Files
@ a6633bcc83d1
Branch filter:
Location: majic-ansible-roles/testsite/group_vars/mail.yml - annotation
a6633bcc83d1
1.0 KiB
text/x-yaml
MAR-13: Added a hack to restart the slapd server once the group for OpenLDAP has been changed (otherwise the user can't read the TLS key, and error happens). Fixed some service resources to be explicitly enabled.
be262063970c be262063970c be262063970c be262063970c be262063970c be262063970c be262063970c be262063970c be262063970c be262063970c be262063970c 76ed37089b33 5ef84494bbb1 1b50bc1cc817 76ed37089b33 1b50bc1cc817 1b50bc1cc817 1b50bc1cc817 ce1b1a242584 1b50bc1cc817 1b50bc1cc817 1b50bc1cc817 85d2a408fd21 96e9f230a669 96e9f230a669 96e9f230a669 96e9f230a669 67d9190a521a 67d9190a521a 67d9190a521a 1bdb64307968 1bdb64307968 298c0dbe1698 298c0dbe1698 298c0dbe1698 298c0dbe1698 298c0dbe1698 | ---
ldap_client_config:
- comment: Set the base DN
option: BASE
value: dc=example,dc=com
- comment: Set the default URI
option: URI
value: ldap://ldap.example.com/
- comment: Set the LDAP TLS truststore
option: TLS_CACERT
value: /etc/ssl/certs/example_ca_chain.pem
mail_ldap_url: ldap://ldap.example.com/
mail_ldap_tls_truststore: /etc/ssl/certs/example_ca_chain.pem
mail_ldap_root_dn: dc=example,dc=com
mail_ldap_postfix_password: postfix
mail_ldap_dovecot_password: dovecot
mail_user: vmail
mail_user_uid: 5000
mail_user_gid: 5000
imap_tls_certificate: "{{ inventory_dir }}/tls/mail.example.com_imap.pem"
imap_tls_key: "{{ inventory_dir }}/tls/mail.example.com_imap.key"
smtp_tls_certificate: "{{ inventory_dir }}/tls/mail.example.com_smtp.pem"
smtp_tls_key: "{{ inventory_dir }}/tls/mail.example.com_smtp.key"
imap_folder_separator: /
smtp_rbl:
- bl.spamcop.net
- zen.spamhaus.org
mail_postmaster: postmaster@example.com
smtp_allow_relay_from:
- ldap.example.com
- xmpp.example.com
|