disable chroot

tasks/main.yml

@@ -180,6 +180,34 @@
         "{{ 'yes' if postfix_biff else 'no' }}"
   notify: reload postfix
 
+- name: Disable chroot for services
+  postconf:
+    service: "{{ item.1 }}"
+    type: "{{ item.2 }}"
+    chroot: "n"
+  notify: reload postfix
+  loop:
+    - [smtp, inet]
+    - [pickup, unix]
+    - [cleanup, unix]
+    - [qmgr, unix]
+    - [tlsmgr, unix]
+    - [rewrite, unix]
+    - [bounce, unix]
+    - [defer, unix]
+    - [trace, unix]
+    - [verify, unix]
+    - [flush, unix]
+    - [smtp, unix]
+    - [relay, unix]
+    - [showq, unix]
+    - [error, unix]
+    - [retry, unix]
+    - [discard, unix]
+    - [lmtp, unix]
+    - [anvil, unix]
+    - [scache, unix]
+
 - name: Enable submission service
   postconf:
     service: submission