94 lines
3.4 KiB
CFEngine3
94 lines
3.4 KiB
CFEngine3
queue_directory = /var/spool/postfix
|
|
command_directory = /usr/sbin
|
|
daemon_directory = /usr/lib/postfix
|
|
data_directory = /var/lib/postfix
|
|
mail_owner = postfix
|
|
setgid_group = postdrop
|
|
sendmail_path = /usr/sbin/sendmail
|
|
newaliases_path = /usr/bin/newaliases
|
|
mailq_path = /usr/bin/mailq
|
|
compatibility_level = 2
|
|
|
|
myhostname = mail.{{ domain }}
|
|
mydomain = {{ domain }}
|
|
myorigin = $mydomain
|
|
relay_domains = $mydestination
|
|
mynetworks_style = host
|
|
mynetworks = 127.0.0.0/8 10.3.0.0/24 37.221.196.144/32
|
|
smtpd_banner = $myhostname ESMTP
|
|
|
|
smtpd_tls_dh1024_param_file = /etc/ssl/private/dh1024.pem
|
|
smtpd_tls_dh512_param_file = /etc/ssl/private/dh512.pem
|
|
smtpd_tls_eecdh_grade = strong
|
|
tls_preempt_cipherlist = yes
|
|
smtpd_tls_loglevel = 1
|
|
smtp_tls_loglevel = 1
|
|
smtpd_tls_cert_file = /etc/ssl/private/mailcert.pem
|
|
smtpd_tls_key_file = /etc/ssl/private/mailkey.pem
|
|
smtpd_tls_security_level = may
|
|
|
|
unknown_local_recipient_reject_code = 550
|
|
alias_maps = pgsql:/etc/postfix/pgsql-aliases.cf
|
|
alias_database = $alias_maps
|
|
|
|
smtpd_sasl_auth_enable = yes
|
|
smtpd_sasl_security_options = noanonymous
|
|
smtpd_sasl_local_domain = $mydomain
|
|
smtpd_sasl_type = dovecot
|
|
smtpd_sasl_path = inet:127.0.0.1:6222
|
|
broken_sasl_auth_clients = yes
|
|
|
|
receive_override_options = no_address_mappings
|
|
disable_vrfy_command = yes
|
|
|
|
dovecot_destination_recipient_limit = 1
|
|
recipient_delimiter = +
|
|
virtual_transport = dovecot
|
|
virtual_alias_maps = pgsql:/etc/postfix/pgsql-aliases.cf
|
|
virtual_mailbox_domains = pgsql:/etc/postfix/pgsql-domains.cf
|
|
virtual_mailbox_maps = pgsql:/etc/postfix/pgsql-maildir.cf
|
|
|
|
smtpd_delay_reject = yes
|
|
smtpd_helo_required = yes
|
|
smtpd_helo_restrictions =
|
|
permit_mynetworks,
|
|
reject_invalid_hostname,
|
|
permit
|
|
|
|
smtpd_sender_restrictions =
|
|
permit_sasl_authenticated,
|
|
permit_mynetworks,
|
|
reject_non_fqdn_sender,
|
|
reject_unknown_sender_domain,
|
|
permit
|
|
|
|
smtpd_recipient_restrictions =
|
|
reject_unauth_pipelining,
|
|
reject_non_fqdn_recipient,
|
|
reject_unknown_recipient_domain,
|
|
permit_mynetworks,
|
|
permit_sasl_authenticated,
|
|
reject_unauth_destination,
|
|
check_policy_service inet:127.0.0.1:5525,
|
|
check_policy_service unix:private/spfpolicy,
|
|
permit
|
|
|
|
smtpd_relay_restrictions =
|
|
permit_mynetworks,
|
|
permit_sasl_authenticated,
|
|
defer_unauth_destination
|
|
|
|
html_directory = no
|
|
manpage_directory = /usr/share/man
|
|
sample_directory = /etc/postfix/sample
|
|
readme_directory = /usr/share/doc/postfix
|
|
inet_protocols = ipv4
|
|
|
|
message_size_limit = 20480000
|
|
|
|
debug_peer_level = 2
|
|
debugger_command =
|
|
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
|
|
ddd $daemon_directory/$process_name $process_id & sleep 5
|
|
|