b3f2ca415e
Scan incoming and outgoing email for spam. Use a local Unbound for DNS, so we don't run into blocks for RBL queries.
29 lines
584 B
Ruby
29 lines
584 B
Ruby
#
|
|
# Cookbook:: kosmos_email
|
|
# Recipe:: default
|
|
#
|
|
|
|
domain = node["email"]["domain"]
|
|
hostname = node["email"]["hostname"]
|
|
ip_addr = node["knife_zero"]["host"]
|
|
|
|
node.override["set_fqdn"] = hostname
|
|
include_recipe "hostname"
|
|
|
|
tls_cert_for hostname do
|
|
auth "gandi_dns"
|
|
action :create
|
|
end
|
|
|
|
firewall_rule "private network access" do
|
|
command :allow
|
|
protocol :tcp
|
|
source "10.1.1.0/24"
|
|
end
|
|
|
|
include_recipe 'unbound'
|
|
include_recipe 'kosmos_email::opendkim'
|
|
include_recipe 'kosmos_email::spamassassin'
|
|
include_recipe 'kosmos_email::postfix'
|
|
include_recipe 'kosmos_email::dovecot'
|