39 lines
968 B
YAML
39 lines
968 B
YAML
---
|
|
# Configure relay
|
|
- name: Ensure postfix is installed
|
|
ansible.builtin.dnf:
|
|
name:
|
|
- postfix
|
|
- cyrus-sasl-plain
|
|
state: present
|
|
|
|
- name: Add password map
|
|
ansible.builtin.template:
|
|
src: etc/postfix/sasl_passwd.j2
|
|
dest: /etc/postfix/sasl_passwd
|
|
owner: root
|
|
group: root
|
|
mode: '0600'
|
|
notify: rehash_postfix_sasl
|
|
|
|
- name: Add relay information to postfix
|
|
ansible.builtin.blockinfile:
|
|
path: /etc/postfix/main.cf
|
|
marker: "## ANSIBLE MANAGED ##"
|
|
block: |
|
|
smtp_tls_note_starttls_offer = yes
|
|
relayhost = [{{ smtp_relayhost }}]:587
|
|
smtp_use_tls = yes
|
|
smtp_sasl_auth_enable = yes
|
|
smtp_sasl_security_options =
|
|
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
|
|
smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
|
|
notify: restart_postfix
|
|
|
|
- name: Ensure postfix is running and enabled
|
|
ansible.builtin.service:
|
|
name: postfix
|
|
state: restarted
|
|
enabled: true
|
|
...
|