manifests/tls.pp


1
2
3
4
5
6
7
8
9
10
11
12
13

class mail::tls {
  # TLS
  postfix::config { "smtpd_tls_cert_file":  value => '/etc/ssl/certs/cert.crt' }
  postfix::config { "smtpd_tls_key_file":   value => '/etc/ssl/private/cert.pem' }
  postfix::config { "smtpd_use_tls":        value => 'yes' }
  postfix::config { "smtp_use_tls":         value => 'yes' }
  postfix::config { "smtp_tls_policy_maps": value => 'hash:/etc/postfix/tls_policy' }

  postfix::hash { "/etc/postfix/tls_policy":
    ensure => present,
    source => "puppet://$server/files/postfix/tls_policy",
  }
}