From 17d7427e0bc5e61ee10e28cbc5cba5b8a7566d58 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Sun, 5 Jun 2016 17:30:00 +0200
Subject: Use stunnel to secure the connection from the webmail to
 ldap.fripost.org.
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

We should use IPSec instead, but doing so would force us to weaken
slapd.conf's ‘security’ setting.
---
 roles/webmail/tasks/main.yml | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'roles/webmail/tasks/main.yml')

diff --git a/roles/webmail/tasks/main.yml b/roles/webmail/tasks/main.yml
index 8ee50bd..9c40a34 100644
--- a/roles/webmail/tasks/main.yml
+++ b/roles/webmail/tasks/main.yml
@@ -3,6 +3,12 @@
   tags:
     - postfix
     - mail
+    - stunnel
+- include: ldap.yml
+  when: "'LDAP-provider' not in group_names"
+  tags:
+    - ldap
+    - stunnel
 - include: roundcube.yml
   tags:
     - roundcube
-- 
cgit v1.2.3