summaryrefslogtreecommitdiffstats
path: root/roles/common
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2016-06-05 17:30:00 +0200
committerGuilhem Moulin <guilhem@fripost.org>2016-06-05 17:33:25 +0200
commit17d7427e0bc5e61ee10e28cbc5cba5b8a7566d58 (patch)
tree00dc894e22ab7221e908faeac98095835b0a0782 /roles/common
parent57e40efc54c230566fd5f6bd10d25692709909b7 (diff)
Use stunnel to secure the connection from the webmail to ldap.fripost.org.
We should use IPSec instead, but doing so would force us to weaken slapd.conf's ‘security’ setting.
Diffstat (limited to 'roles/common')
-rw-r--r--roles/common/tasks/main.yml1
1 files changed, 1 insertions, 0 deletions
diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index 04681bd..e419bf3 100644
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -15,6 +15,7 @@
- include: stunnel.yml
tags: stunnel
+ when: "'webmail' in group_names and ('LDAP-provider' not in group_names or 'out' not in group_names)"
- include: samhain.yml
tags: samhain
- include: auditd.yml