First commit.

.pre-commit-config.yaml

+-   repo: git://github.com/pre-commit/pre-commit-hooks
+    sha: cf550fcab3f12015f8676b8278b30e1a5bc10e70
+    hooks:
+    -   id: check-added-large-files
+    -   id: check-json
+    -   id: check-xml
+    -   id: check-yaml
+    -   id: check-merge-conflict

LICENSE.txt

+The MIT License (MIT)
+
+Copyright (c) [year] [fullname]
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.rst

+Role Name
+=========
+
+A brief description of the role goes here.
+
+Requirements
+------------
+
+Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
+
+Role Variables
+--------------
+
+A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
+
+Dependencies
+------------
+
+A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
+
+Example Playbook
+----------------
+
+Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
+
+    - hosts: servers
+      roles:
+         - { role: username.rolename, x: 42 }
+
+License
+-------
+
+BSD
+
+Author Information
+------------------
+
+An optional section for the role authors to include contact information, or a website (HTML is not allowed).

defaults/main.yml

+---
+# defaults file for ansible-exim

files/CHECK_DATA_LOCAL_ACL_FILE

+accept
+  spam = Debian-exim:true
+  add_header = X-Spam_score: $spam_score\n\
+            X-Spam_score_int: $spam_score_int\n\
+            X-Spam_bar: $spam_bar\n\
+            X-Spam_report: $spam_report\n\
+accept
+  spam = nobody
+  add_header = X-Spam-Status: Yes
+
+accept
+  malware = *
+  add_header = X-Virus-Status: infected
+
+#accept
+#  senders = *@+local_domains
+#  senders = !root@+local_domains : *@+local_domains
+#  add_header = X-Sent: Yes

files/CHECK_RCPT_LOCAL_ACL_FILE

+deny
+  condition    = ${if eq{$interface_port}{587}}
+  !authenticated = *
+  message        = All port 587 connections must be Authenticated

files/conf.d/auth/40_plain_sasl

+plain_saslauthd_server:
+  driver = plaintext
+  public_name = PLAIN
+  server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}}
+  server_set_id = $auth2
+  server_prompts = :
+  .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS
+  server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
+  .endif

files/conf.d/main/02_enable_tls

+MAIN_TLS_ENABLE = yes
+#tls_require_ciphers = NORMAL:-VERS-SSL3.0:-VERS-TLS1.0:-SIGN-RSA-MD5:-COMP-DEFLATE:-MD5
+#tls_require_ciphers = NORMAL:-SIGN-RSA-MD5:-COMP-DEFLATE:-MD5
+tls_require_ciphers = SECURE128:-SIGN-RSA-MD5:-COMP-DEFLATE:-MD5:-VERS-SSL3.0

files/conf.d/main/10_personal

+daemon_smtp_ports = smtp : submission
+gnutls_compat_mode = true
+auth_advertise_hosts = ${if eq{$tls_cipher}{}{}{*}}
+av_scanner = clamd:/var/run/clamav/clamd.ctl
+spamd_address = 127.0.0.1 783
+CHECK_RCPT_LOCAL_ACL_FILE = CONFDIR/CHECK_RCPT_LOCAL_ACL_FILE
+CHECK_DATA_LOCAL_ACL_FILE = CONFDIR/CHECK_DATA_LOCAL_ACL_FILE
+LOCAL_DELIVERY==lmtp_dovecot
+DKIM_DOMAIN = shore.co.il
+DKIM_SELECTOR = web1
+DKIM_PRIVATE_KEY = /etc/exim4/dkim/private.key

files/conf.d/router/09_sent_messages

+sent_messages:
+#  driver = accept
+  driver = redirect
+#  transport = save_sent_messages
+  unseen = yes
+  user = Debian-exim
+  allow_filter = yes
+  local_part_suffix = +*
+  local_part_suffix_optional = yes
+  repeat_use = no
+#  condition = ${if match {+local_domains}{domain:$sender_address_domain} {yes}{no} }
+#  condition = yes
+#  headers_remove = 
+#  headers_add = X-Sent: Yes
+  senders = !root@+local_domains : *@+local_domains
+#  file = /etc/exim4/sent_messages.filter
+  data = #Exim filter\n\
+	unseen deliver $sender_address_local_part+Sent@$sender_address_domain

files/conf.d/router/899_exim4-config_local_user_affixes

+
+### router/900_exim4-config_local_user
+#################################
+
+# This router matches local user mailboxes. If the router fails, the error
+# message is "Unknown user".
+
+local_user_affixes:
+  debug_print = "R: local_user for $local_part@$domain"
+  driver = accept
+  domains = +local_domains
+  check_local_user
+  local_parts = ! root
+  transport = LOCAL_DELIVERY
+  cannot_route_message = Unknown user
+  local_part_suffix = +*
+  local_part_suffix_optional = yes

files/conf.d/transport/50_lmtp

+lmtp_dovecot:
+  driver = smtp
+  protocol = lmtp
+  port = 24
+  hosts = imap.trusted
+  allow_localhost
+  rcpt_include_affixes = yes

files/conf.d/transport/51_save_sent_messages

+#save_sent_messages:
+#  driver = appendfile
+#  file = /var/mail/$sender_address_local_part/Sent
+#  group = mail
+#  create_directory = yes
+#  mode = 0660
+#  directory_mode = 0660
+#  user = $sender_address_local_part

handlers/main.yml

+---
+# handlers file for ansible-exim
+
+- name: Update Exim configuration
+  command: /usr/sbin/update-exim4.conf
+
+- name: Restart Exim
+  service:
+    name: exim4
+    state: restarted
+
+- name: Restart SpamAssassin
+  service:
+    name: spamassassin
+    state: restarted
+
+- name: Restart ClamAV
+  service:
+    name: clamav-daemon
+    state: restarted

