usage 1
fi
+if [[ ! $SUDO_USER ]]; then
+ echo "$0: error: requires running as nonroot or sudo"
+fi
+u=$SUDO_USER
####### begin perstent password instructions ######
# # via the mail-setup scripts
# # 2017-02 dmarc policies:
+# # host -t txt _dmarc.gmail.com
# # yahoo: p=reject, hotmail: p=none, gmail: p=none, fastmail none for legacy reasons
-# # gmail will be changing to p=reject, which is expected to cause problems
+# # there were articles claiming gmail would be changing
+# # to p=reject, in early 2017, which didn't happen. I see no sources on them. It's
+# # expected to cause problems
# # with a few old mailing lists, copying theirs for now.
+#
# echo "dmarc dns, name: _dmarc value: v=DMARC1; p=none; rua=mailto:mailauth-reports@$domain"
# # 2017-02 spf policies:
# New one is smtp.fastmail.com
# test delivery & rewrite settings:
-#exim4 -bt ian@localhost
+#exim4 -bt iank@localhost
postconfin() {
}
e() { printf "%s\n" "$*"; }
-postmaster=ian
+postmaster=$u
mxhost=mail.iankelling.org
mxport=25
-forward=ian@$mxhost
+forward=$u@$mxhost
# old setup. left as comment for example
# mxhost=mail.messagingengine.com
relayhost="[$mxhost]:$mxport" # postfix
smarthost="$mxhost::$mxport" # exim
-
+vpn_ser=openvpn-client
+if [[ ! -e /lib/systemd/system/openvpn-client@.service ]]; then
+ vpn_ser=openvpn
+fi
if [[ $HOSTNAME == $MAIL_HOST ]]; then
# afaik, these will get ignored because they are routing to my own
else # begin exim. has debian specific stuff for now
+ if ! dpkg -s openvpn &>/dev/null; then
+ apt-get -y install --purge --auto-remove openvpn
+ fi
+
if [[ -e /p/c/filesystem ]]; then
/a/exe/vpn-mk-client-cert -b mail -n mail li
fi
- cat >/etc/systemd/system/mailroute.service <<'EOF'
+ cat >/etc/systemd/system/mailroute.service <<EOF
[Unit]
-# this unit is configured to start and stop whenever openvpn-client@mail.service
+# this unit is configured to start and stop whenever $vpn_ser@mail.service
# does
Description=Routing for email vpn
After=network.target
-BindsTo=openvpn-client@mail.service
-After=openvpn-client@mail.service
+BindsTo=$vpn_ser@mail.service
+After=$vpn_ser@mail.service
[Service]
Type=oneshot
RemainAfterExit=yes
[Install]
-RequiredBy=openvpn-client@mail.service
+RequiredBy=$vpn_ser@mail.service
EOF
cat >/etc/systemd/system/offlineimapsync.timer <<'EOF'
WantedBy=timers.target
EOF
- cat >/etc/systemd/system/offlineimapsync.service <<'EOF'
+ cat >/etc/systemd/system/offlineimapsync.service <<EOF
[Unit]
Description=Offlineimap sync
After=multi-user.target
[Service]
-User=ian
+User=$u
Type=oneshot
ExecStart=/a/bin/log-quiet/sysd-mail-once offlineimap-sync /a/bin/distro-setup/offlineimap-sync
EOF
# MAIN_HARDCODE_PRIMARY_HOSTNAME might mess up the
# smarthost config type, not sure. all other settings
# would be unused in that config type.
- cat >$exim_main_dir/000_localmacros <<'EOF'
+ cat >$exim_main_dir/000_localmacros <<EOF
MAIN_TLS_ENABLE = true
DKIM_CANON = relaxed
# https://debian-administration.org/article/718/DKIM-signing_outgoing_mail_with_exim4
# The file is based on the outgoing domain-name in the from-header.
-DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_DOMAIN = \${lc:\${domain:\$h_from:}}
# sign if key exists
-DKIM_PRIVATE_KEY= ${if exists{/etc/exim4/${dkim_domain}-private.pem} {/etc/exim4/${dkim_domain}-private.pem}}
+DKIM_PRIVATE_KEY= \${if exists{/etc/exim4/\${dkim_domain}-private.pem} {/etc/exim4/\${dkim_domain}-private.pem}}
# failing message on mail-tester.com:
# normally empty, I set this so I can set the envelope address
# when doing mail redelivery to invoke filters
-MAIN_TRUSTED_GROUPS = ian
+MAIN_TRUSTED_GROUPS = $u
LOCAL_DELIVERY = dovecot_lmtp
systemctl enable offlineimapsync.timer
systemctl start offlineimapsync.timer
- systemctl restart openvpn-client@mail
- systemctl enable openvpn-client@mail
+ systemctl restart $vpn_ser@mail
+ systemctl enable $vpn_ser@mail
systemctl enable dovecot
systemctl restart dovecot
else # $HOSTNAME != $MAIL_HOST
systemctl disable offlineimapsync.timer &>/dev/null ||:
systemctl stop offlineimapsync.timer &>/dev/null ||:
- systemctl disable openvpn-client@mail
- systemctl stop openvpn-client@mail
+ systemctl disable $vpn_ser@mail
+ systemctl stop $vpn_ser@mail
systemctl disable dovecot ||:
systemctl stop dovecot ||:
#
sed -r s/^\\S+:/$b:/ 600_exim4-config_userforward >175_$b
systemctl restart exim4
-fi # end if exim4
+ fi # end if exim4
-# /etc/alias setup is debian specific, and
-# exim config sets up an /etc/alias from root to the postmaster, which i
-# config to ian, as long as there exists an entry for root, or there was
-# no preexisting aliases file. based on the postinst file. postfix
-# won't set up a root to $postmaster alias if it's already installed.
-# Since postfix is not the greatest, just set it ourselves.
-if [[ $postmaster != root ]]; then
- sed -i --follow-symlinks -f - /etc/aliases <<EOF
+ # /etc/alias setup is debian specific, and
+ # exim config sets up an /etc/alias from root to the postmaster, which i
+ # config to ian, as long as there exists an entry for root, or there was
+ # no preexisting aliases file. based on the postinst file. postfix
+ # won't set up a root to $postmaster alias if it's already installed.
+ # Since postfix is not the greatest, just set it ourselves.
+ if [[ $postmaster != root ]]; then
+ sed -i --follow-symlinks -f - /etc/aliases <<EOF
\$a root: $postmaster
/^root:/d
EOF
- newaliases
-fi
+ newaliases
+ fi
# put spool dir in directory that spans multiple distros.
# based on http://www.postfix.org/qmgr.8.html and my notes in gnus
iankelling.org / git / distro-setup / blobdiff