initial

snippets/certificate-test.yml

@@ -0,0 +1,25 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: wiki-mainscnt-eu
+  namespace: homea
+spec:
+  secretName: wiki-mainscnt-eu-cert
+  duration: 2160h
+  renewBefore: 360h
+  subject:
+    organizations:
+      - hottis-de
+  isCA: false
+  privateKey:
+    algorithm: RSA
+    encoding: PKCS1
+    size: 2048
+  usages:
+    - server auth
+  dnsNames:
+    - wiki.mainscnt.eu
+  issuerRef:
+    name: letsencrypt-staging-http
+    kind: ClusterIssuer
+    group: cert-manager.io

snippets/exim4.conf

@@ -0,0 +1,45 @@
+domainlist forward_domains = mainscnt.eu
+
+tls_advertise_hosts = *
+
+
+acl_smtp_rcpt = acl_rcpt
+acl_smtp_data = acl_data
+
+begin acl
+
+acl_rcpt:
+  require verify = recipient
+
+  accept condition = ${if match_domain{$domain}{+forward_domains}{yes}{no}}
+
+  deny  message = Access denied
+
+acl_data:
+  accept
+
+
+begin routers
+
+forward_aliases:
+  driver  = redirect
+  domains = +forward_domains
+  data    = ${lookup{$local_part@$domain}lsearch{/etc/exim4/forwarder}}
+  no_expn
+  allow_defer
+  allow_fail
+
+dnslookup_out:
+  driver    = dnslookup
+  domains   = ! +forward_domains
+  transport = remote_smtp
+  no_more
+
+
+begin transports
+
+remote_smtp:
+  driver = smtp
+  hosts_require_tls = *
+
+

snippets/forwarder

@@ -0,0 +1 @@
+wn@mainscnt.eu: wolfgang.hottgenroth@icloud.com