infra/roles/postfix
Jeremie Fraeys 3e0e97a00c
fix(postfix): enable TLS and fix Postmark authentication
- Add Python script to extract certificates from Traefik acme.json
- Mount extracted certs to /etc/ssl in container for TLS support
- Enable smtpd_tls_security_level: may for incoming STARTTLS
- Remove failed_when: false on cert extraction to catch failures early
- Fix relayhost username to default to password (Postmark server token auth)
- Change default Postmark port from 2525 to 587 (blocked on some networks)
- Create SSL directory before extraction

Fixes: SMTP authentication failures and enables TLS for Authelia password reset
2026-03-06 14:25:10 -05:00
..
tasks fix(postfix): enable TLS and fix Postmark authentication 2026-03-06 14:25:10 -05:00
templates fix(postfix): enable TLS and fix Postmark authentication 2026-03-06 14:25:10 -05:00