add master.cf

2 files changed, 174 insertions, 0 deletions

diff --git a/modules/postfix/manifests/init.pp b/modules/postfix/manifests/init.pp
index 3cdff360..2eb1a00f 100644
--- a/modules/postfix/manifests/init.pp
+++ b/modules/postfix/manifests/init.pp
@@ -35,6 +35,10 @@ class postfix {
         file { '/etc/postfix/main.cf':
             content => template("postfix/primary_main.cf"),
         }
+
+        file { '/etc/postfix/master.cf':
+            content => template("postfix/primary_master.cf"),
+        }
     }
 
     class secondary_smtp inherits base {
diff --git a/modules/postfix/templates/primary_master.cf b/modules/postfix/templates/primary_master.cf
new file mode 100644
index 00000000..322fe6b0
--- /dev/null
+++ b/modules/postfix/templates/primary_master.cf
@@ -0,0 +1,170 @@
+#
+# Postfix master process configuration file.  For details on the format
+# of the file, see the master(5) manual page (command: "man 5 master").
+#
+# Do not forget to execute "postfix reload" after editing this file.
+#
+# The script postfix-chroot.sh can be used to set up a Postfix chroot
+# environment on your Mandrivalinux System.
+#
+# ==========================================================================
+# service type  private unpriv  chroot  wakeup  maxproc command + args
+#               (yes)   (yes)   (yes)   (never) (100)
+# ==========================================================================
+smtp	inet	n	-	y	-	-	smtpd
+#submission inet n       -       n       -       -       smtpd
+#  -o smtpd_tls_security_level=encrypt
+#  -o smtpd_sasl_auth_enable=yes
+#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
+#  -o milter_macro_daemon_name=ORIGINATING
+#smtps     inet  n       -       n       -       -       smtpd
+#  -o smtpd_tls_wrappermode=yes
+#  -o smtpd_sasl_auth_enable=yes
+#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
+#  -o milter_macro_daemon_name=ORIGINATING
+#628       inet  n       -       n       -       -       qmqpd
+pickup	fifo	n	-	y	60	1	pickup
+  -o content_filter=
+  -o receive_override_options=
+cleanup	unix	n	-	y	-	0	cleanup
+qmgr	fifo	n	-	y	300	1	qmgr
+#qmgr     fifo  n       -       n       300     1       oqmgr
+tlsmgr	unix	-	-	y	1000?	1	tlsmgr
+rewrite	unix	-	-	y	-	-	trivial-rewrite
+bounce	unix	-	-	y	-	0	bounce
+defer	unix	-	-	y	-	0	bounce
+trace	unix	-	-	y	-	0	bounce
+verify	unix	-	-	y	-	1	verify
+flush	unix	n	-	y	1000?	0	flush
+proxymap  unix  -       -       n       -       -       proxymap
+proxywrite unix -       -       n       -       1       proxymap
+smtp	unix	-	-	y	-	-	smtp
+# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
+relay	unix	-	-	y	-	-	smtp
+	-o smtp_fallback_relay=
+#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
+showq	unix	n	-	y	-	-	showq
+error	unix	-	-	y	-	-	error
+retry	unix	-	-	y	-	-	error
+discard	unix	-	-	y	-	-	discard
+local     unix  -       n       n       -       -       local
+virtual   unix  -       n       n       -       -       virtual
+lmtp	unix	-	-	y	-	-	lmtp
+anvil	unix	-	-	y	-	1	anvil
+scache	unix	-	-	y	-	1	scache
+#
+# ====================================================================
+# Interfaces to non-Postfix software. Be sure to examine the manual
+# pages of the non-Postfix software to find out what options it wants.
+#
+# Many of the following services use the Postfix pipe(8) delivery
+# agent.  See the pipe(8) man page for information about ${recipient}
+# and other message envelope options.
+# ====================================================================
+#
+# maildrop. See the Postfix MAILDROP_README file for details.
+# Also specify in main.cf: maildrop_destination_recipient_limit=1
+#
+#maildrop  unix  -       n       n       -       -       pipe
