dataset/seed/postfix-relay/dictionaries/30_postfix.xml

<?xml version='1.0' encoding='UTF-8'?>
<rougail version="0.10">
  <services>
    <service name="postfix" target="multi-user">
      <override engine="ansible"/>
      <certificate authority="Mail" owner="postfix" type="server" domain="postfix_mail_hostname" provider="postfix_crt_provider">postfix</certificate>
      <certificate authority="InternalMail" type="server" domain="domain_name_eth" certificate_type="variable" format="pem">domain_name_eth</certificate>
      <file engine="none" source="sysuser-postfix.conf">/sysusers.d/1postfix.conf</file>
      <file engine="none" source="tmpfile-postfix.conf">/tmpfiles.d/0postfix.conf</file>
      <file engine="ansible">/etc/postfix/main.cf</file>
      <file engine="ansible">/etc/postfix/lmtp</file>
      <file engine="ansible">/etc/postfix/sni</file>
      <file engine="none">/etc/postfix/master.cf</file>
    </service>
    <service name="saslauthd">
      <file engine="none">/etc/sasl2/smtpd.conf</file>
    </service>
    <service name="opendkim" target="multi-user">
      <file engine="none" source="sysuser-opendkim.conf">/sysusers.d/0opendkim.conf</file>
      <file engine="none">/etc/opendkim.conf</file>
      <file engine="ansible">/etc/opendkim/KeyTable</file>
      <file engine="ansible">/etc/opendkim/SigningTable</file>
      <file engine="ansible">/etc/opendkim/TrustedHosts</file>
      <file engine="ansible" file_type="variable" owner="opendkim" mode="400" source="opendkim.key" variable="postfix_relay_domains">opendkim_keys</file>
    </service>
    <service name="opendmarc" target="multi-user">
      <file engine="none" source="sysuser-opendmarc.conf">/sysusers.d/0opendmarc.conf</file>
      <file engine="none" source="tmpfile-opendmarc.conf">/tmpfiles.d/0opendmarc.conf</file>
      <file engine="ansible">/etc/opendmarc.conf</file>
    </service>
  </services>
  <variables>
    <family name="network">
      <variable name="outgoing_ports" redefine="True" mandatory="False"/>
      <variable name="incoming_ports" redefine="True" mandatory="False"/>
    </family>
    <family name="postfix" description="Postfix mail server">
      <variable name="postfix_mail_hostname" type="domainname" description="External email server domain name" help="This variable is mandatory if mail server needs to interact with external area" mode="basic"/>
      <variable name="postfix_crt_provider" type="choice" description="Type of certificate autority signing external certificate" mandatory="True" mode="basic" help="The certificate can be self-signed (therefore invalid by default for the client) or obtained via the Let's Encrypt service (generally valid for the client)">
        <value>self-signed</value>
        <choice>self-signed</choice>
        <choice>letsencrypt</choice>
      </variable>
      <variable name="postfix_relay_domains" type="domainname" multi="True" hidden="True"/>
      <variable name='postfix_relay_authentifications' description="Create a SMTP relay account and authorize sending email" help="A service needs send email with SMTP protocol, so an account is created and SMTP relay accept sending mail by this account" multi="True" provider="SMTP" hidden="True"/>
      <family name="local_authentification_" dynamic='postfix_relay_authentifications' hidden="True">
        <variable name="local_authentification_username_" description="User account to send email for " type="unix_user" provider="SMTP:username"/>
        <variable name="local_authentification_password_" description="Password to send email for " type="secret" provider="SMTP:password"/>
        <variable name="postfix_relay_ip_" type="ip"/>
      </family>
    </family>
    <family name="opendkim">
      <variable name="opendkim_keys" type="filename" multi="True" hidden="True"/>
    </family>
  </variables>
  <constraints>
    <fill name="calc_value">
      <param>/etc/opendkim/keys/</param>
      <param type="variable">postfix_relay_domains</param>
      <param>.key</param>
      <param name="join"></param>
      <param name="multi" type="boolean">True</param>
      <target>opendkim_keys</target>
    </fill>
    <fill name="get_ip">
      <param type="information">zones</param>
      <param type="suffix"/>
      <target>postfix_relay_ip_</target>
    </fill>
    <fill name="calc_value">
      <param type="nil"/>
      <param name="default">25</param>
      <param name="condition" type="variable">postfix_mail_hostname</param>
      <param name="expected" type="nil"/>
      <param name="multi">True</param>
      <target>incoming_ports</target>
    </fill>
    <fill name="calc_value">
      <param type="nil"/>
      <param name="default">25</param>
      <param name="condition" type="variable">postfix_mail_hostname</param>
      <param name="expected" type="nil"/>
      <param name="multi">True</param>
      <target>outgoing_ports</target>
    </fill>
  </constraints>
</rougail>