Add lists.pagure.org to Mailman

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>

playbooks/include/proxies-reverseproxy.yml

@@ -71,6 +71,15 @@
     keephost: true
     proxyurl: "{{ varnish_url }}"
 
+  - role: httpd/reverseproxy
+    website: lists.pagure.io
+    destname: mailman3
+    localpath: /
+    remotepath: /
+    header_scheme: true
+    keephost: true
+    proxyurl: "{{ varnish_url }}"
+
   # The place for the raw originals
   - role: httpd/reverseproxy
     website: meetbot-raw.fedoraproject.org

playbooks/include/proxies-websites.yml

@@ -901,6 +901,12 @@
     - release-monitoring.org
     when: env == "staging"
 
+  - role: httpd/website
+    site_name: lists.pagure.io
+    sslonly: true
+    cert_name: lists.pagure.io.cert
+    SSLCertificateChainFile: lists.pagure.io.intermediate.cert
+
 # fedorahosted is retired. We have the site here so we can redirect it.
 
   - role: httpd/website

roles/base/files/postfix/main.cf/main.cf.smtp-mm

@@ -305,7 +305,7 @@ unknown_local_recipient_reject_code = 550
 #
 #relay_domains = $mydestination
 
-relay_domains = $mydestination lists.fedoraproject.org lists.fedorahosted.org fedorahosted.org
+relay_domains = $mydestination lists.fedoraproject.org lists.fedorahosted.org fedorahosted.org lists.pagure.io
 
 # INTERNET OR INTRANET
 

roles/base/files/postfix/transports.mm-smtp

@@ -2,4 +2,5 @@ lists.fedoraproject.org  smtp:[mailman01.vpn.fedoraproject.org]
 lists.fedorahosted.org   smtp:[mailman01.vpn.fedoraproject.org]
 redhat.com               smtp:[mailman01.vpn.fedoraproject.org]
 lists2.fedoraproject.org smtp:[mailman01.vpn.fedoraproject.org]
+lists.pagure.io          smtp:[mailman01.vpn.fedoraproject.org]
 fedorahosted.org         smtp:[bastion.vpn.fedoraproject.org]

roles/mailman/tasks/main.yml

@@ -519,6 +519,14 @@
   - restart memcached
 
 
+# SSL
+- name: Letsencrypt for lists.pagure.org
+  include_role: name=letsencrypt
+  vars:
+    site_name: lists.pagure.io
+  when: env == 'production'
+
+
 # Start services
 - name: start services
   service: state=started enabled=yes name={{ item }}