# This configuration is controlled by puppet
base_dir=/var/run/dovecot
mail_temp_dir = /usr/tmp/
protocols = imap pop3 sieve
pop3_uidl_format = %08Xu%08Xv
pop3_no_flag_updates=yes
listen = *,[::]
default_internal_group = dovenull

lda_mailbox_autocreate = yes

namespace default {
  separator = .
  inbox = yes
}

mail_plugins = quota zlib

plugin {
  quota_rule = *:storage=0
  quota_vsizes = yes
}

mailbox_list_index = yes
mdbox_rotate_size = 10M

protocol imap {
  imap_client_workarounds = tb-extra-mailbox-sep
  mail_max_userip_connections=100
  mail_plugins = $mail_plugins imap_quota
}
protocol pop3 {
  pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
}

service imap-login {
  service_count = 1
  process_min_avail = 8
  process_limit = 250
  vsz_limit = 128M
}
service imap {
  service_count = 1
  process_min_avail = 8
  process_limit = 250
  vsz_limit = 128M
}

service pop3-login {
  service_count = 1
  process_min_avail = 8
  process_limit = 250
  vsz_limit = 128M
}
service pop3 {
  service_count = 1
  process_min_avail = 8
  process_limit = 250
  vsz_limit = 128M
}

# Stats service needs write access from "users"
service stats {
  unix_listener stats-reader {
    group = dovenull
  }
  unix_listener stats-writer {
    group = users
  }
}

# Settings for /usr/local/libexec/dovecot/deliver
protocol lda {
  auth_socket_path=/var/run/dovecot/auth-master
  sendmail_path = /usr/sbin/sendmail
  mail_plugins = $mail_plugins sieve
}

# If we don't specify these, it'll use syslog facility "mail" and go to maillog
log_path=
info_log_path=

disable_plaintext_auth = no
dotlock_use_excl=yes
maildir_copy_with_hardlinks=yes
auth_master_user_separator=*

auth_verbose = no
auth_debug = no
mail_debug = no
verbose_ssl = no

auth_mechanisms = plain login

# name based virtual mailboxes
passdb {
  driver = passwd-file
  args = /usr/boxes/.passwd/virtual.passwd
}
userdb {
  driver = passwd-file
  args = /usr/boxes/.passwd/virtual.passwd
}

# Master user file (used for 'dctest' generated logins)
passdb {
  driver = passwd-file
  master=yes
  args= /usr/boxes/.passwd/master.user
  pass=yes
}

# IP based virtual mailboxes
passdb {
  driver = passwd-file
  args = username_format=%n@%l /usr/boxes/.passwd/virtual.ip.passwd
}

# Main account mailboxes
passdb {
  driver = passwd-file
  args = /usr/boxes/.passwd/master.passwd
}
userdb {
  args = /usr/boxes/.passwd/master.passwd
  driver = passwd-file
}

# Set up two listen sockets
service auth {
  # This one is for smtpauth, for use by postfix
  unix_listener /var/spool/postfix/private/auth {
    mode = 0660
    user = postfix
    group = postdrop
  }
  # This one is for local mail delivery via deliver, and must be
  # readable by all users since 'deliver' is run via qmail by the
  # end user.
  unix_listener auth-master {
    mode = 0660
    user = vmail
    group = users
  }
}

mbox_read_locks = flock
mbox_write_locks = flock

# Settings for pair-relay (post-login script for pop3/imap before smtp)
service pop3 {
  executable = pop3
}
service imap {
  executable = imap
}

# Include_try SSL cert conf so end-users can use doveadm
!include_try /etc/postfix/dovecot/ssl.conf

# Require SSL
ssl = required
ssl_dh = </etc/postfix/dh.pem
ssl_min_protocol = TLSv1.2
ssl_cipher_list = HIGH:!aNULL

# Sieve
plugin {
  sieve = file:~/.sieve/%n;active=~/.sieve/.%n.sieve
}

service managesieve-login {
  inet_listener sieve {
    port = 4190
  }
  service_count = 1
  process_min_avail = 0
  vsz_limit = 64M
}

service managesieve {
  process_limit = 1024
}

protocol sieve {
  managesieve_max_line_length = 65536
  mail_max_userip_connections = 10
  managesieve_logout_format = bytest=%i/%0
  managesieve_implementation_string = Dovecot Pigeonhole
  managesieve_max_compile_errors = 5
}

# Dovecot 2.3 needs this to prevent quotabounces (and other sendmail calls)
# from being stuck in the qmail queue
submission_host = 127.0.0.1:2525