202 lines
10 KiB
XML
202 lines
10 KiB
XML
<?xml version='1.0' encoding='UTF-8'?>
|
|
<rougail version="0.10">
|
|
<services>
|
|
<service name="postfix" target="multi-user">
|
|
<override/>
|
|
<file engine="none" source="sysuser-postfix.conf">/sysusers.d/1postfix.conf</file>
|
|
<file engine="none" source="tmpfile-postfix.conf">/tmpfiles.d/0postfix.conf</file>
|
|
<file>/etc/postfix/main.cf</file>
|
|
<file>/etc/postfix/master.cf</file>
|
|
<file>/etc/postfix/ldapsource.cf</file>
|
|
<file>/etc/postfix/relay_passwd</file>
|
|
<file>/etc/pki/ca-trust/source/anchors/ca_MailServer.crt</file>
|
|
<file>/etc/pki/tls/certs/postfix.crt</file>
|
|
<file owner="root" group="postfix" mode="440">/etc/pki/tls/private/postfix.key</file>
|
|
<file>/etc/postfix/sni</file>
|
|
<file source="postfix_sni.pem" file_type="variable" mode="400" variable="submission_domainname">postfix_pem_files</file>
|
|
<file mode="400">/etc/postfix/certs/postfix.pem</file>
|
|
</service>
|
|
<service name='dovecot-init'>
|
|
<override/>
|
|
<file>/etc/nginx/conf.d/autoconfig.conf</file>
|
|
</service>
|
|
<service name='nginx'>
|
|
<file source='config-v1.1.xml' file_type="variable" variable="mail_domains">well_known_filenames</file>
|
|
<file file_type="variable" source="ca_InternalReverseProxy.crt">revprox_ca_file</file>
|
|
<file file_type="variable" source="revprox.crt">revprox_cert_file</file>
|
|
<file file_type="variable" source="revprox.key" mode="400">revprox_key_file</file>
|
|
</service>
|
|
<service name="dovecot" target="multi-user">
|
|
<file engine="none" source="sysuser-dovecot.conf">/sysusers.d/1dovecot.conf</file>
|
|
<file engine="none" source="tmpfile-dovecot.conf">/tmpfiles.d/0dovecot.conf</file>
|
|
<file engine='none'>/etc/dovecot/conf.d/10-logging.conf</file>
|
|
<file engine='none'>/etc/dovecot/conf.d/10-auth.conf</file>
|
|
<file engine='none'>/etc/dovecot/conf.d/10-mail.conf</file>
|
|
<file>/etc/dovecot/conf.d/10-master.conf</file>
|
|
<file>/etc/dovecot/conf.d/10-ssl.conf</file>
|
|
<!-- FIXME file engine='none'>/etc/dovecot/conf.d/12-managesieve.conf</file-->
|
|
<file engine='none'>/etc/dovecot/conf.d/15-ldap.conf</file>
|
|
<file engine='none'>/etc/dovecot/conf.d/30-service-stats.conf</file>
|
|
<file engine='none'>/etc/dovecot/conf.d/00-risotto.conf</file>
|
|
<!--plain authentification-->
|
|
<file>/etc/dovecot/conf.d/auth-ldap.conf.ext</file>
|
|
<file>/etc/dovecot/dovecot-ldap.conf.ext</file>
|
|
<!--oauth2 authentification-->
|
|
<file>/etc/dovecot/conf.d/auth-oauth2.conf.ext</file>
|
|
<file>/etc/dovecot/dovecot-oauth2.conf.ext</file>
|
|
<!--internal authentification-->
|
|
<file>/etc/dovecot/conf.d/auth-passwdfile.conf.ext</file>
|
|
<file>/etc/dovecot/risotto_users</file>
|
|
<file>/etc/pki/ca-trust/source/anchors/ca_IMAPServer.crt</file>
|
|
<file>/etc/pki/tls/certs/dovecot.crt</file>
|
|
<file owner="root" group="dovecot" mode="440">/etc/pki/tls/private/dovecot.key</file>
|
|
<file source="external_imap.crt" file_type="variable" variable="imap_domainname">external_imap_crt</file>
|
|
<file owner="root" group="dovecot" mode="440" source="external_imap.key" file_type="variable" variable="imap_domainname">external_imap_key</file>
|
|
</service>
|
|
</services>
|
|
<variables>
|
|
<variable name="external_ports" redefine="True">
|
|
<value>587</value>
|
|
<value>993</value>
