# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
-# http://www.apache.org/licenses/LICENSE-2.0
+# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
include_recipe "networking"
-package "exim4"
-package "openssl"
-package "ssl-cert"
+package %w[
+ exim4
+ openssl
+ ssl-cert
+]
-if File.exist?("/var/run/clamav/clamd.ctl")
- package "exim4-daemon-heavy"
-end
+package "exim4-daemon-heavy" if File.exist?("/var/run/clamav/clamd.ctl")
group "ssl-cert" do
action :modify
source "ssl.cnf.erb"
owner "root"
group "root"
- mode 0644
+ mode 0o644
not_if do
File.exist?("/etc/ssl/certs/exim.pem") && File.exist?("/etc/ssl/private/exim.key")
end
end
end
+file "/etc/exim4/blocked-senders" do
+ owner "root"
+ group "Debian-exim"
+ mode 0o644
+end
+
template "/etc/exim4/exim4.conf" do
source "exim4.conf.erb"
owner "root"
group "Debian-exim"
- mode 0644
+ mode 0o644
variables :relay_to_domains => relay_to_domains.sort,
:relay_from_hosts => relay_from_hosts.sort
notifies :restart, "service[exim4]"
source "aliases.erb"
owner "root"
group "root"
- mode 0644
+ mode 0o644
end
remote_directory "/etc/exim4/noreply" do
source "noreply"
owner "root"
group "Debian-exim"
- mode 0755
+ mode 0o755
files_owner "root"
files_group "Debian-exim"
- files_mode 0755
+ files_mode 0o755
purge true
end
end
end
-if node[:exim][:smarthost_via]
+if node[:exim][:smarthost_via] # ~FC023
firewall_rule "deny-outbound-smtp" do
action :reject
source "fw"