configure permissions and default to version 3.6

defaults/main.yml

@@ -37,7 +37,7 @@ postfix_config:
   biff: no
   body_checks: regexp:/etc/postfix/maps/body_checks.map
   broken_sasl_auth_clients: yes
-  compatibility_level: 2
+  compatibility_level: 3.6
   header_checks: regexp:/etc/postfix/maps/whitelist_senders.map regexp:/etc/postfix/maps/spam_filter_header_check
   html_directory: /usr/share/doc/postfix/html
   inet_interfaces: all

tasks/configure.yml

@@ -175,6 +175,14 @@
 - name: Remove duplicates
   set_fact:
     mail_own_networks: "{{ mail_own_networks | unique | select | list }}"
+
+- name: Ensure allow clients file exists
+  file:
+    state: touch
+    path: /etc/postfix/allowed_clients
+    owner: root
+    group: postfix
+    mode: 0640
 ###################
 #                 #
 # This at the end #

tasks/configure_disclaimer.yml

@@ -3,9 +3,9 @@
   copy:
     src: files/disclaimer.sh
     dest: /etc/postfix/scripts/disclaimer.sh
-    owner: postfix
-    group: root
-    mode: '0775'
+    owner: root
+    group: postfix
+    mode: '0755'
     backup: true
 
 - name: Ensure filter group exists

tasks/deploy_scripts.yml

@@ -5,15 +5,7 @@
     state: directory
     owner: root
     group: postfix
-    mode: '0775'
-
-- name: Ensure Courier scripts folder exists
-  file:
-    path: /etc/courier/scripts
-    state: directory
-    owner: root
-    group: root
-    mode: '0750'
+    mode: '0755'
 
 - name: Template file letsencrypt_update.sh
   template: