X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/faf8ae12e85eabb050b0f5eceb2cb67ad1de5261..1bd8163c228324ae78795aed98f5d34beab7fc6a:/cookbooks/exim/recipes/default.rb diff --git a/cookbooks/exim/recipes/default.rb b/cookbooks/exim/recipes/default.rb index ff38860a0..1e333b42c 100644 --- a/cookbooks/exim/recipes/default.rb +++ b/cookbooks/exim/recipes/default.rb @@ -18,9 +18,9 @@ # include_recipe "networking" -include_recipe "ssl" package "exim4" +package "openssl" if File.exist?("/var/run/clamav/clamd.ctl") package "exim4-daemon-heavy" @@ -32,17 +32,35 @@ group "ssl-cert" do append true end +template "/tmp/exim.ssl.cnf" do + source "ssl.cnf.erb" + owner "root" + group "root" + mode 0644 + not_if do + File.exists?("/etc/ssl/certs/exim.pem") and File.exists?("/etc/ssl/private/exim.key") + end +end + +execute "/etc/ssl/certs/exim.pem" do + command "openssl req -x509 -newkey rsa:2048 -keyout /etc/ssl/private/exim.key -out /etc/ssl/certs/exim.pem -days 3650 -nodes -config /tmp/exim.ssl.cnf" + user "root" + group "ssl-cert" + not_if do + File.exists?("/etc/ssl/certs/exim.pem") and File.exists?("/etc/ssl/private/exim.key") + end +end + service "exim4" do action [ :enable, :start ] supports :status => true, :restart => true, :reload => true - subscribes :restart, resources(:cookbook_file => "/etc/ssl/certs/openstreetmap.pem") - subscribes :restart, resources(:file => "/etc/ssl/private/openstreetmap.key") + subscribes :restart, "execute[/etc/ssl/certs/exim.pem]" end relay_to_domains = node[:exim][:relay_to_domains] node[:exim][:routes].each_value do |route| - relay_to_domains = relay_to_domains | route[:domains] + relay_to_domains = relay_to_domains | route[:domains] if route[:host] end relay_from_hosts = node[:exim][:relay_from_hosts] @@ -60,7 +78,31 @@ template "/etc/exim4/exim4.conf" do mode 0644 variables :relay_to_domains => relay_to_domains.sort, :relay_from_hosts => relay_from_hosts.sort - notifies :restart, resources(:service => "exim4") + notifies :restart, "service[exim4]" +end + +template "/etc/exim4/callout_exempt_senders" do + source "callout_exempt_senders.erb" + owner "root" + group "Debian-exim" + mode 0644 +end + +search(:accounts, "*:*").each do |account| + name = account["id"] + details = node[:accounts][:users][name] || {} + + if details[:status] and account["email"] + node.default[:exim][:aliases][name] = account["email"] + end +end + +if node[:exim][:private_aliases] + aliases = data_bag_item("exim", "aliases") + + aliases[node[:exim][:private_aliases]].each do |name,address| + node.default[:exim][:aliases][name] = address + end end template "/etc/aliases" do