From 995cf4d67ba7d67ff48a09ec6bb6059d77b68b65 Mon Sep 17 00:00:00 2001
From: shirenn <shirenn@crans.org>
Date: Tue, 4 Aug 2020 04:35:33 +0200
Subject: [PATCH] [horde] Horde initial configuration

---
 roles/horde/README.md                         |   8 ++
 roles/horde/tasks/main.yml                    |  37 ++++++
 roles/horde/templates/horde/horde/conf.php.j2 | 125 ++++++++++++++++++
 3 files changed, 170 insertions(+)
 create mode 100644 roles/horde/README.md
 create mode 100644 roles/horde/tasks/main.yml
 create mode 100644 roles/horde/templates/horde/horde/conf.php.j2

diff --git a/roles/horde/README.md b/roles/horde/README.md
new file mode 100644
index 00000000..9e964ba8
--- /dev/null
+++ b/roles/horde/README.md
@@ -0,0 +1,8 @@
+# Horde
+Ce rôle ansible deploie une instance du webmail horde.
+
+## Variables
+  - glob_horde.secret : le secret de horde
+  - glob_horde.imap : le serveur imap
+  - glob_horde.db : la bdd
+  - glob_horde.admins: la liste des admins de horde
diff --git a/roles/horde/tasks/main.yml b/roles/horde/tasks/main.yml
new file mode 100644
index 00000000..78cc5d0e
--- /dev/null
+++ b/roles/horde/tasks/main.yml
@@ -0,0 +1,37 @@
+---
+# Setup dependencies
+- name: Install horde APT dependencies
+  apt:
+    update_cache: true
+    name:
+      - nginx
+      - php-horde-webmail
+  register: apt_result
+  retries: 3
+  until: apt_result is succeeded
+
+- name: Configure horde
+  template:
+    src: horde/horde/conf.php.j2
+    dest: /etc/horde/horde/conf.php"
+    owner: www-data
+    group: www-data
+
+- name: Configure nginx site
+  template:
+    src: 'nginx/sites-available/{{ item }}.j2'
+    dest: '/etc/nginx/sites-available/{{ item }}'
+  notify: restart nginx
+  loop:
+    - webmail
+    - horde
+
+- name: Enable nginx site
+  file:
+    src: '/etc/nginx/sites-available/{{ item }}'
+    dest: '/etc/nginx/sites-enabled/{{ item }}'
+    state: link
+  notify: restart nginx
+  loop:
+    - webmail
+    - horde
diff --git a/roles/horde/templates/horde/horde/conf.php.j2 b/roles/horde/templates/horde/horde/conf.php.j2
new file mode 100644
index 00000000..ae0bba4e
--- /dev/null
+++ b/roles/horde/templates/horde/horde/conf.php.j2
@@ -0,0 +1,125 @@
+<?php
+/* CONFIG START. DO NOT CHANGE ANYTHING IN OR AFTER THIS LINE. */
+// $Id: 78acbab5980b3b1531db0732c3611a17deae7c83 $
+$conf['vhosts'] = false;
+$conf['debug_level'] = E_ALL & ~E_NOTICE;
+$conf['max_exec_time'] = 0;
+$conf['compress_pages'] = true;
+$conf['secret_key'] = '{{ glob_horde.secret }}';
+$conf['umask'] = 077;
+$conf['testdisable'] = true;
+$conf['use_ssl'] = 1;
+$conf['server']['name'] = $_SERVER['SERVER_NAME'];
+$conf['urls']['token_lifetime'] = 30;
+$conf['urls']['hmac_lifetime'] = 30;
+$conf['urls']['pretty'] = false;
+$conf['safe_ips'] = array();
+$conf['session']['name'] = 'Horde';
+$conf['session']['use_only_cookies'] = true;
+$conf['session']['timeout'] = 0;
+$conf['session']['cache_limiter'] = 'nocache';
+$conf['session']['max_time'] = 72000;
+$conf['cookie']['domain'] = $_SERVER['SERVER_NAME'];
+$conf['cookie']['path'] = '/';
+$conf['sql']['username'] = 'www-data';
+$conf['sql']['hostspec'] = '{{ glob_horde.db }}';
+$conf['sql']['protocol'] = 'tcp';
+$conf['sql']['database'] = 'horde5';
+$conf['sql']['charset'] = 'utf-8';
+$conf['sql']['splitread'] = false;
+$conf['sql']['phptype'] = 'pgsql';
+$conf['nosql']['phptype'] = false;
+$conf['ldap']['useldap'] = false;
+$conf['auth']['admins'] = array({{ glob_horde.admins | map('quote') | join(', ')}});
+$conf['auth']['checkip'] = false;
+$conf['auth']['checkbrowser'] = true;
+$conf['auth']['resetpassword'] = false;
+$conf['auth']['alternate_login'] = false;
+$conf['auth']['redirect_on_logout'] = false;