|
|
</variable>
|
|
<family name="annuaire">
|
|
<variable name="ldap_key_file_owner" redefine="True">
|
|
<value>dovecot</value>
|
|
</variable>
|
|
<variable name="ldap_key_file_group" redefine="True">
|
|
<value>postfix</value>
|
|
</variable>
|
|
</family>
|
|
<family name="mail" description="Mail domain" leadership="True">
|
|
<variable name="mail_domains" type="domainname" description="Domaine de courriel géré localement" mandatory="True" multi="True"/>
|
|
<variable name="mail_domains_calc" type="domainname" multi="True" hidden="True"/>
|
|
<variable name="imap_domainname" type="domainname" mandatory="True"/>
|
|
<variable name="submission_domainname" type="domainname" mandatory="True"/>
|
|
</family>
|
|
<family name="postfix">
|
|
<variable name='postfix_pem_files' type="filename" hidden='True' multi='True'/>
|
|
</family>
|
|
<family name="dovecot" description="IMAP mail server">
|
|
<variable name="well_knowns" type="web_address" hidden='True' multi="True"/>
|
|
<variable name="well_known_filenames" type="filename" hidden='True' multi="True"/>
|
|
<variable name='external_imap_crt' type="filename" hidden='True' multi='True'/>
|
|
<variable name='external_imap_key' type="filename" hidden='True' multi='True'/>
|
|
<variable name='dovecot_local_authentifications' description="CA certificate" hidden='True' multi="True" provider="mail"/>
|
|
<family name="local_authentification_" description="Local server authentification" dynamic='dovecot_local_authentifications'>
|
|
<variable name="local_authentification_ip_" type="ip" provider="mail_ip"/>
|
|
<variable name="local_authentification_password_" type="secret" auto_save="True" provider="mail_password"/>
|
|
</family>
|
|
</family>
|
|
<family name="nginx">
|
|
<variable name="nginx_default" redefine="True" remove_fill="True" mandatory="False"/>
|
|
<variable name="revprox_ca_file" type="filename" description="Reverse proxy CA filename" hidden="True"/>
|
|
<variable name="revprox_cert_file" type="filename" description="Reverse proxy certificate filename" hidden="True"/>
|
|
<variable name="revprox_key_file" type="filename" description="Reverse proxy private key filename" hidden="True"/>
|
|
<variable name="revprox_server_domainname" type="domainname" description="Reverse proxy domain name for CA" mandatory="True"/>
|
|
</family>
|
|
</variables>
|
|
<constraints>
|
|
<fill name="get_password">
|
|
<param name="server_name" type="variable">domain_name_eth0</param>
|
|
<param name="username" type="suffix"/>
|
|
<param name="description">local authentification</param>
|
|
<param name="type">cleartext</param>
|
|
<target>local_authentification_password_</target>
|
|
</fill>
|
|
<check name="set_linked_configuration">
|
|
<param name="linked_server" type="variable">smtp_relay_address</param>
|
|
<param name="linked_provider">lmtp_server</param>
|
|
<param name="linked_value" type="variable">domain_name_eth0</param>
|
|
<target>mail_domains</target>
|
|
</check>
|
|
<check name="set_linked_configuration">
|
|
<param name="linked_server" type="variable">smtp_relay_address</param>
|
|
<param name="linked_provider">lmtp_criteria</param>
|
|
<param name="dynamic" type="variable">domain_name_eth0</param>
|
|
<target>mail_domains</target>
|
|
</check>
|
|
<fill name="calc_value">
|
|
<param type="variable">tls_ca_directory</param>
