Ben Vincent
9eff241003
- add SMTP submission listener on port 587 with TLS requirement - configure HAProxy frontend/backend for submission with send-proxy-v2 support - add send-proxy-v2 support to all listeners - add dynamic HAProxy node discovery for proxy trusted networks - use service hostname instead of node FQDN for autoconfig/autodiscover - remove redundant IMAP/IMAPS/SMTP alt-names from TLS certificates - update VRRP CNAME configuration to use mail.main.unkin.net Reviewed-on: #425
77 lines
1.5 KiB
Puppet
77 lines
1.5 KiB
Puppet
# enable external access via haproxy
|
|
class profiles::stalwart::haproxy (
|
|
Boolean $enable = false,
|
|
){
|
|
|
|
# webadmin
|
|
profiles::haproxy::balancemember { "${facts['networking']['fqdn']}_443":
|
|
service => 'be_stalwart_webadmin',
|
|
ports => [443],
|
|
options => [
|
|
"cookie ${facts['networking']['hostname']}",
|
|
'ssl',
|
|
'verify none',
|
|
'check',
|
|
'inter 2s',
|
|
'rise 3',
|
|
'fall 2',
|
|
'send-proxy-v2',
|
|
]
|
|
}
|
|
|
|
# imap
|
|
profiles::haproxy::balancemember { "${facts['networking']['fqdn']}_143":
|
|
service => 'be_stalwart_imap',
|
|
ports => [143],
|
|
options => [
|
|
'check',
|
|
'inter 3s',
|
|
'rise 2',
|
|
'fall 3',
|
|
'send-proxy-v2',
|
|
]
|
|
}
|
|
|
|
# imaps
|
|
profiles::haproxy::balancemember { "${facts['networking']['fqdn']}_993":
|
|
service => 'be_stalwart_imaps',
|
|
ports => [993],
|
|
options => [
|
|
'check',
|
|
'ssl',
|
|
'verify none',
|
|
'inter 3s',
|
|
'rise 2',
|
|
'fall 3',
|
|
'send-proxy-v2',
|
|
]
|
|
}
|
|
|
|
# smtp
|
|
profiles::haproxy::balancemember { "${facts['networking']['fqdn']}_25":
|
|
service => 'be_stalwart_smtp',
|
|
ports => [25],
|
|
options => [
|
|
'check',
|
|
'inter 3s',
|
|
'rise 2',
|
|
'fall 3',
|
|
'send-proxy-v2',
|
|
]
|
|
}
|
|
|
|
# smtp submission
|
|
profiles::haproxy::balancemember { "${facts['networking']['fqdn']}_587":
|
|
service => 'be_stalwart_submission',
|
|
ports => [587],
|
|
options => [
|
|
'check',
|
|
'inter 3s',
|
|
'rise 2',
|
|
'fall 3',
|
|
'send-proxy-v2',
|
|
]
|
|
}
|
|
|
|
}
|