infra/roles/mail/templates/dovecot/local.conf.j2

auth_mechanisms = plain login
auth_verbose = no
auth_debug = no
disable_plaintext_auth = yes

mail_debug = no
log_path = /var/log/dovecot/errors.log
info_log_path = /var/log/dovecot/info.log
#log_timestamp = "%Y-%m-%d %H:%M:%S "

mail_privileged_group = mail
mail_location = maildir:~/.maildir

postmaster_address = postmaster@{{ mail_domain }}
submission_host = 127.0.0.1:10025

ssl = yes
ssl_cert = </etc/dovecot/ssl/{{ mail_server }}.crt
ssl_key = </etc/dovecot/ssl/{{ mail_server }}.key
ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA

service lmtp {
  unix_listener /var/spool/postfix/private/dovecot-lmtpd {
    group = postfix
    mode = 0660
    user = postfix
  }
}
service auth {
  unix_listener /var/spool/postfix/private/dovecot-auth {
    mode = 0660
    user = postfix
    group = postfix
  }
}
service imap-login {
  inet_listener imap {
    address = 0.0.0.0 ::
    port = 143
  }
  inet_listener imaps {
    address = 0.0.0.0 ::
    port = 993
  }
}

passdb {
  driver = ldap
  args = /etc/dovecot/dovecot-ldap.conf.ext
}
protocols = "imap lmtp sieve"
protocol sieve {
  userdb {
    driver = ldap
    args = /etc/dovecot/dovecot-ldap.conf.ext
    default_fields = uid=vmail gid=vmail
  }
}
protocol imap {
  userdb {
    driver = ldap
    args = /etc/dovecot/dovecot-ldap.conf.ext
    default_fields = uid=vmail gid=vmail
  }
  mail_plugins = "imap_sieve"
  mail_max_userip_connections = 50
}
protocol lmtp {
  userdb {
    driver = ldap
    args = /etc/dovecot/dovecot-ldap.conf.lmtp
    default_fields = uid=vmail gid=vmail
  }
  mail_plugins = "sieve notify push_notification"
}
plugin {
  imapsieve_mailbox1_before = file:/var/vmail/.sieve/report-spam.sieve
  imapsieve_mailbox1_causes = COPY
  imapsieve_mailbox1_name = Junk
  imapsieve_mailbox2_before = file:/var/vmail/.sieve/report-ham.sieve
  imapsieve_mailbox2_causes = COPY
  imapsieve_mailbox2_from = Junk
  imapsieve_mailbox2_name = *
  sieve_after = /var/vmail/.sieve/move-spam.sieve
  sieve_global = /var/vmail/.sieve
  sieve_global_extensions = +vnd.dovecot.pipe
  sieve_pipe_bin_dir = /var/vmail/.sieve/bin
  sieve_plugins = "sieve_imapsieve sieve_extprograms"
  sieve = file:~/.sieve;active=~/.dovecot.sieve
}

namespace inbox {
  type = private
  inbox = yes

  mailbox Drafts {
    special_use = \Drafts
  }
  mailbox Junk {
    special_use = \Junk
    auto = subscribe
  }
  mailbox Trash {
    special_use = \Trash
  }
  mailbox Sent {
    special_use = \Sent
  }
  mailbox "Sent Messages" {
    special_use = \Sent
  }
}