|
|
<param>ca_InternalReverseProxy.crt</param>
|
|
<param name="join">/</param>
|
|
<target>revprox_ca_file</target>
|
|
</fill>
|
|
<fill name="calc_value">
|
|
<param type="variable">tls_cert_directory</param>
|
|
<param>revprox.crt</param>
|
|
<param name="join">/</param>
|
|
<target>revprox_cert_file</target>
|
|
</fill>
|
|
<fill name="calc_value">
|
|
<param type="variable">tls_key_directory</param>
|
|
<param>revprox.key</param>
|
|
<param name="join">/</param>
|
|
<target>revprox_key_file</target>
|
|
</fill>
|
|
<fill name="calc_value">
|
|
<param>/etc/pki/tls/certs/imap_</param>
|
|
<param type="variable">imap_domainname</param>
|
|
<param>.crt</param>
|
|
<param name="join"></param>
|
|
<param name="multi" type="boolean">True</param>
|
|
<target>external_imap_crt</target>
|
|
</fill>
|
|
<fill name="calc_value">
|
|
<param>/etc/pki/tls/private/imap_</param>
|
|
<param type="variable">imap_domainname</param>
|
|
<param>.key</param>
|
|
<param name="join"></param>
|
|
<param name="multi" type="boolean">True</param>
|
|
<target>external_imap_key</target>
|
|
</fill>
|
|
<fill name="calc_value">
|
|
<param>/etc/postfix/certs/</param>
|
|
<param type="variable">submission_domainname</param>
|
|
<param>.pem</param>
|
|
<param name="join"></param>
|
|
<param name="multi" type="boolean">True</param>
|
|
<target>postfix_pem_files</target>
|
|
</fill>
|
|
<fill name="calc_value">
|
|
<param type="variable">mail_domains</param>
|
|
<param name="multi" type="boolean">True</param>
|
|
<target>mail_domains_calc</target>
|
|
</fill>
|
|
<fill name="calc_value">
|
|
<param>/var/www/html/mail/</param>
|
|
<param type="variable">mail_domains</param>
|
|
<param>/autodiscover/autodiscover.xml</param>
|
|
<!--param>/config-v1.1.xml</param-->
|
|
<param name="join"></param>
|
|
<param name="multi" type="boolean">True</param>
|
|
<target>well_known_filenames</target>
|
|
</fill>
|
|
<check name="set_linked_multi_variables">
|
|
<param type="variable">revprox_server_domainname</param>
|
|
<param name="linked_provider_0">revprox_clients</param>
|
|
<param name="linked_provider_1">revprox_location</param>
|
|
<param name="linked_value_1">/.well-known/autoconfig/mail/config-v1.1.xml</param>
|
|
<param name="linked_provider_2">revprox_is_websocket</param>
|
|
<param name="linked_value_2" type="boolean">False</param>
|
|
<param name="linked_provider_3">revprox_url</param>
|
|
<param name="linked_value_3" type="variable">well_knowns</param>
|
|
<target>mail_domains_calc</target>
|
|
</check>
|
|
<check name="set_linked_multi_variables">
|
|
<param type="variable">revprox_server_domainname</param>
|
|
<param name="linked_provider_0">revprox_clients</param>
|
|
<param name="linked_provider_1">revprox_location</param>
|
|
<param name="linked_value_1">/autodiscover/autodiscover.xml</param>
|
|
<param name="linked_provider_2">revprox_is_websocket</param>
|
|
<param name="linked_value_2" type="boolean">False</param>
|
|
<param name="linked_provider_3">revprox_url</param>
|
|
<param name="linked_value_3" type="variable">well_knowns</param>
|
|
<target>mail_domains_calc</target>
|
|
</check>
|
|
<fill name="calc_well_known">
|
|
<param type="variable">domain_name_eth0</param>
|
|
<param type="variable">mail_domains</param>
|
|
<target>well_knowns</target>
|
|
</fill>
|
|
</constraints>
|
|
</rougail>
|