Proxy 

In some strict environments, Internet access should be done via a proxy server.

DNF proxy

DNF is the package manager used by Red Hat-based Linux distributions.

To configure the back-end to use a configured proxy, follow these steps:

Create and Ansible override file at /etc/ciphermail/ansible/group_vars/all/dnf-proxy.yml.

Insert the required lines into your configuration, then replace each placeholder with the actual values for your environment (for example, hostnames, IP addresses, service names, usernames, or passwords).

---
# the proxy configuration for dnf
ciphermail_appliance__dnf_proxy_host: '<scheme>://<ip-or-hostname>[:port]'
ciphermail_appliance__dnf_proxy_username: ''
ciphermail_appliance__dnf_proxy_password: ''

After creating the override file, you need to run the playbook to apply the changes:

sudo cm-run-playbook

Back-end proxy

To configure the back-end to use a configured proxy, follow these steps:

Create an Ansible override file at /etc/ciphermail/ansible/group_vars/all/backend-proxy.yml.

Insert the required lines into your configuration, then replace each placeholder with the actual values for your environment.

---
# the http proxy host config for the back-ends
ciphermail_common__http_proxy_host: ''
ciphermail_common__http_proxy_port: 80
ciphermail_common__https_proxy_host: ''
ciphermail_common__https_proxy_port: 443

After creating the override file, you need to run the playbook to apply the changes:

sudo cm-run-playbook

Tip

The back-end does not support authenticated proxies because Java does not provide a standardized method for proxy authentication. If your environment requires proxy authentication, please install and configure the tinyproxy package on your local machine. tinyproxy will act as a local forwarding proxy to handle authentication. For detailed setup instructions, please contact us.