Add a 2FA plugin for Roundcube (fixes #201)

roles/webmail/files/etc_roundcube_main.inc.php

@@ -362,7 +362,7 @@ $rcmail_config['email_dns_check'] = false;
 // ----------------------------------
 
 // List of active plugins (in plugins/ directory)
-$rcmail_config['plugins'] = array('managesieve', 'carddav');
+$rcmail_config['plugins'] = array('managesieve', 'carddav', 'twofactor_gauthenticator');
 
 // ----------------------------------
 // USER INTERFACE

roles/webmail/files/usr_share_roundcube_plugins_twofactor_gauthenticator_config.inc.php

@@ -0,0 +1,3 @@
+<?php
+// if true ALL users must have 2-steps active
+$rcmail_config['force_enrollment_users'] = false;

roles/webmail/tasks/roundcube.yml

@@ -23,11 +23,14 @@
 - name: Move carddav plugin files to /usr/share/roundcube/plugins/carddav
   command: mv rcmcarddav-carddav_{{ carddav_version }} /usr/share/roundcube/plugins/carddav chdir=/root creates=/usr/share/roundcube/plugins/carddav
 
-- name: Link carddav plugin into /var/lib/roundcube/plugins
-  file: state=link src=/usr/share/roundcube/plugins/carddav dest=/var/lib/roundcube/plugins/carddav force=yes
+- name: Download Google Authenticator roundcube plugin
+  git: repo=https://github.com/alexandregz/twofactor_gauthenticator.git dest=/usr/share/roundcube/plugins/twofactor_gauthenticator
 
-#- name: Remove downloaded carddav plugin file
-#  file: state=absent path=/root/carddav_{{ carddav_version }}.tar.gz
+- name: Link plugins into /var/lib/roundcube/plugins
+  file: state=link src=/usr/share/roundcube/plugins/{{ item }} dest=/var/lib/roundcube/plugins/{{ item }} force=yes
+  with_items:
+    - carddav
+    - twofactor_gauthenticator
 
 - name: Configure the Apache HTTP server for roundcube
   template: src=etc_apache2_sites-available_roundcube.j2 dest=/etc/apache2/sites-available/roundcube group=www-data owner=www-data force=yes
@@ -35,10 +38,11 @@
 - name: Configure roundcube
   copy: src={{ item.src }} dest={{ item.dest }} group=www-data owner=root mode=640 force=yes
   with_items:
-  - { src: 'etc_roundcube_main.inc.php',                             dest: '/etc/roundcube/main.inc.php' }
-  - { src: 'usr_share_roundcube_plugins_managesieve_config.inc.php', dest: '/usr/share/roundcube/plugins/managesieve/config.inc.php' }
-  - { src: 'usr_share_roundcube_plugins_carddav_config.inc.php',     dest: '/usr/share/roundcube/plugins/carddav/config.inc.php' }
-  - { src: 'etc_roundcube_global.sieve',                             dest: '/etc/roundcube/global.sieve' }
+  - { src: 'etc_roundcube_main.inc.php',                                          dest: '/etc/roundcube/main.inc.php' }
+  - { src: 'usr_share_roundcube_plugins_managesieve_config.inc.php',              dest: '/usr/share/roundcube/plugins/managesieve/config.inc.php' }
+  - { src: 'usr_share_roundcube_plugins_carddav_config.inc.php',                  dest: '/usr/share/roundcube/plugins/carddav/config.inc.php' }
+  - { src: 'usr_share_roundcube_plugins_twofactor_gauthenticator_config.inc.php', dest: '/usr/share/roundcube/plugins/twofactor_gauthenticator/config.inc.php' }
+  - { src: 'etc_roundcube_global.sieve',                                          dest: '/etc/roundcube/global.sieve' }
 
 - name: Enable roundcube site
   command: a2ensite roundcube creates=/etc/apache2/sites-enabled/roundcube