AnsiblePlaybooks/test
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add fail2ban role and clean up yaml lint noise

Browse Source
This commit is contained in:
jmrothst
2026-08-08 23:50:32 -05:00
parent 9b837dd780
commit 6c7ecfc724
352 changed files with 4632 additions and 4186 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/ensure_postfix/.travis.yml
+3 -8
View File
@@ -1,16 +1,13 @@
---
language: python
python: "2.7"
python: '2.7'
# Use the new container infrastructure
sudo: false
# Install ansible
addons:
apt:
packages:
- python-pip
packages: [python-pip]
install:
# Install ansible
- pip install ansible
@@ -20,10 +17,8 @@ install:
# Create ansible.cfg with correct roles_path
- printf '[defaults]\nroles_path=../' >ansible.cfg
script:
# Basic role syntax check
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
notifications:
webhooks: https://galaxy.ansible.com/api/v1/notifications/
webhooks: https://galaxy.ansible.com/api/v1/notifications/
roles/ensure_postfix/defaults/main.yml
+1 -1
View File
@@ -1,5 +1,5 @@
---
# defaults file for ensure_postfix
postmaster_email: 'postmaster@example.com'
postmaster_email: postmaster@example.com
postfix_vhost: '{{ inventory_hostname }}'
postfix_message_size_limit: 10240000
roles/ensure_postfix/handlers/main.yml
+5 -7
View File
@@ -1,17 +1,17 @@
---
# handlers file for ensure_postfix
- name: 'ensure_postfix.package_facts'
- name: ensure_postfix.package_facts
ansible.builtin.package_facts:
- name: 'ensure_postfix.service_facts'
- name: ensure_postfix.service_facts
ansible.builtin.service_facts:
- name: 'ensure_postfix.service_reload'
- name: ensure_postfix.service_reload
when:
- ansible_facts["system"] == 'Linux'
- ansible_facts["service_mgr"] == 'systemd'
- ensure_postfix is defined
ansible.builtin.systemd:
daemon_reload: 'yes'
- name: 'ensure_postfix.service_restart'
- name: ensure_postfix.service_restart
when:
- ansible_facts["system"] == 'Linux'
- ensure_postfix is defined
@@ -21,9 +21,7 @@
ansible.builtin.service:
enabled: '{{ item.enabled }}'
name: '{{ item.name }}'
state: 'restarted'
state: restarted
loop: '{{ ensure_postfix.service_list }}'
loop_control:
label: '{{ item.name }} will be restarted'
...
roles/ensure_postfix/meta/main.yml
+1 -4
View File
@@ -1,3 +1,4 @@
---
galaxy_info:
author: your name
description: your role description
@@ -15,7 +16,6 @@ galaxy_info:
# - Apache-2.0
# - CC-BY-4.0
license: license (GPL-2.0-or-later, MIT, etc)
min_ansible_version: 2.9
# If this a Container Enabled role, provide the minimum Ansible Container version.
@@ -38,7 +38,6 @@ galaxy_info:
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
@@ -46,8 +45,6 @@ galaxy_info:
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.
roles/ensure_postfix/tasks/main.yml
+45 -47
View File
@@ -1,35 +1,37 @@
---
# tasks file for ensure_postfix
- name: 'include variables'
when:
- ansible_facts["system"] == 'Linux'
- name: include variables
when: ["ansible_facts[\"system\"] == 'Linux'"]
ansible.builtin.include_vars:
file: '{{ lookup("first_found", findme) }}'
name: 'ensure_postfix'
name: ensure_postfix
vars:
findme:
files:
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"]
}}-{{ ansible_facts["architecture"] }}.yml'
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"]
}}-default.yml'
- '{{ ansible_facts["distribution"] }}-default.yml'
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"]
}}-{{ ansible_facts["architecture"] }}.yml'
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"]
}}-default.yml'
- '{{ ansible_facts["os_family"] }}-default.yml'
- 'default.yml'
paths:
- '../vars/'
errors: 'ignore'
- name: 'package discovery'
- default.yml
paths: [../vars/]
errors: ignore
- name: package discovery
when:
- ansible_facts["system"] == 'Linux'
- ansible_facts["packages"] is not defined
ansible.builtin.package_facts:
- name: 'service discovery'
- name: service discovery
when:
- ansible_facts["system"] == 'Linux'
- ansible_facts["services"] is not defined
ansible.builtin.service_facts:
- name: 'ensure sysctl'
- name: ensure sysctl
when:
- ansible_facts["system"] == 'Linux'
- ensure_postfix is defined
@@ -46,11 +48,11 @@
loop_control:
label: '{{ item.name }} will be {{ item.value }}'
notify:
- 'ensure_postfix.package_facts'
- 'ensure_postfix.service_facts'
- 'ensure_postfix.service_reload'
- 'ensure_postfix.service_restart'
- name: 'ensure packages'
- ensure_postfix.package_facts
- ensure_postfix.service_facts
- ensure_postfix.service_reload
- ensure_postfix.service_restart
- name: ensure packages
when:
- ansible_facts["system"] == 'Linux'
- ensure_postfix is defined
@@ -63,11 +65,11 @@
loop_control:
label: '{{ item.name }} will be {{ item.state }}'
notify:
- 'ensure_postfix.package_facts'
- 'ensure_postfix.service_facts'
- 'ensure_postfix.service_reload'
- 'ensure_postfix.service_restart'
- name: 'ensure seboolean'
- ensure_postfix.package_facts
- ensure_postfix.service_facts
- ensure_postfix.service_reload
- ensure_postfix.service_restart
- name: ensure seboolean
when:
- ansible_facts["system"] == 'Linux'
- ensure_postfix is defined
@@ -81,11 +83,11 @@
loop_control:
label: '{{ item.name }} will be {{ item.state }}'
notify:
- 'ensure_postfix.package_facts'
- 'ensure_postfix.service_facts'
- 'ensure_postfix.service_reload'
- 'ensure_postfix.service_restart'
- name: 'ensure configurations'
- ensure_postfix.package_facts
- ensure_postfix.service_facts
- ensure_postfix.service_reload
- ensure_postfix.service_restart
- name: ensure configurations
when:
- ansible_facts["system"] == 'Linux'
- ensure_postfix is defined
@@ -106,11 +108,11 @@
loop_control:
label: '{{ item.dest }} will be ensured'
notify:
- 'ensure_postfix.package_facts'
- 'ensure_postfix.service_facts'
- 'ensure_postfix.service_reload'
- 'ensure_postfix.service_restart'
- name: 'ensure firewall'
- ensure_postfix.package_facts
- ensure_postfix.service_facts
- ensure_postfix.service_reload
- ensure_postfix.service_restart
- name: ensure firewall
when:
- ansible_facts["system"] == 'Linux'
- ansible_facts.packages["firewalld"] is defined
@@ -126,11 +128,11 @@
loop_control:
label: '{{ item.service }} will be {{ item.state }}'
notify:
- 'ensure_postfix.package_facts'
- 'ensure_postfix.service_facts'
- 'ensure_postfix.service_reload'
- 'ensure_postfix.service_restart'
- name: 'ensure services'
- ensure_postfix.package_facts
- ensure_postfix.service_facts
- ensure_postfix.service_reload
- ensure_postfix.service_restart
- name: ensure services
when:
- ansible_facts["system"] == 'Linux'
- ensure_postfix is defined
@@ -143,10 +145,6 @@
loop: '{{ ensure_postfix.service_list }}'
loop_control:
label: '{{ item.name }} will be {{ item.state }}'
notify:
- 'ensure_postfix.package_facts'
- 'ensure_postfix.service_facts'
- name: 'flush handlers'
ansible.builtin.meta: 'flush_handlers'
...
