80 lines
4.1 KiB
XML
80 lines
4.1 KiB
XML
<?xml version='1.0' encoding='UTF-8'?>
|
|
<rougail version="0.10">
|
|
<services>
|
|
<service name="postfix" target="multi-user">
|
|
<override engine="ansible"/>
|
|
<certificate authority="Mail" owner="postfix" type="server" domain="postfix_mail_hostname" provider="postfix_crt_provider">postfix</certificate>
|
|
<certificate authority="InternalMail" type="server" domain="domain_name_eth" certificate_type="variable" format="pem">domain_name_eth</certificate>
|
|
<file engine="none" source="sysuser-postfix.conf">/sysusers.d/1postfix.conf</file>
|
|
<file engine="none" source="tmpfile-postfix.conf">/tmpfiles.d/0postfix.conf</file>
|
|
<file engine="ansible">/etc/postfix/main.cf</file>
|
|
<file engine="ansible">/etc/postfix/lmtp</file>
|
|
<file engine="ansible">/etc/postfix/sni</file>
|
|
<file engine="none">/etc/postfix/master.cf</file>
|
|
</service>
|
|
<service name="saslauthd">
|
|
<file engine="none">/etc/sasl2/smtpd.conf</file>
|
|
</service>
|
|
<service name="opendkim" target="multi-user">
|
|
<file engine="none" source="sysuser-opendkim.conf">/sysusers.d/0opendkim.conf</file>
|
|
<file engine="none">/etc/opendkim.conf</file>
|
|
<file engine="ansible">/etc/opendkim/KeyTable</file>
|
|
<file engine="ansible">/etc/opendkim/SigningTable</file>
|
|
<file engine="ansible">/etc/opendkim/TrustedHosts</file>
|
|
<file engine="ansible" file_type="variable" owner="opendkim" mode="400" source="opendkim.key" variable="postfix_relay_domains">opendkim_keys</file>
|
|
</service>
|
|
<service name="opendmarc" target="multi-user">
|
|
<file engine="none" source="sysuser-opendmarc.conf">/sysusers.d/0opendmarc.conf</file>
|
|
<file engine="none" source="tmpfile-opendmarc.conf">/tmpfiles.d/0opendmarc.conf</file>
|
|
<file engine="ansible">/etc/opendmarc.conf</file>
|
|
</service>
|
|
</services>
|
|
<variables>
|
|
<family name="network">
|
|
<variable name="outgoing_ports" redefine="True">
|
|
<value>25</value>
|
|
</variable>
|
|
<variable name="incoming_ports" redefine="True" mandatory="False"/>
|
|
</family>
|
|
<family name="postfix" description="Postfix mail server">
|
|
<variable name="postfix_mail_hostname" type="domainname" description="Nom de domaine extérieur du serveur de courriel" help="Cette variable est obligatoire pour recevoir des courriels depuis l'extérieur"/>
|
|
<variable name="postfix_crt_provider" type="choice" description="Autorité de certification signant le certificat du domaine extérieur" mandatory="True">
|
|
<value>autosigne</value>
|
|
<choice>autosigne</choice>
|
|
<choice>letsencrypt</choice>
|
|
</variable>
|
|
<variable name="postfix_relay_domains" type="domainname" description="Local LTMP domain" multi="True" hidden="True"/>
|
|
<variable name='postfix_relay_authentifications' description="Authentification sur le relai SMTP" multi="True" provider="SMTP"/>
|
|
<family name="local_authentification_" description="Local server authentification" dynamic='postfix_relay_authentifications'>
|
|
<variable name="local_authentification_password_" type="secret" auto_save="False" provider="SMTP:password"/>
|
|
<variable name="postfix_relay_ip_" type="ip" hidden="True"/>
|
|
</family>
|
|
</family>
|
|
<family name="opendkim">
|
|
<variable name="opendkim_keys" type="filename" description="Keys filename" multi="True" hidden="True"/>
|
|
</family>
|
|
</variables>
|
|
<constraints>
|
|
<fill name="calc_value">
|
|
<param>/etc/opendkim/keys/</param>
|
|
<param type="variable">postfix_relay_domains</param>
|
|
<param>.key</param>
|
|
<param name="join"></param>
|
|
<param name="multi" type="boolean">True</param>
|
|
<target>opendkim_keys</target>
|
|
</fill>
|
|
<fill name="get_ip">
|
|
<param type="information">zones</param>
|
|
<param type="suffix"/>
|
|
<target>postfix_relay_ip_</target>
|
|
</fill>
|
|
<fill name="calc_value">
|
|
<param type="nil"/>
|
|
<param name="default">25</param>
|
|
<param name="condition" type="variable">postfix_mail_hostname</param>
|
|
<param name="expected" type="nil"/>
|
|
<param name="multi">True</param>
|
|
<target>incoming_ports</target>
|
|
</fill>
|
|
</constraints>
|
|
</rougail>
|