etc/dovecot/dovecot.conf.m4

   1 auth_mechanisms = plain
   2 auth_ssl_require_client_cert = no
   3         # NOTE: ne marche pas avec l'auth SASL depuis postfix qui ne fournit pas de certificat utilisateurice
   4 auth_ssl_username_from_cert = yes
   5 auth_verbose = no
   6 auth_debug = no
   7 disable_plaintext_auth = yes
   8 first_valid_uid = 1000
   9 lda_mailbox_autocreate = no
  10 lda_mailbox_autosubscribe = yes
  11 listen = *
  12 log_timestamp = "%Y-%m-%d %H:%M:%S "
  13 local_name imap.LOCAL_DOMAINNAME {
  14         ssl_ca   = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/crt+crl.self-signed.pem
  15         ssl_cert = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/crt+crl.self-signed.pem
  16         ssl_key  = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/key.pem
  17  }
  18 local_name imap.cyclocoop.org {
  19         ssl_ca   = </etc/dovecot/cyclocoop.org/imap/x509/crt+crl.self-signed.pem
  20         ssl_cert = </etc/dovecot/cyclocoop.org/imap/x509/crt+crl.self-signed.pem
  21         ssl_key  = </etc/dovecot/cyclocoop.org/imap/x509/key.pem
  22  }
  23 local_name imap.lesjantesdunord.org {
  24         ssl_ca   = </etc/dovecot/lesjantesdunord.org/imap/x509/crt+crl.self-signed.pem
  25         ssl_cert = </etc/dovecot/lesjantesdunord.org/imap/x509/crt+crl.self-signed.pem
  26         ssl_key  = </etc/dovecot/lesjantesdunord.org/imap/x509/key.pem
  27  }
  28 local_name imap.ptitvelo.net {
  29         ssl_ca   = </etc/dovecot/ptitvelo.net/imap/x509/crt+crl.self-signed.pem
  30         ssl_cert = </etc/dovecot/ptitvelo.net/imap/x509/crt+crl.self-signed.pem
  31         ssl_key  = </etc/dovecot/ptitvelo.net/imap/x509/key.pem
  32  }
  33 local_name imap.veli-velo.org {
  34         ssl_ca   = </etc/dovecot/veli-velo.org/imap/x509/crt+crl.self-signed.pem
  35         ssl_cert = </etc/dovecot/veli-velo.org/imap/x509/crt+crl.self-signed.pem
  36         ssl_key  = </etc/dovecot/veli-velo.org/imap/x509/key.pem
  37  }
  38 local_name pop.LOCAL_DOMAINNAME {
  39         ssl_ca   = </etc/dovecot/LOCAL_DOMAINNAME/pop/x509/crt+crl.self-signed.pem
  40         ssl_cert = </etc/dovecot/LOCAL_DOMAINNAME/pop/x509/crt+crl.self-signed.pem
  41         ssl_key  = </etc/dovecot/LOCAL_DOMAINNAME/pop/x509/key.pem
  42  }
  43 local_name pop.cyclocoop.org {
  44         ssl_ca   = </etc/dovecot/cyclocoop.org/pop/x509/crt+crl.self-signed.pem
  45         ssl_cert = </etc/dovecot/cyclocoop.org/pop/x509/crt+crl.self-signed.pem
  46         ssl_key  = </etc/dovecot/cyclocoop.org/pop/x509/key.pem
  47  }
  48 local_name pop.lesjantesdunord.org {
  49         ssl_ca   = </etc/dovecot/lesjantesdunord.org/pop/x509/crt+crl.self-signed.pem
  50         ssl_cert = </etc/dovecot/lesjantesdunord.org/pop/x509/crt+crl.self-signed.pem
  51         ssl_key  = </etc/dovecot/lesjantesdunord.org/pop/x509/key.pem
  52  }
  53 local_name pop.ptitvelo.net {
  54         ssl_ca   = </etc/dovecot/ptitvelo.net/pop/x509/crt+crl.self-signed.pem
  55         ssl_cert = </etc/dovecot/ptitvelo.net/pop/x509/crt+crl.self-signed.pem
  56         ssl_key  = </etc/dovecot/ptitvelo.net/pop/x509/key.pem
  57  }
  58 local_name pop.veli-velo.org {
  59         ssl_ca   = </etc/dovecot/veli-velo.org/pop/x509/crt+crl.self-signed.pem
  60         ssl_cert = </etc/dovecot/veli-velo.org/pop/x509/crt+crl.self-signed.pem
  61         ssl_key  = </etc/dovecot/veli-velo.org/pop/x509/key.pem
  62  }
  63 mail_debug = no
  64 mail_home = /home/mail/data/%d/%n
  65 mail_location = maildir:/home/mail/data/%d/%n/Maildir:INDEX=/var/lib/dovecot-index/%d/%n:CONTROL=/var/lib/dovecot-control/%d/%n
  66         # NOTE: INDEX et CONTROL sont sur une partition sans quota comme le demande la doc
  67         # VOIR: http://wiki2.dovecot.org/Quota/FS
  68 namespace inbox {
  69  # NOTE: ici car protocol sieve {namespace inbox{}} n'a pas l'air de fonctionner
  70         inbox = yes
  71         location =
  72         list = yes
  73         prefix =
  74         separator = +
  75  }
  76 namespace {
  77         #list = children
  78         list = yes
