etc/dovecot/dovecot.conf.m4

   1 auth_mechanisms = plain
   2 auth_ssl_require_client_cert = no
   3         # NOTE: ne marche pas avec l'auth SASL depuis postfix qui ne fournit pas de certificat utilisateurice
   4 auth_ssl_username_from_cert = yes
   5 auth_verbose = no
   6 auth_debug = no
   7 disable_plaintext_auth = yes
   8 first_valid_uid = 1000
   9 lda_mailbox_autocreate = no
  10 lda_mailbox_autosubscribe = yes
  11 listen = *
  12 log_timestamp = "%Y-%m-%d %H:%M:%S "
  13 local_name imap.LOCAL_DOMAINNAME {
  14         ssl_ca   = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/crt+crl.self-signed.pem
  15         ssl_cert = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/crt+crl.self-signed.pem
  16         ssl_key  = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/key.pem
  17  }
  18 local_name imap.chatperche.org {
  19         ssl_ca   = </etc/dovecot/chatperche.org/imap/x509/crt+crl.self-signed.pem
  20         ssl_cert = </etc/dovecot/chatperche.org/imap/x509/crt+crl.self-signed.pem
  21         ssl_key  = </etc/dovecot/chatperche.org/imap/x509/key.pem
  22  }
  23 local_name imap.cyclocoop.org {
  24         ssl_ca   = </etc/dovecot/cyclocoop.org/imap/x509/crt+crl.self-signed.pem
  25         ssl_cert = </etc/dovecot/cyclocoop.org/imap/x509/crt+crl.self-signed.pem
  26         ssl_key  = </etc/dovecot/cyclocoop.org/imap/x509/key.pem
  27  }
  28 local_name imap.lesjantesdunord.org {
  29         ssl_ca   = </etc/dovecot/lesjantesdunord.org/imap/x509/crt+crl.self-signed.pem
  30         ssl_cert = </etc/dovecot/lesjantesdunord.org/imap/x509/crt+crl.self-signed.pem
  31         ssl_key  = </etc/dovecot/lesjantesdunord.org/imap/x509/key.pem
  32  }
  33 local_name imap.ptitvelo.net {
  34         ssl_ca   = </etc/dovecot/ptitvelo.net/imap/x509/crt+crl.self-signed.pem
  35         ssl_cert = </etc/dovecot/ptitvelo.net/imap/x509/crt+crl.self-signed.pem
  36         ssl_key  = </etc/dovecot/ptitvelo.net/imap/x509/key.pem
  37  }
  38 local_name imap.veli-velo.org {
  39         ssl_ca   = </etc/dovecot/veli-velo.org/imap/x509/crt+crl.self-signed.pem
  40         ssl_cert = </etc/dovecot/veli-velo.org/imap/x509/crt+crl.self-signed.pem
  41         ssl_key  = </etc/dovecot/veli-velo.org/imap/x509/key.pem
  42  }
  43 local_name imap.wiklou.org {
  44         ssl_ca   = </etc/dovecot/wiklou.org/imap/x509/crt+crl.self-signed.pem
  45         ssl_cert = </etc/dovecot/wiklou.org/imap/x509/crt+crl.self-signed.pem
  46         ssl_key  = </etc/dovecot/wiklou.org/imap/x509/key.pem
  47  }
  48 local_name pop.LOCAL_DOMAINNAME {
  49         ssl_ca   = </etc/dovecot/LOCAL_DOMAINNAME/pop/x509/crt+crl.self-signed.pem
  50         ssl_cert = </etc/dovecot/LOCAL_DOMAINNAME/pop/x509/crt+crl.self-signed.pem
  51         ssl_key  = </etc/dovecot/LOCAL_DOMAINNAME/pop/x509/key.pem
  52  }
  53 local_name pop.chatperche.org {
  54         ssl_ca   = </etc/dovecot/chatperche.org/pop/x509/crt+crl.self-signed.pem
  55         ssl_cert = </etc/dovecot/chatperche.org/pop/x509/crt+crl.self-signed.pem
  56         ssl_key  = </etc/dovecot/chatperche.org/pop/x509/key.pem
  57  }
  58 local_name pop.cyclocoop.org {
  59         ssl_ca   = </etc/dovecot/cyclocoop.org/pop/x509/crt+crl.self-signed.pem
  60         ssl_cert = </etc/dovecot/cyclocoop.org/pop/x509/crt+crl.self-signed.pem
  61         ssl_key  = </etc/dovecot/cyclocoop.org/pop/x509/key.pem
  62  }
  63 local_name pop.lesjantesdunord.org {
  64         ssl_ca   = </etc/dovecot/lesjantesdunord.org/pop/x509/crt+crl.self-signed.pem
  65         ssl_cert = </etc/dovecot/lesjantesdunord.org/pop/x509/crt+crl.self-signed.pem
  66         ssl_key  = </etc/dovecot/lesjantesdunord.org/pop/x509/key.pem
  67  }
  68 local_name pop.ptitvelo.net {
  69         ssl_ca   = </etc/dovecot/ptitvelo.net/pop/x509/crt+crl.self-signed.pem
  70         ssl_cert = </etc/dovecot/ptitvelo.net/pop/x509/crt+crl.self-signed.pem
  71         ssl_key  = </etc/dovecot/ptitvelo.net/pop/x509/key.pem
  72  }
  73 local_name pop.veli-velo.org {
  74         ssl_ca   = </etc/dovecot/veli-velo.org/pop/x509/crt+crl.self-signed.pem
  75         ssl_cert = </etc/dovecot/veli-velo.org/pop/x509/crt+crl.self-signed.pem
  76         ssl_key  = </etc/dovecot/veli-velo.org/pop/x509/key.pem
  77  }
  78 local_name pop.wiklou.org {
  79         ssl_ca   = </etc/dovecot/wiklou.org/pop/x509/crt+crl.self-signed.pem
  80         ssl_cert = </etc/dovecot/wiklou.org/pop/x509/crt+crl.self-signed.pem
  81         ssl_key  = </etc/dovecot/wiklou.org/pop/x509/key.pem
  82  }
  83 mail_debug = no
  84 mail_home = /home/mail/data/%d/%n
  85 mail_location = maildir:/home/mail/data/%d/%n/Maildir:INDEX=/var/lib/dovecot-index/%d/%n:CONTROL=/var/lib/dovecot-control/%d/%n
  86         # NOTE: INDEX et CONTROL sont sur une partition sans quota comme le demande la doc
  87         # VOIR: http://wiki2.dovecot.org/Quota/FS
  88 namespace inbox {
  89  # NOTE: ici car protocol sieve {namespace inbox{}} n'a pas l'air de fonctionner
  90         inbox = yes
  91         location =
  92         list = yes
  93         prefix =
  94         separator = +
  95  }
  96 namespace {
  97         #list = children
  98         list = yes
  99         location = maildir:/home/mail/data/%%d/%%n/Maildir:INDEX=/var/lib/dovecot-index/%d/%n/Shared/%%n:CONTROL=/var/lib/dovecot-control/%d/%n/Shared/%%n
 100         prefix = Partages+%%n+
 101         separator = +
 102         subscriptions = yes
 103         type = shared
 104  }
 105 mail_plugins = $mail_plugins acl quota virtual
 106 #mail_privileged_group = mail
 107 #mail_access_groups = mail
 108 passdb {
 109         args = scheme=plain username_format=%n /etc/dovecot/%d/passwd
 110         driver = passwd-file
 111  }
 112 plugin {
 113         acl = vfile:/etc/dovecot/acl/global.d
 114         acl_anyone = allow
 115         acl_shared_dict = file:/home/mail/acl/%d/shared.db
 116         #antispam_allow_append_to_spam = yes
 117          # NOTE: pour offlineimap
 118         antispam_backend = pipe
 119         #antispam_crm_args = -u;/home/mail/data/%d/.crm114;/usr/share/crm114/mailfilter.crm
 120         antispam_crm_args = -u;/home/mail/crm114;/usr/share/crm114/mailfilter.crm
 121         antispam_crm_binary = /usr/bin/crm
 122         antispam_debug_target = syslog
 123         #antispam_crm_env = HOME=%h;USER=%u
 124         antispam_ham_keywords = NonJunk
 125         antispam_pipe_program = /usr/bin/crm
 126         antispam_pipe_program_args = -u;/home/mail/crm114;/usr/share/crm114/mailfilter.crm;--stats_only;--force
 127         antispam_pipe_program_notspam_arg = --learnnonspam
 128         antispam_pipe_program_spam_arg = --learnspam
 129         antispam_pipe_program_unlearn_spam_args = --unlearn;--learnspam
 130         antispam_pipe_program_unlearn_notspam_args = --unlearn;--learnnonspam
 131         antispam_pipe_tmpdir = /home/mail/crm114/tmp
 132         antispam_signature = X-CRM114-CacheID
 133         antispam_signature_missing = move
 134         antispam_spam = Junk
 135         antispam_spam_keywords = Junk
 136         antispam_trash = Trash
 137         antispam_unsure = Unsure
 138         antispam_verbose_debug = 0
 139         quota = maildir:User quota
 140         quota_rule = *:storage=256M
 141         quota_rule2 = Trash:storage=+64M
 142         recipient_delimiter = +
 143         sieve            = /home/mail/data/%d/%n/sieve
 144         sieve_after      = /etc/dovecot/sieve/after.d/
 145         sieve_before     = /etc/dovecot/sieve/before.d/
 146         sieve_dir        = /home/mail/data/%d/%n/sieve.d/
 147         #sieve_extensions = +spamtest +spamtestplus
 148         sieve_global_dir = /etc/dovecot/sieve/global.d/
 149         sieve_max_redirects = 10
 150         sieve_max_script_size = 1M
 151         sieve_quota_max_scripts = 0
 152         sieve_quota_max_storage = 10M
 153         sieve_spamtest_max_value = 10
 154         sieve_spamtest_status_header = X-Spam-Score
 155         sieve_spamtest_status_type = strlen
 156         sieve_user_log   = /home/mail/log/%d/sieve.%n.log
 157  }
 158 protocol imap {
 159         mail_plugins = $mail_plugins antispam imap_acl imap_quota
 160         namespace inbox {
 161                 inbox = yes
 162                 location =
 163                 list = yes
 164                 mailbox Drafts {
 165                         special_use = \Drafts
 166                  }
 167                 mailbox Junk {
 168                         special_use = \Junk
 169                  }
 170                 mailbox Sent {
 171                         special_use = \Sent
 172                  }
 173                 mailbox "Sent Messages" {
 174                         special_use = \Sent
 175                  }
 176                 mailbox Trash {
 177                         special_use = \Trash
 178                  }
 179                 prefix =
 180                 separator = +
 181          }
 182  }
 183 protocol lda {
 184         auth_socket_path = /var/run/dovecot/auth-userdb
 185         hostname = LOCAL_DOMAINNAME
 186         info_log_path =
 187         log_path =
 188         mail_plugins = $mail_plugins sieve
 189         namespace inbox {
 190                 inbox = yes
 191                 location =
 192                 list = yes
 193                 prefix =
 194                 separator = +
 195          }
 196         postmaster_address = postmaster+dovecot+lda@LOCAL_DOMAINNAME
 197         syslog_facility = mail
 198  }
 199 protocol lmtp {
 200         #info_log_path = /tmp/dovecot-lmtp.log
 201         mail_plugins = $mail_plugins sieve
 202         namespace inbox {
 203                 inbox = yes
 204                 location =
 205                 list = yes
 206                 prefix =
 207                 separator = +
 208          }
 209         postmaster_address = postmaster+dovecot+lmtp@LOCAL_DOMAINNAME
 210  }
 211 protocol pop3 {
 212         namespace all {
 213          # NOTE: utilisé par /etc/dovecot/pop3/INBOX/dovecot-virtual
 214                 hidden = yes
 215                 list = no
 216                 location =
 217                 prefix = all+
 218                 separator = +
 219          }
 220         namespace inbox {
 221          # NOTE: virtual namespace for the virtual INBOX. Use a global directory for dovecot-virtual files.
 222                 inbox = yes
 223                 hidden = yes
 224                 list = no
 225                 location = virtual:/etc/dovecot/pop3:INDEX=/var/lib/dovecot-index/%d/%n/POP3:LAYOUT=fs
 226                 prefix = pop3+
 227                 separator = +
 228          }
 229         pop3_client_workarounds =
 230         pop3_fast_size_lookups = yes
 231         pop3_lock_session = no
 232         pop3_no_flag_updates = yes
 233         pop3_uidl_format = %g
 234          # NOTE: use GUIDs to avoid accidental POP3 UIDL changes instead of IMAP UIDs.
 235  }
 236 protocol sieve {
 237         mail_debug = no
 238         #mail_max_userip_connections = 10
 239         #managesieve_implementation_string = Dovecot Pigeonhole
 240         managesieve_max_compile_errors = 5
 241         #managesieve_max_line_length = 65536
 242         #managesieve_notify_capability = mailto
 243         #managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave
 244  }
 245 protocols = imap lmtp pop3 sieve
 246 service lmtp {
 247         #executable = lmtp -L
 248         process_min_avail = 2
 249         unix_listener /var/spool/postfix/private/dovecot-lmtp {
 250                 user  = postfix
 251                 group = postfix
 252                 mode  = 0600
 253          }
 254         #user = mail
 255  }
 256 service auth {
 257         user = root
 258         unix_listener auth-userdb {
 259                 user  = dovecot
 260                 group = root
 261                 mode  = 0666
 262          }
 263         unix_listener /var/spool/postfix/private/auth {
 264                 user  = postfix
 265                 group = postfix
 266                 mode  = 0660
 267          }
 268  }
 269 service imap {
 270         #vsz_limit =
 271                 # NOTE: most of the memory goes to mmap()ing files.
 272                 # You may need to increase this limit if you have huge mailboxes.
 273         process_limit = 1024
 274  }
 275 service imap-login {
 276         inet_listener imap {
 277                 address = 127.0.0.1
 278                 port    = 143
 279                 ssl     = no
 280          }
 281         inet_listener imaps {
 282                 port = 993
 283                 ssl  = yes
 284          }
 285  }
 286 service pop3 {
 287         process_limit = 1024
 288  }
 289 service pop3-login {
 290         inet_listener pop3s {
 291                 port = 995
 292                 ssl  = yes
 293          }
 294  }
 295 ssl = required
 296 ssl_ca   = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/crt+crl.self-signed.pem
 297 ssl_cert = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/crt+crl.self-signed.pem
 298 ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL
 299 ssl_key = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/key.pem
 300 ssl_verify_client_cert = yes
 301 userdb {
 302         driver = prefetch
 303  }
 304 userdb {
 305  # NOTE: this userdb is only used by lda.
 306         args = username_format=%n /etc/dovecot/%d/passwd
 307         driver = passwd-file
 308  }
 309 verbose_ssl = no
 310
 311 # vim: ft=sh