mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2026-11-06 01:18:46 +01:00
Kristian Klausen
b7534f97a2
These has been managed outside Ansible for a long time, but with the recent change of the GitLab email domain[1], we must set X-Delivered-To to the service desk email address ourselves as Postfix no longer sets it to the value expected by GitLab. [1]a892df58("Use dedicated subdomain for GitLab emails") Fixes:a892df58("Use dedicated subdomain for GitLab emails")
58 lines
1.7 KiB
YAML
58 lines
1.7 KiB
YAML
- name: Install postfix
|
|
pacman: name=postfix,postfix-pcre state=present
|
|
|
|
- name: Install template configs
|
|
template: src={{ item }}.j2 dest=/etc/postfix/{{ item }} owner=root group=root mode=0644
|
|
loop:
|
|
- main.cf
|
|
- master.cf
|
|
- transport.pcre
|
|
- aliases
|
|
- users_managed
|
|
notify:
|
|
- Restart postfix
|
|
- Postmap additional files
|
|
- Update aliases db
|
|
|
|
- name: Install additional files
|
|
copy: src={{ item }} dest=/etc/postfix/{{ item }} owner=root group=root mode=0644
|
|
loop:
|
|
- domains
|
|
- msa_header_checks
|
|
- lmtp_header_checks
|
|
notify:
|
|
- Postmap additional files
|
|
|
|
- name: Create ssl cert
|
|
include_role:
|
|
name: certificate
|
|
vars:
|
|
domains: ["{{ mail_domain }}"]
|
|
|
|
- name: Install postfix cert renewal hook
|
|
template: src=letsencrypt.hook.d.j2 dest=/etc/letsencrypt/hook.d/postfix owner=root group=root mode=0755
|
|
|
|
- name: Install bouncehandler config
|
|
template: src=wiki-bouncehandler.conf.j2 dest={{ postfix_wiki_bounce_config }} owner={{ postfix_wiki_bounce_user }} group=root mode=0600
|
|
|
|
- name: Install packages for bounce handler
|
|
pacman: name=perl-mediawiki-api,perl-config-simple state=present
|
|
|
|
- name: Install bouncehandler script
|
|
copy: src=bouncehandler.pl dest={{ postfix_wiki_bounce_mail_handler }} owner=root group=root mode=0755
|
|
|
|
- name: Make bouncehandler user
|
|
user: name={{ postfix_wiki_bounce_user }} shell=/bin/false skeleton=/var/empty state=present
|
|
|
|
- name: Start and enable postfix
|
|
service: name=postfix enabled=yes state=started
|
|
|
|
- name: Open firewall holes
|
|
ansible.posix.firewalld: service={{ item }} permanent=true state=enabled immediate=yes
|
|
loop:
|
|
- smtp
|
|
- smtps
|
|
when: configure_firewall
|
|
tags:
|
|
- firewall
|