fix(postfix): disable queue hashing so telegraf can read the queue

postfix recreates the hash subdirectories of deferred and defer with
mode 0700, whose mask cancels the inherited telegraf acl, so
inputs.postfix failed with permission denied. Also drop the deprecated
smtpd_use_tls; smtpd_tls_security_level = may already covers it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RywMtsL8qXG7GDY3MHq9Uh
This commit is contained in:
CroneKorkN 2026-10-23 12:03:30 +02:00
parent 4493226669
commit f0b28126d1
No known key found for this signature in database

View file

@ -3,7 +3,6 @@ biff = no
append_dot_mydomain = no append_dot_mydomain = no
readme_directory = no readme_directory = no
compatibility_level = 2 compatibility_level = 2
smtpd_use_tls=yes
smtpd_tls_session_cache_database = <%text>btree:${data_directory}/smtpd_scache</%text> smtpd_tls_session_cache_database = <%text>btree:${data_directory}/smtpd_scache</%text>
smtp_tls_session_cache_database = <%text>btree:${data_directory}/smtp_scache</%text> smtp_tls_session_cache_database = <%text>btree:${data_directory}/smtp_scache</%text>
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
@ -19,6 +18,8 @@ recipient_delimiter = +
inet_interfaces = all inet_interfaces = all
inet_protocols = all inet_protocols = all
message_size_limit = ${10**8} message_size_limit = ${10**8}
# no hash subdirectories: postfix creates them with mode 0700, which masks the telegraf acl
hash_queue_names =
virtual_mailbox_domains = pgsql:/etc/postfix/virtual_mailbox_domains.cf virtual_mailbox_domains = pgsql:/etc/postfix/virtual_mailbox_domains.cf
virtual_mailbox_maps = pgsql:/etc/postfix/virtual_mailbox_maps.cf virtual_mailbox_maps = pgsql:/etc/postfix/virtual_mailbox_maps.cf