lmtp

roles/mailman/templates/main.cf.j2

@@ -47,8 +47,9 @@ smtpd_milters = inet:localhost:11332
 non_smtpd_milters = $smtpd_milters
 
 alias_maps = texthash:/etc/postfix/aliases hash:/var/lib/mailman/data/aliases
-local_recipient_maps = $alias_maps
+local_recipient_maps = $alias_maps hash:/etc/postfix/transport
 alias_database = $alias_maps
+transport_maps = hash:/etc/postfix/transport
 
 milter_header_checks = pcre:/etc/postfix/milter_header_checks
 

roles/mailman3/tasks/main.yml

@@ -43,6 +43,12 @@
   become_user: postgres
   become_method: su
 
+- name: open firewall holes for mailman (LMTP)
+  ansible.posix.firewalld: port=8024/tcp zone=wireguard permanent=true state=enabled immediate=yes
+  when: configure_firewall
+  tags:
+    - firewall
+
 # TODO: start uwsgi
 # TODO: hyperkittynginx.ini
 # TODO: hyperkitty databases

roles/mailman3/templates/mailman.cfg.j2

@@ -11,5 +11,7 @@ admin_pass: {{ vault_mailman_admin_pass }}
 
 [mta]
 configuration: /etc/postfix.cfg
+lmtp_host: {{ hostvars['mailman3.archlinux.org']['wireguard_address'] }}
+lmtp_port: 8024
 smtp_host: {{ hostvars['lists.archlinux.org']['wireguard_address'] }}
 smtp_port: 25