bundlewrap/bundles/postfix/metadata.py

defaults = {
    'apt': {
        'packages': {
            'postfix': {},
        },
    },
    'icinga2_api': {
        'postfix': {
            'services': {
                'POSTFIX PROCESS': {
                    'command_on_monitored_host': '/usr/local/share/icinga/plugins/check_systemd_unit postfix@-',
                },
                'POSTFIX QUEUE': {
                    'command_on_monitored_host': 'sudo /usr/local/share/icinga/plugins/check_postfix_queue -w 20 -c 40 -d 50',
                },
            },
        },
    },
}

if node.has_bundle('postfixadmin'):
    defaults['backups'] = {
        'paths': {
            '/var/mail',
        },
    }

    defaults['icinga2_api']['postfix']['services'].update({
        'SPAM BLOCKLIST': {
            'check_command': 'spam_blocklist',
            # vars.ip will be filled using a metadata reactor
        },
        'SMTP CONNECT': {
            'check_command': 'check_smtp',
        },
        'SMTP SUBMISSION CONNECT': {
            'check_command': 'check_smtp',
            'vars.port': '587',
        },
    })
else:
    defaults['icinga2_api']['postfix']['services'].update({
        'SMTP CONNECT': {
            'command_on_monitored_host': '/usr/lib/nagios/plugins/check_smtp -H localhost',
        },
    })


@metadata_reactor
def fill_icinga_spam_blocklist_check_with_hostname(metadata):
    if not node.has_bundle('postfixadmin'):
        raise DoNotRunAgain

    return {
        'icinga2_api': {
            'postfix': {
                'services': {
                    'SPAM BLOCKLIST': {
                        'vars.ip': metadata.get('postfix/myhostname', metadata.get('hostname', node.hostname)),
                    },
                },
            },
        },
    }


@metadata_reactor
def letsencrypt(metadata):
    if not node.has_bundle('letsencrypt'):
        raise DoNotRunAgain

    result = {
        'reload_after': {
            'postfix',
        },
    }

    myhostname = metadata.get('postfix/myhostname', None)

    if myhostname and myhostname != metadata.get('hostname'):
        result['domains'] = {
            myhostname: set(),
        }

    return {
        'letsencrypt': result,
    }