# 2.3.10.1 (a3d0e1171): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.5.10 (bf8ef1c2)
# OS: Linux 5.7.2-gentoo x86_64 Gentoo Base System release 2.7 
# Hostname: thunderstorm.reub.net
auth_mechanisms = plain login
auth_username_format = %Ln
disable_plaintext_auth = no
doveadm_password = # hidden, use -P to show it
first_valid_uid = 1000
imap_client_workarounds = tb-lsub-flags tb-extra-mailbox-sep
last_valid_uid = 1099
login_log_format_elements = user=<%u> auth-method=%m remote=%r local=%l %c %k
login_trusted_networks = 192.168.0.0/16 2403:5800:7100:0900::/56 180.150.17.229
mail_attribute_dict = file:%h/Maildir/dovecot-attributes
mail_location = maildir:~/Maildir
mail_plugins = notify replication fts fts_lucene
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext
namespace inbox {
  inbox = yes
  location = 
  mailbox Drafts {
    special_use = \Drafts
  }
  mailbox Junk {
    special_use = \Junk
  }
  mailbox Sent {
    special_use = \Sent
  }
  mailbox "Sent Messages" {
    special_use = \Sent
  }
  mailbox Trash {
    special_use = \Trash
  }
  prefix = 
}
passdb {
  args = failure_show_msg=yes %s
  driver = pam
}
plugin {
  fts = lucene
  fts_autoindex = yes
  fts_languages = en
  fts_lucene = whitespace_chars=@.
  mail_replica = tcps:lightning.reub.net:4813
  replication_full_sync_interval = 2 hours
  sieve = file:~/sieve;active=~/.dovecot.sieve
}
postmaster_address = postmaster@reub.net
protocols = imap lmtp sieve submission sieve
recipient_delimiter = -
service aggregator {
  fifo_listener replication-notify-fifo {
    mode = 0666
    user = root
  }
  unix_listener replication-notify {
    mode = 0666
    user = root
  }
}
service auth {
  inet_listener {
    port = 45347
  }
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0666
    user = postfix
  }
  unix_listener auth-userdb {
    mode = 0777
  }
}
service doveadm {
  inet_listener {
    address = 2403:5800:7100:0910::23
    port = 4813
    ssl = yes
  }
  inet_listener {
    address = 2403:5800:7100:0910::23
    port = 4814
    ssl = no
  }
  inet_listener {
    address = 192.168.10.23
    port = 4813
    ssl = yes
  }
  inet_listener {
    address = 192.168.10.23
    port = 4814
    ssl = no
  }
  user = root
}
service imap-login {
  inet_listener imap {
    address = 192.168.10.23 2403:5800:7100:0910::23
  }
  inet_listener imaps {
    address = 192.168.10.23 2403:5800:7100:0910::23
    ssl = yes
  }
}
service lmtp {
  inet_listener lmtp {
    address = ::1
    port = 24
  }
  unix_listener /var/spool/postfix/private/dovecot-lmtp {
    group = postfix
    mode = 0660
    user = postfix
  }
}
service managesieve-login {
  inet_listener sieve {
    address = 127.0.0.1 2403:5800:7100:0910::23
    port = 4190
  }
}
service replicator {
  process_min_avail = 1
  unix_listener replicator-doveadm {
    mode = 0666
  }
}
service submission-login {
  inet_listener submission {
    address = 192.168.10.23 2403:5800:7100:0910::23
  }
}
ssl_cert = </etc/letsencrypt/live/reub.net/fullchain.pem
ssl_client_ca_dir = /etc/ssl/certs
ssl_dh = # hidden, use -P to show it
ssl_key = # hidden, use -P to show it
ssl_min_protocol = TLSv1.2
submission_client_workarounds = whitespace-before-path
submission_relay_host = inside-mail.reub.net
submission_relay_trusted = yes
userdb {
  driver = passwd
  result_success = continue-ok
}
userdb {
  args = /etc/dovecot/passwd.extra
  driver = passwd-file
  skip = notfound
}
protocol lmtp {
  mail_plugins = notify replication fts fts_lucene sieve
}
protocol lda {
  mail_plugins = notify replication fts fts_lucene sieve
}
protocol imap {
  imap_metadata = yes
  mail_max_userip_connections = 25
}
local_name imap.reub.net {
  ssl_cert = </etc/letsencrypt/live/reub.net/fullchain.pem
  ssl_key = # hidden, use -P to show it
}
local_name imap.htperham.name {
  ssl_cert = </etc/letsencrypt/live/imap.htperham.name/fullchain.pem
  ssl_key = # hidden, use -P to show it
}