Adjust mail role to reality (now with working fcgi).

roles/mail/tasks/main.yml

@@ -51,7 +51,7 @@
   notify: Restart dovecot
 
 - name: Ensure correct dovecot certificate permissions
-  file: path=/etc/dovecot/ssl/{{ mail_server }}.key owner=root mode=0400
+  file: path=/etc/dovecot/ssl/{{ mail_server }}.key owner=dovecot mode=0400
   notify: Restart dovecot
 
 - name: Configure mailman
@@ -113,7 +113,7 @@
   notify: Restart postfix
 
 - name: Ensure correct postfix certificate permissions
-  file: path=/etc/postfix/ssl/{{ mail_server }}.key owner=root mode=0400
+  file: path=/etc/postfix/ssl/{{ mail_server }}.key owner=postfix mode=0400
   notify: Restart postfix
 
 - name: Create razor directory structure

roles/mail/templates/mailman/mm_cfg.py.j2

@@ -73,7 +73,7 @@ add_virtualhost(DEFAULT_URL_HOST, DEFAULT_EMAIL_HOST)
 
 #-------------------------------------------------------------
 # The default language for this server.
-DEFAULT_SERVER_LANGUAGE = 'en'
+DEFAULT_SERVER_LANGUAGE = 'de'
 
 #-------------------------------------------------------------
 # Iirc this was used in pre 2.1, leave it for now

roles/mail/templates/nginx/vhost.j2

@@ -7,19 +7,32 @@ server {
 
 	server_name {{ mailman_domain }};
 
+	root /usr/lib/cgi-bin/mailman/;
+
+	location /.well-known/acme-challenge {
+		default_type "text/plain";
+		alias /var/www/acme-challenge;
+	}
+
 	location = / {
-		rewrite ^ /listinfo permanent;
+		rewrite ^ /mailman/listinfo permanent;
 	}
 
 	location / {
-		root /usr/lib/cgi-bin/mailman/;
-		fastcgi_split_path_info (^/[^/]*)(.*)$;
+		rewrite ^ /mailman$uri?$args;
+	}
+
+	location = /mailman/ {
+		rewrite ^ /mailman/listinfo permanent;
+	}
+
+	location /mailman {
+		root /usr/lib/cgi-bin;
+		fastcgi_split_path_info (^/mailman/[^/]+)(/.*)$;
+		fastcgi_pass unix:///var/run/fcgiwrap.socket;
 		include /etc/nginx/fastcgi_params;
 		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
 		fastcgi_param PATH_INFO $fastcgi_path_info;
-		fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
-		fastcgi_intercept_errors on;
-		fastcgi_pass unix:/var/run/fcgiwrap.socket;
 	}
 
 	location /images/mailman {

roles/mail/templates/postfix/recipient_access.j2

@@ -1 +1 @@
-mrks@binary-kitchen.com rblgrey
+mrks@binary-kitchen.com greylisting