#
# Cookbook:: kosmos_email
# Recipe:: default
#

domain   = node["email"]["domain"]
hostname = node["email"]["hostname"]
ip_addr  = node["knife_zero"]["host"]

node.override["set_fqdn"] = hostname
include_recipe "hostname"

tls_cert_for hostname do
  auth "gandi_dns"
  action :create
end

firewall_rule "private network access" do
  command  :allow
  protocol :tcp
  source   "10.1.1.0/24"
end

include_recipe 'unbound'
include_recipe 'kosmos_email::opendkim'
include_recipe 'kosmos_email::spamassassin'
include_recipe 'kosmos_email::postfix'
include_recipe 'kosmos_email::dovecot'