sheppy/no-secrets-athq-ansible
1
0
Fork 0
mirror of https://github.com/FAUSheppy/no-secrets-athq-ansible synced 2025-12-06 17:01:36 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat: postmap handler & sender_access conf

Browse Source
This commit is contained in:
Johnathen Sheppard
2024-06-08 10:11:27 +00:00
parent e0b886d1a3
commit fa2e4e2cba
4 changed files with 18 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/mail/files/main.cf
View File

@@ -53,7 +53,7 @@ smtpd_sender_login_maps=hash:/etc/postfix/enabled_senders
smtpd_recipient_restrictions=permit_mynetworks,reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject_unauth_destination,check_policy_service unix:private/policyd-spf,check_sender_access hash:/etc/postfix/sender_blacklist smtpd_recipient_restrictions=permit_mynetworks,reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject_unauth_destination,check_policy_service unix:private/policyd-spf,check_sender_access hash:/etc/postfix/sender_blacklist
#smtpd_recipient_restrictions=permit_mynetworks,reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject_unauth_destination,check_sender_access hash:/etc/postfix/sender_blacklist #smtpd_recipient_restrictions=permit_mynetworks,reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject_unauth_destination,check_sender_access hash:/etc/postfix/sender_blacklist
#smtpd_sender_restrictions=permit_mynetworks,permit_sasl_authenticated,reject_non_fqdn_sender #smtpd_sender_restrictions=permit_mynetworks,permit_sasl_authenticated,reject_non_fqdn_sender
smtpd_sender_restrictions=reject_authenticated_sender_login_mismatch,reject_non_fqdn_sender,permit_sasl_authenticated smtpd_sender_restrictions=reject_authenticated_sender_login_mismatch,reject_non_fqdn_sender,check_sender_access hash:/etc/postfix/sender_access,permit_sasl_authenticated
# USER mappings (not reliant on unix users) # USER mappings (not reliant on unix users)

1
roles/mail/files/sender_access Normal file
View File

@@ -0,0 +1 @@
rejected-send@atlantishq.de REJECT

12
roles/mail/handlers/main.yml Normal file
View File

@@ -0,0 +1,12 @@
- name: postmap all
shell:
cmd: "/usr/sbin/postmap {{ item }}"
chdir: "/etc/postfix/"
with_items:
- sender_access
- enabled_senders
- relocated
- sender_blacklist
- tls_policy
- transport
- virtual

5
roles/mail/tasks/main.yaml
View File

@@ -26,7 +26,10 @@
- transport - transport
- virtual - virtual
- header_checks - header_checks
notify: restart postfix - sender_access
notify:
- postmap all
- restart postfix
- name: Deploy dmark/opendkim config (main) - name: Deploy dmark/opendkim config (main)
copy: copy: