coreos-home-server/service/dovecot/container/config/dovecot.conf.template
Alex Palaistras f877a72e83 Flatten directory structures
This commit contains a fairly large diff for a fairly small change:
moving the `config/common` directory to `host/base` to better reflect
its intended use, and promoting `config/service` to the root directory.

These changes unlock some improvements in `coreos-home-server-update`
processes, which will (assuming `/etc/coreos-home-server/base` exists)
keep host-wide systemd services in sync in addition to service-specific
ones.

Changes have been make to the `Makefile` and a few other places where
`config/common` was referenced, but most of this work is renames that
are not intended to break compatibility with new or running servers.
2022-01-15 11:43:33 +00:00

132 lines
2.3 KiB
Plaintext

# Custom Dovecot configuration.
# ----------------------
# Generic configuration.
# ----------------------
# Logging & debugging.
log_path = /dev/stderr
auth_verbose = yes
plugin {
mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename
mail_log_fields = uid box msgid size
}
# Mail directory.
mail_location = maildir:/var/mail/virtual/%u
mail_privileged_group = virtual
mail_uid = 5000
mail_gid = 5000
# Simplify log messages.
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c
mail_log_prefix = "%s(%u)<%{pid}>: "
# ----------------------
# Mailbox configuration.
# ----------------------
namespace inbox {
separator = .
prefix = INBOX.
inbox = yes
mailbox Drafts {
auto = subscribe
special_use = \Drafts
}
mailbox Junk {
auto = create
special_use = \Junk
}
mailbox Sent {
auto = subscribe
special_use = \Sent
}
mailbox "Sent Messages" {
auto = no
special_use = \Sent
}
mailbox Trash {
auto = subscribe
special_use = \Trash
}
}
# ----------------------
# Protocol configuration.
# ----------------------
# Enabled protocols.
protocols = imap
# Enable SSL and STARTTLS.
ssl = yes
ssl_min_protocol = TLSv1.2
ssl_cipher_list = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
ssl_prefer_server_ciphers = no
ssl_cert = </etc/ssl/private/certificates/${DOVECOT_HOST}.crt
ssl_key = </etc/ssl/private/certificates/${DOVECOT_HOST}.key
protocol imap {
mail_max_userip_connections = 25
}
service imap-login {
inet_listener imap {
port = 143
}
inet_listener imaps {
port = 993
}
}
# Disable POP3.
service pop3-login {
inet_listener pop3 {
port = 0
}
inet_listener pop3s {
port = 0
}
}
# ----------------------
# Auth configuration.
# ----------------------
auth_mechanisms = plain login
disable_plaintext_auth = yes
# Enable SASL authentication on specific TCP port.
service auth {
inet_listener {
port = 3659
}
}
# Enable SQL authentication.
userdb {
driver = sql
args = /etc/dovecot/dovecot-sql.conf.local
}
passdb {
driver = sql
args = /etc/dovecot/dovecot-sql.conf.local
}
# -------------------------
# Additional configuration.
# -------------------------
!include conf.d/*.conf