feat(service): add roundcubemail.

2 files changed, 36 insertions, 4 deletions

diff --git a/template/nginx/root.conf.template b/template/nginx/root.conf.template
index 8f65b40..1a32b6d 100644
--- a/template/nginx/root.conf.template
+++ b/template/nginx/root.conf.template
@@ -49,3 +49,39 @@ server {
         root /srv/acme;
     }
 }
+
+# Temporary config for roundcubemail (PHP)
+# TODO: Add to nginx template.
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name mail.${CRUPEST_DOMAIN};
+
+    index index.php index.html;
+    root /srv/roundcubemail;
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_split_path_info ^(.+\.php)(/.+)$;
+        fastcgi_pass roundcubemail:9009;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_param PATH_INFO $fastcgi_path_info;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name mail.${CRUPEST_DOMAIN};
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+
+    location /.well-known/acme-challenge {
+        root /srv/acme;
+    }
+}
diff --git a/template/nginx/server.json b/template/nginx/server.json
index c9a6108..a338c4f 100644
--- a/template/nginx/server.json
+++ b/template/nginx/server.json
@@ -25,10 +25,6 @@
             "type": "redirect",
             "subdomain": "github",
             "url": "https://github.com/crupest"
-        },
-        {
-            "type": "cert-only",
-            "subdomain": "mail"
         }
     ]
 }