---

# This is for Thunderbrid autoconfiguration.

- hosts: webservers
  tasks:
    - name: Basic setup
      include_role: name=common

    - name: Nginx site for autoconfig
      include_role: name=nginx
      vars:
        nginx_owner: www-data
        nginx_domain: autoconfig.afpy.org
        nginx_certificates: [autoconfig.afpy.org, autoconfig.pycon.fr]
        nginx_path: /var/www/autoconfig.afpy.org
        nginx_conf: |
          server
          {
              listen [::]:80; listen 80;
              server_name autoconfig.afpy.org autoconfig.pycon.fr;
              return 301 https://$host$request_uri;
          }

          server
          {
              listen [::]:443 ssl http2; listen 443 ssl http2;
              server_name autoconfig.afpy.org autoconfig.pycon.fr;
              include snippets/letsencrypt-autoconfig.afpy.org.conf;
              root /var/www/autoconfig.afpy.org;
              autoindex on;
          }

    - name: Create directory hierarchy for autoconfig
      file:
        path: /var/www/autoconfig.afpy.org/mail/
        state: directory
        mode: 0755

    - name: Create autoconfig file
      copy:
        dest: /var/www/autoconfig.afpy.org/mail/config-v1.1.xml
        mode: 0644
        content: |
          <?xml version="1.0" encoding="UTF-8"?>
          <clientConfig version="1.1">
            <emailProvider id="afpy.org">
              <domain>afpy.org</domain>
              <domain>pycon.fr</domain>
              <displayName>AFPY</displayName>
              <displayShortName>AFPY</displayShortName>
              <incomingServer type="imap">
                <hostname>mail.gandi.net</hostname>
                <port>993</port>
                <socketType>SSL</socketType>
                <authentication>password-cleartext</authentication>
                <username>%EMAILADDRESS%</username>
              </incomingServer>
              <outgoingServer type="smtp">
                <hostname>mail.gandi.net</hostname>
                <port>587</port>
                <socketType>STARTTLS</socketType>
                <authentication>password-cleartext</authentication>
                <username>%EMAILADDRESS%</username>
              </outgoingServer>
            </emailProvider>
          </clientConfig>