sieve + acl updates

group_vars/vpn.yml

@@ -1,5 +1,5 @@
 ---
 headscale_oidc_secret: "{{ lookup('env', 'HEADSCALE_OIDC_SECRET') }}"
 headscale_allowed_users:
-  - "elizabeth.hunt@simponic.xyz"
+  - "elizabeth@simponic.xyz"
   - "riley@simponic.xyz"

roles/mail/templates/docker-compose.yml.j2

@@ -9,6 +9,7 @@ services:
       - "465:465"
       - "587:587"
       - "993:993"
+      - "0.0.0.0:4190:4190"
     volumes:
       - ./docker-data/dms/mail-data/:/var/mail/
       - ./docker-data/dms/mail-state/:/var/mail-state/
@@ -20,6 +21,7 @@ services:
       - SSL_TYPE=letsencrypt
       - ENABLE_CLAMAV=0
       - ENABLE_AMAVIS=0
+      - ENABLE_MANAGESIEVE=1
       - ENABLE_FAIL2BAN=1
       - SPOOF_PROTECTION=1
       - ACCOUNT_PROVISIONER=LDAP

roles/roundcube/templates/docker-compose.yml.j2

@@ -19,4 +19,5 @@ services:
       - ROUNDCUBEMAIL_DEFAULT_HOST=ssl://mail.simponic.xyz
       - ROUNDCUBEMAIL_DEFAULT_PORT=993
       - ROUNDCUBEMAIL_SMTP_SERVER=tls://mail.simponic.xyz
+      - ROUNDCUBEMAIL_PLUGINS=archive,zipdownload,managesieve,markasjunk
       - ROUNDCUBEMAIL_SMTP_PORT=587

roles/roundcube/templates/sieve.inc.php.j2

@@ -0,0 +1,4 @@
+<?php
+
+$config['managesieve_host'] = "tls://mail.simponic.xyz";
+$config['managesieve_auth_type'] = "PLAIN";

roles/vpn/files/config/acl.json

@@ -1,6 +1,6 @@
 {
   "groups": {
-    "group:admin": ["elizabeth.hunt"],
+    "group:admin": ["elizabeth"],
     "group:roomates": ["riley"],
     "group:friends": ["riley"],
     "group:sys": ["sys"]