A SaltStack module for Zimbra 8 configuration management.
It uses LDAP or the filesystem for reads, which is drastically faster than running zmprov/zmlocalconfig directly. However, zmprov/zmlocalconfig is still used for writes for reliability.
- Gets the value for the given localconfig:
salt '*' zimbra.get_localconfig mysql_root_password - Sets the value for the given localconfig:
salt '*' zimbra.set_localconfig antispam_enable_rule_updates true - Run a zmprov command :
salt '*' zimbra.zmprov "createAccount [email protected] somepass" - Check if a zimlet is enabled in a COS:
salt '*' zimbra.zimletCosEnabled com_zimbra_phone default
See sample.sls for more examples, but here are a few:
# Enable icon-flashing for new mail:
default_newmail_flash_icon:
zimbra.modifyCos:
- name: 'zimbraPrefMailFlashIcon'
- cos: 'default'
- value: 'TRUE'
# Disable phone Zimlet:
disable_phone_zimlet:
zimbra.disableZimletCos:
- name: 'com_zimbra_phone'
- cos: 'default'
# Block file extensions in attachments:
{% for ext in [ 'bat', 'cab', 'chm', 'cmd', 'com', 'exe', 'hlp',
'jar', 'pif', 'reg', 'scr', 'vbe', 'vbs', 'vbx' ] %}
global_block_extension_{{ext}}:
zimbra.modifyConfig:
- name: '+zimbraMtaBlockedExtension'
- value: {{ext}}
{% endfor %}
# zimbra ms ... example
# Workaround for https://bugzilla.zimbra.com/show_bug.cgi?id=80563
disable_proxy_upstream_ssl:
zimbra.modifyServer:
- name: 'zimbraReverseProxySSLToUpstreamEnabled'
- server: {{ grains['fqdn'] }}
- value: 'FALSE'
# Enable volume compression
# after a fresh zimbra install, the volume is 1
enable_volume_compression:
zimbra.compressVolume:
- name: '1'
# Enable antispam rule updates
antispam_enable_rule_updates:
zimbra.zmlocalconfig:
- name: 'antispam_enable_rule_updates'
- value: 'true'