manifests/tls.pp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

class mail::tls {
  # TLS
  postfix::config { "smtpd_tls_cert_file":      value => '/etc/ssl/certs/cert.crt' }
  postfix::config { "smtpd_tls_key_file":       value => '/etc/ssl/private/cert.pem' }
  postfix::config { "smtpd_tls_security_level": value => 'may' }
  postfix::config { "smtp_tls_security_level":  value => 'may' }
  postfix::config { "smtp_tls_policy_maps":     value => 'hash:/etc/postfix/tls_policy' }
  postfix::config { "smtpd_tls_CApath":         value => '/etc/ssl/certs' }
  postfix::config { "smtp_tls_CApath":          value => '/etc/ssl/certs' }

  # TLS Policy
  include postfix::tlspolicy

  # Check SSL certificate
  ssl::check { "$domain":
    port => '25',
  }
}