1.6 KiB
1.6 KiB
Postfix
Use this role to setup a Postfix mail server. It comes with the following additions:
- Mail-TLS-Helper
- MTA-STS-Resolver
- Fail2ban
- optional: OnionMX
- optional: Unbound
General type of mail server configuration
You can select via the variable postfix_type a pre-defined set of configuraion options that best meets your needs.
internet: Mail is send received directly using SMTP. TLS is enabled.internal: Mail is sent to another machine on the same network for delivery. TLS is disabled. Only listens on port 25.
Variables
Required
| Variable | Value | Default | Note |
|---|---|---|---|
postfix_type |
str | internet |
Determines how to setup Postfix. Choose internet or internal |
Scope: misc
| Variable | Value | Default | Note |
|---|---|---|---|
unbound_install |
bool | True if you whish to install unbound |
|
postfix_onionmx |
bool | True to setup OnionMX delivery |
|
postfix_mydestination |
List | List with hostnames | |
postfix_mynetworks |
List | List with network addresses |
Scope: submission
| Variable | Value | Default | Note |
|---|---|---|---|
postfix_submission |
bool | Set True to configure submission port settings |
|
postfix_submission_smtpd_tls_cert_file |
string | Path to TLS cert file | |
postfix_submission_smtpd_tls_key_file |
string | Path to TLS key file | |
postfix_submission_non_tls_port |
int | Port number for an additional (internal) submission port without TLS |