summaryrefslogtreecommitdiffstats
path: root/roles
diff options
context:
space:
mode:
Diffstat (limited to 'roles')
-rw-r--r--roles/IMAP-proxy/tasks/main.yml2
-rw-r--r--roles/IMAP/tasks/imap.yml2
-rw-r--r--roles/lists/tasks/mlmmj.yml2
3 files changed, 3 insertions, 3 deletions
diff --git a/roles/IMAP-proxy/tasks/main.yml b/roles/IMAP-proxy/tasks/main.yml
index 2ddba96..7773cb3 100644
--- a/roles/IMAP-proxy/tasks/main.yml
+++ b/roles/IMAP-proxy/tasks/main.yml
@@ -1,32 +1,32 @@
- name: Install Dovecot
#apt: pkg={{ item }} default_release={{ ansible_lsb.codename }}-backports
apt: pkg={{ item }}
with_items:
- dovecot-core
- dovecot-imapd
- name: Create a user 'imapproxy'
user: name=imapproxy system=yes
createhome=no
home=/home/imapproxy
- shell=/bin/false
+ shell=/usr/sbin/nologin
password=!
state=present
- name: Create a home directory for user 'imapproxy'
file: path=/home/imapproxy
state=directory
owner=imapproxy group=imapproxy
mode=0700
- name: Configure Dovecot
copy: src=etc/dovecot/conf.d/{{ item }}
dest=/etc/dovecot/conf.d/{{ item }}
owner=root group=root
mode=0644
register: r
with_items:
- 10-auth.conf
- 10-logging.conf
- 10-mail.conf
- 10-master.conf
diff --git a/roles/IMAP/tasks/imap.yml b/roles/IMAP/tasks/imap.yml
index 9365640..e7023e7 100644
--- a/roles/IMAP/tasks/imap.yml
+++ b/roles/IMAP/tasks/imap.yml
@@ -1,36 +1,36 @@
- name: Install Dovecot
apt: pkg={{ item }}
with_items:
- dovecot-core
- dovecot-ldap
- dovecot-imapd
- dovecot-lmtpd
- dovecot-antispam
- dovecot-managesieved
- dovecot-sieve
- name: Create a user 'vmail'
user: name=vmail system=yes
createhome=no
home=/home/mail
- shell=/bin/false
+ shell=/usr/sbin/nologin
password=!
state=present
## TODO: make a LDAP query listing all users using iterate_attrs and
## iterate_filter. (Alternatively, use a dict, see
## https://www.opensource.apple.com/source/dovecot/dovecot-293/dovecot.Config/dovecot-dict-auth.conf.ext)
## Required for dbox, see
## http://wiki2.dovecot.org/MailboxFormat/dbox#Multi-dbox
#- name: Create a nightly cron job to purge expunged messages
# cron: name="Purge expunged messages"
# minute=7 hour=5
# user=vmail cron_file=doveadm-purge
# job="/usr/bin/doveadm purge -A"
# The ownership and permissions ensure that dovecot won't try to
# deliver mails under an umounted mountpoint.
- name: Create a home directory for user 'vmail'
file: path=/home/mail
state=directory
owner=root group=root
diff --git a/roles/lists/tasks/mlmmj.yml b/roles/lists/tasks/mlmmj.yml
index 51d779f..e5e029f 100644
--- a/roles/lists/tasks/mlmmj.yml
+++ b/roles/lists/tasks/mlmmj.yml
@@ -1,31 +1,31 @@
- name: Install MLMMJ
apt: pkg={{ item }}
with_items:
- mlmmj
# Weird the debian package doesn't do it by itself...
- name: Create a user 'mlmmj'
user: name=mlmmj system=yes
createhome=no
home=/var/spool/mlmmj
- shell=/bin/false
+ shell=/usr/sbin/nologin
password=!
state=present
- name: Add 'www-data' to the group 'mlmmj'
user: name=www-data groups=mlmmj append=yes
- name: Create a home directory for user 'mlmmj'
file: path=/var/spool/mlmmj
state=directory
owner=mlmmj group=mlmmj
mode=0700
- name: Create /var/lib/mlmmj
file: path=/var/lib/mlmmj
state=directory
owner=mlmmj group=mlmmj
mode=0750
- name: Auto-maintain mlmmj's spool directory
copy: src=etc/cron.d/mlmmj