fix permissions for doveadm
authorRalf Jung <post@ralfj.de>
Sun, 17 May 2020 11:44:54 +0000 (13:44 +0200)
committerRalf Jung <post@ralfj.de>
Sun, 17 May 2020 11:44:54 +0000 (13:44 +0200)
roles/email/tasks/dovecot.yml

index 6e1b12a3a7c2236426afd9fadf3575ef2afd1c88..5d8ef0c38f051744879021508f2a84d821d24f02 100644 (file)
@@ -22,7 +22,7 @@
   template:
     dest: /etc/dovecot/{{ item }}
     src: templates/dovecot/{{ item }}
   template:
     dest: /etc/dovecot/{{ item }}
     src: templates/dovecot/{{ item }}
-    mode: u=rw,g=r,o=
+    mode: u=rw,g=r,o=r # changepw needs read access
     group: dovecot
   loop:
   - conf.d/10-auth.conf
     group: dovecot
   loop:
   - conf.d/10-auth.conf
   - conf.d/20-lmtp.conf
   - conf.d/90-quota.conf
   - conf.d/auth-sql.conf.ext
   - conf.d/20-lmtp.conf
   - conf.d/90-quota.conf
   - conf.d/auth-sql.conf.ext
+- name: configure dovecot secrets
+  notify: dovecot
+  template:
+    dest: /etc/dovecot/{{ item }}
+    src: templates/dovecot/{{ item }}
+    mode: u=rw,g=r,o=
+    group: dovecot
+  loop:
   - dovecot-sql.conf.ext
 - name: install quota notification script
   template:
   - dovecot-sql.conf.ext
 - name: install quota notification script
   template: