Files
puppet-prod/hieradata/roles/infra/mail/gateway.yaml
T
unkin-agent bca6dce407
ci/woodpecker/pr/puppet-lint Pipeline was successful
ci/woodpecker/pr/ruby-validate Pipeline was successful
ci/woodpecker/pr/bolt-validate Pipeline was successful
ci/woodpecker/pr/yamllint Pipeline was successful
ci/woodpecker/pr/erb-validate Pipeline was successful
ci/woodpecker/pr/epp-validate Pipeline was successful
ci/woodpecker/pr/puppet-validate Pipeline was successful
ci/woodpecker/pr/ruby-check Pipeline was successful
Fix edge postfix gateway config for unkin.net
2026-10-12 22:36:08 +11:00

49 lines
1.2 KiB
YAML

---
# base postfix configuration (passed to postfix class)
postfix::relayhost: 'direct'
postfix::myorigin: 'unkin.net'
postfix::mydestination: 'blank'
postfix::mynetworks: '127.0.0.0/8 [::1]/128 103.216.191.185/32'
postfix::mta: true
postfix::manage_aliases: true
# postfix map content (templates)
profiles::postfix::gateway::relay_recipients_maps:
'@unkin.net': 'OK'
profiles::postfix::gateway::relay_domains_maps:
'unkin.net': 'OK'
profiles::postfix::gateway::postscreen_access_maps:
'127.0.0.1/32': 'permit'
'10.10.12.200/32': 'permit'
profiles::postfix::gateway::helo_access_maps:
'.dynamic.': 'REJECT'
'.dialup.': 'REJECT'
'unknown': 'REJECT'
'localhost': 'REJECT You are not localhost'
profiles::postfix::gateway::smtp_tls_policy_maps:
'[mail-in.main.unkin.net]:25': 'secure match=hostname'
# postfix transports
postfix::transports:
'unkin.net':
ensure: present
destination: 'relay'
nexthop: '[mail-in.main.unkin.net]:25'
# postfix virtuals
postfix::virtuals:
'root':
ensure: present
destination: 'ben@unkin.net'
'postmaster':
ensure: present
destination: 'ben@unkin.net'
'abuse':
ensure: present
destination: 'ben@unkin.net'