X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/d1b835abf6c54e768ead54dd0056011554ba0b71..f2d42efa4aae8655e74a16fcb5e521a033e8dab3:/cookbooks/exim/recipes/default.rb diff --git a/cookbooks/exim/recipes/default.rb b/cookbooks/exim/recipes/default.rb index 6234aa964..62b874e2a 100644 --- a/cookbooks/exim/recipes/default.rb +++ b/cookbooks/exim/recipes/default.rb @@ -19,17 +19,26 @@ include_recipe "munin" include_recipe "networking" +include_recipe "prometheus" package %w[ exim4 openssl ssl-cert + mailutils ] package "exim4-daemon-heavy" do only_if { ::File.exist?("/var/run/clamav/clamd.ctl") } end +group "Debian-exim" do + action :modify + members "clamav" + append true + only_if { ::File.exist?("/var/run/clamav/clamd.ctl") } +end + group "ssl-cert" do action :modify members "Debian-exim" @@ -150,6 +159,14 @@ if node[:exim][:dkim_selectors] end end +template "/etc/default/exim4" do + source "default.erb" + owner "root" + group "root" + mode "044" + notifies :restart, "service[exim4]" +end + template "/etc/exim4/exim4.conf" do source "exim4.conf.erb" owner "root" @@ -195,9 +212,20 @@ remote_directory "/etc/exim4/noreply" do purge true end +template "/etc/mail.rc" do + source "mail.rc.erb" + owner "root" + group "root" + mode "644" +end + munin_plugin "exim_mailqueue" munin_plugin "exim_mailstats" +prometheus_exporter "exim" do + port 9636 +end + if node[:exim][:smarthost_name] node[:exim][:daemon_smtp_ports].each do |port| firewall_rule "accept-inbound-smtp-#{port}" do