summaryrefslogtreecommitdiff
path: root/roles/mox/templates/mox.conf
diff options
context:
space:
mode:
authorJoe Carstairs <me@joeac.net>2026-08-13 16:35:47 +0100
committerJoe Carstairs <me@joeac.net>2026-08-13 16:35:47 +0100
commit9f2ebc2cce3af0e685677c23f2098c115e034adf (patch)
treebc6609cf851ee3f0a4f572d762b4ea35a34610f6 /roles/mox/templates/mox.conf
parentf31e65c51681823ade14abad87c742101a1b823d (diff)
move ansible/ dir to root
Diffstat (limited to 'roles/mox/templates/mox.conf')
-rw-r--r--roles/mox/templates/mox.conf62
1 files changed, 62 insertions, 0 deletions
diff --git a/roles/mox/templates/mox.conf b/roles/mox/templates/mox.conf
new file mode 100644
index 0000000..8cafc25
--- /dev/null
+++ b/roles/mox/templates/mox.conf
@@ -0,0 +1,62 @@
+DataDir: ../data
+LogLevel: debug
+User: mox
+Hostname: mail.joeac.net
+AdminPasswordFile: adminpasswd
+CheckUpdates: true
+Listeners:
+ internal:
+ IPs:
+ - 127.0.0.1
+ - ::1
+ Hostname: localhost
+ MetricsHTTP:
+ Enabled: true
+ public:
+ IPs:
+{% for interface in ansible_facts.interfaces | reject("eq", "lo") %}
+ - {{ ansible_facts[interface].ipv4.address }}
+{% for ipv6 in ansible_facts[interface].ipv6 | selectattr("scope", "eq", "global") %}
+ - {{ ipv6.address }}
+{% endfor %}
+{% endfor %}
+ NATIPs:
+ - {{ router.wan.ipv4 }}
+ - {{ ansible_facts.default_ipv6.address }}
+ AccountHTTPS:
+ Enabled: true
+ AdminHTTPS:
+ Enabled: true
+ WebmailHTTPS:
+ Enabled: true
+ WebAPIHTTPS:
+ Enabled: true
+ AutoconfigHTTPS:
+ Enabled: true
+ MTASTSHTTPS:
+ Enabled: true
+ WebserverHTTP:
+ Enabled: true
+ WebserverHTTPS:
+ Enabled: true
+ TLS:
+ KeyCerts:
+{% for subdomain in ( subdomains | map(attribute='name') ) %}
+ -
+ CertFile: /etc/letsencrypt/live/{{ subdomain }}.joeac.net/fullchain.pem
+ KeyFile: /etc/letsencrypt/live/{{ subdomain }}.joeac.net/privkey.pem
+{% endfor %}
+ SMTP:
+ Enabled: true
+ RequireSTARTTLS: true
+ Submissions:
+ Enabled: true
+ IMAPS:
+ Enabled: true
+Postmaster:
+ Account: me
+ Mailbox: Postmaster
+HostTLSRPT:
+ Account: me
+ Mailbox: TLSRPT
+ Localpart: tlsreports