meta/main.yml

+---
+galaxy_info:
+  author: your name
+  description:
+  company: your company (optional)
+  # If the issue tracker for your role is not on github, uncomment the
+  # next line and provide a value
+  # issue_tracker_url: http://example.com/issue/tracker
+  # Some suggested licenses:
+  # - BSD (default)
+  # - MIT
+  # - GPLv2
+  # - GPLv3
+  # - Apache
+  # - CC-BY
+  license: license (GPLv2, CC-BY, etc)
+  min_ansible_version: 1.2
+  #
+  # Below are all platforms currently available. Just uncomment
+  # the ones that apply to your role. If you don't see your
+  # platform on this list, let us know and we'll get it added!
+  #
+  #platforms:
+  #- name: EL
+  #  versions:
+  #  - all
+  #  - 5
+  #  - 6
+  #  - 7
+  #- name: GenericUNIX
+  #  versions:
+  #  - all
+  #  - any
+  #- name: Fedora
+  #  versions:
+  #  - all
+  #  - 16
+  #  - 17
+  #  - 18
+  #  - 19
+  #  - 20
+  #  - 21
+  #  - 22
+  #- name: Windows
+  #  versions:
+  #  - all
+  #  - 2012R2
+  #- name: SmartOS
+  #  versions:
+  #  - all
+  #  - any
+  #- name: opensuse
+  #  versions:
+  #  - all
+  #  - 12.1
+  #  - 12.2
+  #  - 12.3
+  #  - 13.1
+  #  - 13.2
+  #- name: Amazon
+  #  versions:
+  #  - all
+  #  - 2013.03
+  #  - 2013.09
+  #- name: GenericBSD
+  #  versions:
+  #  - all
+  #  - any
+  #- name: FreeBSD
+  #  versions:
+  #  - all
+  #  - 8.0
+  #  - 8.1
+  #  - 8.2
+  #  - 8.3
+  #  - 8.4
+  #  - 9.0
+  #  - 9.1
+  #  - 9.1
+  #  - 9.2
+  #- name: Ubuntu
+  #  versions:
+  #  - all
+  #  - lucid
+  #  - maverick
+  #  - natty
+  #  - oneiric
+  #  - precise
+  #  - quantal
+  #  - raring
+  #  - saucy
+  #  - trusty
+  #  - utopic
+  #  - vivid
+  #- name: SLES
+  #  versions:
+  #  - all
+  #  - 10SP3
+  #  - 10SP4
+  #  - 11
+  #  - 11SP1
+  #  - 11SP2
+  #  - 11SP3
+  #- name: GenericLinux
+  #  versions:
+  #  - all
+  #  - any
+  #- name: Debian
+  #  versions:
+  #  - all
+  #  - etch
+  #  - jessie
+  #  - lenny
+  #  - squeeze
+  #  - wheezy
+  #
+  # Below are all categories currently available. Just as with
+  # the platforms above, uncomment those that apply to your role.
+  #
+  #categories:
+  #- cloud
+  #- cloud:ec2
+  #- cloud:gce
+  #- cloud:rax
+  #- clustering
+  #- database
+  #- database:nosql
+  #- database:sql
+  #- development
+  #- monitoring
+  #- networking
+  #- packaging
+  #- system
+  #- web
+dependencies: []
+  # List your role dependencies here, one per line.
+  # Be sure to remove the '[]' above if you add dependencies
+  # to this list.

tasks/main.yml

+---
+# tasks file for ansible-exim
+
+- name: apt install
+  apt:
+    name: '{{ item }}'
+    state: present
+    update_cache: yes
+    cache_valid_time: 3600
+  with_items:
+    - exim4-daemon-heavy
+    - clamav-daemon
+    - clamav-freshclam
+    - sasl2-bin
+    - spamassassin
+    - spf-tools-perl
+
+- name: Set Debian package configuration
+  with_items:
+    - line: "dc_eximconfig_configtype='internet'"
+      regexp: "^dc_eximconfig_configtype="
+    - line: "dc_other_hostnames='shore.co.il'"
+      regexp: "^dc_other_hostnames="
+    - line: "dc_local_interfaces=''"
+      regexp: "^dc_local_interfaces="
+    - line: "dc_use_split_config='true'"
+      regexp: "^dc_use_split_config="
+  lineinfile:
+    dest: /etc/exim4/update-exim4.conf.conf
+    line: '{{ item.line }}'
+    regexp: '{{ item.regexp|default(omit) }}'
+  notify:
+    - Update Exim configuration
+    - Restart Exim
+
+- name: Set local delivery
+  lineinfile:
+    dest: /etc/exim4/exim4.conf.template
+    line: 'LOCAL_DELIVERY=lmtp_dovecot'
+    regexp: '^LOCAL_DELIVERY='
+  notify:
+    - Update Exim configuration
+    - Restart Exim
+
+- name: Allow Exim access to TLS certificate, SASL
+  user:
+   name: Debian-exim
+   groups: ssl-cert, sasl
+   append: yes
+  notify:
+    - Restart Exim
+
+- name: Allow SpamAssassin access
+  user:
+    name: debian-spamd
+    groups: mail
+    append: yes
+  notify:
+    - Restart SpamAssassin
+
+- name: Allow ClamAV access
+  user:
+    name: clamav
+    groups: Debian-exim
+    append: yes
+  notify:
+    - Restart ClamAV

vars/main.yml

+---
+# vars file for ansible-exim