use postfix submission

defaults/main.yml

@@ -1,25 +1,39 @@
 ---
 # domain, webroot
-wordpress_domain: example.com
-wordpress_web_root: /
-
-# database
-wordpress_db_host: localhost
-wordpress_db_user: wordpress
-wordpress_db_password: password
-wordpress_db_name: wordpress
-wordpress_table_prefix: wp
-
-# debug: cualquier valor distinto de "" es si
-wordpress_debug: ""
-
-# configuracion extra - va literal al config.php
-wordpress_config_extra: ""
+roundcube_domain: default
+roundcube_web_root: /roundcube
+roundcube_version: 1.3.10
 
 # container
-wordpress_image: wordpress
-wordpress_container: wordpress
-wordpress_volume: wordpress
+roundcube_image: eumau/roundcubemail:{{ roundcube_version }}
+roundcube_container: roundcube
+roundcube_volume: roundcube
+
+# mysql, mariadb, postgresql
+roundcube_db_type: sqlite
+roundcube_db_host: localhost
+roundcube_db_port: "{{ '5432' if 'post' in roundcube_db_type else '3306' }}"
+roundcube_db_user: roundcube
+roundcube_db_password: password
+roundcube_db_name:
+  roundcube{{ '.sqlite' if roundcube_db_type == 'sqlite' else '' }}
+
+# data dir (inside container)
+roundcube_data_dir: /var/www/html
+
+# imap
+roundcube_imap_host: "tls://{{ dovecot_container | default('localhost') }}"
+roundcube_imap_port: "143"
+
+# smtp
+roundcube_smtp_host: "tls://{{ postfix_container | default('localhost') }}"
+roundcube_smtp_port: "587"
+
+# plugins
+roundcube_plugins: []
+
+# upload max filesize
+roundcube_upload_max_filesize: 40M
 
 # definido por rol docker
 docker_network_name: dockernet

tasks/main.yml

@@ -1,95 +1,108 @@
 ---
-- name: create wordpress database
+# TODO: postgres support
+# - name: create roundcube database (pg)
+#   postgresql_db:
+#     state: present
+#     name: "{{ roundcube_db_name }}"
+#     login_host: "{{ postgresql_host }}"
+#     login_port: "{{ postgresql_port }}"
+#     login_user: "{{ postgresql_root_password }}"
+#     login_password: "{{ postgresql_root_password }}"
+
+# - name: create roundcube db user (pg)
+#   postgresql_user:
+#     state: present
+#     name: "{{ roundcube_db_user }}"
+#     password: "{{ roundcube_db_password }}"
+#     priv: "{{ roundcube_db_name }}.*:ALL"
+#     login_host: "{{ postgresql_host }}"
+#     login_port: "{{ postgresql_port }}"
+#     login_user: root
+#     login_password: "{{ postgresql_root_password }}"
+
+- name: create roundcube database
   mysql_db:
     state: present
-    name: "{{ wordpress_db_name }}"
+    name: "{{ roundcube_db_name }}"
     login_host: "{{ mariadb_host }}"
     login_port: "{{ mariadb_port }}"
     login_user: root
     login_password: "{{ mariadb_root_password }}"
+  when: roundcube_db_type in ('mariadb','mysql')
 
-- name: create wordpress db user
+- name: create roundcube db user
   mysql_user:
     state: present
-    name: "{{ wordpress_db_user }}"
+    name: "{{ roundcube_db_user }}"
     host: "%"
-    password: "{{ wordpress_db_password }}"
-    priv: "{{ wordpress_db_name }}.*:ALL"
+    password: "{{ roundcube_db_password }}"
+    priv: "{{ roundcube_db_name }}.*:ALL"
     login_host: "{{ mariadb_host }}"
     login_port: "{{ mariadb_port }}"
     login_user: root
     login_password: "{{ mariadb_root_password }}"
+  when: roundcube_db_type in ('mariadb','mysql')
 
