From f8e348e07bdec397ea8bcc733ff2006ca5659145 Mon Sep 17 00:00:00 2001
From: Someone <someone@somenet.org>
Date: Fri, 4 Oct 2024 13:42:40 +0200
Subject: [PATCH] [roles/server/mail/saslauthd] setup saslauthd

---
 .../mail/saslauthd/files/default/saslauthd    | 69 +++++++++++++++++++
 roles/server/mail/saslauthd/handlers/main.yml | 13 ++++
 roles/server/mail/saslauthd/tasks/main.yml    | 36 ++++++++++
 3 files changed, 118 insertions(+)
 create mode 100644 roles/server/mail/saslauthd/files/default/saslauthd
 create mode 100644 roles/server/mail/saslauthd/handlers/main.yml
 create mode 100644 roles/server/mail/saslauthd/tasks/main.yml

diff --git a/roles/server/mail/saslauthd/files/default/saslauthd b/roles/server/mail/saslauthd/files/default/saslauthd
new file mode 100644
index 0000000..1f311f3
--- /dev/null
+++ b/roles/server/mail/saslauthd/files/default/saslauthd
@@ -0,0 +1,69 @@
+#
+################################################
+### Managed by someone's ansible provisioner ###
+################################################
+# Part of: https://git.somenet.org/root/pub/somesible.git
+# 2017-2024 by someone <someone@somenet.org>
+#
+#
+# Settings for saslauthd daemon
+# Please read /usr/share/doc/sasl2-bin/README.Debian for details.
+#
+
+# Should saslauthd run automatically on startup? (default: no)
+START=yes
+
+# Description of this saslauthd instance. Recommended.
+# (suggestion: SASL Authentication Daemon)
+DESC="SASL Authentication Daemon"
+
+# Short name of this saslauthd instance. Strongly recommended.
+# (suggestion: saslauthd)
+NAME="saslauthd"
+
+# Which authentication mechanisms should saslauthd use? (default: pam)
+#
+# Available options in this Debian package:
+# getpwent  -- use the getpwent() library function
+# kerberos5 -- use Kerberos 5
+# pam       -- use PAM
+# rimap     -- use a remote IMAP server
+# shadow    -- use the local shadow password file
+# sasldb    -- use the local sasldb database file
+# ldap      -- use LDAP (configuration is in /etc/saslauthd.conf)
+#
+# Only one option may be used at a time. See the saslauthd man page
+# for more information.
+#
+# Example: MECHANISMS="pam"
+MECHANISMS="pam"
+
+# Additional options for this mechanism. (default: none)
+# See the saslauthd man page for information about mech-specific options.
+MECH_OPTIONS=""
+
+# How many saslauthd processes should we run? (default: 5)
+# A value of 0 will fork a new process for each connection.
+THREADS=2
+
+# Other options (default: -c -m /var/run/saslauthd)
+# Note: You MUST specify the -m option or saslauthd won't run!
+#
+# WARNING: DO NOT SPECIFY THE -d OPTION.
+# The -d option will cause saslauthd to run in the foreground instead of as
+# a daemon. This will PREVENT YOUR SYSTEM FROM BOOTING PROPERLY. If you wish
+# to run saslauthd in debug mode, please run it by hand to be safe.
+#
+# See /usr/share/doc/sasl2-bin/README.Debian for Debian-specific information.
+# See the saslauthd man page and the output of 'saslauthd -h' for general
+# information about these options.
+#
+# Example for chroot Postfix users: "-c -m /var/spool/postfix/var/run/saslauthd"
+# Example for non-chroot Postfix users: "-c -m /var/run/saslauthd"
+#
+# To know if your Postfix is running chroot, check /etc/postfix/master.cf.
+# If it has the line "smtp inet n - y - - smtpd" or "smtp inet n - - - - smtpd"
+# then your Postfix is running in a chroot.
+# If it has the line "smtp inet n - n - - smtpd" then your Postfix is NOT
+# running in a chroot.
+OPTIONS="-V -c -m /var/run/saslauthd"
diff --git a/roles/server/mail/saslauthd/handlers/main.yml b/roles/server/mail/saslauthd/handlers/main.yml
new file mode 100644
index 0000000..cf049ce
--- /dev/null
+++ b/roles/server/mail/saslauthd/handlers/main.yml
@@ -0,0 +1,13 @@
+#####################################
+### someone's ansible provisioner ###
+#####################################
+# Part of: https://git.somenet.org/root/pub/somesible.git
+# 2017-2024 by someone <someone@somenet.org>
+#
+---
+- name: restart saslauthd.service
+  systemd:
+    name: saslauthd.service
+    daemon_reload: yes
+    state: restarted
+  ignore_errors: yes
diff --git a/roles/server/mail/saslauthd/tasks/main.yml b/roles/server/mail/saslauthd/tasks/main.yml
new file mode 100644
index 0000000..4ff6759
--- /dev/null
+++ b/roles/server/mail/saslauthd/tasks/main.yml
@@ -0,0 +1,36 @@
+#####################################
+### someone's ansible provisioner ###
+#####################################
+# Part of: https://git.somenet.org/root/pub/somesible.git
+# 2017-2024 by someone <someone@somenet.org>
+#
+---
+- name: install saslauthd
+  apt:
+    pkg:
+    - sasl2-bin
+    state: present
+    policy_rc_d: 101
+  tags: "online"
+  ignore_errors: "{{ignore_online_errors | bool}}"
+
+
+- name: copy saslauthd defaults
+  copy:
+    src: "{{item}}"
+    dest: "/etc/default/saslauthd"
+    mode: 0644
+    owner: "root"
+    group: "root"
+  with_first_found:
+    - "{{lookup('env','PWD')}}/host_files/{{inventory_hostname}}/{{role_name}}/saslauthd"
+    - "{{lookup('env','PWD')}}/group_files/{{group_files_group}}/{{role_name}}/saslauthd"
+    - "{{lookup('env','PWD')}}/group_files/all/{{role_name}}/saslauthd"
+    - "default/saslauthd"
+  notify: restart saslauthd.service
+
+
+- name: enable and start saslauthd.service
+  include_role: name="base/systemd/enable-and-start"
+  vars:
+    service_name: saslauthd.service
-- 
2.43.0