24 lines
1008 B
Plaintext
24 lines
1008 B
Plaintext
|
pki {{ mx1_mail_domain }} cert "/etc/ssl/{{ mx1_mail_domain }}.fullchain.pem"
|
||
|
|
pki {{ mx1_mail_domain }} key "/etc/ssl/private/{{ mx1_mail_domain }}.key"
|
||
|
|
|
||
|
|
table aliases file:/etc/mail/aliases
|
||
|
|
table users passwd:/etc/mail/accounts
|
||
|
|
table virtuals file:/etc/mail/virtuals
|
||
|
|
|
||
|
|
filter dkimsign_rsa proc-exec "filter-dkimsign -d {{ mx1_mail_domain }} -s selector1 \
|
||
|
|
-k /etc/mail/dkim/{{ mx1_mail_domain }}.key" user _dkimsign group _dkimsign
|
||
|
|
|
||
|
|
listen on socket filter dkimsign_rsa
|
||
|
|
listen on all tls pki {{ mx1_mail_domain }}
|
||
|
|
listen on all port submission tls-require pki {{ mx1_mail_domain }} auth <users> filter dkimsign_rsa
|
||
|
|
listen on all port smtps tls-require pki {{ mx1_mail_domain }} auth <users> filter dkimsign_rsa
|
||
|
|
|
||
|
|
action "local_mail" lmtp "/var/dovecot/lmtp" rcpt-to virtual <virtuals>
|
||
|
|
action "outbound" relay
|
||
|
|
|
||
|
|
{% for domain in mail_domains %}
|
||
|
|
match from any for domain {{ domain }} action "local_mail"
|
||
|
|
{% endfor %}
|
||
|
|
match from local for local action "local_mail"
|
||
|
|
match from local for any action "outbound"
|