A forwarding mail server inspired by @alum.mit.edu
- A secure Postfix instance that will ONLY forward mail, according to the aliases file
- Full opportunistic TLS support
- Automatic security updates, with reboot, and emails on error to
[email protected] - Daily Tarsnap backups of the aliases file
- A Ansible playbook to setup all of this
- Create a Tarsnap key and put it in
tarsnap.key - Generate a self-signed key+certificate and put it in smtpd.pem
- Start a Ubuntu 14.04 LTS machine
- Make sure you can ssh into the machine, and that sudo is passwordless
- Create a
inventory.inifile like this
[alum]
98.25.536.22
- Run
ansible-playbook -i inventory.ini \
-e domain=alum.example.com \
playbook.yml
Include -e mirror=alum.example.org if you want to support multiple domains.
- Set the DNS A record for
alum.example.comto point to the machine, and the MX record ofalum.example.comtoalum.example.com
Add them like this
[email protected] [email protected]
[email protected] [email protected]
<alias-email-with-domain> <actual-recipient-email>
to /etc/postfix/virtual and then run
# postmap /etc/postfix/virtual
# postfix reload