dovecot: ansible-lint fixes

This commit is contained in:
Timo Makinen 2022-10-29 17:55:27 +00:00
parent 41fe5a3892
commit a4e756a1fc
2 changed files with 24 additions and 26 deletions

View file

@ -1,6 +1,5 @@
--- ---
- name: Restart dovecot
- name: restart dovecot
service: service:
name: dovecot name: dovecot
state: restarted state: restarted

View file

@ -1,12 +1,11 @@
--- ---
- name: Install packages
- name: install packages ansible.builtin.package:
package:
name: dovecot name: dovecot
state: installed state: installed
- name: create kerberoskeytab - name: Create kerberos keytab
include_role: ansible.builtin.include_role:
name: keytab name: keytab
vars: vars:
keytab: /etc/dovecot/dovecot.keytab keytab: /etc/dovecot/dovecot.keytab
@ -14,8 +13,8 @@
- "imap/{{ mail_server }}@{{ kerberos_realm }}" - "imap/{{ mail_server }}@{{ kerberos_realm }}"
group: dovecot group: dovecot
- name: install privatekey - name: Install privatekey
copy: ansible.builtin.copy:
dest: "{{ tls_private }}/{{ mail_server }}.key" dest: "{{ tls_private }}/{{ mail_server }}.key"
src: "{{ item }}" src: "{{ item }}"
mode: 0600 mode: 0600
@ -25,10 +24,10 @@
- "/srv/letsencrypt/live/{{ mail_server }}/privkey.pem" - "/srv/letsencrypt/live/{{ mail_server }}/privkey.pem"
- "/srv/ca/private/{{ inventory_hostname }}.key" - "/srv/ca/private/{{ inventory_hostname }}.key"
tags: certificates tags: certificates
notify: restart dovecot notify: Restart dovecot
- name: install certificate - name: Install certificate
copy: ansible.builtin.copy:
dest: "{{ tls_certs }}/{{ mail_server }}-fullchain.crt" dest: "{{ tls_certs }}/{{ mail_server }}-fullchain.crt"
src: "{{ item }}" src: "{{ item }}"
mode: 0644 mode: 0644
@ -38,25 +37,25 @@
- "/srv/letsencrypt/live/{{ mail_server }}/fullchain.pem" - "/srv/letsencrypt/live/{{ mail_server }}/fullchain.pem"
- "/srv/ca/certs/hosts/{{ inventory_hostname }}.crt" - "/srv/ca/certs/hosts/{{ inventory_hostname }}.crt"
tags: certificates tags: certificates
notify: restart dovecot notify: Restart dovecot
- name: create local config - name: Create local config
template: ansible.builtin.template:
dest: /etc/dovecot/conf.d/99-local.conf dest: /etc/dovecot/conf.d/99-local.conf
src: local.conf.j2 src: local.conf.j2
mode: 0644 mode: 0644
owner: root owner: root
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
validate: doveconf -n %s validate: doveconf -n %s
notify: restart dovecot notify: Restart dovecot
- name: fix selinux contexts from cache directory - name: Fix SELinux contexts from cache directory
sefcontext: community.general.sefcontext:
path: "/var/spool/dovecot/index/home(/.*)?" path: "/var/spool/dovecot/index/home(/.*)?"
setype: user_home_t setype: user_home_t
- name: create cache directory hierarcy - name: Create cache directory hierarcy
file: ansible.builtin.file:
path: "{{ item }}" path: "{{ item }}"
state: directory state: directory
mode: 0755 mode: 0755
@ -67,24 +66,24 @@
- /var/spool/dovecot - /var/spool/dovecot
- /var/spool/dovecot/index - /var/spool/dovecot/index
- name: create user cache directory - name: Create user cache directory
file: ansible.builtin.file:
path: /var/spool/dovecot/index/home path: /var/spool/dovecot/index/home
state: directory state: directory
owner: root owner: root
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
setype: _default setype: _default
- name: create tmpfs mount for cache - name: Create tmpfs mount for cache
mount: ansible.posix.mount:
state: mounted state: mounted
path: /var/spool/dovecot/index/home path: /var/spool/dovecot/index/home
src: none src: none
fstype: tmpfs fstype: tmpfs
opts: mode=1777,context="system_u:object_r:user_home_t:s0" opts: mode=1777,context="system_u:object_r:user_home_t:s0"
- name: enable service - name: Enable service
service: ansible.builtin.service:
name: dovecot name: dovecot
enabled: true enabled: true
state: started state: started