summaryrefslogtreecommitdiffstats
path: root/roles/common/templates
diff options
context:
space:
mode:
Diffstat (limited to 'roles/common/templates')
-rw-r--r--roles/common/templates/etc/fail2ban/jail.local.j210
-rw-r--r--roles/common/templates/etc/iptables/services.j23
2 files changed, 13 insertions, 0 deletions
diff --git a/roles/common/templates/etc/fail2ban/jail.local.j2 b/roles/common/templates/etc/fail2ban/jail.local.j2
index 661c862..7c5bc0e 100644
--- a/roles/common/templates/etc/fail2ban/jail.local.j2
+++ b/roles/common/templates/etc/fail2ban/jail.local.j2
@@ -81,3 +81,13 @@ port = submission
filter = sasl
logpath = /var/log/mail.warn
{% endif %}
+
+
+{% if 'webmail' in group_names %}
+[roundcube]
+
+enabled = true
+port = http,https
+filter = roundcube
+logpath = /var/log/roundcube/errors
+{% endif %}
diff --git a/roles/common/templates/etc/iptables/services.j2 b/roles/common/templates/etc/iptables/services.j2
index 2a36932..3ddb87e 100644
--- a/roles/common/templates/etc/iptables/services.j2
+++ b/roles/common/templates/etc/iptables/services.j2
@@ -25,3 +25,6 @@ in tcp 993 # IMAPS
{% if 'MSA' in group_names %}
in tcp 587 # SMTP-AUTH
{% endif %}
+{% if 'webmail' in group_names %}
+in tcp 80,443 # HTTP/HTTPS
+{% endif %}