From f0b28126d131b53b9753ceae097f82ae30628309 Mon Sep 17 00:00:00 2001 From: CroneKorkN Date: Fri, 23 Oct 2026 12:03:30 +0200 Subject: [PATCH] fix(postfix): disable queue hashing so telegraf can read the queue postfix recreates the hash subdirectories of deferred and defer with mode 0700, whose mask cancels the inherited telegraf acl, so inputs.postfix failed with permission denied. Also drop the deprecated smtpd_use_tls; smtpd_tls_security_level = may already covers it. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01RywMtsL8qXG7GDY3MHq9Uh --- bundles/postfix/files/main.cf | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/bundles/postfix/files/main.cf b/bundles/postfix/files/main.cf index 4beb65e..c261dad 100644 --- a/bundles/postfix/files/main.cf +++ b/bundles/postfix/files/main.cf @@ -3,7 +3,6 @@ biff = no append_dot_mydomain = no readme_directory = no compatibility_level = 2 -smtpd_use_tls=yes smtpd_tls_session_cache_database = <%text>btree:${data_directory}/smtpd_scache smtp_tls_session_cache_database = <%text>btree:${data_directory}/smtp_scache smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination @@ -19,6 +18,8 @@ recipient_delimiter = + inet_interfaces = all inet_protocols = all message_size_limit = ${10**8} +# no hash subdirectories: postfix creates them with mode 0700, which masks the telegraf acl +hash_queue_names = virtual_mailbox_domains = pgsql:/etc/postfix/virtual_mailbox_domains.cf virtual_mailbox_maps = pgsql:/etc/postfix/virtual_mailbox_maps.cf