zlopez/ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity

smtp-auth-cc-rdu01: create new smtp auth relay

Browse source 
We need this to try and relay in emails.
It turns out to be bordering on impossible to do this sanely with our
current setup, so make a fedora vm that lets us use saslauthdb to have a
specific (small) list of users that can authenticate and relay emails
via bastion and out. We can't do this on rhel, because they don't build
the saslauthdb backend. We can't use any of the other backends because
they either don't work or would allow any fedora user to relay, which we
do not want.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2023-05-18 14:35:49 -07:00
commit ddfd50de03
8 changed files with 820 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
main.yml
View file

@ -69,6 +69,7 @@
- import_playbook: /srv/web/infra/ansible/playbooks/groups/secondary.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/sign-bridge.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/smtp-mm.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/smtp-auth.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/sundries.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/tang.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/torrent.yml