Initial commit

mailserver.cf

@@ -0,0 +1,190 @@
+#
+#
+#
+
+
+bundle agent install_mailserver(param_cfg)
+{
+vars:
+	"default_cfg" data => '{
+		"pam_auth":true,
+		"vimb_auth":false,
+		"imap":true,
+		"submission":true,
+		"smtp":true,
+		"pop3":false,
+		"sieve":false,
+		"ssl":false,
+		"opendkim":false,
+		"myhostname":"$(sys.host)",
+		"myorigin":"$myhostname",
+		"mydestination":"$myhostname, localhost",
+		"mail_location" : "maildir:~/Maildir:LAYOUT=maildir++:INBOX=~/Maildir/.INBOX:CONTROL=~/Mail/control:INDEX=~/Mail/index",
+		"vmail_location" : "maildir:~/Maildir:LAYOUT=maildir++:INBOX=~/Maildir/.INBOX:CONTROL=~/Mail/control:INDEX=~/Mail/index",
+
+
+	}';
+
+	"cfg" data => mergedata(@(default_cfg),@(param_cfg));	
+
+	"dovecot_protos" string => string_mustache (
+		'"lmtp"{{#cfg.imap}},"imap"{{/cfg.imap}}{{#cfg.pop3}},"pop3"{{/cfg.pop3}}{{#cfg.sieve}},"sieve"{{/cfg.sieve}}',
+		bundlestate("$(this.bundle)")
+	);
+	
+	"imaps_port" string => ifelse(strcmp("$(cfg[ssl])","true"),"993","0");
+	"pop3s_port" string => ifelse(strcmp("$(cfg[ssl])","true"),"995","0");
+
+	"dbs" string => string_mustache('
+		"userdbs":[
+			{{#cfg.pam_auth}}
+			{
+				"driver":"passwd",
+				"args":""
+			},
+			{{/cfg.pam_auth}}
+			{{#fg.vimb_auth}}
+			{
+				"driver":"sql",
+				"args":"$(dovecot_vimbadmin_sql.cfg_file)"
+			},
+			{{/cfg.vimb_auth}}
+		],
+		"passdbs":[
+			{{#cfg.pam_auth}}
+			{
+				"driver":"pam",
+				"args":"dovecot"
+			}, 
+			{{/cfg.pam_auth}}
+			{{#cfg.vimb_auth}}
+			{
+				"driver":"sql",
+				"args":"$(dovecot_vimbadmin_sql.cfg_file)"
+			} ,
+			{{/cfg.vimb_auth}}
+		],',
+	bundlestate("$(this.bundle)"));
+	
+
+	
+	"dovecot_cfg" data => '{
+		"protocols":[$(dovecot_protos)],
+		"ssl":$(cfg[ssl]),
+		$(dbs)
+		"services":{
+			"imap-login":{
+				"raw":"
+				inet_listener imap {
+					port = 143
+				}
+				inet_listener imaps {
+					port = $(imaps_port)
+					ssl = yes
+				}
+			"
+			}
+			,
+			"pop3-login":{
+				"raw":"
+				inet_listener pop3 {
+					port = 110
+				}
+				inet_listener pop3s {
+					port = $(pop3s_port)
+					ssl = yes
+				}
+			"
+			}
+			,
+			"auth":{
+				"raw":"
+  				unix_listener $(postfix.queue_dir)/private/auth {
+						user = postfix
+						group = postfix
+						mode = 0666
+				}
+				"
+			}
+			,
+			"lmtp":{
+				"raw":"
+				unix_listener $(postfix.queue_dir)/private/dovecot-lmtp {
+   					group = postfix
+					mode = 0600
+					user = postfix
+				}
+				"
+			}
+
+		}
+	}';
+
+
+	"postfix_cfg" data => '{
+		"non_smtpd_milters":[
+			"unix:$(postfix.queue_dir)/private/opendkim"
+		]
+		,
+		"services" : [
+			{
+				"name":"submission" 
+				"comment": "Submission service"
+				"enable":$(cfg[submission]),
+				"type":"inet",
+				"private":"n",
+				"unpriv":"-",
+				"chroot":"n",
+				"wakeup":"-",
+				"maxproc":"-",
+				"command":"smtpd",
+				"args":[
+					"{ -o smtpd_sender_restrictions = permit_sasl_authenticated reject }",
+				],
+			}
+			,
+			{
+				"name":"smtp",
+				"comment": "SMTP service",
+				"enable":$(cfg[smtp]),
+				"type":"inet",
+				"private":"n",
+				"unpriv":"-",
+				"chroot":"n",
+				"wakeup":"-",
+				"maxproc":"-",
+				"command":"smtpd",
+				"args":[
+					"{ -o smtpd_recipient_restrictions = permit_mynetworks reject_unauth_destination }"
+					"{ -o smtpd_client_restrictions = permit_mynetworks reject }",
+					"{ -o smtpd_relay_restrictions = permit_mynetworks reject }",
+					"{ -o smtpd_sender_restrictions = permit_mynetworks }"	
+				]
+			}
+
+		]
+		,
+		"main_raw":"
+myhostname=$(cfg[myhostname])
+mydestination=$(cfg[mydestination])
+myorigin=$(cfg[myorigin])
+"
+		,
+		"master_raw":""
+
+	}
+	';
+
+
+
+
+methods:
+	"any" usebundle => install_postfix_pkgs;
+	"any" usebundle => install_dovecot_pkgs;	
+
+	"any" usebundle => dovecot(@(dovecot_cfg));
+	"any" usebundle => postfix(@(postfix_cfg));
+reports:
+	"DCP: $(dovecot_protos)";
+	"DBS: $(dbs)";
+}