notify: [ensure_postfix.package_facts, ensure_postfix.service_facts]
- name: flush handlers
ansible.builtin.meta: flush_handlers
roles/ensure_postfix/tests/test.yml
+1 -2
View File
@@ -1,5 +1,4 @@
---
- hosts: localhost
remote_user: root
roles:
- ensure_postfix
roles: [ensure_postfix]
roles/ensure_postfix/vars/Fedora-42-default.yml
+121 -95
View File
@@ -1,112 +1,138 @@
---
# vars file for ensure_postfix
milter_list:
- description: 'OpenDKIM'
hostname: 'localhost'
- description: OpenDKIM
hostname: localhost
port: '8891'
protocol: 'inet'
- description: 'OpenDMARC'
hostname: 'localhost'
protocol: inet
- description: OpenDMARC
hostname: localhost
port: '8893'
protocol: 'inet'
protocol: inet
package_list:
- name: 'opendkim'
state: 'present'
- name: 'opendkim-tools'
state: 'present'
- name: 'opendmarc'
state: 'present'
- name: 'postfix'
state: 'present'
- name: 'postfix-ldap'
state: 'present'
- name: 'postfix-mysql'
state: 'present'
- name: 'postfix-pcre'
state: 'present'
- name: 'spamass-milter'
state: 'present'
- name: 'spamassassin'
state: 'present'
- name: opendkim
state: present
- name: opendkim-tools
state: present
- name: opendmarc
state: present
- name: postfix
state: present
- name: postfix-ldap
state: present
- name: postfix-mysql
state: present
- name: postfix-pcre
state: present
- name: spamass-milter
state: present
- name: spamassassin
state: present
firewall_list:
- permanent: 'yes'
service: 'smtp'
state: 'enabled'
service: smtp
state: enabled
- permanent: 'yes'
service: 'smtps'
state: 'enabled'
service: smtps
state: enabled
- permanent: 'yes'
service: 'smtp-submission'
state: 'enabled'
service: smtp-submission
state: enabled
service_list:
- enabled: 'yes'
name: 'opendkim.service'
state: 'started'
name: opendkim.service
state: started
- enabled: 'yes'
name: 'opendmarc.service'
state: 'started'
name: opendmarc.service
state: started
- enabled: 'yes'
name: 'postfix.service'
state: 'started'
name: postfix.service
state: started
- enabled: 'yes'
name: 'postfix-copytls.service'
state: 'started'
name: postfix-copytls.service
state: started
- enabled: 'yes'
name: 'postfix-copytls.timer'
state: 'started'
name: postfix-copytls.timer
state: started
template_list:
- dest: '/etc/postfix/dynamicmaps.cf.d/ldap'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/dynamicmaps.cf.d/ldap'
- dest: '/etc/postfix/dynamicmaps.cf.d/mysql'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/dynamicmaps.cf.d/mysql'
- dest: '/etc/postfix/dynamicmaps.cf.d/pcre'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/dynamicmaps.cf.d/pcre'
- dest: '/etc/postfix/postfix-files.d/ldap'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/postfix-files.d/ldap'
- dest: '/etc/postfix/postfix-files.d/mysql'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/postfix-files.d/mysql'
- dest: '/etc/postfix/postfix-files.d/pcre'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/postfix-files.d/pcre'
- dest: '/etc/postfix/access'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/access'
- dest: '/etc/postfix/canonical'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/canonical'
- dest: '/etc/postfix/dynamicmaps.cf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/dynamicmaps.cf'
- dest: '/etc/postfix/generic'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/generic'
- dest: '/etc/postfix/header_checks'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/header_checks'
- dest: '/etc/postfix/main.cf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/main.cf'
- dest: '/etc/postfix/main.cf.proto'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/main.cf.proto'
- dest: '/etc/postfix/master.cf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/master.cf'
- dest: '/etc/postfix/master.cf.proto'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/master.cf.proto'
- dest: '/etc/postfix/postfix-files'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/postfix-files'
- dest: '/etc/postfix/relocated'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/relocated'
- dest: '/etc/postfix/transport'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/transport'
- dest: '/etc/postfix/virtual'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/virtual'
- dest: '/etc/opendkim/KeyTable'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendkim/KeyTable'
- dest: '/etc/opendkim/SigningTable'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendkim/SigningTable'
- dest: '/etc/opendkim/TrustedHosts'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendkim/TrustedHosts'
- dest: '/etc/opendkim.conf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendkim.conf'
- dest: '/etc/opendmarc.conf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendmarc.conf'
- dest: '/etc/opendmarc/ignore.hosts'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendmarc/ignore.hosts'
- dest: '/usr/lib/systemd/system/postfix-copytls.service'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/postfix-copytls.service'
- dest: '/usr/lib/systemd/system/postfix-copytls.timer'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/postfix-copytls.timer'
- dest: /etc/postfix/dynamicmaps.cf.d/ldap
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/dynamicmaps.cf.d/ldap'
- dest: /etc/postfix/dynamicmaps.cf.d/mysql
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/dynamicmaps.cf.d/mysql'
- dest: /etc/postfix/dynamicmaps.cf.d/pcre
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/dynamicmaps.cf.d/pcre'
- dest: /etc/postfix/postfix-files.d/ldap
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/postfix-files.d/ldap'
- dest: /etc/postfix/postfix-files.d/mysql
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/postfix-files.d/mysql'
- dest: /etc/postfix/postfix-files.d/pcre
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/postfix-files.d/pcre'
- dest: /etc/postfix/access
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/access'
- dest: /etc/postfix/canonical
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/canonical'
- dest: /etc/postfix/dynamicmaps.cf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/dynamicmaps.cf'
- dest: /etc/postfix/generic
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/generic'
- dest: /etc/postfix/header_checks
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/header_checks'
- dest: /etc/postfix/main.cf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/main.cf'
- dest: /etc/postfix/main.cf.proto
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/main.cf.proto'
- dest: /etc/postfix/master.cf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/master.cf'
- dest: /etc/postfix/master.cf.proto
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/master.cf.proto'
- dest: /etc/postfix/postfix-files
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/postfix-files'
- dest: /etc/postfix/relocated
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/relocated'
- dest: /etc/postfix/transport
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/transport'
- dest: /etc/postfix/virtual
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/virtual'
- dest: /etc/opendkim/KeyTable
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendkim/KeyTable'
- dest: /etc/opendkim/SigningTable
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendkim/SigningTable'
- dest: /etc/opendkim/TrustedHosts
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendkim/TrustedHosts'
- dest: /etc/opendkim.conf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendkim.conf'
- dest: /etc/opendmarc.conf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendmarc.conf'
- dest: /etc/opendmarc/ignore.hosts
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendmarc/ignore.hosts'
- dest: /usr/lib/systemd/system/postfix-copytls.service
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/usr/lib/systemd/system/postfix-copytls.service'
- dest: /usr/lib/systemd/system/postfix-copytls.timer
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/usr/lib/systemd/system/postfix-copytls.timer'
roles/ensure_postfix/vars/Fedora-43-default.yml
+121 -95
View File
@@ -1,112 +1,138 @@
---
# vars file for ensure_postfix
milter_list:
- description: 'OpenDKIM'
hostname: 'localhost'
- description: OpenDKIM
hostname: localhost
port: '8891'
protocol: 'inet'
- description: 'OpenDMARC'
hostname: 'localhost'
protocol: inet
- description: OpenDMARC
hostname: localhost
port: '8893'
protocol: 'inet'
protocol: inet
package_list:
- name: 'opendkim'
state: 'present'
- name: 'opendkim-tools'
state: 'present'
- name: 'opendmarc'
state: 'present'
- name: 'postfix'
state: 'present'
- name: 'postfix-ldap'
state: 'present'
- name: 'postfix-mysql'
state: 'present'
- name: 'postfix-pcre'
state: 'present'
- name: 'spamass-milter'
state: 'present'
- name: 'spamassassin'
state: 'present'
- name: opendkim
state: present
- name: opendkim-tools
state: present
- name: opendmarc
state: present
- name: postfix
state: present
- name: postfix-ldap
state: present
- name: postfix-mysql
state: present
- name: postfix-pcre
state: present
- name: spamass-milter
state: present
- name: spamassassin
state: present
firewall_list:
- permanent: 'yes'
service: 'smtp'
state: 'enabled'
service: smtp
state: enabled
- permanent: 'yes'
service: 'smtps'
state: 'enabled'
service: smtps
state: enabled
- permanent: 'yes'
service: 'smtp-submission'
state: 'enabled'
service: smtp-submission
state: enabled
service_list:
- enabled: 'yes'
name: 'opendkim.service'
state: 'started'
name: opendkim.service
state: started
- enabled: 'yes'
name: 'opendmarc.service'
state: 'started'
name: opendmarc.service
state: started
- enabled: 'yes'
name: 'postfix.service'
state: 'started'
name: postfix.service
state: started
- enabled: 'yes'
name: 'postfix-copytls.service'
state: 'started'
name: postfix-copytls.service
state: started
- enabled: 'yes'
name: 'postfix-copytls.timer'
state: 'started'
name: postfix-copytls.timer
state: started
template_list:
- dest: '/etc/postfix/dynamicmaps.cf.d/ldap'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/dynamicmaps.cf.d/ldap'
- dest: '/etc/postfix/dynamicmaps.cf.d/mysql'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/dynamicmaps.cf.d/mysql'
- dest: '/etc/postfix/dynamicmaps.cf.d/pcre'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/dynamicmaps.cf.d/pcre'
- dest: '/etc/postfix/postfix-files.d/ldap'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/postfix-files.d/ldap'
- dest: '/etc/postfix/postfix-files.d/mysql'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/postfix-files.d/mysql'
- dest: '/etc/postfix/postfix-files.d/pcre'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/postfix-files.d/pcre'
- dest: '/etc/postfix/access'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/access'
- dest: '/etc/postfix/canonical'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/canonical'
- dest: '/etc/postfix/dynamicmaps.cf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/dynamicmaps.cf'
- dest: '/etc/postfix/generic'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/generic'
- dest: '/etc/postfix/header_checks'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/header_checks'
- dest: '/etc/postfix/main.cf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/main.cf'
- dest: '/etc/postfix/main.cf.proto'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/main.cf.proto'
- dest: '/etc/postfix/master.cf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/master.cf'
- dest: '/etc/postfix/master.cf.proto'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/master.cf.proto'
- dest: '/etc/postfix/postfix-files'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/postfix-files'
- dest: '/etc/postfix/relocated'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/relocated'
- dest: '/etc/postfix/transport'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/transport'
- dest: '/etc/postfix/virtual'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/virtual'
- dest: '/etc/opendkim/KeyTable'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendkim/KeyTable'
- dest: '/etc/opendkim/SigningTable'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendkim/SigningTable'
- dest: '/etc/opendkim/TrustedHosts'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendkim/TrustedHosts'
- dest: '/etc/opendkim.conf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendkim.conf'
- dest: '/etc/opendmarc.conf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendmarc.conf'
- dest: '/etc/opendmarc/ignore.hosts'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendmarc/ignore.hosts'
- dest: '/usr/lib/systemd/system/postfix-copytls.service'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/postfix-copytls.service'
- dest: '/usr/lib/systemd/system/postfix-copytls.timer'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/postfix-copytls.timer'
- dest: /etc/postfix/dynamicmaps.cf.d/ldap
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/dynamicmaps.cf.d/ldap'
- dest: /etc/postfix/dynamicmaps.cf.d/mysql
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/dynamicmaps.cf.d/mysql'
- dest: /etc/postfix/dynamicmaps.cf.d/pcre
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/dynamicmaps.cf.d/pcre'
- dest: /etc/postfix/postfix-files.d/ldap
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/postfix-files.d/ldap'
- dest: /etc/postfix/postfix-files.d/mysql
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/postfix-files.d/mysql'
- dest: /etc/postfix/postfix-files.d/pcre
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/postfix-files.d/pcre'
- dest: /etc/postfix/access
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/access'
- dest: /etc/postfix/canonical
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/canonical'
- dest: /etc/postfix/dynamicmaps.cf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/dynamicmaps.cf'
- dest: /etc/postfix/generic
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/generic'
- dest: /etc/postfix/header_checks
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/header_checks'
- dest: /etc/postfix/main.cf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/main.cf'
- dest: /etc/postfix/main.cf.proto
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/main.cf.proto'
- dest: /etc/postfix/master.cf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/master.cf'
- dest: /etc/postfix/master.cf.proto
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/master.cf.proto'
- dest: /etc/postfix/postfix-files
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/postfix-files'
- dest: /etc/postfix/relocated
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/relocated'
- dest: /etc/postfix/transport
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/transport'
- dest: /etc/postfix/virtual
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/virtual'
- dest: /etc/opendkim/KeyTable
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendkim/KeyTable'
- dest: /etc/opendkim/SigningTable
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendkim/SigningTable'
- dest: /etc/opendkim/TrustedHosts
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendkim/TrustedHosts'
- dest: /etc/opendkim.conf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendkim.conf'
- dest: /etc/opendmarc.conf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendmarc.conf'
- dest: /etc/opendmarc/ignore.hosts
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendmarc/ignore.hosts'
- dest: /usr/lib/systemd/system/postfix-copytls.service
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/usr/lib/systemd/system/postfix-copytls.service'
- dest: /usr/lib/systemd/system/postfix-copytls.timer
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/usr/lib/systemd/system/postfix-copytls.timer'
roles/ensure_postfix/vars/Fedora-44-default.yml
+121 -95
View File
@@ -1,112 +1,138 @@
---
# vars file for ensure_postfix
milter_list:
- description: 'OpenDKIM'
hostname: 'localhost'
- description: OpenDKIM
hostname: localhost
port: '8891'
protocol: 'inet'
- description: 'OpenDMARC'
hostname: 'localhost'
protocol: inet
- description: OpenDMARC
hostname: localhost
port: '8893'
protocol: 'inet'
protocol: inet
package_list:
- name: 'opendkim'
state: 'present'
- name: 'opendkim-tools'
state: 'present'
- name: 'opendmarc'
state: 'present'
- name: 'postfix'
state: 'present'
- name: 'postfix-ldap'
state: 'present'
- name: 'postfix-mysql'
state: 'present'
- name: 'postfix-pcre'
state: 'present'
- name: 'spamass-milter'
state: 'present'
- name: 'spamassassin'
state: 'present'
- name: opendkim
state: present
- name: opendkim-tools
state: present
- name: opendmarc
state: present
- name: postfix
state: present
- name: postfix-ldap
state: present
- name: postfix-mysql
state: present
- name: postfix-pcre
state: present
- name: spamass-milter
state: present
- name: spamassassin
state: present
firewall_list:
- permanent: 'yes'
service: 'smtp'
state: 'enabled'
service: smtp
state: enabled
- permanent: 'yes'
service: 'smtps'
state: 'enabled'
service: smtps
state: enabled
- permanent: 'yes'
service: 'smtp-submission'
state: 'enabled'
service: smtp-submission
state: enabled
service_list:
- enabled: 'yes'
name: 'opendkim.service'
state: 'started'
name: opendkim.service
state: started
- enabled: 'yes'
name: 'opendmarc.service'
state: 'started'
name: opendmarc.service
state: started
- enabled: 'yes'
name: 'postfix.service'
state: 'started'
name: postfix.service
state: started
- enabled: 'yes'
name: 'postfix-copytls.service'
state: 'started'
name: postfix-copytls.service
state: started
- enabled: 'yes'
name: 'postfix-copytls.timer'
state: 'started'
name: postfix-copytls.timer
state: started
template_list:
- dest: '/etc/postfix/dynamicmaps.cf.d/ldap'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/dynamicmaps.cf.d/ldap'
- dest: '/etc/postfix/dynamicmaps.cf.d/mysql'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/dynamicmaps.cf.d/mysql'
- dest: '/etc/postfix/dynamicmaps.cf.d/pcre'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/dynamicmaps.cf.d/pcre'
- dest: '/etc/postfix/postfix-files.d/ldap'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/postfix-files.d/ldap'
- dest: '/etc/postfix/postfix-files.d/mysql'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/postfix-files.d/mysql'
- dest: '/etc/postfix/postfix-files.d/pcre'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/postfix-files.d/pcre'
- dest: '/etc/postfix/access'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/access'
- dest: '/etc/postfix/canonical'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/canonical'
- dest: '/etc/postfix/dynamicmaps.cf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/dynamicmaps.cf'
- dest: '/etc/postfix/generic'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/generic'
- dest: '/etc/postfix/header_checks'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/header_checks'
- dest: '/etc/postfix/main.cf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/main.cf'
