infra/ansible-role-dovecot-proxy
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add dovecot_proxy.config option

Browse source
This commit is contained in:
Julian Rother 2025-01-24 21:45:34 +01:00
parent 2a5ae9da82
commit 54123ccb76
Signed by: julian
GPG key ID: C19B924C0CD13341
2 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
defaults/main.yml
View file

@ -1,4 +1,5 @@
dovecot_proxy: dovecot_proxy:
config: {}
debug_log_enabled: false # Logs passwords and more to /var/log/dovecot.debug.log debug_log_enabled: false # Logs passwords and more to /var/log/dovecot.debug.log
ssl_cert: "/etc/ssl/{{ inventory_hostname }}.chain.crt" ssl_cert: "/etc/ssl/{{ inventory_hostname }}.chain.crt"
ssl_key: "/etc/ssl/private/{{ inventory_hostname }}.key" ssl_key: "/etc/ssl/private/{{ inventory_hostname }}.key"

6
templates/dovecot.conf.j2
View file

@ -30,9 +30,13 @@ ssl_min_protocol = TLSv1.2
ssl_cipher_list = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 ssl_cipher_list = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
ssl_prefer_server_ciphers = yes ssl_prefer_server_ciphers = yes
{% for key, value in dovecot_proxy.config.items() %}
{{ key }} = {{ value }}
{% endfor %}
{% for domain in dovecot_proxy.domain_proxies %} {% for domain in dovecot_proxy.domain_proxies %}
passdb { passdb {
driver = sql driver = sql
args = /etc/dovecot/proxy-domain-{{ domain }}-sql.conf args = /etc/dovecot/proxy-domain-{{ domain }}-sql.conf
} }
{% endfor%} {% endfor %}