foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

postfix: Lint fixes

Browse source
This commit is contained in:
Timo Makinen 2020-09-04 09:25:55 +00:00
parent 9a2cd1e646
commit e117fa23c5
1 changed files with 68 additions and 68 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

132
roles/postfix/tasks/main.yml
View file

@ -43,86 +43,86 @@
- mail_server is defined - mail_server is defined
- block: - block:
- name: install stunnel - name: install stunnel
package: package:
name: stunnel name: stunnel
state: installed state: installed
- name: create group smtps - name: create group smtps
group: group:
name: smtps name: smtps
system: true system: true
- name: create user smtps - name: create user smtps
user: user:
name: smtps name: smtps
comment: Service Stunnel-SMTPS comment: Service Stunnel-SMTPS
createhome: false createhome: false
group: smtps group: smtps
home: /var/empty home: /var/empty
shell: /sbin/nologin shell: /sbin/nologin
system: true system: true
- name: create stunnel config - name: create stunnel config
template: template:
src: stunnel.conf.j2 src: stunnel.conf.j2
dest: /etc/stunnel/smtps.conf dest: /etc/stunnel/smtps.conf
mode: 0644 mode: 0644
owner: root owner: root
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
notify: restart stunnel-smtps notify: restart stunnel-smtps
- name: create stunnel systemd service - name: create stunnel systemd service
copy: copy:
src: stunnel-smtps.service src: stunnel-smtps.service
dest: /etc/systemd/system/stunnel-smtps.service dest: /etc/systemd/system/stunnel-smtps.service
mode: 0644 mode: 0644
owner: root owner: root
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
notify: restart stunnel-smtps notify: restart stunnel-smtps
- name: enable stunnel service - name: enable stunnel service
service: service:
name: stunnel-smtps name: stunnel-smtps
state: started state: started
enabled: true enabled: true
- name: configure relayhost - name: configure relayhost
lineinfile: lineinfile:
path: /etc/postfix/main.cf path: /etc/postfix/main.cf
regexp: '^relayhost\s*=' regexp: '^relayhost\s*='
insertafter: '^#relayhost\s*=' insertafter: '^#relayhost\s*='
line: "relayhost = [localhost]:2525" line: "relayhost = [localhost]:2525"
notify: restart postfix notify: restart postfix
when: when:
- ansible_distribution_major_version|int < 8 - ansible_distribution_major_version|int < 8
- mail_server is defined - mail_server is defined
- block: - block:
- name: configure relayhost - name: configure relayhost
lineinfile: lineinfile:
path: /etc/postfix/main.cf path: /etc/postfix/main.cf
regexp: '^relayhost\s*=' regexp: '^relayhost\s*='
insertafter: '^#relayhost\s*=' insertafter: '^#relayhost\s*='
line: "relayhost = [{{ mail_server }}]:465" line: "relayhost = [{{ mail_server }}]:465"
notify: restart postfix notify: restart postfix
- name: configure smtp_tls_security_level - name: configure smtp_tls_security_level
lineinfile: lineinfile:
path: /etc/postfix/main.cf path: /etc/postfix/main.cf
regexp: '^smtp_tls_security_level\s*=' regexp: '^smtp_tls_security_level\s*='
insertafter: '^#?relayhost\s*=' insertafter: '^#?relayhost\s*='
line: "smtp_tls_security_level = encrypt" line: "smtp_tls_security_level = encrypt"
notify: restart postfix notify: restart postfix
- name: configure smtp_tls_wrappermode - name: configure smtp_tls_wrappermode
lineinfile: lineinfile:
path: /etc/postfix/main.cf path: /etc/postfix/main.cf
regexp: '^smtp_tls_wrappermode\s*=' regexp: '^smtp_tls_wrappermode\s*='
insertafter: '^#?relayhost\s*=' insertafter: '^#?relayhost\s*='
line: "smtp_tls_wrappermode = yes" line: "smtp_tls_wrappermode = yes"
notify: restart postfix notify: restart postfix
when: when:
- ansible_distribution_major_version|int >= 8 - ansible_distribution_major_version|int >= 8