+$conf['auth']['list_users'] = 'list';
+$conf['auth']['params']['hostspec'] = '{{ glob_horde.imap }}';
+$conf['auth']['params']['port'] = 143;
+$conf['auth']['params']['secure'] = 'tls';
+$conf['auth']['driver'] = 'imap';
+$conf['auth']['params']['count_bad_logins'] = false;
+$conf['auth']['params']['login_block'] = false;
+$conf['auth']['params']['login_block_count'] = 5;
+$conf['auth']['params']['login_block_time'] = 5;
+$conf['signup']['allow'] = false;
+$conf['log']['priority'] = 'INFO';
+$conf['log']['ident'] = 'HORDE';
+$conf['log']['name'] = LOG_USER;
+$conf['log']['type'] = 'syslog';
+$conf['log']['enabled'] = true;
+$conf['log_accesskeys'] = false;
+$conf['prefs']['maxsize'] = 65535;
+$conf['prefs']['params']['driverconfig'] = 'horde';
+$conf['prefs']['driver'] = 'Sql';
+$conf['alarms']['params']['driverconfig'] = 'horde';
+$conf['alarms']['params']['ttl'] = 300;
+$conf['alarms']['driver'] = 'Sql';
+$conf['group']['params']['driverconfig'] = 'horde';
+$conf['group']['driver'] = 'Sql';
+$conf['perms']['driverconfig'] = 'horde';
+$conf['perms']['driver'] = 'Sql';
+$conf['share']['no_sharing'] = false;
+$conf['share']['auto_create'] = true;
+$conf['share']['world'] = true;
+$conf['share']['any_group'] = false;
+$conf['share']['hidden'] = false;
+$conf['share']['cache'] = false;
+$conf['share']['driver'] = 'Sqlng';
+$conf['cache']['default_lifetime'] = 86400;
+$conf['cache']['params']['sub'] = 0;
+$conf['cache']['driver'] = 'File';
+$conf['cache']['use_memorycache'] = '';
+$conf['cachecssparams']['url_version_param'] = true;
+$conf['cachecss'] = false;
+$conf['cachejsparams']['url_version_param'] = true;
+$conf['cachejs'] = false;
+$conf['cachethemes'] = false;
+$conf['lock']['params']['driverconfig'] = 'horde';
+$conf['lock']['driver'] = 'Sql';
+$conf['token']['params']['driverconfig'] = 'horde';
+$conf['token']['driver'] = 'Sql';
+$conf['history']['params']['driverconfig'] = 'horde';
+$conf['history']['driver'] = 'Sql';
+$conf['davstorage']['params']['driverconfig'] = 'horde';
+$conf['davstorage']['driver'] = 'Sql';
+$conf['mailer']['params']['sendmail_path'] = '/usr/lib/sendmail';
+$conf['mailer']['params']['sendmail_args'] = '-oi';
+$conf['mailer']['type'] = 'sendmail';
+$conf['vfs']['params']['driverconfig'] = 'horde';
+$conf['vfs']['type'] = 'Sql';
+$conf['sessionhandler']['type'] = 'Builtin';
+$conf['sessionhandler']['hashtable'] = false;
+$conf['spell']['driver'] = '';
+$conf['gnupg']['keyserver'] = array('pool.sks-keyservers.net');
+$conf['gnupg']['timeout'] = 10;
+$conf['nobase64_img'] = false;
+$conf['image']['driver'] = false;
+$conf['exif']['driver'] = 'Bundled';
+$conf['timezone']['location'] = 'ftp://ftp.iana.org/tz/tzdata-latest.tar.gz';
+$conf['problems']['email'] = 'webmaster@example.com';
+$conf['problems']['maildomain'] = 'example.com';
+$conf['problems']['tickets'] = false;
+$conf['problems']['attachments'] = true;
+$conf['menu']['links']['help'] = 'all';
+$conf['menu']['links']['prefs'] = 'authenticated';
+$conf['menu']['links']['problem'] = 'all';
+$conf['menu']['links']['login'] = 'all';
+$conf['menu']['links']['logout'] = 'authenticated';
+$conf['portal']['fixed_blocks'] = array();
+$conf['accounts']['driver'] = 'null';
+$conf['user']['verify_from_addr'] = false;
+$conf['user']['select_view'] = true;
+$conf['facebook']['enabled'] = false;
+$conf['twitter']['enabled'] = false;
+$conf['urlshortener'] = false;
+$conf['weather']['provider'] = false;
+$conf['imap']['enabled'] = false;
+$conf['imsp']['enabled'] = false;
+$conf['kolab']['enabled'] = false;
+$conf['hashtable']['driver'] = 'none';
+$conf['activesync']['enabled'] = false;
+/* CONFIG END. DO NOT CHANGE ANYTHING IN OR BEFORE THIS LINE. */