Rename to mailcloak
This commit is contained in:
@@ -6,7 +6,7 @@ keycloak:
|
||||
# admin API is derived: {base_url}/admin/realms/{realm}
|
||||
|
||||
sqlite:
|
||||
path: "/var/lib/kc-policy/aliases.db"
|
||||
path: "/var/lib/mailcloak/state.db"
|
||||
|
||||
policy:
|
||||
domain: "<EMail domain-name>"
|
||||
@@ -19,8 +19,8 @@ policy:
|
||||
|
||||
sockets:
|
||||
# These paths must be inside postfix chroot (/var/spool/postfix)
|
||||
policy_socket: "/var/spool/postfix/private/kc-policy"
|
||||
socketmap_socket: "/var/spool/postfix/private/kc-socketmap"
|
||||
policy_socket: "/var/spool/postfix/private/mailcloak-policy"
|
||||
socketmap_socket: "/var/spool/postfix/private/mailcloak-socketmap"
|
||||
socket_owner_user: "postfix"
|
||||
socket_owner_group: "postfix"
|
||||
socket_mode: "0660"
|
||||
|
||||
@@ -1,23 +0,0 @@
|
||||
#!/sbin/openrc-run
|
||||
|
||||
name="kc-policy"
|
||||
command="/usr/local/sbin/kc-policy"
|
||||
command_args="/etc/kc-policy/config.yaml"
|
||||
command_background="yes"
|
||||
pidfile="/run/kc-policy.pid"
|
||||
|
||||
depend() {
|
||||
need net
|
||||
after postfix
|
||||
}
|
||||
|
||||
start_pre() {
|
||||
checkpath -d -m 0750 -o root:postfix /etc/kc-policy
|
||||
checkpath -d -m 0750 -o root:postfix /var/lib/kc-policy
|
||||
checkpath -d -m 0755 -o root:root /usr/local/sbin
|
||||
# sockets dir already exists
|
||||
}
|
||||
|
||||
stop_post() {
|
||||
rm -f /var/spool/postfix/private/kc-policy /var/spool/postfix/private/kc-socketmap
|
||||
}
|
||||
23
configs/openrc-mailcloak
Normal file
23
configs/openrc-mailcloak
Normal file
@@ -0,0 +1,23 @@
|
||||
#!/sbin/openrc-run
|
||||
|
||||
name="mailcloak"
|
||||
command="/usr/local/sbin/mailcloak"
|
||||
command_args="/etc/mailcloak/config.yaml"
|
||||
command_background="yes"
|
||||
pidfile="/run/mailcloak.pid"
|
||||
|
||||
depend() {
|
||||
need net
|
||||
after postfix
|
||||
}
|
||||
|
||||
start_pre() {
|
||||
checkpath -d -m 0750 -o root:postfix /etc/mailcloak
|
||||
checkpath -d -m 0750 -o root:postfix /var/lib/mailcloak
|
||||
checkpath -d -m 0755 -o root:root /usr/local/sbin
|
||||
# sockets dir already exists
|
||||
}
|
||||
|
||||
stop_post() {
|
||||
rm -f /var/spool/postfix/private/mailcloak-policy /var/spool/postfix/private/mailcloak-socketmap
|
||||
}
|
||||
@@ -9,7 +9,7 @@ virtual_mailbox_domains = static:<EMail domain-name>
|
||||
virtual_transport = lmtp:unix:private/dovecot-lmtp
|
||||
|
||||
# Dynamic aliases via socketmap
|
||||
virtual_alias_maps = socketmap:unix:private/kc-socketmap:alias
|
||||
virtual_alias_maps = socketmap:unix:private/mailcloak-socketmap:alias
|
||||
|
||||
# Policy (RCPT existence + sender policy on 587 via master.cf)
|
||||
smtpd_recipient_restrictions =
|
||||
@@ -17,5 +17,5 @@ smtpd_recipient_restrictions =
|
||||
reject_unknown_recipient_domain,
|
||||
permit_sasl_authenticated,
|
||||
reject_unauth_destination,
|
||||
check_policy_service unix:private/kc-policy,
|
||||
check_policy_service unix:private/mailcloak-policy,
|
||||
permit
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
# Configuration to add to /etc/postfix/master.cf
|
||||
#
|
||||
|
||||
-o smtpd_sender_restrictions=check_policy_service unix:private/kc-policy
|
||||
-o smtpd_sender_restrictions=check_policy_service unix:private/mailcloak-policy
|
||||
|
||||
# You can remove `reject_senders_login_mismaych` + `sender_login_maps`
|
||||
# as this kc-policy will handle it.
|
||||
# You can remove `reject_senders_login_mismatch` + `sender_login_maps`
|
||||
# as mailcloak will handle it.
|
||||
Reference in New Issue
Block a user