comparison manifests/nodes.pp @ 326:63e0b5149cfb

Add fallback relays to Postfix This allows us to reliably send to IPv4 servers via Mythic-Beasts' mailserver rather than getting random IPs from the NAT64 servers. The firewall rules should ensure Postfix doesn't try to send email out via NAT64 and falls back to the relay. IPv6 will still go directly.
author IBBoard <dev@ibboard.co.uk>
date Sat, 07 Mar 2020 14:29:34 +0000
parents 49e66019faf7
children 60b13e6d83c5
comparison
equal deleted inserted replaced
325:49b7689da25b 326:63e0b5149cfb
18 node 'ibbvps.vs.mythic-beasts.com' { 18 node 'ibbvps.vs.mythic-beasts.com' {
19 class { 'ibboardvpsnode': 19 class { 'ibboardvpsnode':
20 primary_ip => '2a00:1098:82:52::1', 20 primary_ip => '2a00:1098:82:52::1',
21 proxy_4to6_ip_prefix => '2a00:1098:82:52::01d4', # ::old4 for IPv4! 21 proxy_4to6_ip_prefix => '2a00:1098:82:52::01d4', # ::old4 for IPv4!
22 proxy_upstream => ['2a00:1098::82:1000:3b:1:1', '2a00:1098::80:1000:3b:1:1'], 22 proxy_upstream => ['2a00:1098::82:1000:3b:1:1', '2a00:1098::80:1000:3b:1:1'],
23 nat64_ranges => ['2a00:1098:0:80:1000:3a::/96', '2a00:1098:0:82:1000:3a::/96'],
23 mailserver => 'mail.ibboard.co.uk', 24 mailserver => 'mail.ibboard.co.uk',
24 imapserver => 'imap.ibboard.co.uk', 25 imapserver => 'imap.ibboard.co.uk',
26 mailrelays => ['mx.mythic-beasts.com'],
25 firewall_cmd => 'iptables', 27 firewall_cmd => 'iptables',
26 } 28 }
27 # If the console fails to start, you may need to run "restorecon /etc/systemd/system/getty.target.wants/*" 29 # If the console fails to start, you may need to run "restorecon /etc/systemd/system/getty.target.wants/*"
28 # to reset the SELinux context of the file 30 # to reset the SELinux context of the file
29 service { 'serial-getty@ttyS0': 31 service { 'serial-getty@ttyS0':