smtp_tls_security_level should not be withing postfix_relaytls condition?

Oefenweb / ansible-postfix

Ansible role to set up postfix in Debian-like systems

MIT License

173 stars 82 forks source link

Open fliespl opened 1 year ago

fliespl commented 1 year ago

I have setup my postfix install with this flag set encrypt, yet receiving host seen this message as not encrypted.

I have noticed it was not added to config due to missing: postfix_relaytls (which I don't have setup).

Adding smtp_tls_security_level = encrypt manually & restarting service (without postfix_relaytls) fixed it.

Is it actually relay specific setting?

tersmitten commented 1 year ago

See #117

fliespl commented 1 year ago

I don't think that is true...

    - role: oefenweb.postfix
      postfix_raw_options:
        - 'smtp_tls_security_level = encrypt'
      become: true

Following setup works correctly with gmail (when not using relay).

And if I skip postfix_raw_options - it will fallback to unencrypted emails.

tersmitten commented 6 months ago

It seems to be introduced in #9