Merge branch 't39148-fix-sasl-permission' into 'main'

Fix postfix sasl permission, Refs #39148

See merge request sys/ansible-public!78

roles/system/postfix/handlers/main.yml

 ---
 
 - name: "Postmap sasl"
-  ansible.builtin.command: postmap hash:/etc/postfix/sasl-passwords
+  ansible.builtin.command: postmap hash:/etc/postfix/sasl_passwd
   changed_when: false
 
 - name: "Postmap generic"

roles/system/postfix/tasks/configure/postfix_authentication.yml

@@ -4,8 +4,10 @@
   notify: "Postmap sasl"
   ansible.builtin.template:
     backup: true
-    src: sasl-passwords.j2
-    dest: /etc/postfix/sasl-passwords
-    mode: "644"
+    src: sasl_passwd.j2
+    dest: /etc/postfix/sasl_passwd
+    owner: "root"
+    group: "root"
+    mode: "600"
 
 ...

roles/system/postfix/templates/main.cf.j2

@@ -43,6 +43,6 @@ bounce_notice_recipient = bounces@{{ postfix_mailname }}
 
 # SMTP relay authentication
 smtp_sasl_auth_enable = yes
-smtp_sasl_password_maps = hash:/etc/postfix/sasl-passwords
+smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
 smtp_sasl_security_options = noanonymous
 {% endif %}