# 2.4.4-5+debian13 (8b687aa65c): /etc/dovecot/dovecot.conf
# OS: Linux 6.18.36.1.amd64-smp x86_64 Debian 13.5 
# Hostname: bdove.mpi-klsb.mpg.de
dovecot_config_version = 2.4.4
dovecot_storage_version = 2.4.4
ldap_auth_dn = REDACTED
ldap_auth_dn_password = # hidden, use -P to show it
ldap_base = REDACTED
ldap_uris = ldaps://REDACTED/
listen = 0.0.0.0
mail_driver = maildir
mail_home = /home/%{user | username}/mail
mail_inbox_path = /var/mail/%{user | username}
mail_path = ~/mail
mailbox_list_utf8 = yes
protocols = imap
namespace inbox {
  inbox = yes
  separator = /
}
ssl_server {
  cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
  key_file = /etc/ssl/private/ssl-cert-snakeoil.key
}
passdb_ldap {
  filter = (&(objectClass=posixAccount) (istMailHomeServer=imap-*) (uid=%{user}))
}
userdb_ldap {
  filter = (&(objectClass=posixAccount) (istMailHomeServer=imap-*) (uid=%{user}))
  iterate_filter = (&(objectClass=posixAccount) (istMailHomeServer=imap-*)              )
}
passdb ldap {
  fields {
    host = %{ldap:istMailHomeServer}
    password = %{password}
    proxy = yes
    starttls = yes
    user = %{ldap:uid}
  }
  bind = yes
  use_worker = yes
}
userdb ldap {
  fields {
    user = %{ldap:uid}
  }
  iterate_fields {
    user = %{ldap:uid}
  }
  use_worker = yes
}
ssl_client {
  ca_file = /etc/ssl/certs/ca-certificates.crt
}