wip

bundles/nginx/items.py

@@ -15,7 +15,9 @@ directories = {
             'svc_systemd:nginx:restart',
         },
     },
-    '/var/www': {},
+    '/var/www': {
+        'owner': 'www-data',
+    },
 }
 
 files = {

bundles/roundcube/items.py

@@ -20,11 +20,14 @@ directories = {
 }
 
 git_deploy['/opt/roundcube'] = {
-    'repo': "https://github.com/roundcube/roundcubemail.git",
+    'repo': "git://github.com/roundcube/roundcubemail.git",
     'rev': node.metadata.get('roundcube/version'),
     'needs': [
         'directory:/opt/roundcube',
     ],
+    'triggers': [
+        'action:composer_install',
+    ],
 }
 
 files['/opt/roundcube/config/config.inc.php'] = {
@@ -40,3 +43,8 @@ files['/opt/roundcube/config/config.inc.php'] = {
         'git_deploy:/opt/roundcube',
     ],
 }
+
+actions['composer_install'] = {
+    'command': "cp /opt/roundcube/composer.json-dist /opt/roundcube/composer.json && su www-data -s /bin/bash -c '/usr/bin/composer -d /opt/roundcube install'",
+    'triggered': True,
+}

bundles/roundcube/metadata.py

@@ -19,6 +19,9 @@ defaults = {
             'php-pgsql': {},
             'php-xml': {},
             'php-zip': {},
+            'php-curl': {},
+            'php-gd': {},
+            'composer': {},
         },
     },
     'roundcube': {
@@ -33,7 +36,7 @@ defaults = {
             'managesieve',
             'password',
         ],
-        'des_key': repo.vault.password_for(f'{node.name} roundcube des_key'),
+        'des_key': repo.vault.password_for(f'{node.name} roundcube des_key', length=24),
     },
     'postgresql': {
         'roles': {
@@ -57,7 +60,7 @@ def vhost(metadata):
         'nginx': {
             'vhosts': {
                 metadata.get('mailserver/hostname'): {
-                    'content': 'nginx/php.conf',
+                    'content': 'roundcube/vhost.conf',
                     'context': {
                         'root': '/opt/roundcube',
                     },

data/roundcube/vhost.conf

@@ -0,0 +1,33 @@
+server {
+    listen 443      ssl http2;
+    listen [::]:443 ssl http2;
+    
+    server_name ${server_name};
+    root ${root};
+    index index.php index.html index.htm;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+    }
+
+    location ~ ^/(README|INSTALL|LICENSE|CHANGELOG|UPGRADING)$ {
+        deny all;
+    }
+    location ~ ^/(bin|SQL)/ {
+        deny all;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass php-handler;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        include fastcgi_params;
+    }
+    
+    location ~* \.(jpg|jpeg|gif|png|webp|svg|woff|woff2|ttf|css|js|ico|xml)$ {
+        access_log        off;
+        log_not_found     off;
+        expires           360d;
+    }
+}

nodes/htz.mails.py

@@ -78,7 +78,7 @@
         },
         'roundcube': {
             'product_name': 'Sublimity Mail',
-            'version': '1.4.11',
+            'version': '6466d10339d44a077de4fe094c89ed35ae84da96',
             'installer': True,
         },
         'users': {