master branch:
This is the postfix module. It provides installation and configuration routines using Puppet.
include postfix
It will just install the postfix package and ensure that postfix is running.
include postfix
class { 'postfix::config':
smtpd_banner => 'example.org ESMTP example.org (Debian/GNU)',
}
It will just install the postfix package and ensure that postfix is running and set the SMTP Banner to the specified.
include postfix
class {'postfix::relay':
sender_hostname=>'sender.example.org',
masquerade_domains=>'example.org',
relayhost=>'receiver.example.org'
}
It will just install the postfix package and ensure that postfix is running and that emails are forwarded to the relayhost.
include postfix
class { 'postfix::postgres':
dbname => 'dbname',
dbpassword => 'dbpassword',
dbuser => 'dbusername',
}
class { 'postfix::config':
alias_maps => 'hash:/etc/aliases',
append_dot_mydomain => 'no',
biff => 'no',
broken_sasl_auth_clients => 'no',
content_filter => 'amavis:[127.0.0.1]:10024',
disable_vrfy_command => 'yes',
import_environment => 'MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C RESOLV_MULTI=on',
inet_interfaces => 'all', mail_spool_directory => '/var/mail',
mailbox_size_limit => '100000000',
message_size_limit => '60485760',
mydestination => 'mail.example.org, localhost, localhost.localdomain',
myhostname => 'mail.example.org',
mynetworks => '127.0.0.0/8, 192.168.122.0/24',
myorigin => '/etc/mailname',
local_recipient_maps => 'proxy:unix:passwd.byname $alias_maps',
proxy_read_maps => '$local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks',
receive_override_options => 'no_address_mappings',
show_user_unknown_table_name => 'no',
smtp_sasl_security_options => 'yes',
smtp_tls_CAfile => '/etc/ssl/certs/CAcert_chain.pem',
smtp_tls_note_starttls_offer => 'yes',
smtp_use_tls => 'yes',
smtpd_banner => 'example.org ESMTP example.org (Debian/GNU)',
smtpd_data_restrictions => 'reject_unauth_pipelining, permit',
smtpd_delay_reject => 'yes',
smtpd_helo_required => 'yes',
smtpd_recipient_restrictions => 'reject_invalid_hostname, permit_sasl_authenticated, reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, reject_unauth_destination, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net permit',
smtpd_sasl_auth_enable => 'yes',
smtpd_sasl_local_domain => '$myhostname',
smtpd_sasl_security_options => 'noanonymous',
smtpd_sender_restrictions => 'permit_sasl_authenticated, permit_mynetworks',
smtpd_tls_auth_only => 'no',
smtpd_tls_cert_file => '/etc/ssl/certs/example_server.pem',
smtpd_tls_key_file => '/etc/ssl/private/example_privatekey.pem',
smtpd_tls_loglevel => '1',
smtpd_tls_received_header => 'yes',
smtpd_tls_session_cache_timeout => '3600s',
smtpd_use_tls => 'yes',
tls_random_source => 'dev:/dev/urandom',
transport_maps => 'proxy:pgsql:/etc/postfix/postgresql/virtual_transports.cf',
virtual_alias_maps => 'proxy:pgsql:/etc/postfix/postgresql/virtual_forwardings.cf',
virtual_gid_maps => 'static:5000',
virtual_mailbox_base => '/srv/vmail',
virtual_mailbox_domains => 'proxy:pgsql:/etc/postfix/postgresql/virtual_domains.cf',
virtual_mailbox_limit => '100000000',
virtual_mailbox_maps => 'proxy:pgsql:/etc/postfix/postgresql/virtual_mailboxes.cf',
virtual_uid_maps => 'static:5000',
smtpd_sasl_type => 'dovecot',
smtpd_sasl_path => 'private/auth',
virtual_transport => 'dovecot',
dovecot_destination_recipient_limit => '1',
maildrop_destination_recipient_limit => '1',
}
Well, it does something more. You could reuse this piece of code but you need to have a dovecot running and a database with the correct schema.