Remove old files and add system service unit for HTTP
This commit is contained in:
parent
8e068484b6
commit
edaa30868d
15 changed files with 32 additions and 265 deletions
|
|
@ -77,3 +77,20 @@
|
||||||
name: "{{ dbmail_user }}"
|
name: "{{ dbmail_user }}"
|
||||||
group: "{{ dbmail_group }}"
|
group: "{{ dbmail_group }}"
|
||||||
shell: /dev/null
|
shell: /dev/null
|
||||||
|
|
||||||
|
- name: Set properties of service unit
|
||||||
|
set_fact:
|
||||||
|
unit_description: 'DBMail HTTP daemon to manage user mailbox'
|
||||||
|
unit_exec_start: '/usr/local/sbin/dbmail-httpd -D'
|
||||||
|
|
||||||
|
- name: Ensure dbmail-httpd service unit is present
|
||||||
|
template:
|
||||||
|
src: templates/service.unit.j2
|
||||||
|
dest: /etc/systemd/system/dbmail-httpd.service
|
||||||
|
|
||||||
|
- name: Ensure DBMail HTTP service is enabled
|
||||||
|
ansible.builtin.systemd:
|
||||||
|
state: restarted
|
||||||
|
daemon_reload: true
|
||||||
|
enabled: true
|
||||||
|
name: dbmail-httpd
|
||||||
|
|
|
||||||
|
|
@ -1,17 +0,0 @@
|
||||||
MYSQL_SERVER localhost
|
|
||||||
MYSQL_USERNAME {{ dbmail_db_user }}
|
|
||||||
MYSQL_PASSWORD {{ dbmail_db_password }}
|
|
||||||
MYSQL_PORT 0
|
|
||||||
MYSQL_DATABASE {{ dbmail_db_name }}
|
|
||||||
MYSQL_USER_TABLE users
|
|
||||||
MYSQL_CRYPT_PWFIELD password
|
|
||||||
#MYSQL_CLEAR_PWFIELD password
|
|
||||||
MYSQL_UID_FIELD 5000
|
|
||||||
MYSQL_GID_FIELD 5000
|
|
||||||
MYSQL_LOGIN_FIELD email
|
|
||||||
MYSQL_HOME_FIELD "/home/vmail"
|
|
||||||
MYSQL_MAILDIR_FIELD CONCAT(SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1),'/')
|
|
||||||
#MYSQL_NAME_FIELD
|
|
||||||
MYSQL_QUOTA_FIELD quota
|
|
||||||
MYSQL_OPT 0
|
|
||||||
##NAME: MARKER:0 # # Do not remove this section from this configuration file. This section # must be present at the end of this file.
|
|
||||||
|
|
@ -1 +0,0 @@
|
||||||
{{ masterpassword }}
|
|
||||||
|
|
@ -1,56 +0,0 @@
|
||||||
alias_database = hash:/etc/aliases
|
|
||||||
alias_maps = hash:/etc/aliases
|
|
||||||
append_dot_mydomain = no
|
|
||||||
biff = no
|
|
||||||
body_checks = regexp:/etc/postfix/maps/ecco_body_check.map
|
|
||||||
broken_sasl_auth_clients = yes
|
|
||||||
compatibility_level = 2
|
|
||||||
header_checks = regexp:/etc/postfix/maps/whitelist_senders.map regexp:/etc/postfix/maps/ecco_header_check.map regexp:/etc/postfix/maps/ecco_header_check_manual.map regexp:/etc/postfix/maps/spam_filter_header_check.map
|
|
||||||
html_directory = /usr/share/doc/postfix/html
|
|
||||||
inet_interfaces = all
|
|
||||||
inet_protocols = all
|
|
||||||
mailbox_size_limit = 0
|
|
||||||
mydestination = {{ mail_server_fqdn }}; localhost; localhost.localdomain
|
|
||||||
myhostname = {{ mail_server_fqdn }}
|
|
||||||
mynetworks = 127.0.0.0/8 /etc/postfix/allowed_clients{% if mail_own_networks %}{% for ip in mail_own_networks %} {{ ip }}{% endfor %}{% endif %}
|
|
||||||
|
|
||||||
myorigin = /etc/mailname
|
|
||||||
policy-spf_time_limit = 3600s
|
|
||||||
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
|
|
||||||
readme_directory = /usr/share/doc/postfix
|
|
||||||
recipient_delimiter = +
|
|
||||||
relay_recipient_maps =
|
|
||||||
smtpd_banner = $myhostname ESMTP $mail_name
|
|
||||||
# Block clients that speak too early.
|
|
||||||
smtpd_data_restrictions = reject_unauth_pipelining
|
|
||||||
# Don't talk to mail systems that don't know their own hostname.
|
|
||||||
smtpd_helo_restrictions = reject_unknown_helo_hostname
|
|
||||||
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, permit_auth_destination, reject_unauth_destination, check_policy_service unix:private/policy-spf
|
|
||||||
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
|
|
||||||
smtpd_sasl_auth_enable = yes
|
|
||||||
smtpd_sasl_authenticated_header = yes
|
|
||||||
smtpd_tls_cert_file = /etc/letsencrypt/live/{{ mail_server_fqdn }}/fullchain.pem
|
|
||||||
smtpd_tls_dh1024_param_file = /etc/ssl/private/dhparams.pem
|
|
||||||
smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CDC3-SHA, KRB5-DE5, CBC3-SHA
|
|
||||||
smtpd_tls_key_file = /etc/letsencrypt/live/{{ mail_server_fqdn }}/privkey.pem
|
|
||||||
smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache
|
|
||||||
smtpd_use_tls = yes
|
|
||||||
# If this is a backupmx or satellite then smtp_sasl_auth_enable = yes
|
|
||||||
smtp_sasl_auth_enable = no
|
|
||||||
#smtp_sasl_password_maps = hash:/etc/postfix/claves_smtp
|
|
||||||
smtp_sasl_security_options = noanonymous
|
|
||||||
smtp_sasl_type = cyrus
|
|
||||||
smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_scache
|
|
||||||
smtp_use_tls = yes
|
|
||||||
transport_maps = proxy:mysql:/etc/postfix/mysql-virtual_transports.cf
|
|
||||||
virtual_alias_domains =
|
|
||||||
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf
|
|
||||||
virtual_gid_maps = static:5000
|
|
||||||
virtual_mailbox_base = /home/vmail
|
|
||||||
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
|
|
||||||
virtual_mailbox_limit_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailbox_limit_maps.cf
|
|
||||||
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
|
|
||||||
virtual_uid_maps = static:5000
|
|
||||||
|
|
||||||
# For dbmail
|
|
||||||
virtual_transport = dbmail-lmtp:127.0.0.1:{{ dbmail_configuration['LMTP']['port'] }}
|
|
||||||
|
|
@ -1,143 +0,0 @@
|
||||||
#
|
|
||||||
# Postfix master process configuration file.
|
|
||||||
# ATTENTION! Managed by Ansible
|
|
||||||
# For details on the format
|
|
||||||
# of the file, see the master(5) manual page (command: "man 5 master").
|
|
||||||
#
|
|
||||||
# Do not forget to execute "postfix reload" after editing this file.
|
|
||||||
#
|
|
||||||
# ==========================================================================
|
|
||||||
# service type private unpriv chroot wakeup maxproc command + args
|
|
||||||
# (yes) (yes) (no) (never) (100)
|
|
||||||
# ==========================================================================
|
|
||||||
# SMTP: Port 25
|
|
||||||
smtp inet n - y - - smtpd
|
|
||||||
# -o content_filter=filter:
|
|
||||||
# Submission: Port 587
|
|
||||||
submission inet n - y - - smtpd
|
|
||||||
-o smtpd_tls_security_level=encrypt
|
|
||||||
-o smtpd_sasl_auth_enable=yes
|
|
||||||
-o smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
|
|
||||||
-o milter_macro_daemon_name=ORIGINATING
|
|
||||||
-o content_filter=filter:
|
|
||||||
# SMTPS: Port 465
|
|
||||||
smtps inet n - y - - smtpd
|
|
||||||
-o smtpd_tls_wrappermode=yes
|
|
||||||
-o smtpd_sasl_auth_enable=yes
|
|
||||||
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
|
|
||||||
-o milter_macro_daemon_name=ORIGINATING
|
|
||||||
-o content_filter=filter:
|
|
||||||
#628 inet n - y - - qmqpd
|
|
||||||
pickup unix n - y 60 1 pickup
|
|
||||||
cleanup unix n - y - 0 cleanup
|
|
||||||
qmgr unix n - n 300 1 qmgr
|
|
||||||
#qmgr unix n - n 300 1 oqmgr
|
|
||||||
tlsmgr unix - - y 1000? 1 tlsmgr
|
|
||||||
rewrite unix - - y - - trivial-rewrite
|
|
||||||
bounce unix - - y - 0 bounce
|
|
||||||
defer unix - - y - 0 bounce
|
|
||||||
trace unix - - y - 0 bounce
|
|
||||||
verify unix - - y - 1 verify
|
|
||||||
flush unix n - y 1000? 0 flush
|
|
||||||
proxymap unix - - n - - proxymap
|
|
||||||
proxywrite unix - - n - 1 proxymap
|
|
||||||
smtp unix - - y - - smtp
|
|
||||||
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
|
|
||||||
relay unix - - y - - smtp
|
|
||||||
-o smtp_fallback_relay=
|
|
||||||
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
|
|
||||||
showq unix n - y - - showq
|
|
||||||
error unix - - y - - error
|
|
||||||
retry unix - - y - - error
|
|
||||||
discard unix - - y - - discard
|
|
||||||
local unix - n n - - local
|
|
||||||
virtual unix - n n - - virtual
|
|
||||||
lmtp unix - - y - - lmtp
|
|
||||||
anvil unix - - y - 1 anvil
|
|
||||||
scache unix - - y - 1 scache
|
|
||||||
#
|
|
||||||
# ====================================================================
|
|
||||||
# Interfaces to non-Postfix software. Be sure to examine the manual
|
|
||||||
# pages of the non-Postfix software to find out what options it wants.
|
|
||||||
#
|
|
||||||
# Many of the following services use the Postfix pipe(8) delivery
|
|
||||||
# agent. See the pipe(8) man page for information about ${recipient}
|
|
||||||
# and other message envelope options.
|
|
||||||
# ====================================================================
|
|
||||||
#
|
|
||||||
# maildrop. See the Postfix MAILDROP_README file for details.
|
|
||||||
# Also specify in main.cf: maildrop_destination_recipient_limit=1
|
|
||||||
#
|
|
||||||
maildrop unix - n n - - pipe
|
|
||||||
flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
|
|
||||||
#
|
|
||||||
# ====================================================================
|
|
||||||
#
|
|
||||||
# Recent Cyrus versions can use the existing "lmtp" master.cf entry.
|
|
||||||
#
|
|
||||||
# Specify in cyrus.conf:
|
|
||||||
# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
|
|
||||||
#
|
|
||||||
# Specify in main.cf one or more of the following:
|
|
||||||
# mailbox_transport = lmtp:inet:localhost
|
|
||||||
# virtual_transport = lmtp:inet:localhost
|
|
||||||
#
|
|
||||||
# ====================================================================
|
|
||||||
#
|
|
||||||
# Cyrus 2.1.5 (Amos Gouaux)
|
|
||||||
# Also specify in main.cf: cyrus_destination_recipient_limit=1
|
|
||||||
#
|
|
||||||
#cyrus unix - n n - - pipe
|
|
||||||
# user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
|
|
||||||
#
|
|
||||||
# ====================================================================
|
|
||||||
# Old example of delivery via Cyrus.
|
|
||||||
#
|
|
||||||
#old-cyrus unix - n n - - pipe
|
|
||||||
# flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
|
|
||||||
#
|
|
||||||
# ====================================================================
|
|
||||||
#
|
|
||||||
# See the Postfix UUCP_README file for configuration details.
|
|
||||||
#
|
|
||||||
uucp unix - n n - - pipe
|
|
||||||
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
|
|
||||||
#
|
|
||||||
# Other external delivery methods.
|
|
||||||
#
|
|
||||||
ifmail unix - n n - - pipe
|
|
||||||
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
|
|
||||||
bsmtp unix - n n - - pipe
|
|
||||||
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
|
|
||||||
scalemail-backend unix - n n - 2 pipe
|
|
||||||
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
|
|
||||||
mailman unix - n n - - pipe
|
|
||||||
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
|
|
||||||
${nexthop} ${user}
|
|
||||||
|
|
||||||
amavis unix y y y - 2 smtp
|
|
||||||
-o smtp_data_done_timeout=1200
|
|
||||||
-o smtp_send_xforward_command=yes
|
|
||||||
|
|
||||||
127.0.0.1:10025 inet n y y - - smtpd
|
|
||||||
-o content_filter=
|
|
||||||
