dovecot: Install our own PAM config

This enables lastlog so that we also see which accounts are used for
email only even if they are not used for SSH.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

roles/dovecot/files/pam.d.dovecot

+session required pam_lastlog.so
+auth    required pam_unix.so
+account required pam_unix.so

roles/dovecot/tasks/main.yml

@@ -11,6 +11,9 @@
   notify:
     - reload dovecot
 
+- name: install PAM config
+  copy: src=pam.d.dovecot dest=/etc/pam.d/dovecot mode=0644 owner=root group=root
+
 - name: install dovecot cert renewal hook
   template: src=letsencrypt.hook.d.j2 dest=/etc/letsencrypt/hook.d/dovecot owner=root group=root mode=0755