use fetchmail to deliver mail to patchwork

host_vars/patchwork.archlinux.org → host_vars/patchwork.archlinux.org/misc

 ---
 filesystem: btrfs
 memcached_socket: "/var/run/patchwork.sock"
+fetchmail_user: "patchwork@archlinux.org"
+fetchmail_delivery_cmd: "/usr/local/bin/patchwork-parsemail-wrapper.sh"
 
 fail2ban_jails:
   sshd: true

host_vars/patchwork.archlinux.org/vault_patchwork.yml

+fetchmail_pass: none

playbooks/patchwork.archlinux.org.yml

@@ -12,6 +12,7 @@
     - { role: certbot }
     - { role: nginx }
     - { role: postfix, postfix_relayhost: "mail.archlinux.org"  }
+    - { role: fetchmail }
     - { role: postgres }
     - { role: sudo }
     - { role: uwsgi }

roles/fetchmail/handlers/main.yml

+---
+
+- name: restart fetchmail
+  service: name=fetchmail state=restarted

roles/fetchmail/tasks/main.yml

+---
+
+- name: install fetchmail
+  pacman: name=fetchmail state=present
+
+- name: template fetchmail config
+  template: src=fetchmailrc.j2 dest=/etc/fetchmailrc owner=fetchmail group=nobody mode=600
+  notify:
+    - restart fetchmail
+
+- name: start and enable fetchmail
+  service: name=fetchmail enabled=yes state=started

roles/fetchmail/templates/fetchmailrc.j2

+set postmaster "postmaster@archlinux.org"
+set bouncemail
+set no spambounce
+set daemon 10
+set syslog
+
+poll mail.archlinux.org
+bad-header accept
+proto imap
+user {{ fetchmail_user }}
+password {{ fetchmail_pass }}
+options idle sslcertck ssl sslproto "TLS1.2+" limitflush limit 25000000 fetchall
+mda "{{ fetchmail_delivery_cmd }}"