postfix

Parameters and defaults

All configuration is to be placed inside the postfix and postfixmaps dicts.

LDAP

This role supports LDAP as configuration source for:

• TODO: finish list

Note that only ldaps connections are supported.

postfix

# SSL settings
ssl:
	# path to ssl key
	key: /etc/ssl/private/ssl-cert-snakeoil.key

	# path to ssl cert with chain
	cert: /etc/ssl/certs/ssl-cert-snakeoil.pem

	# For this settings see http://www.postfix.org/postconf.5.html#smtpd_tls_security_level
	# but normaly there is no reason to change it from "may"
	# Please not this settings apply to smtp only, not to submission
	outgoing_security_level: may
	incoming_security_level: may

# Enable opendkim integration
enable_opendkim: false

# Enable the submission port (needed to send mail by clients)
enable_submission: false

# Size limit of messages in bytes, default is ~20MB
message_size_limit: 20480000

# See http://www.postfix.org/postconf.5.html#relay_transport
# normaly you do not need to change this
relay_transport: smtp

# See http://www.postfix.org/postconf.5.html#relayhost
# only set if this host should be a relay
relayhost: ''

# See http://www.postfix.org/postconf.5.html#relay_domains
relay_domains: []

# See http://www.postfix.org/postconf.5.html#sender_dependent_relayhost_maps
# If set, this should point to a file which is a postfixmap
sender_dependent_relayhost_maps: ''

# See http://www.postfix.org/postconf.5.html#virtual_alias_maps
# Maps mail addresses to user
virtual_alias_maps: ''

# list of domains we have mailboxes for, see http://www.postfix.org/postconf.5.html#virtual_mailbox_domains
virtual_mailbox_domains: []

# networks to relay mail from without user authentication
mynetworks: []

# Postfix is the destination for the domains listed here
mydestination: []

# Check quota with dovecot at 127.0.0.1:12340
check_dovecot_quota: false

# Header checks (only header_checks and mime_header_checks supported), see http://www.postfix.org/header_checks.5.html
# privacy related headers are removed in any case, you can add more like this:
add_header_checks:
    - { regexp: "^Mime:", action: "IGNORE" }

postfixmaps

# Should be '<path>': *list of maps*
# for Example:
postfixmaps:
  "/etc/postfix/virtual":
		- 'test@example.com root@example.com'