  79         location = maildir:/home/mail/data/%%d/%%n/Maildir:INDEX=/var/lib/dovecot-index/%d/%n/Shared/%%n:CONTROL=/var/lib/dovecot-control/%d/%n/Shared/%%n
  80         prefix = Partages+%%n+
  81         separator = +
  82         subscriptions = yes
  83         type = shared
  84  }
  85 mail_plugins = $mail_plugins acl quota virtual
  86 #mail_privileged_group = mail
  87 #mail_access_groups = mail
  88 passdb {
  89         args = scheme=plain username_format=%n /etc/dovecot/%d/passwd
  90         driver = passwd-file
  91  }
  92 plugin {
  93         acl = vfile:/etc/dovecot/acl/global.d
  94         acl_anyone = allow
  95         acl_shared_dict = file:/home/mail/acl/%d/shared.db
  96         #antispam_allow_append_to_spam = yes
  97          # NOTE: pour offlineimap
  98         antispam_backend = pipe
  99         #antispam_crm_args = -u;/home/mail/data/%d/.crm114;/usr/share/crm114/mailfilter.crm
 100         antispam_crm_args = -u;/home/mail/crm114;/usr/share/crm114/mailfilter.crm
 101         antispam_crm_binary = /usr/bin/crm
 102         antispam_debug_target = syslog
 103         #antispam_crm_env = HOME=%h;USER=%u
 104         antispam_ham_keywords = NonJunk
 105         antispam_pipe_program = /usr/bin/crm
 106         antispam_pipe_program_args = -u;/home/mail/crm114;/usr/share/crm114/mailfilter.crm;--stats_only;--force
 107         antispam_pipe_program_notspam_arg = --learnnonspam
 108         antispam_pipe_program_spam_arg = --learnspam
 109         antispam_pipe_program_unlearn_spam_args = --unlearn;--learnspam
 110         antispam_pipe_program_unlearn_notspam_args = --unlearn;--learnnonspam
 111         antispam_pipe_tmpdir = /home/mail/crm114/tmp
 112         antispam_signature = X-CRM114-CacheID
 113         antispam_signature_missing = move
 114         antispam_spam = Junk
 115         antispam_spam_keywords = Junk
 116         antispam_trash = Trash
 117         antispam_unsure = Unsure
 118         antispam_verbose_debug = 0
 119         quota = maildir:User quota
 120         quota_rule = *:storage=256M
 121         quota_rule2 = Trash:storage=+64M
 122         recipient_delimiter = +
 123         sieve            = /home/mail/data/%d/%n/sieve
 124         sieve_after      = /etc/dovecot/sieve/after.d/
 125         sieve_before     = /etc/dovecot/sieve/before.d/
 126         sieve_dir        = /home/mail/data/%d/%n/sieve.d/
 127         #sieve_extensions = +spamtest +spamtestplus
 128         sieve_global_dir = /etc/dovecot/sieve/global.d/
 129         sieve_max_script_size = 1M
 130         sieve_quota_max_scripts = 0
 131         sieve_quota_max_storage = 10M
 132         sieve_spamtest_max_value = 10
 133         sieve_spamtest_status_header = X-Spam-Score
 134         sieve_spamtest_status_type = strlen
 135         sieve_user_log   = /home/mail/log/%d/sieve.%n.log
 136  }
 137 protocol imap {
 138         mail_plugins = $mail_plugins antispam imap_acl imap_quota
 139         namespace inbox {
 140                 inbox = yes
 141                 location =
 142                 list = yes
 143                 mailbox Drafts {
 144                         special_use = \Drafts
 145                  }
 146                 mailbox Junk {
 147                         special_use = \Junk
 148                  }
 149                 mailbox Sent {
 150                         special_use = \Sent
 151                  }
 152                 mailbox "Sent Messages" {
 153                         special_use = \Sent
 154                  }
 155                 mailbox Trash {
 156                         special_use = \Trash
 157                  }
 158                 prefix =
 159                 separator = +
 160          }
 161  }
 162 protocol lda {
 163         auth_socket_path = /var/run/dovecot/auth-userdb
 164         hostname = LOCAL_DOMAINNAME
 165         info_log_path =
 166         log_path =
 167         mail_plugins = $mail_plugins sieve
 168         namespace inbox {
 169                 inbox = yes
 170                 location =
 171                 list = yes
 172                 prefix =
 173                 separator = +
 174          }
