X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/3a4b1c2078cd515e93a5f1bf8967f380fbd1646f..ae2ef9ff4f0542d2bb2f8bbe6d6b6f27ec5c55f8:/cookbooks/exim/recipes/default.rb diff --git a/cookbooks/exim/recipes/default.rb b/cookbooks/exim/recipes/default.rb index 495689841..099e047c6 100644 --- a/cookbooks/exim/recipes/default.rb +++ b/cookbooks/exim/recipes/default.rb @@ -39,7 +39,7 @@ template "/tmp/exim.ssl.cnf" do group "root" mode 0644 not_if do - File.exist?("/etc/ssl/certs/exim.pem") and File.exist?("/etc/ssl/private/exim.key") + File.exist?("/etc/ssl/certs/exim.pem") && File.exist?("/etc/ssl/private/exim.key") end end @@ -48,12 +48,12 @@ execute "/etc/ssl/certs/exim.pem" do user "root" group "ssl-cert" not_if do - File.exist?("/etc/ssl/certs/exim.pem") and File.exist?("/etc/ssl/private/exim.key") + File.exist?("/etc/ssl/certs/exim.pem") && File.exist?("/etc/ssl/private/exim.key") end end service "exim4" do - action [ :enable, :start ] + action [:enable, :start] supports :status => true, :restart => true, :reload => true subscribes :restart, "execute[/etc/ssl/certs/exim.pem]" end @@ -61,14 +61,14 @@ end relay_to_domains = node[:exim][:relay_to_domains] node[:exim][:routes].each_value do |route| - relay_to_domains = relay_to_domains | route[:domains] if route[:host] + relay_to_domains |= route[:domains] if route[:host] end relay_from_hosts = node[:exim][:relay_from_hosts] if node[:exim][:smarthost_name] search(:node, "exim_smarthost_via:#{node[:exim][:smarthost_name]}\\:*").each do |host| - relay_from_hosts = relay_from_hosts | host.ipaddresses(:role => :external) + relay_from_hosts |= host.ipaddresses(:role => :external) end end @@ -86,7 +86,7 @@ search(:accounts, "*:*").each do |account| name = account["id"] details = node[:accounts][:users][name] || {} - if details[:status] and account["email"] + if details[:status] && account["email"] node.default[:exim][:aliases][name] = account["email"] end end @@ -144,12 +144,11 @@ else end end -if node[:exim][:smarthost_via] - firewall_rule "deny-outbound-smtp" do - action :reject - source "fw" - dest "net" - proto "tcp:syn" - dest_ports "smtp" - end +firewall_rule "deny-outbound-smtp" do + action :reject + source "fw" + dest "net" + proto "tcp:syn" + dest_ports "smtp" + only_if { node[:exim][:smarthost_via] } end