Changeset - 07956dae35fc
[Not reviewed]
0 1 0
Branko Majic (branko) - 9 years ago 2015-04-07 23:02:17
branko@majic.rs
MAR-4: Deploy the truststore PEM file for connecting to the LDAP server via rsync. Explicitly create directories for ClamAV in the Postfix chroot.
1 file changed with 11 insertions and 3 deletions:
0 comments (0 inline, 0 general)
roles/mail_server/tasks/main.yml
Show inline comments
 
---
 

	
 
- name: Install rsync
 
  apt: name="rsync" state=installed
 

	
 
- name: Add backports repository
 
  apt_repository: repo="deb http://http.debian.net/debian wheezy-backports main" state=present
 

	
 
@@ -32,15 +35,20 @@
 
    - Restart ClamAV Milter
 

	
 
- name: Set-up privileges for directories within Postfix chroot
 
  file: dest="{{ item }}" mode=755
 
  file: dest="{{ item }}" mode=755 state=directory owner=root group=root
 
  with_items:
 
    - /var/spool/postfix/var
 
    - /var/spool/postfix/var/run
 

	
 
- name: Set-up privileges for directories within Postfix chroot
 
  file: dest="{{ item }}" mode=755 state=directory owner=clamav group=clamav
 
  with_items:
 
    - /var/spool/postfix/var/run/clamav
 

	
 
- name: Copy the LDAP TLS truststore into Postfix chroot
 
  file: dest="/var/spool/postfix/etc/ssl/certs/truststore.pem" src="/etc/ssl/certs/truststore.pem"
 
        mode=644 owner=root group=root state=file
 
  command: rsync -ci "{{ mail_ldap_tls_truststore }}" "/var/spool/postfix/{{ mail_ldap_tls_truststore}}"
 
  register: rsync_result
 
  changed_when: "rsync_result.stdout != ''"
 

	
 
- name: Deploy Postfix configurations files for LDAP look-ups
 
  template: src="{{ item }}.cf.j2" dest="/etc/postfix/{{ item }}.cf" owner=root group=postfix mode=640
0 comments (0 inline, 0 general)