mailman3: SMTP config

roles/mailman/tasks/main.yml

@@ -22,7 +22,10 @@
     - milter_header_checks
 
 - name: open firewall holes for postfix
-  ansible.posix.firewalld: service=smtp permanent=true state=enabled immediate=yes
+  ansible.posix.firewalld: service=smtp zone={{ item }} permanent=true state=enabled immediate=yes
+  loop:
+    -
+    - wireguard
   when: configure_firewall
   tags:
     - firewall

roles/mailman/templates/main.cf.j2

@@ -18,6 +18,11 @@ smtp_tls_security_level = may
 mydomain = {{ lists_domain }}
 myorigin = {{ lists_domain }}
 mydestination = {{ lists_domain }}
+mynetworks =
+    127.0.0.0/8
+    [::1]/128
+    [fe80::]/64
+     {{ hostvars['mailman3.archlinux.org']['wireguard_address'] }}
 
 # fatal: configuration error: mailbox_size_limit is smaller than message_size_limit
 message_size_limit = 104857600

roles/mailman3/templates/mailman.cfg.j2

@@ -11,3 +11,5 @@ admin_pass: {{ vault_mailman_admin_pass }}
 
 [mta]
 configuration: /etc/postfix.cfg
+smtp_host: {{ hostvars['lists.archlinux.org']['wireguard_address'] }}
+smtp_port: 25

roles/mailman3/templates/settings.py.j2

@@ -36,3 +36,8 @@ SECRET_KEY = '{{ vault_mailman_web_secret_key }}'
 
 MAILMAN_REST_API_USER = '{{ vault_mailman_admin_user }}'
 MAILMAN_REST_API_PASS = '{{ vault_mailman_admin_pass }}'
+
+# https://docs.djangoproject.com/en/3.2/topics/email/#smtp-backend
+EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend'
+EMAIL_HOST = '{{ hostvars['lists.archlinux.org']['wireguard_address'] }}'
+EMAIL_PORT = 25