Ansible config for hetzner mailserver

This commit is contained in:
Ruben Hensen
2026-03-14 22:24:53 +01:00
parent bc2f75294d
commit 2a3bfb5d1a
30 changed files with 775 additions and 0 deletions
@@ -0,0 +1,11 @@
---
ufw_default_incoming: "deny"
ufw_default_outgoing: "allow"
ufw_allowed_ports:
- { port: "{{ ssh_port | default(22) }}", proto: "tcp", comment: "SSH" }
- { port: "25", proto: "tcp", comment: "SMTP" }
- { port: "465", proto: "tcp", comment: "SMTP submissions (implicit TLS)" }
- { port: "587", proto: "tcp", comment: "SMTP submission (STARTTLS)" }
- { port: "993", proto: "tcp", comment: "IMAP (implicit TLS)" }
- { port: "443", proto: "tcp", comment: "HTTPS (web admin + JMAP)" }
- { port: "8080", proto: "tcp", comment: "HTTP (certbot + redirect)" }