* Thu Apr 25 2024 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-8.sme

- add listening deamon on submission port 587 [SME: 6510]
- move qpsmtpd daemons to full systemd supervision [SME: 12615]
- separate configuration for the 3 qpsmtpd daemons [SME: 12451]
  increase default TLS version on u/sqpsmtpd as auth is required
- increase Softlimit  to 150M [SME: 12638]
- remove old qmail templates [SME: 9492]
  template for /var/qmail/control/{badrcptto,badmailfrom,rcpthosts}
  also import template for config/badmailfrom from smeserver-wbl
TODO organize peers content for u and s qpsmtpd
TODO check if more config modules needs per service config
This commit is contained in:
2024-04-25 17:24:35 -04:00
parent 2f7fb945df
commit 5b40bfd4f1
114 changed files with 589 additions and 431 deletions

View File

@@ -2,7 +2,7 @@
use esmith::Build::CreateLinks qw(:all);
foreach $event (qw(
foreach my $event (qw(
email-update
domain-modify
domain-create
@@ -15,39 +15,6 @@ foreach $event (qw(
}
my $service = "/var/service/qpsmtpd";
foreach $event (qw(
network-create
network-delete
smeserver-qpsmtpd-update
))
{
templates2events("$service/config/relayclients", $event);
}
foreach $event (qw(
bootstrap-console-save
console-save
email-update
network-create
network-delete
smeserver-qpsmtpd-update
))
{
templates2events("$service/peers/0", $event);
templates2events("$service/peers/local", $event);
templates2events("$service/config/peers/0", $event);
templates2events("$service/config/peers/local", $event);
}
templates2events("$service/runenv", qw(
bootstrap-console-save
console-save
email-update
smeserver-qpsmtpd-update
));
templates2events("$service/ssl/cert.pem", qw(
bootstrap-console-save
console-save
@@ -67,154 +34,158 @@ templates2events($_, qw(
/home/e-smith/dkim_keys/default/selector
));
my $secure_service = "/var/service/sqpsmtpd";
templates2events("$secure_service/runenv", qw(
bootstrap-console-save
console-save
email-update
smeserver-qpsmtpd-update
));
my $control = "/var/qmail/control";
templates2events("$control/badmailfrom", qw(
bootstrap-console-save
console-save
email-update
smeserver-qpsmtpd-update
));
templates2events("$control/badrcptto", qw(
bootstrap-console-save
console-save
email-update
domain-create
domain-delete
user-create
user-delete
user-modify
group-create
group-delete
group-modify
pseudonym-create
pseudonym-delete
pseudonym-modify
smeserver-qpsmtpd-update
));
my $config = "/var/service/qpsmtpd/config";
templates2events("$config/$_", qw(
bootstrap-console-save
console-save
email-update
smeserver-qpsmtpd-update
))
for (qw(
IP
badhelo
badrcptto
badrcptto_ext
dnsbl_zones
dnsbl_allow
uribl_zones
loglevel
memory_threshold
plugins
relayclients norelayclients
rhsbl_zones
signatures_patterns
plugin_dirs
smtpgreeting
spool_dir
subject_prefix
invalid_resolvable_fromhost
timeout
timeoutsmtpd
tls_before_auth
tls_ciphers
tls_protocols
));
templates2events("$config/badrcptto_ext", qw(
domain-create
domain-delete
user-create
user-delete
user-modify
group-create
group-delete
group-modify
pseudonym-create
pseudonym-delete
pseudonym-modify
smeserver-qpsmtpd-update
));
templates2events("$config/$_", qw(
ssl-update
smeserver-qpsmtpd-update
))
for (qw(
tls_before_auth
tls_ciphers
tls_protocols
));
templates2events("$config/badhelo", 'ip-change');
templates2events("$config/goodrcptto", qw(
bootstrap-console-save
email-update
domain-create
domain-delete
user-create
user-delete
user-modify
pseudonym-create
pseudonym-delete
pseudonym-modify
group-create
group-delete
group-modify
smeserver-qpsmtpd-update
));
safe_touch("root/etc/e-smith/templates/$config/forcespamcheck/template-begin");
