From de4859456f1de54540c96ad97f62858dd089a980 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Tue, 1 Jul 2014 23:02:45 +0200
Subject: Replace IPSec tunnels by app-level ephemeral TLS sessions.

For some reason giraff doesn't like IPSec.  App-level TLS sessions are
less efficient, but thanks to ansible it still scales well.
---
 roles/IMAP/tasks/imap.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'roles/IMAP/tasks/imap.yml')

diff --git a/roles/IMAP/tasks/imap.yml b/roles/IMAP/tasks/imap.yml
index 5424485..3e93c53 100644
--- a/roles/IMAP/tasks/imap.yml
+++ b/roles/IMAP/tasks/imap.yml
@@ -62,6 +62,12 @@
         owner=vmail group=vmail
         mode=0700
 
+- name: Create directory /etc/dovecot/ssl
+  file: path=/etc/dovecot/ssl
+        state=directory
+        owner=root group=root
+        mode=0755
+
 - name: Generate a private key and a X.509 certificate for Dovecot
   command: genkeypair.sh x509
                          --pubkey=/etc/dovecot/ssl/imap.fripost.org.pem
@@ -73,6 +79,8 @@
   failed_when: r1.rc > 1
   notify:
     - Restart Dovecot
+  tags:
+    - genkey
 
 - name: Configure Dovecot
   copy: src=etc/dovecot/{{ item }}
-- 
cgit v1.2.3