+#  flags=DRhu user=nobody argv=/usr/bin/maildrop -d ${recipient}
+#
+# ====================================================================
+#
+# Please See the Postfix CYRUS_README file for details
+# deliver interface (deprecated), to use this also use
+# postconf -e cyrus-deliver_destination_recipient_limit=1
+cyrus-deliver     unix  -       n       n       -       -       pipe
+  user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user}
+#
+# for default cyrus socket placement
+cyrus     unix  -       n       n       -       -       lmtp
+  -o lmtp_cache_connection=yes
+#
+# if you configure cyrus socket in the chroot jail
+cyrus-chroot     unix  -       -       y       -       -       lmtp
+  -o lmtp_cache_connection=yes
+#
+# for lmtp to cyrus via tcp
+cyrus-inet	unix	-	-	y	-	-	lmtp
+  -o lmtp_cache_connection=yes
+  -o lmtp_sasl_auth_enable=yes
+  -o lmtp_sasl_password_maps=hash:/etc/postfix/cyrus_lmtp_sasl_pass
+  -o lmtp_sasl_security_options=noanonymous
+#
+# ====================================================================
+#
+# See the Postfix UUCP_README file for configuration details.
+#
+#uucp      unix  -       n       n       -       -       pipe
+#  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
+#
+# ====================================================================
+#
+# Other external delivery methods.
+# These are not distributed with Mandrivalinux
+#
+#ifmail    unix  -       n       n       -       -       pipe
+#  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
+#
+#bsmtp     unix  -       n       n       -       -       pipe
+#  flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
+#
+#scalemail-backend unix -       n       n       -       2       pipe
+#  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
+#  ${nexthop} ${user} ${extension}
+#
+#mailman   unix  -       n       n       -       -       pipe
+#  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
+#  ${nexthop} ${user}
+#
+##### START OF CONTENT FILTER CUSTOMIZATIONS #####
+# Please see the Postfix FILTER_README for details.
+# These sample entries expect your content filter to
+# listen on port 10025 and to inject mail back into
+# postfix on port 10026.
+#
+# to enable such content filter run the command
+#    postconf -e content_filter=smtp-filter:127.0.0.1:10025
+#    postconf -e smtp-filter_destination_concurrency_limit=2
+# or
+#    postconf -e content_filter=lmtp-filter:127.0.0.1:10025
+#    postconf -e lmtp-filter_destination_concurrency_limit=2
+# and the command
+#    postconf -e receive_override_options=no_address_mappings
+#
+# adjust the value of ?mtp-filter_destination_concurrency_limit
+# to match the maximum number of process your content filter
+# will spawn.
+#
+127.0.0.1:10026	inet	n	-	y	-	-	smtpd
+  -o content_filter=
+  -o smtpd_restriction_classes=
+  -o smtpd_client_restrictions=permit_mynetworks,reject
+  -o smtpd_helo_restrictions=
+  -o smtpd_sender_restrictions=
+  -o smtpd_end_of_data_restrictions=
+  -o smtpd_etrn_restrictions=
+  -o smtpd_data_restrictions=
+  -o smtpd_delay_reject=no
+  -o smtpd_recipient_restrictions=permit_mynetworks,reject
+  -o mynetworks=127.0.0.0/8
+  -o smtpd_authorized_xforward_hosts=127.0.0.0/8
+  -o strict_rfc821_envelopes=yes
+  -o smtpd_error_sleep_time=0
+  -o smtpd_soft_error_limit=1001
+  -o smtpd_hard_error_limit=1000
+  -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
+#
+lmtp-filter	unix	-	-	y	-	-	lmtp
+  -o lmtp_data_done_timeout=1200
+  -o lmtp_send_xforward_command=yes
+  -o lmtp_cache_connection=no
+  -o max_use=20
+#
+smtp-filter	unix	-	-	y	-	-	smtp
+  -o smtp_data_done_timeout=1200
+  -o smtp_send_xforward_command=yes
+  -o max_use=20
+#
+##### END OF CONTENT FILTER CUSTOMIZATIONS #####
+