diff --git a/docs/rolereference.rst b/docs/rolereference.rst index 42e20b69b9bd01d113567b263b66a712630343db..e3feaf5a18026ae6fb8accfa602c65ccabd42350 100644 --- a/docs/rolereference.rst +++ b/docs/rolereference.rst @@ -691,3 +691,33 @@ Parameters **mail_postmaster** (string, mandatory) Mail address to use for the postmaster account in Dovecot. + + +Examples +~~~~~~~~ + +Here is an example configuration for setting-up XMPP server using Prosody: + +.. code-block:: yaml + + --- + + mail_ldap_url: ldap://ldap.example.com/ + mail_ldap_tls_truststore: /etc/ssl/certs/truststore.pem + mail_ldap_root_dn: dc=example,dc=com + mail_ldap_postfix_password: postfix + mail_ldap_dovecot_password: dovecot + + mail_user: vmail + mail_user_uid: 5000 + mail_user_gid: 5000 + + imap_tls_certificate: /etc/ssl/certs/mail.example.com_imap.pem + imap_tls_key: /etc/ssl/private/mail.example.com_imap.pem + smtp_tls_certificate: /etc/ssl/certs/mail.example.com_smtp.pem + smtp_tls_key: /etc/ssl/private/mail.example.com_smtp.pem + imap_folder_separator: / + smtp_rbl: + - bl.spamcop.net + - zen.spamhaus.org + mail_postmaster: postmaster@example.com diff --git a/docs/testsite.rst b/docs/testsite.rst index 66ce42675c9a1936967d7f1639944f42b29c7303..20846afda9310c179cb2cf37c580cbeffb7f2172 100644 --- a/docs/testsite.rst +++ b/docs/testsite.rst @@ -90,5 +90,13 @@ system: * After all files are in place, re-run the ``site.yml`` playbook in order to restart necessary services etc. +* On ``mail.example.com``, you should manually install the TLS private key and + certificate in locations ``/etc/ssl/private/mail.example.com.pem`` + (*root:ldap, 640*) and ``/etc/ssl/certs/mail.example.com.pem`` (*root:root, + 644*), respectively. You should also install a truststore that contains the CA + certifciate which has issued the LDAP certificate in location + ``/etc/ssl/certs/truststore.pem`` (*root:root, 644*). After that, restart the + servics ``dovecot`` and ``postfix``. + For more details on how the playbooks and configuration have been implemented, feel free to browse the test site files (in directory ``testsite``). diff --git a/testsite/group_vars/mail.yml b/testsite/group_vars/mail.yml index e4e48d6cdd642aabd6f51fe26337db4cc01f3595..6f1dacffbcbb1e0e9cd45bfc82ee6cc1e61f1dde 100644 --- a/testsite/group_vars/mail.yml +++ b/testsite/group_vars/mail.yml @@ -22,9 +22,9 @@ mail_user_uid: 5000 mail_user_gid: 5000 imap_tls_certificate: /etc/ssl/certs/mail.example.com_imap.pem -imap_tls_key: /etc/ssl/private/mail.example.com_imap.key +imap_tls_key: /etc/ssl/private/mail.example.com_imap.pem smtp_tls_certificate: /etc/ssl/certs/mail.example.com_smtp.pem -smtp_tls_key: /etc/ssl/private/mail.example.com_smtp.key +smtp_tls_key: /etc/ssl/private/mail.example.com_smtp.pem imap_folder_separator: / smtp_rbl: - bl.spamcop.net