Initial commit

README.md

@@ -0,0 +1,42 @@
+# Roundcube
+
+Requires additional PHP and web server setup, e.g. with this [nginx](https://git.notandy.de/ansible/roles/nginx) role:
+
+```
+roundcube_config:
+  imap_host: 'ssl://mail.example.com:993'
+  smtp_host: 'tls://mail.example.com:587'
+  des_key: "{{ lookup('passwordstore', 'example.com/roundcube-secret create=true length=24 nosymbols=true') }}"
+
+nginx:
+  add_headers:
+    Strict-Transport-Security: "max-age=63072000"
+    Content-Security-Policy: "default-src 'self' 'unsafe-inline' 'unsafe-eval' data:"
+    X-Frame-Options: "sameorigin"
+    X-Content-Type-Options: "nosniff"
+    X-XSS-Protection: "1; mode=block"
+  php:
+    ini:
+      date_timezone: Europe/Berlin
+  vhosts:
+    mail:
+      servername:
+      - mail.example.com
+      custom:
+      - root /var/lib/roundcube
+      - index index.php index.html index.htm
+      locations:
+      - match: /
+        custom:
+        - try_files $uri $uri/ /index.php?q=$uri&$args
+      - match: ^~ /data
+        custom:
+        - deny all
+      - match: '~ \.php$'
+        custom:
+        - include /etc/nginx/fastcgi_params
+        - fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name
+        - fastcgi_param REDIRECT_STATUS 200
+        - fastcgi_param HTTPS On
+        - fastcgi_pass php-handler
+```