use postfix submission

README.md

@@ -1,3 +1,3 @@
-# ansible-role-mysql-docker
+# ansible-role-mariadb-docker
 
-Instalar mysql via Docker
+Este rol permite instalar mariadb en Docker.

defaults/main.yml

@@ -1,20 +1,39 @@
 ---
+# domain, webroot
+roundcube_domain: default
+roundcube_web_root: /roundcube
+roundcube_version: 1.3.10
+
 # container
-mysql_image: mysql
-mysql_container_name: mysql
-mysql_volume: mysql
+roundcube_image: eumau/roundcubemail:{{ roundcube_version }}
+roundcube_container: roundcube
+roundcube_volume: roundcube
 
-# clave del usuario root (CAMBIAR)
-mysql_root_password: password
+# mysql, mariadb, postgresql
+roundcube_db_type: sqlite
+roundcube_db_host: localhost
+roundcube_db_port: "{{ '5432' if 'post' in roundcube_db_type else '3306' }}"
+roundcube_db_user: roundcube
+roundcube_db_password: password
+roundcube_db_name:
+  roundcube{{ '.sqlite' if roundcube_db_type == 'sqlite' else '' }}
 
-# base de datos y usuario (opcionales)
-# mysql_database: db
-# mysql_user: db_user
-# mysql_password: db_pass
+# data dir (inside container)
+roundcube_data_dir: /var/www/html
 
-# binding del puerto mysql
-mysql_bind_host: 127.0.0.1
-mysql_bind_port: 3306
+# imap
+roundcube_imap_host: "tls://{{ dovecot_container | default('localhost') }}"
+roundcube_imap_port: "143"
+
+# smtp
+roundcube_smtp_host: "tls://{{ postfix_container | default('localhost') }}"
+roundcube_smtp_port: "587"
+
+# plugins
+roundcube_plugins: []
+
+# upload max filesize
+roundcube_upload_max_filesize: 40M
 
