postfix ========= Ansible logo Build status Install and configure postfix on your system. Example Playbook ---------------- This example is taken from `molecule/resources/playbook.yml` and is tested on each push, pull request and release. ```yaml --- - name: Converge hosts: all become: yes gather_facts: yes vars: postfix_aliases: - name: root destination: robert@meinit.nl roles: - robertdebock.postfix ``` The machine you are running this on, may need to be prepared, I use this playbook to ensure everything is in place to let the role work. ```yaml --- - name: Prepare hosts: all become: yes gather_facts: no roles: - robertdebock.bootstrap - robertdebock.core_dependencies ``` Also see a [full explanation and example](https://robertdebock.nl/how-to-use-these-roles.html) on how to use these roles. Role Variables -------------- These variables are set in `defaults/main.yml`: ```yaml --- # defaults file for postfix # These settings are required in postfix. postfix_myhostname: "{{ ansible_fqdn }}" postfix_mydomain: "{{ ansible_domain | default ('localdomain', true) }}" postfix_myorigin: "{{ ansible_domain | default ('localdomain', true) }}" # To "listen" on public interfaces, set inet_interfaces to something like # "all" or the name of the interface, such as "eth0". postfix_inet_inferfaces: "loopback-only" # The distination tells Postfix what mails to accept mail for. postfix_mydestination: $mydomain, $myhostname, localhost.$mydomain, localhost # To accept email from other machines, set the mynetworks to something like # "192.168.0.0/24". postfix_mynetworks: "127.0.0.0/8" # These settings change the role of the postfix server to a relay host. # postfix_relay_domains: "$mydestination" # If you want to forward emails to another central relay server, set relayhost. # use brackets to sent to the A-record of the relayhost. # postfix_relayhost: [relay.example.com] # Set the restrictions for receiving mails. postfix_smtpd_recipient_restrictions: - permit_mynetworks - permit_sasl_authenticated - reject_unauth_destination - reject_invalid_hostname - reject_non_fqdn_hostname - reject_non_fqdn_sender - reject_non_fqdn_recipient - reject_unknown_sender_domain - reject_unknown_recipient_domain - reject_rbl_client sbl.spamhaus.org - reject_rbl_client cbl.abuseat.org - reject_rbl_client dul.dnsbl.sorbs.net - permit # To enable spamassassin, ensure spamassassin is installed, # (hint: role: robertdebock.spamassassin) and set these two variables: # postfix_spamassassin: enabled # postfix_spamassassin_user: spamd # To enable clamav, ensure clamav is installed, # (hint: role: robertdebock.clamav) and set this variable: # postfix_clamav: enabled # You can configure aliases here. Typically redirecting `root` is a good plan. # postfix_aliases: # - name: root # destination: robert@meinit.nl ``` Requirements ------------ - Access to a repository containing packages, likely on the internet. - A recent version of Ansible. (Tests run on the current, previous and next release of Ansible.) The following roles can be installed to ensure all requirements are met, using `ansible-galaxy install -r requirements.yml`: ```yaml --- - robertdebock.bootstrap - robertdebock.core_dependencies ``` Context ------- This role is a part of many compatible roles. Have a look at [the documentation of these roles](https://robertdebock.nl/) for further information. Here is an overview of related roles: ![dependencies](https://raw.githubusercontent.com/robertdebock/drawings/artifacts/postfix.png "Dependency") Compatibility ------------- This role has been tested on these [container images](https://hub.docker.com/): |container|tag|allow_failures| |---------|---|--------------| |alpine|latest|no| |alpine|edge|yes| |debian|unstable|yes| |debian|latest|no| |centos|7|no| |redhat|7|no| |centos|latest|no| |redhat|latest|no| |fedora|latest|no| |fedora|rawhide|yes| |ubuntu|latest|no| This role has been tested on these Ansible versions: - ansible>=2.8, <2.9 - ansible>=2.9 - git+https://github.com/ansible/ansible.git@devel Exceptions ---------- Some variarations of the build matrix do not work. These are the variations and reasons why the build won't work: | variation | reason | |---------------------------|------------------------| | opensuse | Not idempotent on configure postfix (main.cf) and configure postfix | Testing ------- [Unit tests](https://travis-ci.org/robertdebock/ansible-role-postfix) are done on every commit, pull request, release and periodically. If you find issues, please register them in [GitHub](https://github.com/robertdebock/ansible-role-postfix/issues) Testing is done using [Tox](https://tox.readthedocs.io/en/latest/) and [Molecule](https://github.com/ansible/molecule): [Tox](https://tox.readthedocs.io/en/latest/) tests multiple ansible versions. [Molecule](https://github.com/ansible/molecule) tests multiple distributions. To test using the defaults (any installed ansible version, namespace: `robertdebock`, image: `fedora`, tag: `latest`): ``` molecule test # Or select a specific image: image=ubuntu molecule test # Or select a specific image and a specific tag: image="debian" tag="stable" tox ``` Or you can test multiple versions of Ansible, and select images: Tox allows multiple versions of Ansible to be tested. To run the default (namespace: `robertdebock`, image: `fedora`, tag: `latest`) tests: ``` tox # To run CentOS (namespace: `robertdebock`, tag: `latest`) image="centos" tox # Or customize more: image="debian" tag="stable" tox ``` Modules ------- This role uses the following modules: ```yaml --- - command - file - group - lineinfile - package - service - template ``` License ------- Apache-2.0 Author Information ------------------ [Robert de Bock](https://robertdebock.nl/)