usage 1
fi
+if [[ ! $SUDO_USER ]]; then
+ echo "$0: error: requires running as nonroot or sudo"
+fi
+u=$SUDO_USER
####### begin perstent password instructions ######
# # via the mail-setup scripts
# # 2017-02 dmarc policies:
+# # host -t txt _dmarc.gmail.com
# # yahoo: p=reject, hotmail: p=none, gmail: p=none, fastmail none for legacy reasons
-# # gmail will be changing to p=reject, which is expected to cause problems
+# # there were articles claiming gmail would be changing
+# # to p=reject, in early 2017, which didn't happen. I see no sources on them. It's
+# # expected to cause problems
# # with a few old mailing lists, copying theirs for now.
+#
# echo "dmarc dns, name: _dmarc value: v=DMARC1; p=none; rua=mailto:mailauth-reports@$domain"
# # 2017-02 spf policies:
# New one is smtp.fastmail.com
# test delivery & rewrite settings:
-#exim4 -bt ian@localhost
+#exim4 -bt iank@localhost
postconfin() {
}
e() { printf "%s\n" "$*"; }
-postmaster=ian
+postmaster=$u
mxhost=mail.iankelling.org
mxport=25
-forward=ian@$mxhost
+forward=$u@$mxhost
# old setup. left as comment for example
# mxhost=mail.messagingengine.com
relayhost="[$mxhost]:$mxport" # postfix
smarthost="$mxhost::$mxport" # exim
-
+# trisquel 8 = openvpn, debian stretch = openvpn-client
+vpn_ser=openvpn-client
+if [[ ! -e /lib/systemd/system/openvpn-client@.service ]]; then
+ vpn_ser=openvpn
+fi
if [[ $HOSTNAME == $MAIL_HOST ]]; then
# afaik, these will get ignored because they are routing to my own
else # begin exim. has debian specific stuff for now
+ if ! dpkg -s openvpn &>/dev/null; then
+ apt-get -y install --purge --auto-remove openvpn
+ fi
+
if [[ -e /p/c/filesystem ]]; then
/a/exe/vpn-mk-client-cert -b mail -n mail li
fi
- cat >/etc/systemd/system/mailroute.service <<'EOF'
+ cat >/etc/systemd/system/mailroute.service <<EOF
[Unit]
-# this unit is configured to start and stop whenever openvpn-client@mail.service
+# this unit is configured to start and stop whenever $vpn_ser@mail.service
# does
Description=Routing for email vpn
After=network.target
-BindsTo=openvpn-client@mail.service
-After=openvpn-client@mail.service
+BindsTo=$vpn_ser@mail.service
+After=$vpn_ser@mail.service
[Service]
Type=oneshot
RemainAfterExit=yes
[Install]
-RequiredBy=openvpn-client@mail.service
+RequiredBy=$vpn_ser@mail.service
EOF
cat >/etc/systemd/system/offlineimapsync.timer <<'EOF'
WantedBy=timers.target
EOF
- cat >/etc/systemd/system/offlineimapsync.service <<'EOF'
+ cat >/etc/systemd/system/offlineimapsync.service <<EOF
[Unit]
Description=Offlineimap sync
After=multi-user.target
[Service]
-User=ian
+User=$u
Type=oneshot
ExecStart=/a/bin/log-quiet/sysd-mail-once offlineimap-sync /a/bin/distro-setup/offlineimap-sync
EOF
# This name won\'t appear on From: lines of outgoing messages if rewriting is enabled.
# System mail name:
-exim4-config exim4/mailname string li.iankelling.org
+exim4-config exim4/mailname string mail.iankelling.org
# Other destinations for which mail is accepted:
# iank.bid is for testing
# mail.iankelling.org is for machines i own
-exim4-config exim4/dc_other_hostnames string *.iankelling.org;iankelling.org;*iank.bid;iank.bid;*zroe.org;zroe.org
+exim4-config exim4/dc_other_hostnames string *.iankelling.org;iankelling.org;*iank.bid;iank.bid;*zroe.org;zroe.org;*.b8.nz;b8.nz
# MAIN_HARDCODE_PRIMARY_HOSTNAME might mess up the
# smarthost config type, not sure. all other settings
# would be unused in that config type.
- cat >$exim_main_dir/000_localmacros <<'EOF'