templates2events("$config/forcespamcheck", qw(
bootstrap-console-save
email-update
domain-create
domain-delete
user-create
user-delete
user-modify
pseudonym-create
pseudonym-delete
pseudonym-modify
group-create
group-delete
group-modify
smeserver-qpsmtpd-update
));
for my $daemon ( qw(qpsmtpd sqpsmtpd) )
#### start do this for qpsmtpd /sqpsmtpd/ uqpsmtpd
for my $daemon ( qw(qpsmtpd sqpsmtpd uqpsmtpd) )
{
safe_symlink("sighup",
$service = "/var/service/$daemon";
my $config = "$service/config"
foreach $event (qw(
bootstrap-console-save
console-save
email-update
network-create
network-delete
smeserver-qpsmtpd-update
))
{
templates2events("$service/peers/0", $event);
templates2events("$service/peers/local", $event);
templates2events("$service/config/peers/0", $event);
templates2events("$service/config/peers/local", $event);
}
templates2events("$config/$_", qw(
bootstrap-console-save
console-save
email-update
smeserver-qpsmtpd-update
))
for (qw(
IP
badhelo
badrcptto
badrcptto_ext
badmailfrom
dnsbl_zones
dnsbl_allow
uribl_zones
loglevel
memory_threshold
plugins
relayclients norelayclients
rhsbl_zones
signatures_patterns
plugin_dirs
smtpgreeting
spool_dir
subject_prefix
invalid_resolvable_fromhost
timeout
timeoutsmtpd
tls_before_auth
tls_ciphers
tls_protocols
));
templates2events("$config/badrcptto_ext", qw(
domain-create
domain-delete
user-create
user-delete
user-modify
group-create
group-delete
group-modify
pseudonym-create
pseudonym-delete
pseudonym-modify
smeserver-qpsmtpd-update
));
templates2events("$config/relayclients", qw(
network-create
network-delete
smeserver-qpsmtpd-update
));
templates2events("$config/$_", qw(
ssl-update
smeserver-qpsmtpd-update
))
for (qw(
tls_before_auth
tls_ciphers
tls_protocols
));
templates2events("$config/badhelo", 'ip-change');
templates2events("$config/goodrcptto", qw(
bootstrap-console-save
email-update
domain-create
domain-delete
user-create
user-delete
user-modify
pseudonym-create
pseudonym-delete
pseudonym-modify
group-create
group-delete
group-modify
smeserver-qpsmtpd-update
));
safe_touch("root/etc/e-smith/templates/$config/forcespamcheck/template-begin");
templates2events("$config/forcespamcheck", qw(
bootstrap-console-save
email-update
domain-create
domain-delete
user-create
user-delete
user-modify
pseudonym-create
pseudonym-delete
pseudonym-modify
group-create
group-delete
group-modify
smeserver-qpsmtpd-update
));
safe_symlink("restart",
"root/etc/e-smith/events/email-update/services2adjust/$daemon");
safe_symlink("sighup",
"root/etc/e-smith/events/ssl-update/services2adjust/$daemon");
for my $event (qw(smeserver-qpsmtpd-update email-update console-save bootstrap-console-save post-install post-upgrade) )
{
templates2events("/usr/lib/systemd/system/$daemon.service.d/50koozali.conf", $event);
}
}
#######end of per config dir
for my $event ( qw(network-create network-delete) )
{
safe_symlink("sigusr1",
"root/etc/e-smith/events/$event/services2adjust/qpsmtpd");
safe_symlink("sigusr1",
"root/etc/e-smith/events/$event/services2adjust/sqpsmtpd");
safe_symlink("sigusr1",
"root/etc/e-smith/events/$event/services2adjust/uqpsmtpd");
}
my $event = 'smeserver-qpsmtpd-update';
safe_symlink("restart", "root/etc/e-smith/events/$event/services2adjust/qpsmtpd");
safe_symlink("restart", "root/etc/e-smith/events/$event/services2adjust/sqpsmtpd");
safe_symlink("restart", "root/etc/e-smith/events/$event/services2adjust/uqpsmtpd")
templates2events("/etc/systemd/system-preset/49-koozali.preset", $event);
event_link("systemd-reload", $event, "89");
event_link("systemd-default", $event, "88");