md @@ -0,0 +1,68 @@ +# dovecot + +## Parameters and defaults + +All configuration is to be placed inside the `postfix` and `postfixmaps` dicts. + + +**postfix** +``` +# SSL settings +ssl: + # path to ssl key + key: /etc/ssl/private/ssl-cert-snakeoil.key + + # path to ssl cert with chain + cert: /etc/ssl/certs/ssl-cert-snakeoil.pem + + # For this settings see http://www.postfix.org/postconf.5.html#smtpd_tls_security_level + # but normaly there is no reason to change it from "may" + # Please not this settings apply to smtp only, not to submission + outgoing_security_level: may + incoming_security_level: may + +# Enable opendkim integration +enable_opendkim: false + +# Enable the submission port (needed to send mail by clients) +enable_submission: false + +# Size limit of messages in bytes, default is ~20MB +message_size_limit: 20480000 + +# See http://www.postfix.org/postconf.5.html#relay_transport +# normaly you do not need to change this +relay_transport: smtp + +# See http://www.postfix.org/postconf.5.html#relayhost +# only set if this host should be a relay +relayhost: '' + +# See http://www.postfix.org/postconf.5.html#relay_domains +relay_domains: [] + +# See http://www.postfix.org/postconf.5.html#sender_dependent_relayhost_maps +# If set, this should point to a file which is a postfixmap +sender_dependent_relayhost_maps: '' + +# See http://www.postfix.org/postconf.5.html#virtual_alias_maps +# Maps mail addresses to user +virtual_alias_maps: '' + +# list of domains we have mailboxes for, see http://www.postfix.org/postconf.5.html#virtual_mailbox_domains +virtual_mailbox_domains: [] + +# networks to relay mail from without user authentication +mynetworks: [] + +# currently ignored +mydestination: [] +``` + +**postfixmaps** +``` +# Should be '': *mapddict* +# for Example: +postfixmaps: + "/etc/postfix/virtual": +``` diff --git a/defaults/main.yml b/defaults/main.yml index 8329cf5..0629124 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -5,6 +5,7 @@ postfix: outgoing_security_level: may incoming_security_level: may enable_opendkim: false + enable_submission: false message_size_limit: 20480000 relay_transport: smtp relayhost: '' @@ -14,3 +15,5 @@ postfix: virtual_mailbox_domains: [] mynetworks: [] mydestination: [] + +postfixmaps: [] diff --git a/tasks/main.yml b/tasks/main.yml index b76f725..d3cd553 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -25,6 +25,6 @@ template: src: maps.j2 dest: "{{ item }}" - with_items: "{{ postfixmaps|d([]) }}" + with_items: "{{ postfixmaps }}" notify: - restart postfix diff --git a/templates/master.cf.j2 b/templates/master.cf.j2 index 36909cc..3f0a794 100644 --- a/templates/master.cf.j2 +++ b/templates/master.cf.j2 @@ -14,7 +14,7 @@ smtp inet n - y - - smtpd #smtpd pass - - y - - smtpd #dnsblog unix - - y - 0 dnsblog #tlsproxy unix - - y - 0 tlsproxy -{% if "submission" in postfix and postfix.submission %} +{% if postfix.enable_submission %} submission inet n - y - - smtpd -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -o smtpd_tls_security_level=encrypt