summaryrefslogtreecommitdiff
path: root/roles/dovecot/files/dovecot.conf
blob: 4c591416d4181d2198938b941ab0196877405520 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
# Freeze configuration syntax.
dovecot_config_version = 2.4.0

# Freeze storage file format version.
dovecot_storage_version = 2.4.0

# Protocols we want to be serving.
protocols = imap pop3 lmtp

# Path to the mail directory.
mail_home = /var/mail/%{user | domain}/%{user | username}
mail_path = ~/Maildir
mail_driver = maildir

# Path to SSL certificate files.
ssl_server_cert_file = /etc/letsencrypt/live/mail.ilvokhin.com/fullchain.pem
ssl_server_key_file = /etc/letsencrypt/live/mail.ilvokhin.com/privkey.pem

# Disable plaintext authentication, only SSL is allowed.
auth_allow_cleartext = no

service auth {
    # Postfix smtp-auth.
    unix_listener /var/spool/postfix/private/auth {
        mode = 0666
        user = postfix
        group = postfix
    }
}

service lmtp {
    unix_listener /var/spool/postfix/private/dovecot-lmtp {
        mode = 0600
        user = postfix
        group = postfix
    }
}

service imap-login {
    # Do not listen for plain IMAP.
    inet_listener imap {
        port = 0
    }
}

service pop3-login {
    # Do not listen for plain POP3.
    inet_listener pop3 {
        port = 0
    }
}

namespace inbox {
    inbox = yes
    separator = /

    # Create usual mail hierarchy.
    mailbox Sent {
        auto = subscribe
        special_use = \Sent
    }

    mailbox Drafts {
        auto = subscribe
        special_use = \Drafts
    }

    mailbox Trash {
        auto = subscribe
        special_use = \Trash
    }

    mailbox Junk {
        auto = subscribe
        special_use = \Junk
    }
}

# Use separate passwd file for storing passwords.
passdb passwd-file {
    default_password_scheme = SHA512-CRYPT
    auth_username_format = %{user}
    passwd_file_path = /etc/dovecot/passwd
}

# Use the same separate passwd file for user lookup.
userdb static {
    auth_username_format = %{user}
    passwd_file_path = /etc/dovecot/passwd
    fields {
        uid = vmail
        gid = vmail
    }
}