Files
lasuite-messages/deploy/env/mta-in-py.defaults

21 lines
1.1 KiB
Plaintext

# Defaults for the pure-Python (aiosmtpd) inbound MTA. The Postfix-based
# `mta-in` service does not consume these.
#
# Deliberately empty of limits. Anything that merely restates the value already
# in src/pymta/settings.py is left out: pinning it here would mean the shipped
# default is never the one the test suite runs against, so a change to it (or
# a regression in it) would pass CI unnoticed.
#
# PYMTA_SMTP_HOSTNAME is intentionally left unset so the shared MYHOSTNAME env
# wins (matching the Postfix variant). Set explicitly to override.
#
# PROXY protocol stays off: the test suite connects to pymta directly, so the
# TCP peer IS the client. Behind a load balancer, set
# PYMTA_ENABLE_PROXY_PROTOCOL=true AND PYMTA_TRUSTED_PROXIES to the balancer's
# IPs/CIDRs. With PROXY protocol on and no allowlist pymta still starts, but
# logs a SECURITY warning: every peer's header is then trusted.
#
# A balancer WITHOUT PROXY protocol is not a supported configuration: every
# session would bucket under the balancer's IP and every message would be
# stamped with it as the sender's address.