add postfix configuration to ansible playbook for non-production servers

[martindemko]

• install postfix
• create SSL certificate for original hostname
• configure postfix's main.cf (adding following lines):

    smtp_tls_cert_file=/etc/ssl/SECTIGO/servercert.pem
    smtp_tls_key_file=/etc/ssl/SECTIGO/serverkey.pem
    smtp_tls_security_level = encrypt
    smtp_tls_wrappermode=yes
    relayhost = [rs.cesnet.cz]:465

• (optional) register hostname here

[martenson]

this seems to not be necessary since Galaxy uses python smtp client and our relay server seems to inherently trust us

[martindemko]

I know it worked with your company email address but did you try to send email outside of CESNET?

[martenson]

good remembering, it does not work outside of @cesnet, the relay is denied

[martenson]

I submitted QA1 and QA2 IPs to allow mail relay outside of cesnet realm

[martindemko]

I have fresh news. On production servers, we should use:
smtp_server: localhost:25 and let postfix do the sending and ask meta-provoz to change postfix's main.cf in Puppet inet_interfaces = all for galaxy servers.