# 2.0.5: /usr/local/etc/dovecot.conf
# OS: Linux 2.6.32-24-generic-pae i686 Debian squeeze/sid 

auth_debug = yes
auth_debug_passwords = yes

auth_mechanisms = plain login
disable_plaintext_auth = no
auth_master_user_separator = *

mail_location = maildir:~/Maildir

# wegen webmail!
mail_max_userip_connections = 512

managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date

# Namespace für courier-compatibilitaet
namespace {
  inbox = yes
  location = 
  prefix = INBOX.
  separator = .
  type = private
}

# in kilobytes
auth_cache_size = 2048

# Authorisierung via PAM, /etc/pam.d/dovecot
passdb {
  driver = pam
  args = cache_key=%u
}

# Altlast, einfach mal so uebernommen
# RHI 11.10.2010
# neu entfernt wegen "pass = yes" das eh nicht geht!
#passdb {
#  driver = shadow
#}

# fuer user*masteruser logins
passdb {
  args = /usr/dovecot-2/etc/dovecot/dovecot.masteruser
  driver = passwd-file
  master = yes
#  pass = yes
# das funktioniert laut doku gar nicht mit PAM!
}

# User via passwd
userdb {
  driver = passwd
  args = cache_key=%u
  # neu
}

# plugin Konfiguration
plugin {
  # mailboxen anlegen und subscriben
  autocreate = Trash
  autocreate2 = spam
  autocreate3 = Sent
  autocreate4 = Drafts
  autosubscribe = Trash
  autosubscribe2 = spam
  autosubscribe3 = Sent
  autosubscribe4 = Drafts
  
# FullTextSearch  
  fts = squat

# Quota
  quota = maildir
  quota_rule = INBOX.Trash:storage=+2048M
  quota_warning  = storage=99%% quota-warning 99 %u
  quota_warning2 = storage=95%% quota-warning 95 %u
  quota_warning3 = storage=90%% quota-warning 90 %u
  quota_warning4 = storage=85%% quota-warning 85 %u

# Sieve
  sieve = ~/.dovecot.sieve
  sieve_dir = ~/sieve
  sieve_max_redirects = 10
  sieve_max_script_size = 2M
  
# Trash (wenn Mailbox voll, dann Trash und spam leeren)  
  trash = /usr/dovecot-2/etc/dovecot/dovecot-trash.conf
}

# Wir sprechen alles
protocols = imap sieve pop3 lmtp

# unix domain socket fuer Postfix
service auth {
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0660
    user = postfix
  }
  user = root
}

# unix domain socket fuer LMTP
service lmtp {
  inet_listener lmtp {
    address = 127.0.0.1
    port = 24
  }
  unix_listener /var/spool/postfix/private/dovecot-lmtp {
    group = postfix
    mode = 0660
    user = postfix
  }
}
	    

# imap-login Prozess
# high performance mode
service imap-login {
  service_count = 0
}

# der eigentliche IMAPD
service imap {
  process_limit = 2048
  executable = imap -L
}

# managesieve-login, wird nur genutzt von webmail aus
service managesieve-login {
  service_count = 0
}

# der eigentliche managesieve
service managesieve {
  process_limit = 128
}

# pop3-login Prozess
# high performance mode
service pop3-login {
  service_count = 0
  # kein pop3, nur pop3s!
  inet_listener pop3 {
    port = 0
  }
}

# der eigentliche pop3
service pop3 {
  process_limit = 512
}

# die ganzen SSL Zertifikate
ssl_ca = </etc/ssl/certs/ca-certificates.crt
ssl_cert = </etc/ssl/certs/cert-188235905-postamt.charite.de-g02.pem
ssl_key = </etc/ssl/private/postamt.key

# schoene Ausgabe in ps auxwww
verbose_proctitle = yes
version_ignore = yes

mail_fsync = never

mail_plugins = quota

protocol imap {
  mail_plugins = quota imap_quota trash fts fts_squat 
  # autocreate
}

# pop3 hat workarounds
protocol pop3 {
  pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
  pop3_lock_session = yes
  pop3_uidl_format = %v-%u
}

protocol lda {
  mail_plugins = quota sieve trash 
  postmaster_address = postmaster@charite.de
  quota_full_tempfail = yes
  syslog_facility = local4
}

protocol lmtp {
  mail_plugins = quota sieve trash
  postmaster_address = postmaster@charite.de
  quota_full_tempfail = yes
  syslog_facility = local4
}
  
# der schickt die Quota warnmails
service quota-warning {
  executable = script /usr/local/scripts/quota-warning2
  user = root
  unix_listener quota-warning {
    mode = 0666
    user = vmail
    group = users
  }
}

# Da kommt die Config her fuer subprozesse
service config {
  unix_listener config {
    mode = 0666
  }
}