From: Ralf Jung Date: Sat, 16 Jun 2018 17:57:33 +0000 (+0200) Subject: make unbound dependency for postfix optional X-Git-Url: https://git.ralfj.de/ansible.git/commitdiff_plain/e7f0dda5b871d22ea9925aeaf8a1513d9833128b?ds=sidebyside;hp=d337571c2e21c7b410f5383233b388581817afe6 make unbound dependency for postfix optional --- diff --git a/roles/email/templates/main.cf b/roles/email/templates/main.cf index eb6bdf1..cbd7b3d 100644 --- a/roles/email/templates/main.cf +++ b/roles/email/templates/main.cf @@ -24,9 +24,10 @@ smtp_tls_mandatory_protocols = !SSLv2 !SSLv3 smtp_tls_ciphers = low smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_tls_loglevel = 1 -{% if not(postfix.relay_host is defined) %} -smtp_tls_security_level = dane +{% if 'unbound' in group_names %} +# If there are TLSA records, enforce using encryption smtp_dns_support_level = dnssec +smtp_tls_security_level = dane {% endif %} {% if postfix.postscreen | default(False) %} diff --git a/site.yml b/site.yml index 7c0c2d5..f7fbc70 100644 --- a/site.yml +++ b/site.yml @@ -28,7 +28,6 @@ tags: letsencrypt - hosts: email - # depends: unbound gather_facts: no roles: - email