summaryrefslogtreecommitdiffstats
path: root/roles/lists/tasks
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2018-12-07 22:33:54 +0100
committerGuilhem Moulin <guilhem@fripost.org>2018-12-09 20:25:39 +0100
commit53cd6d2c79d206273fbe9b924156b440894a4776 (patch)
tree4c8131965b2da427a1bdc166c511a2ce5ea0673a /roles/lists/tasks
parent53c62a66705402235ef7077f5fab759b59c490cb (diff)
Upgrade 'lists' role to Debian Stretch.
Diffstat (limited to 'roles/lists/tasks')
-rw-r--r--roles/lists/tasks/nginx.yml2
-rw-r--r--roles/lists/tasks/sympa.yml21
2 files changed, 5 insertions, 18 deletions
diff --git a/roles/lists/tasks/nginx.yml b/roles/lists/tasks/nginx.yml
index 6bf4afc..bbff34a 100644
--- a/roles/lists/tasks/nginx.yml
+++ b/roles/lists/tasks/nginx.yml
@@ -1,22 +1,22 @@
- name: Install Nginx
- apt: pkg=nginx
+ apt: pkg=nginx-light
- name: Copy /etc/nginx/sites-available/sympa
copy: src=etc/nginx/sites-available/sympa
dest=/etc/nginx/sites-available/sympa
owner=root group=root
mode=0644
register: r1
notify:
- Restart Nginx
- name: Create /etc/nginx/sites-enabled/sympa
file: src=../sites-available/sympa
dest=/etc/nginx/sites-enabled/sympa
owner=root group=root
state=link
register: r2
notify:
- Restart Nginx
- name: Copy HPKP header snippet
diff --git a/roles/lists/tasks/sympa.yml b/roles/lists/tasks/sympa.yml
index 284f320..0d5eac1 100644
--- a/roles/lists/tasks/sympa.yml
+++ b/roles/lists/tasks/sympa.yml
@@ -1,87 +1,74 @@
- apt: pkg={{ packages }} install_recommends=no
vars:
packages:
- mariadb-server
- sympa
- libnet-dns-perl
- libnet-dns-sec-perl
- libmail-dkim-perl
- libcrypt-smime-perl
- libcrypt-openssl-x509-perl
- name: Make the 'sympa' MySQL user use unix_socket
mysql_user2: name=sympa password= auth_plugin=unix_socket
state=present
-# XXX We want to change the retun-path for sendpasswd notices from
-# 'sympa-request@$robot' to 'noreply@fripost.org'.
-# * /usr/lib/cgi-bin/sympa/wwsympa.fcgi
-# do_requestpasswd, do_subrequest
-# add $param->{'return_path'}='noreply@fripost.org';
-# * /usr/share/sympa/lib/List.pm
-# send_global_file
-# $data->{'return_path'} //= &Conf::get_robot_conf($robot, 'request');
-# * /usr/share/sympa/default/scenari/send.newsletter
-# last line
-# true() smtp,dkim,smime,md5 -> reject,quiet
-# See #787946.
- name: Configure Sympa
copy: src=etc/sympa/{{ item }}
dest=/etc/sympa/{{ item }}
owner=root group=sympa
mode=0644
with_items:
- - sympa.conf
- - wwsympa.conf
+ - sympa/sympa.conf
- topics.conf
register: r1
notify:
- Restart Sympa
- name: Create Virtual hosts for Sympa (1)
file: path=/etc/sympa/{{ item }}
state=directory
- owner=root group=root
+ owner=sympa group=sympa
mode=0755
with_items:
- lists.fripost.org
register: r2
notify:
- Restart Sympa
- name: Create Virtual hosts for Sympa (2)
file: path=/var/lib/sympa/list_data/{{ item }}
state=directory
owner=sympa group=sympa
mode=0770
with_items:
- lists.fripost.org
register: r3
notify:
- Restart Sympa
- name: Install robot.conf
template: src=etc/sympa/robot.conf.j2
dest=/etc/sympa/{{ item }}/robot.conf
- owner=root group=root
- mode=0644
+ owner=sympa group=sympa
+ mode=0640
with_items:
- lists.fripost.org
register: r4
notify:
- Restart Sympa
- name: Enable Sympa
service: name=sympa enabled=yes
- name: Start Sympa
service: name=sympa state=started
when: not (r1.changed or r2.changed or r3.changed or r4.changed)
- meta: flush_handlers
- name: Copy wwsympa.{service,socket}
copy: src=etc/systemd/system/{{ item }}
dest=/etc/systemd/system/{{ item }}
owner=root group=root
mode=0644