unkin/puppet-prod
3
0
Fork 0
Code Issues 10 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

feat: implement comprehensive postfix gateway with eFa5 configuration (#414)

Browse Source 
- add voxpupuli-postfix module to Puppetfile
- create profiles::postfix::gateway class with config based on efa5
- add master.cf entries for postscreen, smtpd, dnsblog, and tlsproxy services
- create postfix hash files: aliases, access controls, canonical maps
- configure TLS with system PKI certificates and strong cipher suites
- add transport and virtual alias mappings for mail routing

Reviewed-on: #414
This commit was merged in pull request #414.
This commit is contained in:
Ben Vincent
2025-11-01 00:43:58 +11:00
parent e129d1cf7a
commit a2a8edb731
13 changed files with 369 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
site/profiles/files/postfix/gateway/sender_access
+10
View File
@@ -0,0 +1,10 @@
# FILE MANAGED BY PUPPET, CHANGES WILL BE REPLACED
# Sender access controls
# Format: sender_pattern action
# Actions: REJECT, OK, WARN, DISCARD, etc.
# Block known spam domains
# Example entries:
# spammer@example.com REJECT
# @badspammer.com REJECT