postfix: initial bundle

bundles/postfix/files/main.cf

@@ -0,0 +1,11 @@
+smtpd_banner = $myhostname ESMTP
+
+disable_vrfy_command = yes
+
+smtp_use_tls = yes
+smtp_tls_CApath = /etc/pki/tls/certs
+smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
+smtp_tls_mandatory_protocols = !SSLv2,!SSLv3,!TLSv1,!TLSv1.1
+smtp_tls_protocols = !SSLv2,!SSLv3,!TLSv1,!TLSv1.1
+smtp_tls_security_level = may
+smtp_tls_mandatory_ciphers = high

bundles/postfix/items.py

@@ -0,0 +1,25 @@
+pkg_apt = {
+    'postfix': {},
+}
+
+svc_systemd = {
+    'postfix': {
+        'needs': ['pkg_apt:postfix', 'file:/etc/postfix/main.cf'],
+    }
+}
+
+files = {
+    '/etc/postfix/main.cf': {
+        'content_type': 'mako',
+        'needs': ['pkg_apt:postfix'],
+        'triggers': ['svc_systemd:postfix:restart'],
+    },
+}
+
+directories = {
+    '/etc/postfix': {
+        'owner': 'root',
+        'mode': '1755',
+        'needs': ['pkg_apt:postfix'],
+    },
+}