forked from infra/ansible
104 lines
2.5 KiB
Django/Jinja
104 lines
2.5 KiB
Django/Jinja
auth_mechanisms = plain login
|
|
auth_verbose = yes
|
|
auth_debug = yes
|
|
disable_plaintext_auth = yes
|
|
|
|
mail_debug = yes
|
|
log_path = /var/log/dovecot/errors.log
|
|
info_log_path = /var/log/dovecot/info.log
|
|
#log_timestamp = "%Y-%m-%d %H:%M:%S "
|
|
|
|
mail_privileged_group = mail
|
|
|
|
mail_location = maildir:/var/vmail/%u/.maildir
|
|
mail_home = maildir:/var/vmail/%u
|
|
mail_uid = vmail
|
|
mail_gid = vmail
|
|
|
|
ssl = yes
|
|
ssl_cert = </etc/dovecot/ssl/{{ mail_server }}.crt
|
|
ssl_key = </etc/dovecot/ssl/{{ mail_server }}.key
|
|
ssl_ca = </etc/acme/lets-encrypt-x3-cross-signed.pem
|
|
ssl_protocols = !SSLv2 !SSLv3
|
|
ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
|
|
|
|
passdb {
|
|
driver = ldap
|
|
args = /etc/dovecot/dovecot-ldap.conf.ext
|
|
}
|
|
|
|
userdb {
|
|
driver = static
|
|
args = uid=vmail gid=vmail home=/var/vmail/%u
|
|
}
|
|
|
|
service auth {
|
|
unix_listener /var/spool/postfix/private/auth {
|
|
mode = 0660
|
|
user = postfix
|
|
group = postfix
|
|
}
|
|
unix_listener auth-master {
|
|
user = vmail
|
|
mode = 0600
|
|
}
|
|
}
|
|
|
|
service imap-login {
|
|
inet_listener imap {
|
|
address = 0.0.0.0 ::
|
|
port = 143
|
|
}
|
|
inet_listener imaps {
|
|
address = 0.0.0.0 ::
|
|
port = 993
|
|
}
|
|
}
|
|
|
|
service managesieve-login {
|
|
inet_listener sieve {
|
|
address = 127.0.0.1 ::1
|
|
port = 2000
|
|
}
|
|
}
|
|
|
|
protocol lda {
|
|
auth_socket_path = /var/run/dovecot/auth-master
|
|
mail_plugins = sieve
|
|
log_path = /var/log/dovecot/deliver.log
|
|
info_log_path = /var/log/dovecot/deliver.log
|
|
}
|
|
|
|
protocol imap {
|
|
mail_max_userip_connections = 50
|
|
}
|
|
|
|
plugin {
|
|
sieve = ~/.dovecot.sieve
|
|
sieve_before = /var/vmail/default.sieve
|
|
sieve_global_path = /var/vmail/default.sieve
|
|
}
|
|
|
|
namespace inbox {
|
|
type = private
|
|
inbox = yes
|
|
|
|
mailbox Drafts {
|
|
special_use = \Drafts
|
|
}
|
|
mailbox Junk {
|
|
special_use = \Junk
|
|
auto = subscribe
|
|
}
|
|
mailbox Trash {
|
|
special_use = \Trash
|
|
}
|
|
mailbox Sent {
|
|
special_use = \Sent
|
|
}
|
|
mailbox "Sent Messages" {
|
|
special_use = \Sent
|
|
}
|
|
}
|
|
|