- ensure main.unkin.net mail is delivered to stalwart load-balancer addr Reviewed-on: #421
53 lines
1.3 KiB
YAML
53 lines
1.3 KiB
YAML
---
|
|
|
|
# additional altnames
|
|
profiles::pki::vault::alt_names:
|
|
- in-mta.main.unkin.net
|
|
|
|
# base postfix configuration (passed to postfix class)
|
|
postfix::relayhost: 'direct'
|
|
postfix::myorigin: 'main.unkin.net'
|
|
postfix::mydestination: 'blank'
|
|
postfix::mynetworks: '127.0.0.0/8 [::1]/128'
|
|
postfix::mta: true
|
|
postfix::manage_aliases: true
|
|
|
|
# profile parameters for customization
|
|
profiles::postfix::gateway::myhostname: 'in-mta.main.unkin.net'
|
|
|
|
# postfix map content (templates)
|
|
profiles::postfix::gateway::relay_recipients_maps:
|
|
'@main.unkin.net': 'OK'
|
|
|
|
profiles::postfix::gateway::relay_domains_maps:
|
|
'main.unkin.net': 'OK'
|
|
|
|
profiles::postfix::gateway::postscreen_access_maps:
|
|
'127.0.0.1/32': 'permit'
|
|
'10.10.12.200/32': 'permit'
|
|
|
|
profiles::postfix::gateway::helo_access_maps:
|
|
'.dynamic.': 'REJECT'
|
|
'.dialup.': 'REJECT'
|
|
'unknown': 'REJECT'
|
|
'localhost': 'REJECT You are not localhost'
|
|
|
|
# postfix transports
|
|
postfix::transports:
|
|
'main.unkin.net':
|
|
ensure: present
|
|
destination: 'relay'
|
|
nexthop: 'mail-in.main.unkin.net:25'
|
|
|
|
# postfix virtuals
|
|
postfix::virtuals:
|
|
'root':
|
|
ensure: present
|
|
destination: 'ben@main.unkin.net'
|
|
'postmaster':
|
|
ensure: present
|
|
destination: 'ben@main.unkin.net'
|
|
'abuse':
|
|
ensure: present
|
|
destination: 'ben@main.unkin.net'
|