---
- name: Playbook to install postmark and postfix
  hosts: all
  gather_facts: false
  tasks:
    - name: Remove postfix and sendmail
      tags: redeploy
      ansible.builtin.shell: |
        set -o pipefail
        dnf -y remove postfix sendmail
        rm -rf /etc/postfix/
        dnf -y install postfix cyrus-sasl-plain s-nail
        echo -e "\n#Sending all emails through postmark" >> /etc/postfix/main.cf
        echo "relayhost = [smtp.postmarkapp.com]:587" >> /etc/postfix/main.cf
        echo "smtp_sasl_auth_enable = yes" >> /etc/postfix/main.cf
        echo "smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd" >> /etc/postfix/main.cf
        echo "smtp_sasl_security_options = noanonymous" >> /etc/postfix/main.cf
        echo "smtp_tls_security_level = may" >> /etc/postfix/main.cf
        echo "smtp_tls_loglevel = 1" >> /etc/postfix/main.cf
        echo "smtp_always_send_ehlo = yes" >> /etc/postfix/main.cf
        echo "[smtp.postmarkapp.com]:587 PM-T-mdmonitor-VLXylaXkYUznVO0nZVOX1:0ZnmCrZdSdpJGPGqoyQ2jukwGTrcyUb8Q5KI" > /etc/postfix/sasl_passwd
        echo "#end postmark" >> /etc/postfix/main.cf
        chmod 600 /etc/postfix/sasl_passwd
        postmap /etc/postfix/sasl_passwd
        systemctl enable --now postfix.service
        systemctl --no-pager status postfix.service
      args:
        executable: /bin/bash
      changed_when: false
    - name: Set email alias for user root
      tags: newaliases
      ansible.builtin.shell: |
        set -o pipefail
        sed -i '/root:/d' /etc/aliases
        echo "root:           opsmonitor@layershift.com" >> /etc/aliases
        newaliases
        systemctl restart postfix.service
        systemctl --no-pager status postfix.service
      args:
        executable: /bin/bash
      changed_when: false