postfix: simplified headers-check (privacy)

Author: arodier

roles/postfix/tasks/install/config.yml

@@ -1,6 +1,6 @@
 ---
 
-- name: Copy configuration template
+- name: Copy configuration templates
   notify: Restart postfix
   ansible.builtin.template:
     src: "{{ file }}"
@@ -14,3 +14,4 @@
     - headers-check.cf
   loop_control:
     loop_var: file
+  tags: config

roles/postfix/tasks/install/main.yml

@@ -16,6 +16,7 @@
 
 - name: Generic config
   ansible.builtin.include_tasks: install/config.yml
+  tags: config
 
 - name: Firewall configuration
   ansible.builtin.include_tasks: install/firewall.yml

roles/postfix/templates/headers-check.cf

@@ -9,8 +9,4 @@
 {% endif %}
 # Remove client's IP address
 /^X-Originating-IP:/                    IGNORE
-# Remove links that contains LAN details
-/^Received: from [a-z]+\.{{ network.domain | regex_escape() }}.*/       IGNORE
-/^Received: from.*\[192\.168\.[0-9]+\.[0-9]+\].*/                       IGNORE
-/^Received: from.*\[172\.16\.[0-9]+\.[0-9]+\].*/                        IGNORE
-/^Received: from.*\[10\.[0-9]+.[0-9]+\.[0-9]+\].*/                      IGNORE
+/^Received: .*/                         IGNORE

roles/postfix/templates/main.cf

@@ -132,8 +132,8 @@ non_smtpd_milters =
     # antispam:
     # antivirus:
 
-# Special filters on the headers
-header_checks = pcre:/etc/postfix/headers-check.cf
+# Special filters on the headers when sending emails outside
+smtp_header_checks = pcre:/etc/postfix/headers-check.cf
 
 # The macros that are sent to Milter applications after the SMTP MAIL FROM command.
 milter_mail_macros = i {mail_addr} {client_addr} {client_name} {auth_authen} {auth_type}