imfreedom/email-ansible

Add the dovecot stuff I was working on awhile ago
draft default tip
2021-07-07, Gary Kramlich
ed91bd614149
Add the dovecot stuff I was working on awhile ago
# vim: syntax=apache ai ts=4 sts=4 et sw=4
<VirtualHost *:443>
# This allows for an actual site to be configured at the server's real
# hostname, if desired.
ServerName default-ssl
ServerAdmin root@pidgin.im
SSLEngine on
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
SSLCertificateKeyFile /etc/letsencrypt/live/{{ inventory_hostname }}/privkey.pem
SSLCACertificateFile /etc/letsencrypt/live/{{ inventory_hostname }}/chain.pem
SSLCertificateFile /etc/letsencrypt/live/{{ inventory_hostname }}/cert.pem
DocumentRoot /usr/local/share/wiktel/apache/notconfigured
<Directory /usr/local/share/wiktel/apache/notconfigured>
Require all granted
</Directory>
<Location />
ErrorDocument 503 /notconfigured.html
RedirectMatch 503 ^/(?!(gtk-properties\.png|notconfigured\.(css|html)|fpm-status|server-status|status|robots\.txt|\.well-known))
Header always set Retry-After "3600"
</Location>
# Prevent caching to avoid issues if the real site comes back.
<IfModule mod_headers.c>
Header set Cache-Control "max-age=0, no-cache, no-store, must-revalidate"
Header set Pragma "no-cache"
Header set Expires "Mon, 26 Jul 1997 05:00:00 GMT"
</IfModule>
</VirtualHost>