X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fexim%2Fmanifests%2Finit.pp;h=9f362243fc08e28f3f6b7bde38c1e2b66c3bd804;hb=b1c57d74d65300c3a0ab989cd820a0a19022c427;hp=958a8416953c3910eb2e98e1a1988d82972fd8f9;hpb=ecb65d58f22abe563971da4c5beaf2460c1ab6e5;p=mirror%2Fdsa-puppet.git diff --git a/modules/exim/manifests/init.pp b/modules/exim/manifests/init.pp index 958a84169..9f362243f 100644 --- a/modules/exim/manifests/init.pp +++ b/modules/exim/manifests/init.pp @@ -36,8 +36,9 @@ class exim { } file { '/etc/exim4/Git': ensure => absent, + force => true, } - # git checkouts through puppet. yummy. + # git checkouts through puppet. yummy. file { '/etc/exim4/email-virtualdomains': recurse => true, source => 'puppet:///modules/exim/email-virtualdomains', @@ -149,11 +150,11 @@ class exim { domain => 'ip6', rule => "&SERVICE_RANGE(tcp, $mail_port, \$SMTP_V6_SOURCES)" } - dnsextras::tlsa_record{ "tlsa-mailport": - zone => 'debian.org', + dnsextras::tlsa_record{ 'tlsa-mailport': + zone => 'debian.org', certfile => "/etc/puppet/modules/exim/files/certs/${::fqdn}.crt", - port => "$mail_port", - hostname => "$::fqdn", + port => $mail_port, + hostname => $::fqdn, } # Do we actually want this? I'm only doing it because it's harmless @@ -165,4 +166,17 @@ class exim { rule => '&SERVICE(tcp, 113)' } + # These only affect the alias @$fqdn, not say, @debian.org + + mailalias { [ + 'postmaster', + 'hostmaster', + 'usenet', + 'webmaster', + 'abuse', + 'noc', + 'security', + ]: + ensure => absent + } }