infra/roles/mail/templates/dovecot/local.conf.j2

auth_mechanisms = plain login
auth_verbose = yes
auth_debug = yes
disable_plaintext_auth = yes

mail_debug = yes
log_path = /var/log/dovecot/errors.log
info_log_path = /var/log/dovecot/info.log
#log_timestamp = "%Y-%m-%d %H:%M:%S "

mail_privileged_group = mail

mail_location = maildir:/var/vmail/%u/.maildir
mail_home = maildir:/var/vmail/%u
mail_uid = vmail
mail_gid = vmail

ssl = yes
ssl_cert = </etc/dovecot/ssl/{{ mail_server }}.crt
ssl_key = </etc/dovecot/ssl/{{ mail_server }}.key
ssl_ca = </etc/acme/lets-encrypt-x3-cross-signed.pem
ssl_protocols = !SSLv2 !SSLv3
ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA

passdb {
  driver = ldap
  args = /etc/dovecot/dovecot-ldap.conf.ext
}

userdb {
  driver = static
  args = uid=vmail gid=vmail home=/var/vmail/%u
}

service auth {
  unix_listener /var/spool/postfix/private/auth {
    mode = 0660
    user = postfix
    group = postfix
  }
  unix_listener auth-master {
    user = vmail
    mode = 0600
  }
}

service imap-login {
  inet_listener imap {
    address = 0.0.0.0 ::
    port = 143
  }
  inet_listener imaps {
    address = 0.0.0.0 ::
    port = 993
  }
}

service managesieve-login {
  inet_listener sieve {
    address = 127.0.0.1 ::1
    port = 2000
  }
}

protocol lda {
  auth_socket_path = /var/run/dovecot/auth-master
  mail_plugins = sieve
  log_path = /var/log/dovecot/deliver.log
  info_log_path = /var/log/dovecot/deliver.log
}

protocol imap {
  mail_max_userip_connections = 50
}

plugin {
  sieve = ~/.dovecot.sieve
  sieve_before = /var/vmail/default.sieve
  sieve_global_path = /var/vmail/default.sieve
}

namespace inbox {
  type = private
  inbox = yes

  mailbox Drafts {
    special_use = \Drafts
  }
  mailbox Junk {
    special_use = \Junk
    auto = subscribe
  }
  mailbox Trash {
    special_use = \Trash
  }
  mailbox Sent {
    special_use = \Sent
  }
  mailbox "Sent Messages" {
    special_use = \Sent
  }
}