1 files changed, 72 insertions, 0 deletions
diff --git a/puppet/templates/apache/vhosts/mail.erb b/puppet/templates/apache/vhosts/mail.erb
new file mode 100644
index 0000000..3badcf0
--- /dev/null
+++ b/puppet/templates/apache/vhosts/mail.erb
@@ -0,0 +1,72 @@
+# begin vhost for mail.<%= domain >
+<VirtualHost *:80>
+  ServerName mail.<%= domain >
+  #DocumentRoot /usr/share/squirrelmail
+  DocumentRoot /var/lib/roundcube
+      
+  # begin squirrel config
+  <Directory /usr/share/squirrelmail>
+    Options Indexes FollowSymLinks
+    <IfModule mod_php4.c>
+      php_flag register_globals off
+    </IfModule>
+    <IfModule mod_php5.c>
+      php_flag register_globals off
+    </IfModule>
+    <IfModule mod_dir.c>
+      DirectoryIndex index.php
+    </IfModule>
+  
+    # access to configtest is limited by default to prevent information leak
+    <Files configtest.php>
+      order deny,allow
+      deny from all
+      allow from 127.0.0.1
+    </Files>
+  </Directory>
+  # end squirrel config
+
+  # begin roundcube config
+  # Access to tinymce files
+  Alias /roundcube/program/js/tiny_mce/ /usr/share/tinymce/www/
+  Alias /roundcube /var/lib/roundcube
+
+  <Directory "/usr/share/tinymce/www/">
+        Options Indexes MultiViews FollowSymLinks
+        AllowOverride None
+        Order allow,deny
+        allow from all
+  </Directory>
+  
+  <Directory /var/lib/roundcube/>
+    Options +FollowSymLinks
+    # This is needed to parse /var/lib/roundcube/.htaccess. See its
+    # content before setting AllowOverride to None.
+    AllowOverride All
+    order allow,deny
+    allow from all
+  </Directory>
+  
+  # Protecting basic directories:
+  <Directory /var/lib/roundcube/config>
+          Options -FollowSymLinks
+          AllowOverride None
+  </Directory>
+  
+  <Directory /var/lib/roundcube/temp>
+          Options -FollowSymLinks
+          AllowOverride None
+          Order allow,deny
+          Deny from all
+  </Directory>
+  
+  <Directory /var/lib/roundcube/logs>
+          Options -FollowSymLinks
+          AllowOverride None
+          Order allow,deny
+          Deny from all
+  </Directory>  
+  # end roundcube config
+
+</VirtualHost>
+# end vhost for mail.<%= domain >