Majic Projects
Majic Ansible Roles
Go to the previous open issue
Go to the previous issue (open or closed)
star_faded.png
Please log in to bookmark issues
icon_project.png Majic Ansible Roles / Closed Feature request MAR-4 Mail server
action_vote_minus_faded.png
0
Votes
action_vote_plus_faded.png
Go to the next issue (open or closed)
Go to the next open issue
This issue has been closed with status "Closed" and resolution "RESOLVED".
Issue basics
  • Type of issue
    Feature request
  • Category
    Not determined
  • Targetted for
    1.0.0
  • Status
    Closed
  • Progress
  • Priority
    Not determined
User pain
  • Type of bug
    Not triaged
  • Likelihood
    Not triaged
  • Effect
    Not triaged
Affected by this issue (0)
There are no items
People involved
Times and dates
  • Posted at
  • Last updated
  • Estimated time
    Not estimated
  • Time spent
    2 days
    Click here to see time logged against this issue
Issue details
  • Resolution
    RESOLVED
Attachments (0)
There is nothing attached to this issue
Duplicate issues (0)
This issue does not have any duplicates
Description
Currently there are no Ansible roles that deal with deployment and configuration of a mail server. It is necessary to implement a couple of Ansible roles that would serve this purpose.

Two distinct roles are necessary, one for setting-up an SMTP server on localhost that then relays all mails to another server (and also serves the local accounts), and one that would set-up full IMAP/SMTP stack for receiving and sending the mails. These roles will be referred to as mail server and mail forwarder.

The mail forwarder role should be implemented as follows:
* Deploy Postfix on local server.
* Configure Postfix to accept mails destined for local server, and add support for it to use a different server as a relay for any other mail.
* Ability to define aliases for local accounts, so they would get forwarded to some external mail (for example mails destined for root@localhost).

The mail server role should be implemented as follows:
* Postfix for SMTP.
** Use LDAP for looking-up managed domains.
** Use LDAP for authenticating users.
** Require TLS for client authentication.
** Set-up grey-listing.
** Allow specification of trusted IPs/networks.
** Employ some form of virus checks.
** Employ some form of spam checks.
* Dovecot for IMAP.
** Use LDAP for looking-up managed users
** Authenticate users against LDAP.
** Do not allow unencrypted logins.
** Configure Sieve.
* Use the backports repository for getting the most up-to-date packages.
* Base the configuration and installation of packages on tutorial found on workaround.org.
Todos (0 / 0)
Issue created