72 lines
2.2 KiB
Puppet
72 lines
2.2 KiB
Puppet
#
|
|
# == Class: postfix::tlspolicy
|
|
#
|
|
# Manages Postfix TLS policy by merging policy snippets shipped:
|
|
# - in the module's files/tls_policy.d/ or puppet:///files/etc/postfix/tls_policy.d
|
|
# (the latter takes precedence if present); site-postfix module is supported
|
|
# as well, see the source argument of file {"$postfix_tlspolicy_snippets_dir"
|
|
# bellow for details.
|
|
# - via postfix::tlspolicy_snippet defines
|
|
#
|
|
# Parameters:
|
|
# - $postfix_tls_fingerprint_digest (defaults to sha1)
|
|
#
|
|
# Example usage:
|
|
#
|
|
# node "toto.example.com" {
|
|
# $postfix_manage_tls_policy = yes
|
|
# include postfix
|
|
# }
|
|
#
|
|
class postfix::tlspolicy {
|
|
|
|
# Default value for parameters
|
|
case $postfix_tls_fingerprint_digest {
|
|
"": { $postfix_tls_fingerprint_digest = 'sha1' }
|
|
}
|
|
|
|
include common::moduledir
|
|
module_dir{'postfix/tls_policy': }
|
|
|
|
$postfix_tlspolicy_dir = "${common::moduledir::module_dir_path}/postfix/tls_policy"
|
|
$postfix_tlspolicy_snippets_dir = "${postfix_tlspolicy_dir}/tls_policy.d"
|
|
$postfix_merged_tlspolicy = "${postfix_tlspolicy_dir}/merged_tls_policy"
|
|
|
|
file {"$postfix_tlspolicy_snippets_dir":
|
|
ensure => 'directory',
|
|
owner => 'root',
|
|
group => '0',
|
|
mode => '700',
|
|
source => [
|
|
"puppet:///modules/site-postfix/${fqdn}/tls_policy.d",
|
|
"puppet:///modules/site-postfix/tls_policy.d",
|
|
"puppet:///files/etc/postfix/tls_policy.d",
|
|
"puppet:///modules/postfix/tls_policy.d",
|
|
],
|
|
recurse => true,
|
|
purge => false,
|
|
}
|
|
|
|
concatenated_file { "$postfix_merged_tlspolicy":
|
|
dir => "${postfix_tlspolicy_snippets_dir}",
|
|
require => File["$postfix_tlspolicy_snippets_dir"],
|
|
}
|
|
|
|
postfix::hash { '/etc/postfix/tls_policy':
|
|
source => "$postfix_merged_tlspolicy",
|
|
subscribe => File["$postfix_merged_tlspolicy"],
|
|
}
|
|
|
|
postfix::config {
|
|
'smtp_tls_fingerprint_digest': value => "$postfix_tls_fingerprint_digest";
|
|
}
|
|
|
|
postfix::config { 'smtp_tls_policy_maps':
|
|
value => 'hash:/etc/postfix/tls_policy',
|
|
require => [
|
|
Postfix::Hash['/etc/postfix/tls_policy'],
|
|
Postfix::Config['smtp_tls_fingerprint_digest'],
|
|
],
|
|
}
|
|
|
|
}
|