geerlingguy / ansible-role-postfix Goto Github PK

View Code? Open in Web Editor NEW

86.0 9.0 64.0 32 KB

Ansible Role - Postfix

Home Page: https://galaxy.ansible.com/geerlingguy/postfix/

License: MIT License

ansible role postfix mail email send setup

ansible-role-postfix's Introduction

Ansible Role: Postfix

Installs postfix on RedHat/CentOS or Debian/Ubuntu.

Requirements

If you're using this as an SMTP relay server, you will need to do that on your own, and open TCP port 25 in your server firewall.

Role Variables

Available variables are listed below, along with default values (see defaults/main.yml):

postfix_config_file: /etc/postfix/main.cf

The path to the Postfix main.cf configuration file.

postfix_service_state: started
postfix_service_enabled: true

The state in which the Postfix service should be after this role runs, and whether to enable the service on startup.

postfix_inet_interfaces: localhost
postfix_inet_protocols: all

Options for values inet_interfaces and inet_protocols in the main.cf file.

Dependencies

None.

Example Playbook

- hosts: all
  roles:
    - geerlingguy.postfix

License

MIT / BSD

Author Information

This role was created in 2014 by Jeff Geerling, author of Ansible for DevOps.

ansible-role-postfix's People

Contributors

Stargazers

Watchers

ansible-role-postfix's Issues

Need a systemd reload

When postfix is installed a systemctl daemon-reload is required to start the service.

main.cf needs extra settings to prevent emails being flagged insecure

Gmail flags emails from postfix as 'sent insecurely.' On a production site, clients may object to this.

The fix is to add lines to /etc/postfix/main.cf (path in Debian):
smtpd_tls_security_level = may
smtp_tls_security_level = may
smtp_tls_loglevel = 1
smtpd_tls_loglevel = 1

I found the fix at http://blog.snapdragon.cc/2013/07/07/setting-postfix-to-encrypt-all-traffic-when-talking-to-other-mailservers/, have tested it, and use it in production. It would be useful if this ansible role updates main.cf accordingly.

EDIT- Not tested on current version of postfix on Debian Stretch, where this role anyway bails out because a default apt-get install postfix no longer creates a main.cnf--if you want one it must be made manually.

postdrop: warning: unable to look up public/pickup

I got this error when trying to use sendmail after installing postfix using this role.

Fixed by running command:
sudo mkfifo /var/spool/postfix/public/pickup.

Related: redhat#527124.

Will try to propose PR soon or later.

How to update the default size using this ansible role?

user@localhost:~# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 fqdn ESMTP Postfix (Ubuntu)

ehlo hello

250-fqdn
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN