dataset/seed/postfix-relay/dictionaries/30_postfix.xml

<?xml version='1.0' encoding='UTF-8'?>
<rougail version="0.10">
  <services>
    <service name="postfix" target="multi-user">
      <override engine="ansible"/>
      <certificate authority="Mail" owner="postfix" type="server" domain="postfix_mail_hostname" provider="postfix_crt_provider">postfix</certificate>
      <certificate authority="InternalMail" type="server" domain="domain_name_eth" certificate_type="variable" format="pem">domain_name_eth</certificate>
      <file engine="none" source="sysuser-postfix.conf">/sysusers.d/1postfix.conf</file>
      <file engine="none" source="tmpfile-postfix.conf">/tmpfiles.d/0postfix.conf</file>
      <file engine="ansible">/etc/postfix/main.cf</file>
      <file engine="ansible">/etc/postfix/lmtp</file>
      <file engine="ansible">/etc/postfix/sni</file>
      <file engine="none">/etc/postfix/master.cf</file>
    </service>
    <service name="saslauthd">
      <file engine="none">/etc/sasl2/smtpd.conf</file>
    </service>
    <service name="opendkim" target="multi-user">
      <file engine="none" source="sysuser-opendkim.conf">/sysusers.d/0opendkim.conf</file>
      <file engine="none">/etc/opendkim.conf</file>
      <file engine="ansible">/etc/opendkim/KeyTable</file>
      <file engine="ansible">/etc/opendkim/SigningTable</file>
      <file engine="ansible">/etc/opendkim/TrustedHosts</file>
      <file engine="ansible" file_type="variable" owner="opendkim" mode="400" source="opendkim.key" variable="postfix_relay_domains">opendkim_keys</file>
    </service>
    <service name="opendmarc" target="multi-user">
      <file engine="none" source="sysuser-opendmarc.conf">/sysusers.d/0opendmarc.conf</file>
      <file engine="none" source="tmpfile-opendmarc.conf">/tmpfiles.d/0opendmarc.conf</file>
      <file engine="ansible">/etc/opendmarc.conf</file>
    </service>
  </services>
  <variables>
    <family name="network">
      <variable name="outgoing_ports" redefine="True">
        <value>25</value>
      </variable>
      <variable name="incoming_ports" redefine="True" mandatory="False"/>
    </family>
    <family name="postfix" description="Postfix mail server">
      <variable name="postfix_mail_hostname" type="domainname" description="Nom de domaine extérieur du serveur de courriel" help="Cette variable est obligatoire pour recevoir des courriels depuis l'extérieur"/>
      <variable name="postfix_crt_provider" type="choice" description="Autorité de certification signant le certificat du domaine extérieur" mandatory="True">
        <value>autosigne</value>
        <choice>autosigne</choice>
        <choice>letsencrypt</choice>
      </variable>
      <variable name="postfix_relay_domains" type="domainname" description="Local LTMP domain" multi="True" hidden="True"/>
      <variable name='postfix_relay_authentifications' description="Authentification sur le relai SMTP" multi="True" provider="SMTP"/>
      <family name="local_authentification_" description="Local server authentification" dynamic='postfix_relay_authentifications'>
        <variable name="local_authentification_password_" type="secret" auto_save="False" provider="SMTP:password"/>
        <variable name="postfix_relay_ip_" type="ip" hidden="True"/>
      </family>
    </family>
    <family name="opendkim">
      <variable name="opendkim_keys" type="filename" description="Keys filename" multi="True" hidden="True"/>
    </family>
  </variables>
  <constraints>
    <fill name="calc_value">
      <param>/etc/opendkim/keys/</param>
      <param type="variable">postfix_relay_domains</param>
      <param>.key</param>
      <param name="join"></param>
      <param name="multi" type="boolean">True</param>
      <target>opendkim_keys</target>
    </fill>
    <fill name="get_ip">
      <param type="information">zones</param>
      <param type="suffix"/>
      <target>postfix_relay_ip_</target>
    </fill>
    <fill name="calc_value">
      <param type="nil"/>
      <param name="default">25</param>
      <param name="condition" type="variable">postfix_mail_hostname</param>
      <param name="expected" type="nil"/>
      <param name="multi">True</param>
      <target>incoming_ports</target>
    </fill>
  </constraints>
</rougail>