From 88112ee192127825c97e431ca97b7a1a422d2bc7 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Fri, 2 Oct 2020 00:30:22 +0200
Subject: Roundcube: Don't allow overriding authres_status's
 use_fallback_verifier/trusted_mtas.

---
 roles/webmail/files/etc/roundcube/plugins/authres_status/config.inc.php | 1 +
 roles/webmail/tasks/roundcube.yml                                       | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/roles/webmail/files/etc/roundcube/plugins/authres_status/config.inc.php b/roles/webmail/files/etc/roundcube/plugins/authres_status/config.inc.php
index 8ee3bc7..6d41d4f 100644
--- a/roles/webmail/files/etc/roundcube/plugins/authres_status/config.inc.php
+++ b/roles/webmail/files/etc/roundcube/plugins/authres_status/config.inc.php
@@ -1,5 +1,6 @@
 <?php
 
+$config['use_fallback_verifier'] = false;
 $config['trusted_mtas'] = array('mx1.fripost.org', 'mx2.fripost.org');
 
 ?>
diff --git a/roles/webmail/tasks/roundcube.yml b/roles/webmail/tasks/roundcube.yml
index 8404b6d..afe20bf 100644
--- a/roles/webmail/tasks/roundcube.yml
+++ b/roles/webmail/tasks/roundcube.yml
@@ -147,6 +147,8 @@
     - { var: check_all_folders,      value: "false" }
     - { var: hide_blockquote_limit,  value: "8"     }
     - { var: attachment_reminder,    value: "true"  }
+    # Don't allow overriding these settings
+    - { var: dont_override, value: "array('use_fallback_verifier', 'trusted_mtas');"  }
 
 - name: Make the logo a hyperlink to the website
   lineinfile: dest=/usr/share/roundcube/skins/{{ item }}/templates/login.html
-- 
cgit v1.2.3