CCCHH/ansible-infra
CCCHH/ansible-infra
4
2
Fork 1
Code Issues 4 Pull requests 2 Wiki Activity Actions

Add send_only_mailserver role and deploy Send-Only-Mailserver with it

Browse source 
Co-authored-by: yuri <yuri@nekover.se>
This commit is contained in:
June 2023-05-09 23:01:57 +02:00 • committed by julian
commit b56ca3899d
14 changed files with 263 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

15
playbooks/roles/send_only_mail_server/templates/etc_smtpd.conf.j2 Normal file
View file

@ -0,0 +1,15 @@
# Managed by Ansible.
# This configuration enables sending emails using this server, but to not receiving any.
pki {{ send_only_mail_server__mail_server_fqdn }} cert "/etc/ansible_certs/certs/{{ send_only_mail_server__mail_server_fqdn }}/fullchain.pem"
pki {{ send_only_mail_server__mail_server_fqdn }} key "/etc/ansible_certs/certs/{{ send_only_mail_server__mail_server_fqdn }}/privkey.pem"
filter "rspamd-dkim-signing" proc-exec "filter-rspamd -settings-id dkim_signing"
listen on lo
listen on eth0 smtps pki {{ send_only_mail_server__mail_server_fqdn }} auth filter "rspamd-dkim-signing"
listen on eth0 tls-require pki {{ send_only_mail_server__mail_server_fqdn }} auth filter "rspamd-dkim-signing"
action "outbound" relay helo {{ send_only_mail_server__mail_server_fqdn }}
match from any auth for any action "outbound"