flyingscorpio/self-hosting
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

[postfix] Use submissions (465) for relaying

Browse source
This commit is contained in:
Tunui Franken 2025-02-01 21:05:59 +01:00
parent e822e40945
commit 913d378dbe
2 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
roles/postfix/templates/main.cf.j2
View file

@ -20,7 +20,7 @@ mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
alias_maps = hash:/etc/aliases alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases alias_database = hash:/etc/aliases
relayhost = [{{ hostvars[relayhost].ipv4_addr }}]:25 relayhost = [{{ hostvars[relayhost].ipv4_addr }}]:465
mailbox_size_limit = 0 mailbox_size_limit = 0
recipient_delimiter = + recipient_delimiter = +
inet_interfaces = all inet_interfaces = all
@ -34,5 +34,6 @@ smtpd_tls_security_level = may
smtpd_tls_auth_only = yes smtpd_tls_auth_only = yes
smtp_tls_CApath = /etc/ssl/certs smtp_tls_CApath = /etc/ssl/certs
smtp_tls_security_level = may smtp_tls_wrappermode = yes
smtp_tls_security_level = encrypt
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

2
roles/postfix/templates/nftables/output.d/postfix.conf.j2
View file

@ -1,3 +1,3 @@
# {{ ansible_managed }} # {{ ansible_managed }}
ip daddr {{ hostvars[relayhost].ipv4_addr }} tcp dport { 25, 587 } accept comment "Allow SMTP/submission to relayhost" ip daddr {{ hostvars[relayhost].ipv4_addr }} tcp dport { 465 } accept comment "Allow submissions to relayhost"