uwsgi-python: add mail-api of our user-scripts

uwsgi-python/handlers/main.yml

@@ -39,6 +39,9 @@
 - name: restart uwsgi instance nfs-api
   service: name="uwsgi@nfs-api" state=restarted
 
+- name: restart uwsgi instance mail-api
+  service: name="uwsgi@mail-api" state=restarted
+
 - name: restart uwsgi instance printercount
   service: name="uwsgi@printercount" state=restarted
 

uwsgi-python/tasks/apps/mail-api.yml

+---
+
+- name: ensure mail-api can create maildirs
+  template:
+    src: apps/mail-api-sudoers.j2
+    dest: /etc/sudoers.d/mailapi
+    owner: root
+    group: root
+    mode: 0440
+  tags:
+    - usercripts
+    - mailapi
+    - webservices
+
+- name: check the sudo config
+  command: visudo -q -c -f /etc/sudoers
+  changed_when: no
+  tags:
+    - userscripts
+    - mailapi
+    - webservices

uwsgi-python/templates/apps/mail-api-sudoers.j2

+{{app_user}} ALL=NOPASSWD: {{app_path}}/create-maildir.py

uwsgi-python/templates/apps/mail-api.j2

+AUTH_GROUP = '{{ mail_api_auth_group }}'
+AD_HOST = '{{ mail_api_ad_host }}'
+AD_DOMAIN = '{{ mail_api_domain }}'
+AD_USER_DN = '{{ mail_api_user_dn }}'
+AD_GROUP_DN = '{{ mail_api_group_dn }}'
+AD_CA_CERT = '{{ mail_api_ca_cert }}'
+
+MAIL = '{{ mail_api_maildirs }}'
+APPEND_PATH = '{{ mail_api_append_path }}'
+SUB_MAILDIRS = [
+{% for sdir in mail_api_sub_maildirs %}
+    '{{ sdir }}',
+{% endfor %}
+]
+
+SMTP_TEMPLATE = '{{ mail_api_smtp_template }}'
+SMTP_SUBJECT = '{{ mail_api_smtp_subject }}'
+SMTP_DOMAIN = '{{ mail_api_smtp_domain }}'
+SMTP_REPLY_TO = '{{ mail_api_smtp_reply_to }}'
+SMTP_NOTIFY_TEMPLATE = '{{ mail_api_smtp_notify_template }}'
+SMTP_NOTIFY_SUBJECT = '{{ mail_api_smtp_notify_subject }}'
+SMTP_NOTIFY_MAIL = '{{ mail_api_smtp_notify_mail }}'
+SMTP_ENCRYPTION = '{{ mail_api_smtp_encryption }}' # 'starttls', 'ssl', 'none'
+SMTP_HOST = '{{ mail_api_smtp_host }}'
+SMTP_PORT = '{{ mail_api_smtp_port }}'
+SMTP_AUTH = {{ mail_api_smtp_auth }}
+ONBOARDING_ORGANIZATION = '{{ mail_api_onboarding_organization }}'
+ONBOARDING_WIKI = '{{ mail_api_onboarding_wiki }}'
+ONBOARDING_WIKI_HOWTO = '{{ mail_api_onboarding_wiki_howto }}'

uwsgi-python/vars/mail-api.yml

+app_name: mail-api
+app_user: mailapi
+app_group: mailapi
+app_home: /var/www/mail-api
+app_path: /var/www/mail-api
+app_python_version: 3
+app_venv: /var/www/mail-api/venv
+app_program: mailapi.py
+app_callable: app
+app_command: ""
+app_mountpoint: /api
+app_service_env: []
+app_mules: 0
+app_enable_threads: false
+app_harakiri: 5
+app_uwsgi_options: ['close-on-exec']
+
+app_db_name: ''
+app_db_type: ''
+
+app_additional_software: []
+
+app_deploy_key: "{{ inventory_dir }}/files/deploy-keys/mail-api"
+app_git_url: "git@git.fsmpi.rwth-aachen.de:infra/user-scripts.git"
+app_git_version: HEAD
+
+app_requirements_file: requirements-mail.txt
+app_config_file: config.py
+app_secret_config: false
+app_secret_config_keys: []
+
+mail_api_auth_group: "Domain Admins"
+mail_api_ad_host: "auth.example.com"
+mail_api_domain: "EXAMPLE"
+mail_api_user_dn: "cn=users,dc=example,dc=com"
+mail_api_group_dn: "cn=users,dc=example,dc=com"
+mail_api_ca_cert: ""
+
+mail_api_maildirs: "/maildirs"
+mail_api_append_path: "Maildir"
+mail_api_sub_maildirs:
+  - 'public'
+  - 'public/.Test'
+mail_api_smtp_template: 'welcome.txt.j2'
+mail_api_smtp_subject: 'Your New Account'
+mail_api_smtp_domain: 'example.com'
+mail_api_smtp_reply_to: 'ticket@example.com'
+mail_api_smtp_notify_template: 'notify.txt.j2'
+mail_api_smtp_notify_subject: 'New Account created: {username}'
+mail_api_smtp_notify_mail: 'admin@example.com'
+mail_api_smtp_encryption: 'starttls'
+mail_api_smtp_host: 'mail.example.com'
+mail_api_smtp_port: 587
+mail_api_smtp_auth: true
+mail_api_onboarding_organization: 'EXAMPLE'
+mail_api_onboarding_wiki: 'https://wiki.example.com/'
+mail_api_onboarding_wiki_howto: 'https://wiki.example.com/infra:onboarding'