From e3953b18106053973a5c9151d879216a848b7b04 Mon Sep 17 00:00:00 2001
From: Sheppy <sheppy@atlantishq.de>
Date: Tue, 14 Mar 2023 17:59:55 +0100
Subject: [PATCH] add: smtp/mail configuration keycloak master realm

---
 group_vars/all.yaml                      |  4 ++++
 roles/usermanagement/tasks/keycloak.yaml | 24 ++++++++++++++++++++++++
 2 files changed, 28 insertions(+)

diff --git a/group_vars/all.yaml b/group_vars/all.yaml
index b199077..45bae97 100644
--- a/group_vars/all.yaml
+++ b/group_vars/all.yaml
@@ -7,6 +7,10 @@ nsca_password: HISTORY_PURGED_SECRET
 RSYSLOG_SERVER: internal.monitoring.atlantishq.de
 influxdb_telegraf_password: HISTORY_PURGED_SECRET
 
+smtp_internal_host: 192.168.122.101
+smtp_service_user: noreply
+smtp_service_pass: HISTORY_PURGED_SECRET
+
 # overwritten in monitoring master group var
 monitoring_master: false
 
diff --git a/roles/usermanagement/tasks/keycloak.yaml b/roles/usermanagement/tasks/keycloak.yaml
index 3db857d..672e9e1 100644
--- a/roles/usermanagement/tasks/keycloak.yaml
+++ b/roles/usermanagement/tasks/keycloak.yaml
@@ -43,6 +43,7 @@
   until: result.status and result.json.status == "UP"
   retries: 10
   delay: 20
+  check_mode: false
 
 - name: Create Keycloak Clients
   local_action:
@@ -69,3 +70,26 @@
     frontchannel_logout: False
     protocol: openid-connect
   with_items: "{{ keycloak_clients.keys() | list }}"
+
+- name: Update master realm settings
+  community.general.keycloak_realm:
+    auth_client_id: admin-cli
+    auth_keycloak_url: https://keycloak.atlantishq.de/
+    auth_realm: master
+    auth_username: admin
+    auth_password: "{{ keycloak_admin_password }}"
+    state: present
+    realm: master
+    smtpServer :
+        password : "{{ smtp_service_pass }}"
+        replyToDisplayName: ""
+        starttls: "false"
+        auth: "true"
+        replyTo: ""
+        envelopeFrom: ""
+        from: "{{ smtp_service_user }}@atlantishq.de"
+        fromDisplayName: ""
+        host: "{{ smtp_internal_host }}"
+        port: "25"
+        ssl: "false"
+        user: "{{ smtp_service_user }}"