5 # Copyright 2011, OpenStreetMap Foundation
7 # Licensed under the Apache License, Version 2.0 (the "License");
8 # you may not use this file except in compliance with the License.
9 # You may obtain a copy of the License at
11 # https://www.apache.org/licenses/LICENSE-2.0
13 # Unless required by applicable law or agreed to in writing, software
14 # distributed under the License is distributed on an "AS IS" BASIS,
15 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 # See the License for the specific language governing permissions and
17 # limitations under the License.
20 include_recipe "networking"
28 package "exim4-daemon-heavy" if File.exist?("/var/run/clamav/clamd.ctl")
36 if node[:exim][:certificate_names]
37 include_recipe "apache"
39 apache_site node[:exim][:certificate_names].first do
41 variables :aliases => node[:exim][:certificate_names].drop(1)
44 ssl_certificate node[:exim][:certificate_names].first do
45 domains node[:exim][:certificate_names]
46 notifies :restart, "service[exim4]"
49 openssl_x509_certificate "/etc/ssl/certs/exim.pem" do
50 key_file "/etc/ssl/private/exim.key"
55 email "postmaster@openstreetmap.org"
56 common_name node[:fqdn]
58 notifies :restart, "service[exim4]"
63 action [:enable, :start]
64 supports :status => true, :restart => true, :reload => true
67 relay_to_domains = node[:exim][:relay_to_domains]
69 node[:exim][:routes].each_value do |route|
70 relay_to_domains |= route[:domains] if route[:host]
73 relay_from_hosts = node[:exim][:relay_from_hosts]
75 if node[:exim][:smarthost_name]
76 search(:node, "exim_smarthost_via:#{node[:exim][:smarthost_name]}\\:*").each do |host|
77 relay_from_hosts |= host.ipaddresses(:role => :external)
81 file "/etc/exim4/blocked-senders" do
87 template "/etc/exim4/exim4.conf" do
88 source "exim4.conf.erb"
92 variables :relay_to_domains => relay_to_domains.sort,
93 :relay_from_hosts => relay_from_hosts.sort
94 notifies :restart, "service[exim4]"
97 search(:accounts, "*:*").each do |account|
99 details = node[:accounts][:users][name] || {}
101 if details[:status] && account["email"]
102 node.default[:exim][:aliases][name] = account["email"]
106 if node[:exim][:private_aliases]
107 aliases = data_bag_item("exim", "aliases")
109 aliases[node[:exim][:private_aliases]].each do |name, address|
110 node.default[:exim][:aliases][name] = address
114 template "/etc/aliases" do
121 remote_directory "/etc/exim4/noreply" do
127 files_group "Debian-exim"
132 munin_plugin "exim_mailqueue"
133 munin_plugin "exim_mailstats"
135 if node[:exim][:smarthost_name]
136 node[:exim][:daemon_smtp_ports].each do |port|
137 firewall_rule "accept-inbound-smtp-#{port}" do
147 node[:exim][:daemon_smtp_ports].each do |port|
148 firewall_rule "accept-inbound-smtp-#{port}" do
150 source "bm:mail.openstreetmap.org"
159 if node[:exim][:smarthost_via] # ~FC023
160 firewall_rule "deny-outbound-smtp" do