diff options
author | Micah Anderson <micah@leap.se> | 2014-04-02 15:35:01 -0400 |
---|---|---|
committer | Micah Anderson <micah@leap.se> | 2014-04-02 15:35:01 -0400 |
commit | 1551f785c5c7c515781995928eec7659365d8988 (patch) | |
tree | 973285910d91ddaa12c2b9243832f81202d16247 /puppet/modules/site_postfix/manifests/mx.pp | |
parent | 5cca6d100ffd991e6f943d916361bf0497728d70 (diff) |
Force satellite hosts that only speak to relayhost to have a
smtp_tls_security_level of 'encrypt', so it is not optional (#1902)
Change-Id: I61ad0823e3eb8df6c224767d63f0911dcba42a16
Diffstat (limited to 'puppet/modules/site_postfix/manifests/mx.pp')
-rw-r--r-- | puppet/modules/site_postfix/manifests/mx.pp | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/puppet/modules/site_postfix/manifests/mx.pp b/puppet/modules/site_postfix/manifests/mx.pp index a37c7af9..bdfee665 100644 --- a/puppet/modules/site_postfix/manifests/mx.pp +++ b/puppet/modules/site_postfix/manifests/mx.pp @@ -31,6 +31,10 @@ class site_postfix::mx { value => 'vmail'; 'smtpd_tls_received_header': value => 'yes'; + # Note: we are setting this here, instead of in site_postfix::mx::smtp_tls + # because the satellites need to have a different value + 'smtp_tls_security_level': + value => 'may'; } include site_postfix::mx::smtpd_checks |