ansible-role-eom/tasks/sogo.yaml

83 lines
2.5 KiB
YAML

---
# tasks file for SOGo
- name: Create SOGo namespace
k8s:
state: present
definition:
apiVersion: v1
kind: Namespace
metadata:
name: sogo
- name: Create a deployment
k8s:
definition:
apiVersion: v1
kind: Deployment
metadata:
name: sogo
namespace: sogo
spec:
replicas: 1
selector:
matchLabels:
app: sogo
template:
metadata:
labels:
app: sogo
spec:
containers:
- name: sogo
image: mailcow/sogo
volumeMounts:
- name: mail
mountPath: /var/mail
ports:
- containerPort: 80
env:
- name: OVERRIDE_HOSTNAME
value: "postfix.eom.dev"
- name: POSTMASTER_ADDRESS
value: "postfix@eom.dev"
- name: ACCOUNT_PROVISIONER
value: "LDAP"
- name: LDAP_SERVER_HOST
value: "ldap://openldap.openldap.svc.cluster.local/"
- name: LDAP_SEARCH_BASE
value: "dc=eom,dc=dev"
- name: LDAP_BIND_DN
value: "cn=readonly,dc=eom,dc=dev"
- name: LDAP_BIND_PW
value: "{{ openldap_readonly_password }}"
- name: LDAP_QUERY_FILTER_DOMAIN
value: "(mail=*@%s)"
- name: LDAP_QUERY_FILTER_USER
value: "(&(mail=%s)(memberOf=cn=Postfix Users,ou=Postfix,ou=Services,dc=eom,dc=dev))"
- name: LDAP_QUERY_FILTER_ALIAS
value: "(&(objectClass=posixAccount)(mailAlias=%s))"
- name: LDAP_QUERY_FILTER_GROUP
value: "(&(objectClass=posixAccount)(mailGroupMember=%s))"
- name: LDAP_QUERY_FILTER_SENDERS
value: "(&(objectClass=posixAccount)(|(mail=%s)(mailAlias=%s)(mailGroupMember=%s)))"
volumes:
- name: mail
persistentVolumeClaim:
claimName: mail
- name: Expose deployment as a service
k8s:
definition:
apiVersion: v1
kind: Service
metadata:
name: sogo
namespace: sogo
spec:
selector:
app: sogo
ports:
- port: 80
name: http
type: LoadBalancer