git » chasquid » smarthost » tree

[smarthost] / docker / dovecot.conf 

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
#
# Logging
#
log_path = /data/dovecot/dovecot.log

#
# Email storage
#

# Store emails in /data/mail/home/domain/user, which will be inside the
# container's volume.
mail_home = /data/mail/home/%d/%n

# Use Dovecot's native format.
mail_location = mdbox:~/mdbox

# User and group used to store and access mailboxes.
mail_uid = dovecot
mail_gid = dovecot

# As we're using virtual mailboxes, the system user will be "dovecot", which
# has uid in the 100-500 range. By default using uids <500 is blocked, so we
# need to explicitly lower the value to allow storage of mail as "dovecot".
first_valid_uid = 100
first_valid_gid = 100

#
# Authentication
#

# Static file, in /data/dovecot/users.
auth_mechanisms = plain
passdb {
  driver = passwd-file
  args = scheme=CRYPT username_format=%u /data/dovecot/users
}
userdb {
  driver = passwd-file
  args = /data/dovecot/users
}


#
# TLS
#

# TLS is mandatory.
# The entrypoint generates auto-ssl.conf, with all the certificates.
ssl = required
!include_try /etc/dovecot/auto-ssl.conf

# Only allow TLS 1.2 and up.
ssl_min_protocol = TLSv1.2


#
# Protocols
#
protocols = lmtp imap pop3 sieve

#
# IMAP
#
service imap-login {
  inet_listener imap {
    # Disable plain text IMAP, just in case.
    port = 0
  }
  inet_listener imaps {
    port = 993
    ssl = yes
  }
}

service imap {
}

#
# POP3
#
service pop3-login {
  inet_listener pop3 {
    # Disable plain text POP3, just in case.
    port = 0
  }
  inet_listener pop3s {
    port = 995
    ssl = yes
  }
}

service pop3 {
}

#
# Sieve/managesieve
#
service managesieve-login {
}
service managesieve {
}
protocol sieve {
}
plugin {
  sieve = file:~/sieve;active=~/.dovecot.sieve
}

#
# Internal services
#
service auth {
  unix_listener auth-userdb {
  }

  # Grant chasquid access to request user authentication.
  unix_listener auth-chasquid-userdb {
    mode = 0660
    user = chasquid
  }
  unix_listener auth-chasquid-client {
    mode = 0660
    user = chasquid
  }
}
service auth-worker {
}
dict {
}
service lmtp {
  # This is used by mda-lmtp.
  unix_listener lmtp {
  }
}