Setup nftables for mailserver_dovecot

2024-09-28 11:44:49 +02:00 · 2024-09-28 11:44:49 +02:00 · 998390668e
commit 998390668e
parent b933680621
3 changed files with 13 additions and 0 deletions
--- a/roles/mailserver_dovecot/files/nftables/input.d/imap-imaps.conf
+++ b/roles/mailserver_dovecot/files/nftables/input.d/imap-imaps.conf
@ -0,0 +1 @@
+tcp dport {143, 993} accept comment "Allow IMAP/IMAPS from all"
--- a/roles/mailserver_dovecot/meta/main.yml
+++ b/roles/mailserver_dovecot/meta/main.yml
@ -0,0 +1,4 @@
+---
+
+dependencies:
+  - role: setup_nftables
--- a/roles/mailserver_dovecot/tasks/main.yml
+++ b/roles/mailserver_dovecot/tasks/main.yml
@ -280,3 +280,11 @@
  loop:
    - spam
    - ham
+
+- name: Allow incoming IMAP/IMAPS
+  become: true
+  ansible.builtin.copy:
+    src: nftables/input.d/imap-imaps.conf
+    dest: /etc/nftables/input.d/imap-imaps.conf
+    mode: 0640
+  notify: Reload nftables service
				`@ -0,0 +1 @@`
				`tcp dport {143, 993} accept comment "Allow IMAP/IMAPS from all"`