second commit

templates/hardened/mailer/aliases.j2

@@ -0,0 +1,2 @@
+{{ env.current_user }}: root
+root: {{ alert.to }}

templates/hardened/mailer/mail.rc.j2

@@ -0,0 +1,6 @@
+set ask askcc append dot save crt
+#ignore Received Message-Id Resent-Message-Id Status Mail-From Return-Path Via Delivered-To
+set mta=/usr/bin/msmtp
+
+alias {{ env.current_user }} root
+alias root {{ alert.to }}

templates/hardened/mailer/msmtprc.j2

@@ -0,0 +1,26 @@
+# Set default values for all following accounts.
+defaults
+
+# Use the mail submission port 587 instead of the SMTP port 25.
+port 587
+
+# Always use TLS.
+tls on
+
+# Set a list of trusted CAs for TLS. The default is to use system settings, but
+# you can select your own file.
+tls_trust_file /etc/ssl/certs/ca-certificates.crt
+
+# The SMTP server of your ISP
+account alert
+host {{ alert.smtp.server }}
+from {{ env.fqdn }} <{{ alert.from }}>
+auth on
+user {{ alert.smtp.username }}
+password {{ alert.smtp.password }}
+
+# Set default account to isp
+account default: alert
+
+# Map local users to mail addresses
+aliases /etc/aliases