X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/faf8ae12e85eabb050b0f5eceb2cb67ad1de5261..cd67ea35139fb5d661639160ae3cdd8b9a1bbb02:/cookbooks/exim/recipes/default.rb?ds=sidebyside diff --git a/cookbooks/exim/recipes/default.rb b/cookbooks/exim/recipes/default.rb index ff38860a0..219629f59 100644 --- a/cookbooks/exim/recipes/default.rb +++ b/cookbooks/exim/recipes/default.rb @@ -18,9 +18,9 @@ # include_recipe "networking" -include_recipe "ssl" package "exim4" +package "openssl" if File.exist?("/var/run/clamav/clamd.ctl") package "exim4-daemon-heavy" @@ -32,11 +32,29 @@ group "ssl-cert" do append true end +template "/tmp/exim.ssl.cnf" do + source "ssl.cnf.erb" + owner "root" + group "root" + mode 0644 + not_if do + File.exists?("/etc/ssl/certs/exim.pem") and File.exists?("/etc/ssl/private/exim.key") + end +end + +execute "/etc/ssl/certs/exim.pem" do + command "openssl req -x509 -newkey rsa:2048 -keyout /etc/ssl/private/exim.key -out /etc/ssl/certs/exim.pem -days 3650 -nodes -config /tmp/exim.ssl.cnf" + user "root" + group "ssl-cert" + not_if do + File.exists?("/etc/ssl/certs/exim.pem") and File.exists?("/etc/ssl/private/exim.key") + end +end + service "exim4" do action [ :enable, :start ] supports :status => true, :restart => true, :reload => true - subscribes :restart, resources(:cookbook_file => "/etc/ssl/certs/openstreetmap.pem") - subscribes :restart, resources(:file => "/etc/ssl/private/openstreetmap.key") + subscribes :restart, "execute[/etc/ssl/certs/exim.pem]" end relay_to_domains = node[:exim][:relay_to_domains] @@ -63,6 +81,23 @@ template "/etc/exim4/exim4.conf" do notifies :restart, resources(:service => "exim4") end +search(:accounts, "*:*").each do |account| + name = account["id"] + details = node[:accounts][:users][name] || {} + + if details[:status] and account["email"] + node.default[:exim][:aliases][name] = account["email"] + end +end + +if node[:exim][:private_aliases] + aliases = data_bag_item("exim", "aliases") + + aliases[node[:exim][:private_aliases]].each do |name,address| + node.default[:exim][:aliases][name] = address + end +end + template "/etc/aliases" do source "aliases.erb" owner "root"