majic-ansible-roles Files · roles/mail_server/templates/99-local.conf.j2

Files @ 9ca9c3ada58a

Branch filter:

Location: majic-ansible-roles/roles/mail_server/templates/99-local.conf.j2

9ca9c3ada58a 1.1 KiB text/plain Show Annotation Show as Raw Download as Raw

branko

MAR-181: Use Debian-provided Prosody package for testing optional parameter:

- Still properly tests the role, while at the same time making it
possible to use custom apt repository for Debian Buster (due to
Prosody project dropping all repository archives for it).

# Authentication configuration.
auth_mechanisms = plain login

passdb {
  driver = ldap
  args = /etc/dovecot/dovecot-ldap.conf.ext
}

userdb {
  driver = ldap
  args = /etc/dovecot/dovecot-ldap.conf.ext
  default_fields = uid={{ mail_user }} gid={{ mail_user }} home=/var/{{ mail_user}}/%d/%n
}

# Mail storage configuration.
mail_location = maildir:/var/{{ mail_user}}/%d/%n/Maildir
namespace inbox {
  inbox = yes
  separator = {{ imap_folder_separator }}
}

# Communication with other services.
service auth {
  unix_listener /var/spool/postfix/private/auth {
    mode = 0660
    user = postfix
    group = postfix
  }
}

# TLS configuration.
ssl_cert = </etc/ssl/certs/{{ ansible_fqdn }}_imap.pem
ssl_key = </etc/ssl/private/{{ ansible_fqdn }}_imap.key
ssl_dh=</etc/ssl/private/{{ inventory_hostname }}_imap.dh.pem
ssl_protocols = {{ mail_server_tls_protocols | join(' ') }}
ssl_cipher_list = {{ mail_server_tls_ciphers }}
ssl = required

# Mail delivery.
protocol lda {
  mail_plugins = $mail_plugins sieve
  postmaster_address = {{ mail_postmaster }}
}

# IMAP configuration.
protocol imap {
  mail_max_userip_connections = {{ imap_max_user_connections_per_ip }}
}