c1c91886b4
This should now be a largely functional deployment of mailman 3. There are still some bits that need testing but we'll use followup changes to force failure and hold nodes. This deployment of mailman3 uses upstream docker container images. We currently hack up uids and gids to accomodate that. We also hack up the settings file and bind mount it over the upstream file in order to use host networking. We override the hyperkitty index type to xapian. All list domains are hosted in a single installation and we use native vhosting to handle that. We'll deploy this to a new server and migrate one mailing list domain at a time. This will allow us to start with lists.opendev.org and test things like dmarc settings before expanding to the remaining lists. A migration script is also included, which has seen extensive testing on held nodes for importing copies of the production data sets. Change-Id: Ic9bf5cfaf0b87c100a6ce003a6645010a7b50358
90 lines
2.9 KiB
YAML
90 lines
2.9 KiB
YAML
exim_queue_interval: '1m'
|
|
exim_queue_run_max: '50'
|
|
exim_smtp_accept_max: '100'
|
|
exim_smtp_accept_max_per_host: '10'
|
|
iptables_extra_public_tcp_ports:
|
|
- 25
|
|
- 80
|
|
- 443
|
|
- 465
|
|
letsencrypt_certs:
|
|
lists-opendev-org-main:
|
|
- "{{ inventory_hostname }}"
|
|
- lists.opendev.org
|
|
- lists.airshipit.org
|
|
- lists.katacontainers.io
|
|
- lists.openinfra.dev
|
|
- lists.openstack.org
|
|
- lists.starlingx.io
|
|
- lists.zuul-ci.org
|
|
borg_backup_excludes_extra:
|
|
# db is backed up in dumps, don't capture live files
|
|
- /var/lib/mailman/database
|
|
# backed up by streaming backup
|
|
- /var/backups/mailman-mariadb
|
|
# Can regenerate indexes from source email files
|
|
- /var/lib/mailman/web-data/fulltext_index
|
|
exim_routers:
|
|
- mailman_verp_router: |
|
|
{% raw -%}
|
|
driver = dnslookup
|
|
condition = ${if or{{eq{$sender_host_address}{127.0.0.1}}\
|
|
{eq{$sender_host_address}{::1}}}{yes}{no}}
|
|
{% endraw %}
|
|
domains = !+local_domains
|
|
ignore_target_hosts = <; 0.0.0.0; \
|
|
127.0.0.0/8; \
|
|
::1/128;fe80::/10;fe \
|
|
c0::/10;ff00::/8
|
|
senders = "*-bounces@*"
|
|
transport = mailman_verp_smtp
|
|
- dnslookup: '{{ exim_dnslookup_router }}'
|
|
- system_aliases: '{{ exim_system_aliases_router }}'
|
|
- domain_aliases: |
|
|
driver = redirect
|
|
allow_fail
|
|
allow_defer
|
|
data = ${lookup{$local_part@$domain}lsearch{/etc/aliases.domain}}
|
|
file_transport = address_file
|
|
pipe_transport = address_pipe
|
|
- localuser: '{{ exim_localuser_router }}'
|
|
- mailman_copy: |
|
|
driver = accept
|
|
domains = lists.openstack.org
|
|
local_parts = openstack-discuss
|
|
transport = local_copy
|
|
unseen
|
|
- mailman_router: |
|
|
driver = accept
|
|
domains = {{ mm_domains }}
|
|
local_part_suffix = -admin : \
|
|
-bounces : -bounces+* : \
|
|
-confirm : -confirm+* : \
|
|
-join : -leave : \
|
|
-owner : -request : \
|
|
-subscribe : -unsubscribe
|
|
local_part_suffix_optional
|
|
require_files = /var/lib/mailman/core/var/lists/${local_part}.${domain}
|
|
transport = mailman_transport
|
|
exim_transports:
|
|
- local_copy: |
|
|
driver = appendfile
|
|
file = /var/mail/$local_part
|
|
group = mail
|
|
mode = 0660
|
|
- mailman_transport: |
|
|
debug_print = "Email for mailman"
|
|
driver = smtp
|
|
protocol = lmtp
|
|
allow_localhost
|
|
hosts = localhost
|
|
port = 8024
|
|
rcpt_include_affixes = true
|
|
- mailman_verp_smtp: |
|
|
driver = smtp
|
|
headers_add = Errors-To: ${return_path}
|
|
headers_remove = Errors-To
|
|
max_rcpt = 1
|
|
return_path = ${local_part:$return_path}+$local_part=$domain@${domain:$return_path}
|
|
mailman_multihost: true
|