Postfix Puppet module

This module will help install and configure postfix.

A couple of classes will preconfigure postfix for common needs.

This module needs:

• the concat module: git://labs.riseup.net/shared-concat

!! Upgrade Notice (01/2013) !!

This module now uses parameterized classes, where it used global variables before. So please whatch out before pulling, you need to change the class declarations in your manifest !

Issues

• Debian wheezy hosts (or below): If you get this error msg:

  "Could not find template 'postfix/master.cf.debian-.erb' at /ssrv/leap/puppet/modules/postfix/manifests/init.pp:158 on node rew07plain1.rewire.org"

  you need to use the facter package from wheezy-backports instead of the wheezy one. See https://gitlab.com/shared-puppet-modules-group/postfix/merge_requests/6#note_1892207 for more details.

Deprecation notice

It used to be that one could drop header checks snippets into the following source directories:

"puppet:///modules/site-postfix/${fqdn}/header_checks.d" "puppet:///modules/site-postfix/header_checks.d" "puppet:///files/etc/postfix/header_checks.d" "puppet:///modules/postfix/header_checks.d"

... and TLS policy snippets into those:

"puppet:///modules/site-postfix/${fqdn}/tls_policy.d" "puppet:///modules/site-postfix/tls_policy.d" "puppet:///modules/postfix/tls_policy.d"

This is not supported anymore.

Every such snippet much now be configured using the (respectively) postfix::header_checks_snippet and postfix::tlspolicy_snippet defines.

Note: You will need to set a global Exec { path => '...' } to a proper pathing in your manifests, or you will experience some issues such as:

err: Failed to apply catalog: Parameter unless failed: 'test "x$(postconf -h relay_domains)" == 'xlocalhost host.foo.com'' is not qualified and no path was specified. Please qualify the command or specify a path.

See: http://www.puppetcookbook.com/posts/set-global-exec-path.html for more information about how to do this

Postfix class configuration parameters

• use_amavisd => 'yes' - to include postfix::amavis

• anon_sasl => 'yes' - to hide the originating IP in email relayed for an authenticated SASL client; this needs Postfix 2.3 or later to work; beware! Postfix logs the header replacement has been done, which means that you are storing this information, unless you are anonymizing your logs.

• manage_header_checks => 'yes' - to manage header checks (see postfix::header_checks for details)

• manage_transport_regexp => 'yes' - to manage header checks (see postfix::transport_regexp for details)

• manage_virtual_regexp => 'yes' - to manage header checks (see postfix::virtual_regexp for details)

• manage_tls_policy => 'yes - to manage TLS policy (see postfix::tlspolicy for details)

• inet_interfaces: by default, postfix will bind to all interfaces, but sometimes you don't want that. To bind to specific interfaces, use the 'inet_interfaces' parameter and set it to exactly what would be in the main.cf file.

• myorigin: some hosts have weird-looking host names (dedicated servers and VPSes). To set the server's domain of origin, set the 'myorigin' parameter

• smtp_listen: address on which the smtp service will listen (Default: 127.0.0.1)

• root_mail_recipient: who will receive root's emails (Default: 'nobody')

• tls_fingerprint_digest: fingerprint digest for tls policy class (Default: 'sha1')

• use_dovecot_lda: include dovecot declaration at master.cf

• use_schleuder: whether to include schleuder portion at master.cf

• use_sympa: whether to include sympa portion at master.cf

• use_firma: whether to include firma portion at master.cf

• use_mlmmj: whether to include mlmmj portion at master.cf

• use_submission: set to "yes" to enable submission section at master.cf

• use_smtps: set to "yes" to enable smtps section at master.cf

• mastercf_tail: set this for additional content to be added at the end of master.cf

== Examples:

class { 'postfix': }

class { 'postfix': anon_sasl => 'yes', myorigin => 'foo.bar.tz' }

postfix::config { "relay_domains": value => "localhost host.foo.com" }

Convience classes

postfix::config

this can be used to pass arbitrary postfix configurations by passing the $name to postconf to add/alter/remove options in main.cf

Parameters:

• name: name of the parameter.
• ensure: present/absent. defaults to present.
• value: value of the parameter.
• nonstandard: inform postfix::config that this parameter is not recognized by the "postconf" command. defaults to false.

Requires:

• Class["postfix"]

Example usage:

postfix::config {
  "smtp_use_tls"            => "yes";
  "smtp_sasl_auth_enable"   => "yes";
  "smtp_sasl_password_maps" => "hash:/etc/postfix/my_sasl_passwords";
  "relayhost"               => "[mail.example.com]:587";
}

postfix::disable

If you include this class, the postfix package will be removed and the service stopped.

postfix::hash

This can be used to create postfix hashed "map" files. It will create "${name}", and then build "${name}.db" using the "postmap" command. The map file can then be referred to using postfix::config.

Parameters:

• name: the name of the map file.
• ensure: present/absent, defaults to present.
• source: file source.

Requires:

• Class["postfix"]

Example usage:

postfix::hash { "/etc/postfix/virtual":
  ensure => present,
}
postfix::config { "virtual_alias_maps":
  value => "hash:/etc/postfix/virtual"
}

postfix::virtual

Manages content of the /etc/postfix/virtual map

Parameters:

• name: name of address postfix will lookup. See virtual(8).
• destination: where the emails will be delivered to. See virtual(8).
• ensure: present/absent, defaults to present.

Requires:

• Class["postfix"]
• Postfix::Hash["/etc/postfix/virtual"]
• Postfix::Config["virtual_alias_maps"]
• common::line (from module common)

Example usage:

postfix::hash { "/etc/postfix/virtual":
  ensure => present,
}
postfix::config { "virtual_alias_maps":
  value => "hash:/etc/postfix/virtual"
}
postfix::virtual { "user@example.com":
  ensure      => present,
  destination => "root",
}

postfix::mailalias

Wrapper around Puppet mailalias resource, provides newaliases executable.

Parameters:

• name: the name of the alias.
• ensure: present/absent, defaults to present.
• recipient: recipient of the alias.

Requires:

• Class["postfix"]

Example usage:

postfix::mailalias { "postmaster":
  ensure => present,
  recipient => 'foo'
}