-- name: start wordpress container
+- name: start roundcube container
   docker_container:
-    image: "{{ wordpress_image }}"
-    name: "{{ wordpress_container }}"
+    image: "{{ roundcube_image }}"
+    name: "{{ roundcube_container }}"
     volumes:
-      - "{{ wordpress_volume }}:/var/www/html"
+      - "{{ roundcube_volume }}:/var/www/html"
     env:
-      WORDPRESS_DB_HOST: "{{ mariadb_container }}"
-      WORDPRESS_DB_USER: "{{ wordpress_db_user }}"
-      WORDPRESS_DB_PASSWORD: "{{ wordpress_db_password }}"
-      WORDPRESS_DB_NAME: "{{ wordpress_db_name }}"
-      WORDPRESS_TABLE_PREFIX: "{{ wordpress_table_prefix }}"
-      # (default to unique random SHA1s, but only if other environment
-      # variable configuration is provided)
-      # WORDPRESS_AUTH_KEY:
-      # WORDPRESS_SECURE_AUTH_KEY:
-      # WORDPRESS_LOGGED_IN_KEY:
-      # WORDPRESS_NONCE_KEY:
-      # WORDPRESS_AUTH_SALT:
-      # WORDPRESS_SECURE_AUTH_SALT:
-      # WORDPRESS_LOGGED_IN_SALT:
-      # WORDPRESS_NONCE_SALT:
-      # (defaults to disabled, non-empty value will enable WP_DEBUG in
-      # wp-config.php)
-      WORDPRESS_DEBUG: "{{ wordpress_debug }}"
-      # (defaults to nothing, non-empty value will be embedded verbatim
-      # inside wp-config.php -- especially useful for applying extra
-      # configuration values this image does not provide by default such
-      # as WP_ALLOW_MULTISITE; see docker-library/wordpress#142 for more
-      # details)
-      WORDPRESS_CONFIG_EXTRA: "{{ wordpress_config_extra }}"
+      ROUNDCUBEMAIL_DEFAULT_HOST: "{{ roundcube_imap_host }}"
+      ROUNDCUBEMAIL_DEFAULT_PORT: "{{ roundcube_imap_port }}"
+      ROUNDCUBEMAIL_SMTP_SERVER: "{{ roundcube_smtp_host }}"
+      ROUNDCUBEMAIL_SMTP_PORT: "{{ roundcube_smtp_port }}"
+      ROUNDCUBEMAIL_PLUGINS: "{{ roundcube_plugins | join (',') }}"
+      ROUNDCUBEMAIL_UPLOAD_MAX_FILESIZE: "{{ roundcube_upload_max_filesize }}"
+      ROUNDCUBEMAIL_DB_TYPE: "{{ roundcube_db_type }}"
+      ROUNDCUBEMAIL_DB_HOST: "{{ roundcube_db_host }}"
+      ROUNDCUBEMAIL_DB_PORT: "{{ roundcube_db_port }}"
+      ROUNDCUBEMAIL_DB_USER: "{{ roundcube_db_user }}"
+      ROUNDCUBEMAIL_DB_PASSWORD: "{{ roundcube_db_password }}"
+      ROUNDCUBEMAIL_DB_NAME: "{{ roundcube_db_name }}"
     networks:
       - name: "{{ docker_network_name }}"
     ports:
 
-- name: template nginx config
-  copy:
-    content: |
-      server {
-        listen 80; # para debug
-        listen 443 ssl;
-        server_name {{ wordpress_domain }};
+- name: export nginx config
+  set_fact:
+    nginx_config: >-
+      {{ nginx_config | default({}) | combine({
+        roundcube_domain: {
+          "locations": {
+            roundcube_web_root.rstrip('/')+'/': {
+              "proxy_pass": "http://{}:9080/".format(roundcube_container)
+              }
+            }
+          }
+        }, recursive=True) }}
 
-        # root   /var/www/html;
-        # index  index.php index.html;
-        # access_log /dev/stdout;
-        # error_log /dev/stdout info;
-
-        location {{ wordpress_web_root }} {
-          proxy_set_header Host $host;
-          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-          proxy_set_header X-Forwarded-Proto $scheme;
-          proxy_pass http://{{ wordpress_container }};
-        }
-      }
-    dest: "{{ nginx_config_mountpoint }}/wordpress.conf"
-  register: ngconf
-
-- name: restart frontend
-  docker_container:
-    name: "{{ nginx_container_name }}"
-    restart: yes
-  when: ngconf is changed
-
-- name: inspect wordpress volume
+- name: inspect roundcube volume
   docker_volume_info:
-    name: "{{ wordpress_volume }}"
+    name: "{{ roundcube_volume }}"
   register: volinfo
 
 - name: export variables
   set_fact:
-    wordpress_volume: "{{ lookup('vars','wordpress_volume') }}"
-    wordpress_volume_mountpoint: "{{ volinfo.volume.Mountpoint }}"
+    roundcube_volume: "{{ lookup('vars','roundcube_volume') }}"
+    roundcube_volume_mountpoint: "{{ volinfo.volume.Mountpoint }}"
+
+- name: allow self-signed mail server certs
+  blockinfile:
+    state: present
+    path: "{{ roundcube_volume_mountpoint }}/config/config.inc.php"
+    block: |
+      $config['imap_conn_options'] = array(
+        'ssl' => array(
+          'verify_peer' => false,
+          'verify_peer_name' => false,
+        ),
+      );
+      $config['smtp_conn_options'] = array(
+        'ssl' => array(
+          'verify_peer' => false,
+          'verify_peer_name' => false,
+        ),
+      );