From 1c6a95883ace3d3288ac0757c6780fd2b3e825fc Mon Sep 17 00:00:00 2001
From: Tunui Franken <tfranken@protonmail.com>
Date: Thu, 25 Jul 2024 15:14:20 +0200
Subject: [PATCH] Some dovecot fixes

---
 roles/mailserver_dovecot/tasks/main.yml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/roles/mailserver_dovecot/tasks/main.yml b/roles/mailserver_dovecot/tasks/main.yml
index 92d0fbd..852064a 100644
--- a/roles/mailserver_dovecot/tasks/main.yml
+++ b/roles/mailserver_dovecot/tasks/main.yml
@@ -86,7 +86,7 @@
     path: /etc/dovecot/conf.d/10-master.conf
     block: |
       unix_listener /var/spool/postfix/private/dovecot-lmtp {
-        mode = 0660
+        mode = 0600
         user = postfix
         group = postfix
       }
@@ -98,9 +98,9 @@
   become: true
   loop:
     - regexp: '^ssl_cert =.*'
-      line: "ssl_cert = </etc/letsencrypt/live/{{ ansible_hostname }}.{{ virtual_domain }}/fullchain.pem"
+      line: "ssl_cert = </etc/letsencrypt/live/{{ add_cert_domain }}/fullchain.pem"
     - regexp: '^ssl_key =.*'
-      line: "ssl_key = </etc/letsencrypt/live/{{ ansible_hostname }}.{{ virtual_domain }}/privkey.pem"
+      line: "ssl_key = </etc/letsencrypt/live/{{ add_cert_domain }}/privkey.pem"
     - regexp: '^ssl =.*'
       line: ssl = required
   ansible.builtin.lineinfile:
@@ -117,6 +117,7 @@
     owner: root
     group: root
     mode: "640"
+  notify: Reload dovecot service
 
 - name: Add sieve plugin
   become: true