Note that exim contains tracker-specific configuration

[mirror/dsa-puppet.git] / modules / postfix / manifests / init.pp

diff --git a/modules/postfix/manifests/init.pp b/modules/postfix/manifests/init.pp
index 3367cbb..4d5c31d 100644 (file)
--- a/modules/postfix/manifests/init.pp
+++ b/modules/postfix/manifests/init.pp
@@ -1,27 +1,54 @@
-class postfix {
-       package { 'postfix':
-               ensure => installed
-       }
+# postfix class
+# @param use_smarthost use the smarthost
+# @param smarthost host to relay through (if set and use_smarthost)
+class postfix(
+  Optional[String] $smarthost,
+  Boolean $use_smarthost = true,
+  Boolean $manage_maincf = true,
+) {
+  package { 'postfix':
+    ensure => installed
+  }
 
-       service { 'postfix':
-               ensure => running
-       }
+  if $use_smarthost {
+    if ! smarthost {
+      fail('No smarthost set but use_smarthost is true')
+    }
+  } else {
+    $heavy = true
+  }
 
-       munin::check { 'ps_exim4':       ensure => absent }
-       munin::check { 'exim_mailqueue': ensure => absent }
-       munin::check { 'exim_mailstats': ensure => absent }
+  service { 'postfix':
+    ensure => running
+  }
 
-       munin::check { 'postfix_mailqueue': }
-       munin::check { 'postfix_mailstats': }
-       munin::check { 'postfix_mailvolume': }
-       munin::check { 'ps_smtp': script => 'ps_' }
-       munin::check { 'ps_smtpd': script => 'ps_' }
+  munin::check { 'ps_exim4':       ensure => absent }
+  munin::check { 'exim_mailqueue': ensure => absent }
+  munin::check { 'exim_mailstats': ensure => absent }
 
-       if has_role('lists') {
-               @ferm::rule { 'smtp':
-                       domain      => '(ip ip6)',
-                       description => 'Allow smtp access',
-                       rule        => '&SERVICE(tcp, 25)'
-               }
-       }
+  munin::check { 'postfix_mailqueue': }
+  munin::check { 'postfix_mailstats': }
+  munin::check { 'postfix_mailvolume': }
+  munin::check { 'ps_smtp': script => 'ps_' }
+  munin::check { 'ps_smtpd': script => 'ps_' }
+
+  if $manage_maincf {
+    concat { '/etc/postfix/main.cf':
+      notify  => Exec['service postfix reload'],
+    }
+    concat::fragment { 'puppet-postfix-main.cf--header':
+      target  => '/etc/postfix/main.cf',
+      order   => '000',
+      content => template('postfix/main.cf-header.erb')
+    }
+  } else {
+    include fail2ban::postfix
+  }
+
+  exec { 'service postfix reload':
+    path        => '/usr/bin:/usr/sbin:/bin:/sbin',
+    command     => 'service postfix reload',
+    refreshonly => true,
+    require     =>  Package['postfix'],
+  }
 }