roles/mail.rb

   1 name "mail"
   2 description "Role applied to all mail servers"
   3
   4 default_attributes(
   5   :exim => {
   6     :local_domains => [
   7       "openstreetmap.org",
   8       "osm.org",
   9       "noreply.openstreetmap.org",
  10       "openstreetmap.co.uk",
  11       "openstreetmap.org.uk",
  12       "openstreetmap.com",
  13       "openstreetmap.io",
  14       "openstreetmap.pro",
  15       "openstreetmaps.org",
  16       "osm.io"
  17     ],
  18     :daemon_smtp_ports => [25, 26],
  19     :certificate_names => [
  20       "mail.openstreetmap.org",
  21       "a.mx.openstreetmap.org",
  22       "a.mx.osm.org",
  23       "a.mx.openstreetmap.com",
  24       "a.mx.openstreetmap.io",
  25       "a.mx.openstreetmap.pro",
  26       "a.mx.openstreetmaps.org",
  27       "a.mx.osm.io"
  28     ],
  29     :queue_run_max => 5,
  30     :smarthost_name => "mail.openstreetmap.org",
  31     :smarthost_via => false,
  32     :dns_blacklists => ["zen.spamhaus.org"],
  33     :routes => {
  34       :messages => {
  35         :comment => "messages.openstreetmap.org",
  36         :domains => ["messages.openstreetmap.org"],
  37         :host => ["spike-06.openstreetmap.org", "spike-07.openstreetmap.org", "spike-08.openstreetmap.org"]
  38       },
  39       :otrs => {
  40         :comment => "otrs.openstreetmap.org",
  41         :domains => ["otrs.openstreetmap.org"],
  42         :host => "ridley.ucl.openstreetmap.org"
  43       },
  44       :join => {
  45         :comment => "join.osmfoundation.org",
  46         :domains => ["join.osmfoundation.org"],
  47         :host => "ridley.ucl.openstreetmap.org"
  48       }
  49     },
  50     :dkim_selectors => {
  51       "openstreetmap.org" => "20200301",
  52       "osmfoundation.org" => "20201112"
  53     },
  54     :aliases => {
  55       "abuse" => "root",
  56       "postmaster" => "root",
  57       "webmaster" => "support",
  58       "clamav" => "root",
  59       "rails" => "root",
  60       "trac" => "root",
  61       "munin" => "root",
  62       "prometheus" => "root",
  63       "www-data" => "root",
  64       "osmbackup" => "root",
  65       "noreply" => "/dev/null",
  66       "bounces" => "/dev/null",
  67       "wishlist" => "/dev/null",
  68       "treasurer" => "treasurer@osmfoundation.org",
  69       "donations" => "treasurer@osmfoundation.org",
  70       "secretary" => "secretary@osmfoundation.org",
  71       "chairman" => "chairman@osmfoundation.org",
  72       "accountant" => "accountant@osmfoundation.org",
  73       "data" => "data@otrs.openstreetmap.org",
  74       "otrs" => "otrs@otrs.openstreetmap.org",
  75       "support" => "support@otrs.openstreetmap.org",
  76       "memorial" => "communication@osmfoundation.org",
  77       "legal" => "legal@osmfoundation.org",
  78       "dmca" => "dmca@osmfoundation.org",
  79       "program-sotm" => "sotm-program@otrs.openstreetmap.org"
  80     },
  81     :private_aliases => "mail"
  82   },
  83   :munin => {
  84     :plugins => {
  85       :exim_mailqueue => {
  86         :mails => {
  87           :warning => 500,
  88           :critical => 1000
  89         }
  90       }
  91     }
  92   }
  93 )
  94
  95 run_list(
  96   "recipe[clamav]",
  97   "recipe[exim]",
  98   "recipe[spamassassin]"
  99 )