-o local_recipient_maps=
|
|
||||||
-o relay_recipient_maps=
|
|
||||||
-o smtpd_restriction_classes=
|
|
||||||
-o smtpd_client_restrictions=
|
|
||||||
-o smtpd_helo_restrictions=
|
|
||||||
-o smtpd_sender_restrictions=
|
|
||||||
-o smtpd_recipient_restrictions=permit_mynetworks,reject
|
|
||||||
-o mynetworks=127.0.0.0/8
|
|
||||||
-o strict_rfc821_envelopes=yes
|
|
||||||
-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
|
|
||||||
{# filter unix - n n - - pipe
|
|
||||||
flags=Rq user=filter argv=/etc/postfix/scripts/disclaimer.sh -f ${sender} -- ${recipient} #}
|
|
||||||
policy-spf unix - n n - - spawn
|
|
||||||
user=nobody argv=/usr/bin/policyd-spf
|
|
||||||
greypolicy unix - n n - - spawn
|
|
||||||
user=nobody argv=/usr/bin/perl
|
|
||||||
/usr/local/libexec/postfix/greylist.pl
|
|
||||||
|
|
||||||
# For dbmail
|
|
||||||
dbmail-lmtp unix - - n - - lmtp
|
|
||||||
|
|
@ -1,5 +0,0 @@
|
||||||
user = {{ mail_db_user}}
|
|
||||||
password = {{ mail_db_password }}
|
|
||||||
dbname = {{ mail_db_name }}
|
|
||||||
query = SELECT action FROM bannedcontent WHERE regexp='%s'
|
|
||||||
hosts = 127.0.0.1
|
|
||||||
|
|
@ -1,5 +0,0 @@
|
||||||
user = {{ mail_db_user}}
|
|
||||||
password = {{ mail_db_password }}
|
|
||||||
dbname = {{ mail_db_name }}
|
|
||||||
query = SELECT domain AS virtuald FROM domains WHERE domain='%s'
|
|
||||||
hosts = 127.0.0.1
|
|
||||||
|
|
@ -1,5 +0,0 @@
|
||||||
user = {{ mail_db_user}}
|
|
||||||
password = {{ mail_db_password }}
|
|
||||||
dbname = {{ mail_db_name }}
|
|
||||||
query = SELECT email FROM users WHERE email='%s'
|
|
||||||
hosts = 127.0.0.1
|
|
||||||
|
|
@ -1,5 +0,0 @@
|
||||||
user = {{ mail_db_user}}
|
|
||||||
password = {{ mail_db_password }}
|
|
||||||
dbname = {{ mail_db_name }}
|
|
||||||
query = SELECT destination FROM forwardings WHERE source='%s'
|
|
||||||
hosts = 127.0.0.1
|
|
||||||
|
|
@ -1,5 +0,0 @@
|
||||||
user = {{ mail_db_user}}
|
|
||||||
password = {{ mail_db_password }}
|
|
||||||
dbname = {{ mail_db_name }}
|
|
||||||
query = SELECT quota FROM users WHERE email='%s'
|
|
||||||
hosts = 127.0.0.1
|
|
||||||
|
|
@ -1,5 +0,0 @@
|
||||||
user = {{ mail_db_user}}
|
|
||||||
password = {{ mail_db_password }}
|
|
||||||
dbname = {{ mail_db_name }}
|
|
||||||
query = SELECT CONCAT(SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1),'/') FROM users WHERE email='%s'
|
|
||||||
hosts = 127.0.0.1
|
|
||||||
|
|
@ -1,5 +0,0 @@
|
||||||
user = {{ mail_db_user}}
|
|
||||||
password = {{ mail_db_password }}
|
|
||||||
dbname = {{ mail_db_name }}
|
|
||||||
query = SELECT transport FROM transport WHERE domain='%s'
|
|
||||||
hosts = 127.0.0.1
|
|
||||||
15
templates/service.unit.j2
Normal file
15
templates/service.unit.j2
Normal file
|
|
@ -0,0 +1,15 @@
|
||||||
|
[Unit]
|
||||||
|
Description={{ unit_description }}
|
||||||
|
After=network.target network-online.target mysqld.service postgresql.service
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=notify
|
||||||
|
ExecStartPre=-mkdir -p @runstatedir@/dbmail
|
||||||
|
ExecStartPre=-chown dbmail:dbmail @runstatedir@/dbmail
|
||||||
|
ExecStart={{ unit_exec_start }}
|
||||||
|
Restart=always
|
||||||
|
RestartSec=3s
|
||||||
|
TimeoutStartSec = infinity
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
|
@ -1,2 +0,0 @@
|
||||||
auth required pam_mysql.so user={{ mail_db_user}} passwd={{ mail_db_password }} host=127.0.0.1 db={{ mail_db_name }} table=users usercolumn=email passwdcolumn=password crypt=1
|
|
||||||
account sufficient pam_mysql.so user={{ mail_db_user}} passwd={{ mail_db_password }} host=127.0.0.1 db={{ mail_db_name }} table=users usercolumn=email passwdcolumn=password crypt=1
|
|
||||||
|
|
@ -1,11 +0,0 @@
|
||||||
pwcheck_method: saslauthd
|
|
||||||
mech_list: plain login
|
|
||||||
allow_plaintext: true
|
|
||||||
auxprop_plugin: sql
|
|
||||||
sql_engine: mysql
|
|
||||||
sql_hostnames: 127.0.0.1
|
|
||||||
sql_user: {{ mail_db_user}}
|
|
||||||
sql_passwd: {{ mail_db_password }}
|
|
||||||
sql_database: {{ mail_db_name }}
|
|
||||||
sql_select: select password from users where email = '%u@%r'
|
|
||||||
log_level: 9
|
|
||||||
Loading…
Reference in a new issue