 175         postmaster_address = postmaster+dovecot+lda@LOCAL_DOMAINNAME
 176         syslog_facility = mail
 177  }
 178 protocol lmtp {
 179         #info_log_path = /tmp/dovecot-lmtp.log
 180         mail_plugins = $mail_plugins sieve
 181         namespace inbox {
 182                 inbox = yes
 183                 location =
 184                 list = yes
 185                 prefix =
 186                 separator = +
 187          }
 188         postmaster_address = postmaster+dovecot+lmtp@LOCAL_DOMAINNAME
 189  }
 190 protocol pop3 {
 191         namespace all {
 192          # NOTE: utilisé par /etc/dovecot/pop3/INBOX/dovecot-virtual
 193                 hidden = yes
 194                 list = no
 195                 location =
 196                 prefix = all+
 197                 separator = +
 198          }
 199         namespace inbox {
 200          # NOTE: virtual namespace for the virtual INBOX. Use a global directory for dovecot-virtual files.
 201                 inbox = yes
 202                 hidden = yes
 203                 list = no
 204                 location = virtual:/etc/dovecot/pop3:INDEX=/var/lib/dovecot-index/%d/%n/POP3:LAYOUT=fs
 205                 prefix = pop3+
 206                 separator = +
 207          }
 208         pop3_client_workarounds =
 209         pop3_fast_size_lookups = yes
 210         pop3_lock_session = yes
 211         pop3_no_flag_updates = yes
 212         pop3_uidl_format = %g
 213          # NOTE: use GUIDs to avoid accidental POP3 UIDL changes instead of IMAP UIDs.
 214  }
 215 protocol sieve {
 216         mail_debug = no
 217         #mail_max_userip_connections = 10
 218         #managesieve_implementation_string = Dovecot Pigeonhole
 219         managesieve_max_compile_errors = 5
 220         #managesieve_max_line_length = 65536
 221         #managesieve_notify_capability = mailto
 222         #managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave
 223  }
 224 protocols = imap lmtp pop3 sieve
 225 service lmtp {
 226         #executable = lmtp -L
 227         process_min_avail = 2
 228         unix_listener /var/spool/postfix/private/dovecot-lmtp {
 229                 user  = postfix
 230                 group = postfix
 231                 mode  = 0600
 232          }
 233         #user = mail
 234  }
 235 service auth {
 236         user = root
 237         unix_listener auth-userdb {
 238                 user  = dovecot
 239                 group = root
 240                 mode  = 0666
 241          }
 242         unix_listener /var/spool/postfix/private/auth {
 243                 user  = postfix
 244                 group = postfix
 245                 mode  = 0660
 246          }
 247  }
 248 service imap {
 249         #vsz_limit =
 250                 # NOTE: most of the memory goes to mmap()ing files.
 251                 # You may need to increase this limit if you have huge mailboxes.
 252         process_limit = 1024
 253  }
 254 service imap-login {
 255         inet_listener imap {
 256                 address = 127.0.0.1
 257                 port    = 143
 258                 ssl     = no
 259          }
 260         inet_listener imaps {
 261                 port = 993
 262                 ssl  = yes
 263          }
 264  }
 265 service pop3 {
 266         process_limit = 1024
 267  }
 268 service pop3-login {
 269         inet_listener pop3s {
 270                 port = 995
 271                 ssl  = yes
 272          }
 273  }
 274 ssl = required
 275 ssl_ca   = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/crt+crl.self-signed.pem
 276 ssl_cert = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/crt+crl.self-signed.pem
 277 ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL
 278 ssl_key = </etc/dovecot/LOCAL_DOMAINNAME/imap/x509/key.pem
 279 ssl_verify_client_cert = yes
 280 userdb {
 281         driver = prefetch
 282  }
 283 userdb {
 284  # NOTE: this userdb is only used by lda.
 285         args = username_format=%n /etc/dovecot/%d/passwd
 286         driver = passwd-file
 287  }
 288 verbose_ssl = no
 289
 290 # vim: ft=sh