---
# Relais SMTP sortant base sur Postfix (fournit l'interface sendmail-compatible).
serveurs_sendmail_packages:
  - postfix
  - ssl-cert

serveurs_sendmail_service_name: "postfix"

# Identite.
serveurs_sendmail_domaine: "chezlepro.internal"
serveurs_sendmail_origine: "$mydomain"
serveurs_sendmail_nom_hote: "{{ ansible_fqdn | default(ansible_hostname) }}"

# Reseaux internes autorises a relayer (clients_smtp).
serveurs_sendmail_reseaux_autorises:
  - "127.0.0.0/8"
  - "[::1]/128"
  - "10.1.0.0/16"

# Smarthost amont optionnel. Vide => remise directe (MX).
serveurs_sendmail_smarthost: ""  # ex. "[smtp.exemple.com]:587"

# Relais uniquement : ne pas heberger de boites pour le domaine.
serveurs_sendmail_destinations_locales: "$myhostname, localhost.$mydomain, localhost"

# Interfaces d'ecoute.
serveurs_sendmail_inet_interfaces: "all"

# TLS (snakeoil par defaut ; bascule vers l'AC interne plus tard).
serveurs_sendmail_tls_cert: "/etc/ssl/certs/ssl-cert-snakeoil.pem"
serveurs_sendmail_tls_cle: "/etc/ssl/private/ssl-cert-snakeoil.key"