From 1cb9021bd95a3e9d155ddd82070dafb62e833b1b Mon Sep 17 00:00:00 2001
From: Alexandre Iooss <erdnaxe@crans.org>
Date: Thu, 30 Jul 2020 19:46:30 +0200
Subject: [PATCH] Beginning of roundcube role

---
 roles/roundcube/handlers/main.yml             |  5 ++++
 roles/roundcube/tasks/main.yml                | 29 +++++++++++++++++++
 roles/roundcube/templates/nginx/roundcube.j2  | 26 +++++++++++++++++
 .../templates/update-motd.d/05-service.j2     |  3 ++
 4 files changed, 63 insertions(+)
 create mode 100644 roles/roundcube/handlers/main.yml
 create mode 100644 roles/roundcube/tasks/main.yml
 create mode 100644 roles/roundcube/templates/nginx/roundcube.j2
 create mode 100755 roles/roundcube/templates/update-motd.d/05-service.j2

diff --git a/roles/roundcube/handlers/main.yml b/roles/roundcube/handlers/main.yml
new file mode 100644
index 00000000..2e593d34
--- /dev/null
+++ b/roles/roundcube/handlers/main.yml
@@ -0,0 +1,5 @@
+---
+- name: Restart nginx
+  service:
+    name: nginx
+    state: restarted
diff --git a/roles/roundcube/tasks/main.yml b/roles/roundcube/tasks/main.yml
new file mode 100644
index 00000000..bb42febf
--- /dev/null
+++ b/roles/roundcube/tasks/main.yml
@@ -0,0 +1,29 @@
+---
+- name: Install Roundcube
+  apt:
+    update_cache: true
+    name:
+      - nginx
+      - roundcube
+  register: apt_result
+  retries: 3
+  until: apt_result is succeeded
+
+- name: Copy NGINX site
+  template:
+    src: nginx/roundcube.j2
+    dest: /etc/nginx/sites-available/roundcube
+  notify: Restart nginx
+
+- name: Activate NGINX site
+  file:
+    src: /etc/nginx/sites-available/roundcube
+    dest: /etc/nginx/sites-enabled/roundcube
+    state: link
+  notify: Restart nginx
+
+- name: Indicate role in motd
+  template:
+    src: update-motd.d/05-service.j2
+    dest: /etc/update-motd.d/05-roundcube
+    mode: 0755
diff --git a/roles/roundcube/templates/nginx/roundcube.j2 b/roles/roundcube/templates/nginx/roundcube.j2
new file mode 100644
index 00000000..0321654b
--- /dev/null
+++ b/roles/roundcube/templates/nginx/roundcube.j2
@@ -0,0 +1,26 @@
+{{ ansible_header | comment }}
+
+server {
+    listen roundcube.adm.crans.org:80;
+    listen [2a0c:700:0:2:6809:acff:fe67:47e6]:80;
+
+    server_name roundcube.adm.crans.org;
+
+    root /var/lib/roundcube;
+
+    index index.php index.htm index.html;
+    try_files $uri $uri/ /index.php?q=$uri&$args;
+
+    location ~ \.php$ {
+        include snippets/fastcgi-php.conf;
+        fastcgi_buffer_size 128k;
+        fastcgi_buffers 4 256k;
+        fastcgi_busy_buffers_size 256k;
+        fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
+        include fastcgi_params;
+    }
+
+    set_real_ip_from 10.231.136.0/24;
+    set_real_ip_from 2a0c:700:0:2::/64;
+    real_ip_header P-Real-Ip;
+}
diff --git a/roles/roundcube/templates/update-motd.d/05-service.j2 b/roles/roundcube/templates/update-motd.d/05-service.j2
new file mode 100755
index 00000000..5b099c3f
--- /dev/null
+++ b/roles/roundcube/templates/update-motd.d/05-service.j2
@@ -0,0 +1,3 @@
+#!/usr/bin/tail +14
+{{ ansible_header | comment }}
+> Roundcube a été déployé sur cette machine. Voir /etc/roundcube/.