Initial commit after Claude implementation

roles/roundcube/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+roundcube_data_dir: "{{ sovereign_base_dir }}/roundcube"

roles/roundcube/handlers/main.yml

@@ -0,0 +1,6 @@
+---
+- name: restart roundcube
+  community.docker.docker_compose_v2:
+    project_src: "{{ roundcube_data_dir }}"
+    state: present
+    recreate: always

roles/roundcube/tasks/main.yml

@@ -0,0 +1,20 @@
+---
+- name: Create Roundcube directories
+  ansible.builtin.file:
+    path: "{{ item }}"
+    state: directory
+    mode: '0755'
+  loop:
+    - "{{ roundcube_data_dir }}"
+
+- name: Deploy Roundcube docker-compose
+  ansible.builtin.template:
+    src: docker-compose.yml.j2
+    dest: "{{ roundcube_data_dir }}/docker-compose.yml"
+    mode: '0644'
+  notify: restart roundcube
+
+- name: Start Roundcube
+  community.docker.docker_compose_v2:
+    project_src: "{{ roundcube_data_dir }}"
+    state: present

roles/roundcube/templates/docker-compose.yml.j2

@@ -0,0 +1,57 @@
+services:
+  roundcube-db:
+    image: postgres:16-alpine
+    container_name: roundcube-db
+    restart: unless-stopped
+    environment:
+      POSTGRES_DB: roundcube
+      POSTGRES_USER: roundcube
+      POSTGRES_PASSWORD: "{{ roundcube_db_password }}"
+    volumes:
+      - {{ roundcube_data_dir }}/db:/var/lib/postgresql/data
+    networks:
+      - internal
+    logging:
+      driver: gelf
+      options:
+        gelf-address: "udp://{{ graylog_host }}:{{ graylog_gelf_port }}"
+        tag: "roundcube-db"
+
+  roundcube:
+    image: roundcube/roundcubemail:{{ roundcube_version }}
+    container_name: roundcube
+    restart: unless-stopped
+    depends_on:
+      - roundcube-db
+    environment:
+      ROUNDCUBEMAIL_DB_TYPE: pgsql
+      ROUNDCUBEMAIL_DB_HOST: roundcube-db
+      ROUNDCUBEMAIL_DB_NAME: roundcube
+      ROUNDCUBEMAIL_DB_USER: roundcube
+      ROUNDCUBEMAIL_DB_PASSWORD: "{{ roundcube_db_password }}"
+      ROUNDCUBEMAIL_DEFAULT_HOST: "ssl://stalwart"
+      ROUNDCUBEMAIL_DEFAULT_PORT: 993
+      ROUNDCUBEMAIL_SMTP_SERVER: "tls://stalwart"
+      ROUNDCUBEMAIL_SMTP_PORT: 587
+      ROUNDCUBEMAIL_DES_KEY: "{{ roundcube_des_key }}"
+      ROUNDCUBEMAIL_PLUGINS: "archive,zipdownload,managesieve,jqueryui"
+      ROUNDCUBEMAIL_SKIN: elastic
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.roundcube.rule=Host(`{{ roundcube_domain }}`)"
+      - "traefik.http.routers.roundcube.tls=true"
+      - "traefik.http.routers.roundcube.tls.certresolver=letsencrypt"
+      - "traefik.http.services.roundcube.loadbalancer.server.port=80"
+    networks:
+      - internal
+      - {{ sovereign_network_name }}
+    logging:
+      driver: gelf
+      options:
+        gelf-address: "udp://{{ graylog_host }}:{{ graylog_gelf_port }}"
+        tag: "roundcube"
+
+networks:
+  internal:
+  {{ sovereign_network_name }}:
+    external: true