Disable DNS for postfix in testing

ansible.cfg

@@ -4,7 +4,5 @@ gathering = smart
 fact_caching = ansible.builtin.jsonfile
 fact_caching_connection = fact_cache
 
-filter_plugins = plugins/filter
-
 [privilege_escalation]
 become = True

playbooks/roles/system/base/mail/meta/argument_specs.yml

@@ -5,6 +5,9 @@ argument_specs:
       ansible_hostname:
         type: "str"
         required: true
+      system_base_mail_disable_dns:
+        type: "bool"
+        required: true
       system_mail_domain:
         type: "str"
         required: true

playbooks/roles/system/base/mail/templates/postfix/main.cf.j2

@@ -46,6 +46,12 @@ recipient_delimiter = +
 inet_interfaces = loopback-only
 inet_protocols = all
 
+{% if system_base_mail_disable_dns %}
+smtp_host_lookup=native
+disable_dns_lookups = yes
+ignore_mx_lookup_error = yes
+{% endif %}
+
 # SASL parameters
 smtp_sasl_auth_enable = yes
 smtp_sasl_security_options = noanonymous

playbooks/system.yml

@@ -42,6 +42,8 @@
         - "system:base"
         - "system:base:nftables"
     - role: "system/base/mail"
+      vars:
+        system_base_mail_disable_dns: "{{ not (the_nine_worlds_production | bool) }}"
       tags:
         - "system:base"
         - "system:base:mail"