Add Salt baseline states for Proxmox Mail Gateway.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-04 11:27:44 +03:00
parent 35d81332fa
commit 85cecf78f6
23 changed files with 729 additions and 1 deletions
@@ -0,0 +1,63 @@
+pmg:
+  base_packages:
+    - curl
+    - vim-tiny
+    - rsync
+    - ca-certificates
+    - jq
+
+  ssh_allow_users: []
+  ssh_password_authentication: true
+
+  journald_system_max_use: 1G
+  journald_max_file_sec: 1month
+
+  pmg_services:
+    - postfix
+    - pmg-smtp-filter
+    - pmgpolicy
+    - pmgdaemon
+    - pmgmirror
+    - pmgtunnel
+  update_dist_upgrade: true
+  update_auto_reboot: false
+  update_reboot_delay_minutes: 1
+
+  custom_check:
+    enabled: true
+    script_path: /usr/local/bin/pmg-custom-check
+    log_dir: /var/log/mail_av
+    managed_packages:
+      - pwgen
+    ksc_superuser:
+      enabled: true
+      name: superuser
+      manage_sudoers: true
+    required_services:
+      - kesl
+      - klnagent64
+
+  manage_hosts_file: false
+  hosts_file_entries:
+    - ip: 10.80.38.152
+      hostname: p-mailgw-x1-01
+      aliases:
+        - p-mailgw-x1-01.lmru.tech
+    - ip: 10.220.41.152
+      hostname: p-mailgw-x2-01
+      aliases:
+        - p-mailgw-x2-01.lmru.tech
+
+  wazuh:
+    enabled: true
+    version: 4.14.0-1
+    manager: 10.80.120.205
+    group: test_auditd_unix
+
+  qualys:
+    enabled: true
+    package_url: https://storage.yandexcloud.net/qualys-agent/QualysCloudAgent.deb
+    package_path: /opt/QualysCloudAgent.deb
+    activation_id: 5eb9ad8e-02cc-431a-9afb-b8caad175ec1
+    customer_id: 4d868109-dad3-5536-82b4-9f3a6f3010bc
+    server_uri: https://qagpublic.qg1.apps.qualys.eu/CloudAgent/
@@ -0,0 +1,3 @@
+base:
+  '*':
+    - pmg