---
# Configure relay
- name: Ensure postfix is installed
  ansible.builtin.dnf:
    name:
      - postfix
      - cyrus-sasl-plain
    state: present

- name: Add password map
  ansible.builtin.template:
    src: etc/postfix/sasl_passwd.j2
    dest: /etc/postfix/sasl_passwd
    owner: root
    group: root
    mode: '0600'
  notify: rehash_postfix_sasl

- name: Add relay information to postfix
  ansible.builtin.blockinfile:
    path: /etc/postfix/main.cf
    marker: "## ANSIBLE MANAGED ##"
    block: |
      smtp_tls_note_starttls_offer = yes
      relayhost = [{{ smtp_relayhost }}]:587
      smtp_use_tls = yes
      smtp_sasl_auth_enable = yes
      smtp_sasl_security_options =
      smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
      smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
  notify: restart_postfix

- name: Ensure postfix is running and enabled
  ansible.builtin.service:
    name: postfix
    state: restarted
    enabled: true
...