- dest: '/etc/postfix/main.cf.proto'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/main.cf.proto'
- dest: '/etc/postfix/master.cf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/master.cf'
- dest: '/etc/postfix/master.cf.proto'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/master.cf.proto'
- dest: '/etc/postfix/postfix-files'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/postfix-files'
- dest: '/etc/postfix/relocated'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/relocated'
- dest: '/etc/postfix/transport'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/transport'
- dest: '/etc/postfix/virtual'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/postfix/virtual'
- dest: '/etc/opendkim/KeyTable'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendkim/KeyTable'
- dest: '/etc/opendkim/SigningTable'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendkim/SigningTable'
- dest: '/etc/opendkim/TrustedHosts'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendkim/TrustedHosts'
- dest: '/etc/opendkim.conf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendkim.conf'
- dest: '/etc/opendmarc.conf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendmarc.conf'
- dest: '/etc/opendmarc/ignore.hosts'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/opendmarc/ignore.hosts'
- dest: '/usr/lib/systemd/system/postfix-copytls.service'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/postfix-copytls.service'
- dest: '/usr/lib/systemd/system/postfix-copytls.timer'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/postfix-copytls.timer'
- dest: /etc/postfix/dynamicmaps.cf.d/ldap
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/dynamicmaps.cf.d/ldap'
- dest: /etc/postfix/dynamicmaps.cf.d/mysql
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/dynamicmaps.cf.d/mysql'
- dest: /etc/postfix/dynamicmaps.cf.d/pcre
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/dynamicmaps.cf.d/pcre'
- dest: /etc/postfix/postfix-files.d/ldap
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/postfix-files.d/ldap'
- dest: /etc/postfix/postfix-files.d/mysql
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/postfix-files.d/mysql'
- dest: /etc/postfix/postfix-files.d/pcre
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/postfix-files.d/pcre'
- dest: /etc/postfix/access
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/access'
- dest: /etc/postfix/canonical
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/canonical'
- dest: /etc/postfix/dynamicmaps.cf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/dynamicmaps.cf'
- dest: /etc/postfix/generic
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/generic'
- dest: /etc/postfix/header_checks
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/header_checks'
- dest: /etc/postfix/main.cf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/main.cf'
- dest: /etc/postfix/main.cf.proto
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/main.cf.proto'
- dest: /etc/postfix/master.cf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/master.cf'
- dest: /etc/postfix/master.cf.proto
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/master.cf.proto'
- dest: /etc/postfix/postfix-files
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/postfix-files'
- dest: /etc/postfix/relocated
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/relocated'
- dest: /etc/postfix/transport
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/transport'
- dest: /etc/postfix/virtual
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/postfix/virtual'
- dest: /etc/opendkim/KeyTable
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendkim/KeyTable'
- dest: /etc/opendkim/SigningTable
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendkim/SigningTable'
- dest: /etc/opendkim/TrustedHosts
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendkim/TrustedHosts'
- dest: /etc/opendkim.conf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendkim.conf'
- dest: /etc/opendmarc.conf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendmarc.conf'
- dest: /etc/opendmarc/ignore.hosts
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/opendmarc/ignore.hosts'
- dest: /usr/lib/systemd/system/postfix-copytls.service
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/usr/lib/systemd/system/postfix-copytls.service'
- dest: /usr/lib/systemd/system/postfix-copytls.timer
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/usr/lib/systemd/system/postfix-copytls.timer'
roles/ensure_postfix/vars/default.yml
+1 -1
View File
@@ -1,2 +1,2 @@
---
# vars file for ensure_postfix
...
roles/ensure_postfix/vars/main.yml
+1 -1
View File
@@ -1,2 +1,2 @@
---
# vars file for ensure_postfix
...