]> git.openstreetmap.org Git - chef.git/blob - roles/mail.rb
Fix hpasm alert thresholds for DL360e G8 machines
[chef.git] / roles / mail.rb
1 name "mail"
2 description "Role applied to all mail servers"
3
4 default_attributes(
5   :exim => {
6     :local_domains => [
7       "openstreetmap.org",
8       "osm.org",
9       "noreply.openstreetmap.org",
10       "openstreetmap.co.uk",
11       "openstreetmap.org.uk",
12       "openstreetmap.com",
13       "openstreetmap.io",
14       "openstreetmap.pro",
15       "openstreetmaps.org",
16       "osm.io"
17     ],
18     :daemon_smtp_ports => [25, 26],
19     :certificate_names => [
20       "mail.openstreetmap.org",
21       "a.mx.openstreetmap.org",
22       "a.mx.osm.org",
23       "a.mx.openstreetmap.com",
24       "a.mx.openstreetmap.io",
25       "a.mx.openstreetmap.pro",
26       "a.mx.openstreetmaps.org",
27       "a.mx.osm.io"
28     ],
29     :queue_run_max => 5,
30     :smarthost_name => "mail.openstreetmap.org",
31     :smarthost_via => false,
32     :dns_blacklists => ["zen.spamhaus.org"],
33     :routes => {
34       :messages => {
35         :comment => "messages.openstreetmap.org",
36         :domains => ["messages.openstreetmap.org"],
37         :host => ["spike-06.openstreetmap.org", "spike-07.openstreetmap.org", "spike-08.openstreetmap.org"]
38       },
39       :otrs => {
40         :comment => "otrs.openstreetmap.org",
41         :domains => ["otrs.openstreetmap.org"],
42         :host => "ridley.ucl.openstreetmap.org"
43       },
44       :join => {
45         :comment => "join.osmfoundation.org",
46         :domains => ["join.osmfoundation.org"],
47         :host => "ridley.ucl.openstreetmap.org"
48       }
49     },
50     :dkim_selectors => {
51       "openstreetmap.org" => "20200301",
52       "osmfoundation.org" => "20201112"
53     },
54     :aliases => {
55       "abuse" => "root",
56       "postmaster" => "root",
57       "webmaster" => "support",
58       "clamav" => "root",
59       "rails" => "root",
60       "trac" => "root",
61       "munin" => "root",
62       "prometheus" => "root",
63       "www-data" => "root",
64       "osmbackup" => "root",
65       "noreply" => "/dev/null",
66       "bounces" => "/dev/null",
67       "wishlist" => "/dev/null",
68       "treasurer" => "treasurer@osmfoundation.org",
69       "donations" => "treasurer@osmfoundation.org",
70       "secretary" => "secretary@osmfoundation.org",
71       "chairman" => "chairman@osmfoundation.org",
72       "accountant" => "accountant@osmfoundation.org",
73       "data" => "data@otrs.openstreetmap.org",
74       "otrs" => "otrs@otrs.openstreetmap.org",
75       "support" => "support@otrs.openstreetmap.org",
76       "memorial" => "communication@osmfoundation.org",
77       "legal" => "legal@osmfoundation.org",
78       "dmca" => "dmca@osmfoundation.org",
79       "program-sotm" => "sotm-program@otrs.openstreetmap.org"
80     },
81     :private_aliases => "mail"
82   },
83   :munin => {
84     :plugins => {
85       :exim_mailqueue => {
86         :mails => {
87           :warning => 500,
88           :critical => 1000
89         }
90       }
91     }
92   }
93 )
94
95 run_list(
96   "recipe[clamav]",
97   "recipe[exim]",
98   "recipe[spamassassin]"
99 )