alum

A forwarding mail server inspired by @alum.mit.edu

What's in the package

• A secure Postfix instance that will ONLY forward mail, according to the aliases file
• Full opportunistic TLS support
• Automatic security updates, with reboot, and emails on error to [email protected]
• Daily Tarsnap backups of the aliases file
• A Ansible playbook to setup all of this

Usage

• Create a Tarsnap key and put it in tarsnap.key
• Generate a self-signed key+certificate and put it in smtpd.pem
• Start a Ubuntu 14.04 LTS machine
• Make sure you can ssh into the machine, and that sudo is passwordless
• Create a inventory.ini file like this

[alum]
98.25.536.22

• Run

ansible-playbook -i inventory.ini \
    -e domain=alum.example.com \
    playbook.yml

Include -e mirror=alum.example.org if you want to support multiple domains.

• Set the DNS A record for alum.example.com to point to the machine, and the MX record of alum.example.com to alum.example.com

Adding aliases

Add them like this

[email protected] [email protected]
[email protected] [email protected]
<alias-email-with-domain> <actual-recipient-email>

to /etc/postfix/virtual and then run

# postmap /etc/postfix/virtual
# postfix reload