 # definido por rol docker
 docker_network_name: dockernet

tasks/main.yml

@@ -1,33 +1,108 @@
 ---
-- name: start mysql container
+# TODO: postgres support
+# - name: create roundcube database (pg)
+#   postgresql_db:
+#     state: present
+#     name: "{{ roundcube_db_name }}"
+#     login_host: "{{ postgresql_host }}"
+#     login_port: "{{ postgresql_port }}"
+#     login_user: "{{ postgresql_root_password }}"
+#     login_password: "{{ postgresql_root_password }}"
+
+# - name: create roundcube db user (pg)
+#   postgresql_user:
+#     state: present
+#     name: "{{ roundcube_db_user }}"
+#     password: "{{ roundcube_db_password }}"
+#     priv: "{{ roundcube_db_name }}.*:ALL"
+#     login_host: "{{ postgresql_host }}"
+#     login_port: "{{ postgresql_port }}"
+#     login_user: root
+#     login_password: "{{ postgresql_root_password }}"
+
+- name: create roundcube database
+  mysql_db:
+    state: present
+    name: "{{ roundcube_db_name }}"
+    login_host: "{{ mariadb_host }}"
+    login_port: "{{ mariadb_port }}"
+    login_user: root
+    login_password: "{{ mariadb_root_password }}"
+  when: roundcube_db_type in ('mariadb','mysql')
+
+- name: create roundcube db user
+  mysql_user:
+    state: present
+    name: "{{ roundcube_db_user }}"
+    host: "%"
+    password: "{{ roundcube_db_password }}"
+    priv: "{{ roundcube_db_name }}.*:ALL"
+    login_host: "{{ mariadb_host }}"
+    login_port: "{{ mariadb_port }}"
+    login_user: root
+    login_password: "{{ mariadb_root_password }}"
+  when: roundcube_db_type in ('mariadb','mysql')
+
+- name: start roundcube container
   docker_container:
-    image: "{{ mysql_image }}"
-    name: "{{ mysql_container_name }}"
+    image: "{{ roundcube_image }}"
+    name: "{{ roundcube_container }}"
     volumes:
-      - "{{ mysql_volume }}:/var/lib/mysql"
+      - "{{ roundcube_volume }}:/var/www/html"
     env:
-      MYSQL_ROOT_PASSWORD: "{{ mysql_root_password }}"
-      MYSQL_DATABASE: "{{ mysql_database | default(omit) }}"
-      MYSQL_USER: "{{ mysql_user | default(omit) }}"
-      MYSQL_PASSWORD: "{{ mysql_password | default(omit) }}"
+      ROUNDCUBEMAIL_DEFAULT_HOST: "{{ roundcube_imap_host }}"
+      ROUNDCUBEMAIL_DEFAULT_PORT: "{{ roundcube_imap_port }}"
+      ROUNDCUBEMAIL_SMTP_SERVER: "{{ roundcube_smtp_host }}"
+      ROUNDCUBEMAIL_SMTP_PORT: "{{ roundcube_smtp_port }}"
+      ROUNDCUBEMAIL_PLUGINS: "{{ roundcube_plugins | join (',') }}"
+      ROUNDCUBEMAIL_UPLOAD_MAX_FILESIZE: "{{ roundcube_upload_max_filesize }}"
+      ROUNDCUBEMAIL_DB_TYPE: "{{ roundcube_db_type }}"
+      ROUNDCUBEMAIL_DB_HOST: "{{ roundcube_db_host }}"
+      ROUNDCUBEMAIL_DB_PORT: "{{ roundcube_db_port }}"
+      ROUNDCUBEMAIL_DB_USER: "{{ roundcube_db_user }}"
+      ROUNDCUBEMAIL_DB_PASSWORD: "{{ roundcube_db_password }}"
+      ROUNDCUBEMAIL_DB_NAME: "{{ roundcube_db_name }}"
     networks:
       - name: "{{ docker_network_name }}"
     ports:
-      - "{{ mysql_bind_host }}:{{ mysql_bind_port }}:3306"
 
-- name: inspect mysql volume
+- name: export nginx config
+  set_fact:
+    nginx_config: >-
+      {{ nginx_config | default({}) | combine({
+        roundcube_domain: {
+          "locations": {
+            roundcube_web_root.rstrip('/')+'/': {
+              "proxy_pass": "http://{}:9080/".format(roundcube_container)
+              }
+            }
+          }
+        }, recursive=True) }}
+
+- name: inspect roundcube volume
   docker_volume_info:
-    name: "{{ mysql_volume }}"
+    name: "{{ roundcube_volume }}"
   register: volinfo
 
 - name: export variables
   set_fact:
-    mysql_container_name: "{{ mysql_container_name }}"
-    mysql_volume: "{{ mysql_volume }}"
-    mysql_volume_mountpoint: "{{ volinfo.volume.Mountpoint }}"
-    mysql_root_password: "{{ mysql_root_password }}"
-    mysql_database: "{{ mysql_database | default(omit) }}"
-    mysql_user: "{{ mysql_user | default(omit) }}"
-    mysql_password: "{{ mysql_password | default(omit) }}"
-    mysql_host: localhost
-    mysql_port: "{{ mysql_bind_port }}"
+    roundcube_volume: "{{ lookup('vars','roundcube_volume') }}"
+    roundcube_volume_mountpoint: "{{ volinfo.volume.Mountpoint }}"
+
+- name: allow self-signed mail server certs
+  blockinfile:
+    state: present
+    path: "{{ roundcube_volume_mountpoint }}/config/config.inc.php"
+    block: |
+      $config['imap_conn_options'] = array(
+        'ssl' => array(
+          'verify_peer' => false,
+          'verify_peer_name' => false,
+        ),
+      );
+      $config['smtp_conn_options'] = array(
+        'ssl' => array(
+          'verify_peer' => false,
+          'verify_peer_name' => false,
+        ),
+      );