mailman3_core_public_rest_api variable, so core and hyperkitty work on internal addresses

Author: sdarwin

defaults/main.yml

@@ -122,6 +122,7 @@ mailman3_core_api_hostname: localhost
 mailman3_core_api_port: 8001
 mailman3_core_api_admin_user: restadmin
 mailman3_core_api_admin_pass: restpass
+mailman3_core_public_rest_api: false
 
 # Using the default archiver secret key is not secure, generate a random key!
 mailman3_archiver_key: SecretArchiverAPIKey

tasks/nginx.yml

@@ -29,3 +29,8 @@
     dest: /etc/nginx/sites-enabled/default
     state: absent
   notify: Restart nginx
+
+- name: Install certbot
+  community.general.snap:
+    name: certbot
+    classic: true

tasks/server.yml

@@ -5,10 +5,21 @@
   changed_when: false
 
 - name: Set line in /etc/hosts
+  when: mailman3_core_public_rest_api
   ansible.builtin.lineinfile:
     path: /etc/hosts
     regexp: "{{ inventory_hostname }}"
     line: "{{ ansible_default_ipv4.address | default(ansible_all_ipv4_addresses[0]) }} {{ inventory_hostname }} {{ ansible_hostname }}"
     owner: root
     group: root
     mode: '0644'
+
+- name: Set line in /etc/hosts 127.0.1.1
+  when: not mailman3_core_public_rest_api
+  ansible.builtin.lineinfile:
+    path: /etc/hosts
+    regexp: "{{ inventory_hostname }}"
+    line: "127.0.1.1 {{ inventory_hostname }} {{ ansible_hostname }}"
+    owner: root
+    group: root
+    mode: '0644'

templates/vhost.j2

@@ -3,8 +3,8 @@ upstream myapp {
   server unix:/run/mailman3-web.sock;
 }
 
-# This localhost vhost was needed for a process, before. Was it imports?
-# Add a comment about the reasons.
+# Perhaps for elasticsearch?
+# Or for core to communicate to hyperkitty on localhost
 
 server {
    listen 80;