+ cat >$exim_main_dir/000_localmacros <<EOF
MAIN_TLS_ENABLE = true
DKIM_CANON = relaxed
# https://debian-administration.org/article/718/DKIM-signing_outgoing_mail_with_exim4
# The file is based on the outgoing domain-name in the from-header.
-DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_DOMAIN = \${lc:\${domain:\$h_from:}}
# sign if key exists
-DKIM_PRIVATE_KEY= ${if exists{/etc/exim4/${dkim_domain}-private.pem} {/etc/exim4/${dkim_domain}-private.pem}}
+DKIM_PRIVATE_KEY= \${if exists{/etc/exim4/\${dkim_domain}-private.pem} {/etc/exim4/\${dkim_domain}-private.pem}}
# failing message on mail-tester.com:
# We check if there is a server (A Record) behind your hostname treetowl.
# You may want to publish a DNS record (A type) for the hostname treetowl or use a different hostname in your mail software
# https://serverfault.com/questions/46545/how-do-i-change-exim4s-primary-hostname-on-a-debian-box
-# and this one seemed appropriate from grepping config
-MAIN_HARDCODE_PRIMARY_HOSTNAME = li.iankelling.org
+# and this one seemed appropriate from grepping config.
+# I originally set this to li.iankelling.org, but then ended up with errors when li tried to send
+# mail to treetowl, so this should basically be a name that no host has as their
+# canonical hostname since the actual host sits behind a nat and changes.
+# Seems logical for this to be the same as mailname.
+MAIN_HARDCODE_PRIMARY_HOSTNAME = mail.iankelling.org
# normally empty, I set this so I can set the envelope address
# when doing mail redelivery to invoke filters
-MAIN_TRUSTED_GROUPS = ian
+MAIN_TRUSTED_GROUPS = $u
LOCAL_DELIVERY = dovecot_lmtp
# the fix maybe is for all lines? one says gmail rejects, the
# other says gmail does not reject. figure out and open a new bug.
IGNORE_SMTP_LINE_LENGTH_LIMIT = true
+
+# most of the ones that gmail seems to use.
+# Exim has horrible default of signing unincluded
+# list- headers since they got mentioned in an
+# rfc, but this messes up mailing lists, like gnu/debian which want to
+# keep your dkim signature intact but add list- headers.
+DKIM_SIGN_HEADERS = mime-version:in-reply-to:references:from:date:subject:to
+
EOF
systemctl enable offlineimapsync.timer
systemctl start offlineimapsync.timer
- systemctl restart openvpn-client@mail
- systemctl enable openvpn-client@mail
+ systemctl restart $vpn_ser@mail
+ systemctl enable $vpn_ser@mail
systemctl enable dovecot
systemctl restart dovecot
else # $HOSTNAME != $MAIL_HOST
systemctl disable offlineimapsync.timer &>/dev/null ||:
systemctl stop offlineimapsync.timer &>/dev/null ||:
- systemctl disable openvpn-client@mail
- systemctl stop openvpn-client@mail
+ systemctl disable $vpn_ser@mail
+ systemctl stop $vpn_ser@mail
systemctl disable dovecot ||:
systemctl stop dovecot ||:
#
debconf-set-selections <<EOF
exim4-config exim4/dc_eximconfig_configtype select mail sent by smarthost; no local mail
exim4-config exim4/dc_smarthost string $smarthost
+# the default, i think is from /etc/mailname. better to set it to
+# whatever the current fqdn is.
+exim4-config exim4/mailname string $(hostname -f)
EOF
fi # end $HOSTNAME != $MAIL_HOST
sed -r s/^\\S+:/$b:/ 600_exim4-config_userforward >175_$b
systemctl restart exim4
-fi # end if exim4
+ fi # end if exim4
-# /etc/alias setup is debian specific, and
-# exim config sets up an /etc/alias from root to the postmaster, which i
-# config to ian, as long as there exists an entry for root, or there was
-# no preexisting aliases file. based on the postinst file. postfix
-# won't set up a root to $postmaster alias if it's already installed.
-# Since postfix is not the greatest, just set it ourselves.
-if [[ $postmaster != root ]]; then
- sed -i --follow-symlinks -f - /etc/aliases <<EOF
+ # /etc/alias setup is debian specific, and
+ # exim config sets up an /etc/alias from root to the postmaster, which i
+ # config to ian, as long as there exists an entry for root, or there was
+ # no preexisting aliases file. based on the postinst file. postfix
+ # won't set up a root to $postmaster alias if it's already installed.
+ # Since postfix is not the greatest, just set it ourselves.
+ if [[ $postmaster != root ]]; then
+ sed -i --follow-symlinks -f - /etc/aliases <<EOF
\$a root: $postmaster
/^root:/d
EOF
- newaliases
-fi
+ newaliases
+ fi
# put spool dir in directory that spans multiple distros.
# based on http://www.postfix.org/qmgr.8.html and my notes in gnus
iankelling.org / git / distro-setup / blobdiff