mirror of
https://github.com/Mailu/Mailu.git
synced 2024-12-14 10:53:30 +02:00
62b1df04a0
Ensure that RC4 and SSLv3 is not used. This is based off mailinabox project settings, while not the most ideal settings this improves the configuration from what it is currently.
167 lines
2.7 KiB
Plaintext
167 lines
2.7 KiB
Plaintext
###############
|
|
# General
|
|
###############
|
|
log_path = /dev/stderr
|
|
protocols = imap lmtp sieve
|
|
postmaster_address = {{ POSTMASTER }}@{{ DOMAIN }}
|
|
hostname = {{ HOSTNAME }}
|
|
mail_plugins = $mail_plugins quota
|
|
submission_host = smtp
|
|
|
|
service dict {
|
|
unix_listener dict {
|
|
group = mail
|
|
mode = 0660
|
|
}
|
|
}
|
|
|
|
dict {
|
|
sieve = sqlite:/etc/dovecot/pigeonhole-sieve.dict
|
|
}
|
|
|
|
###############
|
|
# Mailboxes
|
|
###############
|
|
first_valid_gid = 8
|
|
first_valid_uid = 8
|
|
mail_location = maildir:/mail/%u
|
|
mail_home = /mail/%u
|
|
mail_uid = mail
|
|
mail_gid = mail
|
|
mail_privileged_group = mail
|
|
mail_access_groups = mail
|
|
|
|
namespace inbox {
|
|
inbox = yes
|
|
mailbox Trash {
|
|
auto = subscribe
|
|
special_use = \Trash
|
|
}
|
|
mailbox Drafts {
|
|
auto = subscribe
|
|
special_use = \Drafts
|
|
}
|
|
mailbox Sent {
|
|
auto = subscribe
|
|
special_use = \Sent
|
|
}
|
|
mailbox Junk {
|
|
auto = subscribe
|
|
special_use = \Junk
|
|
}
|
|
}
|
|
|
|
###############
|
|
# TLS
|
|
###############
|
|
ssl = yes
|
|
ssl_cert = </certs/cert.pem
|
|
ssl_key = </certs/key.pem
|
|
ssl_protocols=!SSLv3 !SSLv2
|
|
ssl_cipher_list=TLSv1+HIGH !SSLv2 !RC4 !aNULL !eNULL !3DES @STRENGTH
|
|
|
|
###############
|
|
# Authentication
|
|
###############
|
|
auth_mechanisms = plain login
|
|
|
|
passdb {
|
|
driver = sql
|
|
args = /etc/dovecot/dovecot-sql.conf.ext
|
|
}
|
|
|
|
userdb {
|
|
driver = sql
|
|
args = /etc/dovecot/dovecot-sql.conf.ext
|
|
}
|
|
|
|
service auth {
|
|
user = dovecot
|
|
unix_listener auth-userdb {
|
|
}
|
|
|
|
inet_listener {
|
|
port = 2102
|
|
}
|
|
}
|
|
|
|
service auth-worker {
|
|
unix_listener auth-worker {
|
|
user = dovecot
|
|
group = mail
|
|
mode = 0660
|
|
}
|
|
user = mail
|
|
}
|
|
|
|
###############
|
|
# IMAP
|
|
###############
|
|
|
|
protocol imap {
|
|
mail_plugins = $mail_plugins imap_quota antispam
|
|
}
|
|
|
|
service imap-login {
|
|
inet_listener imap {
|
|
port = 143
|
|
}
|
|
inet_listener imaps {
|
|
port = 993
|
|
}
|
|
}
|
|
|
|
###############
|
|
# Delivery
|
|
###############
|
|
|
|
protocol lmtp {
|
|
mail_plugins = $mail_plugins sieve
|
|
recipient_delimiter = +
|
|
}
|
|
|
|
service lmtp {
|
|
inet_listener lmtp {
|
|
port = 2525
|
|
}
|
|
}
|
|
|
|
plugin {
|
|
quota = maildir:User quota
|
|
}
|
|
|
|
|
|
###############
|
|
# Filtering
|
|
###############
|
|
|
|
service managesieve-login {
|
|
inet_listener sieve {
|
|
port = 4190
|
|
}
|
|
}
|
|
|
|
plugin {
|
|
sieve_dir = ~/sieve
|
|
sieve_plugins = sieve_extdata
|
|
sieve_extensions = +vnd.dovecot.extdata
|
|
sieve_before = /var/lib/dovecot/before.sieve
|
|
sieve_default = /var/lib/dovecot/default.sieve
|
|
sieve_after = /var/lib/dovecot/after.sieve
|
|
sieve_extdata_dict_uri = proxy::sieve
|
|
|
|
antispam_backend = mailtrain
|
|
antispam_spam = Junk
|
|
antispam_trash = Trash
|
|
antispam_mail_sendmail = /usr/bin/rspamc
|
|
antispam_mail_spam = learn_spam
|
|
antispam_mail_notspam = learn_ham
|
|
antispam_mail_sendmail_args = -h;antispam:11334;-P;q1
|
|
}
|
|
|
|
###############
|
|
# Filtering
|
|
###############
|
|
|
|
!include_try /overrides/dovecot.conf
|