Mercurial > code > home > repos > infra
comparison mail.py @ 218:44b0da2e6d1f
opendkim
author | drewp@bigasterisk.com |
---|---|
date | Sun, 20 Aug 2023 15:08:18 -0700 |
parents | 087b84e68765 |
children | 67fb7b27bfea |
comparison
equal
deleted
inserted
replaced
217:10cdb8df2ab5 | 218:44b0da2e6d1f |
---|---|
1 from pyinfra import host | 1 from pyinfra import host |
2 from pyinfra.operations import apt, files, server, systemd | 2 from pyinfra.operations import apt, files, server, systemd |
3 | 3 |
4 if host.name == 'prime': | 4 if host.name == 'prime': |
5 apt.packages(packages=['postfix', 'isync']) | 5 apt.packages(packages=['postfix', 'isync', 'opendkim', 'opendkim-tools']) |
6 | |
7 files.template(src='templates/mail/opendkim-KeyTable.j2', dest='/etc/opendkim/KeyTable') | |
8 files.template(src='templates/mail/opendkim-SigningTable.j2', dest='/etc/opendkim/SigningTable') | |
9 files.template(src='templates/mail/opendkim-TrustedHosts.j2', dest='/etc/opendkim/TrustedHosts') | |
10 files.template(src='templates/mail/opendkim.conf.j2', dest='/etc/opendkim.conf') | |
11 files.put(src='secrets/mail/bigasterisk.com-default.private', | |
12 dest='/etc/opendkim/keys/bigasterisk.com/default.private', | |
13 mode='0600', user='opendkim') | |
14 | |
15 files.template(src='templates/mail/opendkim.service.j2', dest='/usr/lib/systemd/system/opendkim.service') | |
16 systemd.service(service='opendkim.service', enabled=True, running=True, restarted=True) | |
17 | |
6 files.template(src='templates/mail/main.cf.j2', dest='/etc/postfix/main.cf') | 18 files.template(src='templates/mail/main.cf.j2', dest='/etc/postfix/main.cf') |
7 files.template(src='templates/mail/mydestination.j2', dest='/etc/postfix/mydestination') | 19 files.template(src='templates/mail/mydestination.j2', dest='/etc/postfix/mydestination') |
8 files.put(src='secrets/mail/aliases', dest='/etc/postfix/aliases') | 20 files.put(src='secrets/mail/aliases', dest='/etc/postfix/aliases') |
9 files.put(src='secrets/mail/sender_access', dest='/etc/postfix/sender_access') | 21 files.put(src='secrets/mail/sender_access', dest='/etc/postfix/sender_access') |
10 files.put(src='secrets/mail/virtual', dest='/etc/postfix/virtual') | 22 files.put(src='secrets/mail/virtual', dest='/etc/postfix/virtual') |
11 | 23 |
12 server.shell(commands=[ | 24 server.shell(commands=[ |
13 'postmap /etc/postfix/sender_access', | 25 'postmap /etc/postfix/sender_access', |
14 'postmap /etc/postfix/virtual', | 26 'postmap /etc/postfix/virtual', |
15 'postmap /etc/postfix/aliases', | 27 'postmap /etc/postfix/aliases', # broken |
16 'postfix reload', | 28 'postfix reload', |
17 ]) | 29 ]) |
18 systemd.service(service='postfix@-.service', enabled=True, running=True) | 30 systemd.service(service='postfix@-.service', enabled=True, running=True) |
19 | 31 |
20 # something to run ~drewp/mbsync/go at startup | 32 # something to run ~drewp/mbsync/go at startup |