ddfd50de03
We need this to try and relay in emails. It turns out to be bordering on impossible to do this sanely with our current setup, so make a fedora vm that lets us use saslauthdb to have a specific (small) list of users that can authenticate and relay emails via bastion and out. We can't do this on rhel, because they don't build the saslauthdb backend. We can't use any of the other backends because they either don't work or would allow any fedora user to relay, which we do not want. Signed-off-by: Kevin Fenzi <kevin@scrye.com>
35 lines
737 B
YAML
35 lines
737 B
YAML
# create smtp auth servers
|
|
|
|
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
|
|
vars:
|
|
myhosts: "smtp_auth"
|
|
|
|
- name: make the box be real
|
|
hosts: smtp_auth
|
|
user: root
|
|
gather_facts: True
|
|
|
|
vars_files:
|
|
- /srv/web/infra/ansible/vars/global.yml
|
|
- "/srv/private/ansible/vars.yml"
|
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
|
|
|
roles:
|
|
- base
|
|
- rkhunter
|
|
- nagios_client
|
|
- hosts
|
|
- { role: openvpn/client,
|
|
when: env != "staging" }
|
|
- ipa/client
|
|
- collectd/base
|
|
- sudo
|
|
|
|
pre_tasks:
|
|
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
|
|
|
|
tasks:
|
|
- import_tasks: "{{ tasks_path }}/motd.yml"
|
|
|
|
handlers:
|
|
- import_tasks: "{{ handlers_path }}/restart_services.yml"
|