Create webmail role that installs Roundcube

roles/webmail/defaults/main.yml

@@ -0,0 +1,5 @@
+webmail_version: 1.2.1
+
+# Keep in sync with mail_server_hostname in mailserver role
+webmail_domain: "mail.{{ domain }}"
+

roles/webmail/tasks/main.yml

@@ -0,0 +1 @@
+- include: roundcube.yml tags=roundcube

roles/webmail/tasks/roundcube.yml

@@ -0,0 +1,69 @@
+- name: Determine whether roundcube is configured
+  stat: path=/var/www/roundcube/config.inc.php
+  register: roundcube_config
+
+- name: Install roundcube dependencies
+  apt: pkg={{ item }} state=present
+  with_items:
+    - php5
+    - php5-sqlite
+    - php5-mcrypt
+    - php5-gd
+    - php5-pspell
+    - php5-intl
+    - php5-curl
+    - aspell
+    - aspell-en
+  tags:
+    - dependencies
+
+- name: Clone roundcube
+  git: repo=https://github.com/roundcube/roundcubemail.git
+       dest=/var/www/roundcube
+       version={{ webmail_version }}
+       update=no
+       accept_hostkey=yes
+
+- name: Get Composer installer
+  get_url: url=https://getcomposer.org/installer
+           dest=/tmp/composer-installer
+
+- name: Copy compose configuration
+  command: creates="/var/www/roundcube/composer.json" mv /var/www/roundcube/composer.json-dist /var/www/roundcube/composer.json
+  
+- name: Install Composer
+  command: php /tmp/composer-installer
+           chdir=/root
+           creates=/root/composer.phar
+
+- name: Initialize composer
+  command: php /root/composer.phar install --no-dev
+           chdir=/var/www/roundcube
+           creates=/var/www/roundcube/vendor/autoload.php
+
+- name: Remove installer directory
+  file: path=/var/www/roundcube/installer state=absent
+
+- name: Install Roundcube configuration
+  template: src=var_www_roundcube_config_config.inc.j2 dest=/var/www/roundcube/config/config.inc.php
+
+- name: Create db directory
+  file: path=/decrypted/roundcube mode=0775 state=directory
+
+- name: Make logs and temp directories writable by web server
+  file: path=/var/www/roundcube/{{ item }} mode=0775 state=directory
+  with_items:
+    - temp
+    - logs
+
+- name: Make roundcube directory accessible to web server
+  file: path=/var/www/roundcube group=www-data recurse=yes state=directory
+
+- name: Configure Apache for Roundcube
+  template: src=etc_apache2_sites-available_roundcube.j2
+    dest=/etc/apache2/sites-available/roundcube.conf
+    group=root owner=root force=yes
+
+- name: Enable Roundcube site
+  command: a2ensite roundcube.conf creates=/etc/apache2/sites-enabled/roundcube.conf
+  notify: restart apache

roles/webmail/templates/etc_apache2_sites-available_roundcube.j2

@@ -0,0 +1,38 @@
+<VirtualHost *:80>
+    ServerName {{ webmail_domain }}
+
+    Redirect permanent / https://{{ webmail_domain }}/
+</VirtualHost>
+
+<VirtualHost *:443>
+    ServerName {{ webmail_domain }}
+    SSLEngine On
+
+    DocumentRoot            /var/www/roundcube
+    Options                 -Indexes
+
+    <Directory /var/www/roundcube>
+        AllowOverride All
+        Require all granted
+        DirectoryIndex index.php
+    </Directory>
+
+    <Directory /opt/roundcube/config>
+        AllowOverride None
+	Require all denied
+    </Directory>
+
+    <Directory /opt/roundcube/temp>
+        AllowOverride None
+	Require all denied
+    </Directory>
+
+    <Directory /opt/roundcube/logs>
+        AllowOverride None
+	Require all denied
+    </Directory>
+
+    LogLevel		    warn
+    ErrorLog                /var/log/apache2/roundcube.info-error_log
+    CustomLog               /var/log/apache2/roundcube.info-access_log common
+</VirtualHost>

roles/webmail/templates/var_www_roundcube_config_config.inc.j2

@@ -25,7 +25,7 @@ $config = array();
 // For examples see http://pear.php.net/manual/en/package.database.mdb2.intro-dsn.php
 // NOTE: for SQLite use absolute path (Linux): 'sqlite:////full/path/to/sqlite.db?mode=0646'
 //       or (Windows): 'sqlite:///C:/full/path/to/sqlite.db'
-$config['db_dsnw'] = 'mysql://roundcube:pass@localhost/roundcubemail';
+$config['db_dsnw'] = 'sqlite:////decrypted/roundcube/sqlite.db?mode=0664';
 
 // The mail host chosen to perform the log-in.
 // Leave blank to show a textbox at login, give a list of hosts
@@ -37,7 +37,7 @@ $config['db_dsnw'] = 'mysql://roundcube:pass@localhost/roundcubemail';
 // %d - domain (http hostname $_SERVER['HTTP_HOST'] without the first part)
 // %s - domain name after the '@' from e-mail address provided at login screen
 // For example %n = mail.domain.tld, %t = domain.tld
-$config['default_host'] = 'localhost';
+$config['default_host'] = 'ssl://{{ webmail_domain }}:993';
 
 // SMTP server host (for sending mails).
 // To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
@@ -49,19 +49,19 @@ $config['default_host'] = 'localhost';
 // %d - domain (http hostname $_SERVER['HTTP_HOST'] without the first part)
 // %z - IMAP domain (IMAP hostname without the first part)
 // For example %n = mail.domain.tld, %t = domain.tld
-$config['smtp_server'] = '';
+$config['smtp_server'] = 'localhost';
 
 // SMTP port (default is 25; use 587 for STARTTLS or 465 for the
 // deprecated SSL over SMTP (aka SMTPS))
-$config['smtp_port'] = 25;
+$config['smtp_port'] = 465;
 
 // SMTP username (if required) if you use %u as the username Roundcube
 // will use the current username for login
-$config['smtp_user'] = '';
+$config['smtp_user'] = '%u';
 
 // SMTP password (if required) if you use %p as the password Roundcube
 // will use the current user's password for login
-$config['smtp_pass'] = '';
+$config['smtp_pass'] = '%p';
 
 // provide an URL where a user can get support for this Roundcube installation
 // PLEASE DO NOT LINK TO THE ROUNDCUBE.NET WEBSITE HERE!
@@ -74,7 +74,7 @@ $config['product_name'] = 'Roundcube Webmail';
 // in the session record (and the client cookie if remember password is enabled).
 // please provide a string of exactly 24 chars.
 // YOUR KEY MUST BE DIFFERENT THAN THE SAMPLE VALUE FOR SECURITY REASONS
-$config['des_key'] = 'rcmail-!24ByteDESkey*Str';
+$config['des_key'] = 'fwef42cna12wefew9fewfmac';
 
 // List of active plugins (in plugins/ directory)
 $config['plugins'] = array(

site.yml

@@ -9,6 +9,7 @@
   roles:
     - common
     - mailserver
+    - webmail
     - blog
     - ircbouncer
     - xmpp