🍽 Fork YunoHost — snapshot mangé par la machine à tsoins

Upstream: https://github.com/YunoHost/yunohost @ 3a5f8bac8301c450897b96cbd43a4c7d3ba750fb
But (José) : transformer tout le code en bions + ploxions du xerboxion.
La carte de digestion vit au labo : /yunohost-digest.json

hooks/conf_regen/19-postfix

@@ -0,0 +1,140 @@
+#!/usr/bin/env bash
+#
+# Copyright (c) 2024 YunoHost Contributors
+#
+# This file is part of YunoHost (see https://yunohost.org)
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as
+# published by the Free Software Foundation, either version 3 of the
+# License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Affero General Public License for more details.
+#
+# You should have received a copy of the GNU Affero General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+
+# Exit hook on subcommand error or unset variable
+set -e
+
+# Source YNH helpers
+# shellcheck source=../../helpers/helpers
+source /usr/share/yunohost/helpers
+
+do_pre_regen() {
+    pending_dir=$1
+
+    cd /usr/share/yunohost/conf/postfix
+
+    postfix_dir="${pending_dir}/etc/postfix"
+    mkdir -p "$postfix_dir"
+
+    default_dir="${pending_dir}/etc/default/"
+    mkdir -p "$default_dir"
+
+    # install plain conf files
+    cp plain/* "$postfix_dir"
+
+    # prepare main.cf conf file
+    main_domain=$(cat /etc/yunohost/current_host)
+
+    # Support different strategy for security configurations
+    export compatibility="$(jq -r '.postfix_compatibility' <<< "$YNH_SETTINGS")"
+
+    # Add possibility to specify a relay
+    # Could be useful with some isp with no 25 port open or more complex setup
+    export relay_port=""
+    export relay_user=""
+    export relay_host=""
+    export relay_enabled="$(jq -r '.smtp_relay_enabled' <<< "$YNH_SETTINGS" | int_to_bool)"
+    if [ "${relay_enabled}" == "True" ]; then
+        relay_host="$(jq -r '.smtp_relay_host' <<< "$YNH_SETTINGS")"
+        relay_port="$(jq -r '.smtp_relay_port' <<< "$YNH_SETTINGS")"
+        relay_user="$(jq -r '.smtp_relay_user' <<< "$YNH_SETTINGS")"
+        relay_password="$(jq -r '.smtp_relay_password' <<< "$YNH_SETTINGS")"
+
+        # Avoid to display "Relay account paswword" to other users
+        touch "${postfix_dir}/sasl_passwd"
+        chmod 750 "${postfix_dir}/sasl_passwd"
+        # Avoid "postmap: warning: removing zero-length database file"
+        chown postfix "${pending_dir}/etc/postfix"
+        chown postfix "${pending_dir}/etc/postfix/sasl_passwd"
+
+        cat <<< "[${relay_host}]:${relay_port} ${relay_user}:${relay_password}" > "${postfix_dir}/sasl_passwd"
+    fi
+    export enable_blocklists="$(jq -r '.enable_blocklists' <<< "$YNH_SETTINGS" | int_to_bool)"
+
+    # Use this postfix server as a backup MX
+    export backup_mx_domains="$(jq -r '.smtp_backup_mx_domains' <<< "$YNH_SETTINGS" | sed 's/^null$//g' | sed "s/,/ /g")"
+    export backup_mx_emails="$(jq -r '.smtp_backup_mx_emails_whitelisted' <<< "$YNH_SETTINGS" | sed "s/,/ /g")"
+    rm -f "${postfix_dir}/relay_recipients"
+    touch "${postfix_dir}/relay_recipients"
+    rm -f "${postfix_dir}/relay_recipients.db"
+    touch "${postfix_dir}/relay_recipients.db"
+    if [ -n "${backup_mx_domains}" ] && [ -n "${backup_mx_emails}" ]; then
+        for mail in ${backup_mx_emails}; do
+            echo "$mail OK" >> "${postfix_dir}/relay_recipients"
+        done
+        postmap "${postfix_dir}/relay_recipients"
+    fi
+
+    export main_domain
+    export domain_list="$YNH_DOMAINS_WITH_MAIL_IN_AND_OUT"
+    ynh_render_template "main.cf" "${postfix_dir}/main.cf"
+    ynh_render_template "sni" "${postfix_dir}/sni"
+
+    # Activate mailbox only on domains with mail_in features
+    # If mail_in is disabled for a domain, this allows to send
+    # mails on external mailbox using this domain
+    # See: https://forum.yunohost.org/t/how-to-keep-your-mailbox-outside-yunohost/4860
+    echo "# This file is regenerated automatically" > "${postfix_dir}/virtual-mailbox-domains"
+    echo "# Please DO NOT edit manually ... changes will be overwritten!" >> "${postfix_dir}/virtual-mailbox-domains"
+    tr ' ' '\n' <<< "$YNH_DOMAINS_WITH_MAIL_IN" >> "${postfix_dir}/virtual-mailbox-domains"
+
+    cat postsrsd \
+        | sed "s/{{ main_domain }}/${main_domain}/g" \
+        | sed "s/{{ domain_list }}/${domain_list}/g" \
+            > "${default_dir}/postsrsd"
+
+    # adapt it for IPv4-only hosts
+    ipv6="$(jq -r '.smtp_allow_ipv6' <<< "$YNH_SETTINGS" | int_to_bool)"
+    if [ "$ipv6" == "False" ] || [ ! -f /proc/net/if_inet6 ]; then
+        sed -i \
+            's/ \[::ffff:127.0.0.0\]\/104 \[::1\]\/128//g' \
+            "${postfix_dir}/main.cf"
+        sed -i \
+            's/inet_interfaces = all/&\ninet_protocols = ipv4/' \
+            "${postfix_dir}/main.cf"
+    fi
+}
+
+do_post_regen() {
+    regen_conf_files=$1
+
+    chown postfix /etc/postfix
+
+    if [ -e /etc/postfix/sasl_passwd ]; then
+        chmod 750 /etc/postfix/sasl_passwd*
+        chown postfix:root /etc/postfix/sasl_passwd*
+        postmap /etc/postfix/sasl_passwd
+    fi
+
+    if [ -e /etc/postfix/relay_recipients ]; then
+        chmod 750 /etc/postfix/relay_recipients*
+        chown postfix:root /etc/postfix/relay_recipients*
+    fi
+
+    postmap -F hash:/etc/postfix/sni
+
+    python3 -c 'from yunohost.app import regen_mail_app_user_config_for_dovecot_and_postfix as r; r(only="postfix")'
+
+    [[ -z "$regen_conf_files" ]] \
+        || { systemctl restart postfix && systemctl restart postsrsd; }
+
+}
+
+"do_$1_regen" "$(echo "${*:2}" | xargs)"