if node.has_bundle('postfixadmin'):
    repo.libs.tools.require_bundle(node, 'letsencrypt')

mynetworks = {
    '127.0.0.0/8',
    '[::1]/128',
    '[::ffff:127.0.0.0]/104',
}
for identifier in node.metadata.get('postfix/mynetworks', set()):
    ips = repo.libs.tools.resolve_identifier(repo, identifier)

    for ip in ips['ipv4']:
        mynetworks.add(str(ip))

    for ip in ips['ipv6']:
        ip = str(ip)
        if '/' in ip:
            ip6, netmask = ip.split('/', 2)
        else:
            ip6 = ip
            netmask = '128'
        mynetworks.add(f'[{ip6}]/{netmask}')

files = {
    '/etc/mailname': {
        'content': node.metadata.get('postfix/myhostname', node.metadata['hostname']),
        'triggers': {
            'svc_systemd:postfix:restart',
        },
    },
    '/etc/aliases': {
        'content_type': 'mako',
        'triggers': {
            'action:postfix_newaliases',
        },
    },
    '/etc/postfix/master.cf': {
        'content_type': 'mako',
        'triggers': {
            'svc_systemd:postfix:restart',
        },
    },
    '/etc/postfix/main.cf': {
        'content_type': 'mako',
        'context': {
            'mynetworks': mynetworks,
        },
        'triggers': {
            'svc_systemd:postfix:restart',
        },
    },
    '/etc/postfix/submission_header_cleanup': {
        'triggers': {
            'svc_systemd:postfix:restart',
        },
    },
    '/usr/local/share/icinga/plugins/check_postfix_queue': {
        'mode': '0755',
    },
    '/usr/local/share/icinga/plugins/check_spam_blocklist': {
        'mode': '0755',
    },
}

actions = {
    'postfix_newaliases': {
        'command': 'newaliases',
        'triggered': True,
        'needs': {
            'pkg_apt:postfix',
        },
    },
}

svc_systemd = {
    'postfix': {
        'needs': {
            'file:/etc/postfix/master.cf',
            'file:/etc/postfix/main.cf',
            'pkg_apt:',
        },
    },
}