Meine kleine Dokumentation

Diese Seite ist nicht editierbar. Sie können den Quelltext sehen, jedoch nicht verändern. Kontaktieren Sie den Administrator, wenn Sie glauben, dass hier ein Fehler vorliegt.
====== Dovecot Installation & Konfiguration ======
===== Quelle =====
  * http://www.binarytides.com/install-postfix-dovecot-debian/
  * https://sys4.de/en/blog/2013/03/25/outlook-2013-special-use-mit-dovecot/

==== Setup ====
<code bash>
apt install -t jessie-backports dovecot-core dovecot-imapd dovecot-lmtpd -y
cp -arf /etc/dovecot/conf.d/ /etc/dovecot/conf.d.BAK
cd /etc/dovecot/conf.d

mkdir -p /var/mail/vhosts/meinekleinefarm.net
mkdir -p /var/mail/vhosts/mgs-ullrich.de
groupadd -g 5000 vmail
useradd -r -g vmail -u 5000 vmail -d /var/mail/vhosts -c "Dovecot virtual mail user"
chown -R vmail:vmail /var/mail/vhosts/
</code>

==== 10-mail.conf ====
<code bash>
nano 10-mail.conf
</code>
<hidden 10-mail.conf -edit>
  * <code txt>
mail_location = maildir:/var/mail/vhosts/%d/%n
</code>
</hidden>


==== 10-master.conf ====
<code bash>
nano 10-master.conf
</code>
<hidden 10-master.conf -edit>
  * <code txt>
service imap-login {
  inet_listener imap {
    #port = 143
  }
  inet_listener imaps {
    port = 993
    ssl = yes
  }
  
service lmtp {
  unix_listener /var/spool/postfix/private/dovecot-lmtp {
    group = postfix
    user = postfix
    mode = 0666
  }

service auth {
  # Postfix smtp-auth
  unix_listener /var/spool/postfix/private/auth {
    mode = 0666
    user = postfix
    group = postfix
  }

</code>
</hidden>


==== 10-auth.conf ====
<code bash>
nano 10-auth.conf
</code>
<hidden 10-auth.conf -edit>
  * <code txt>
disable_plaintext_auth = yes
# Today however many people use SSL/TLS, and there's no problem with sending unencrypted password inside SSL secured connections.
auth_mechanisms = plain login

#!include auth-system.conf.ext
#!include auth-sql.conf.ext
#!include auth-ldap.conf.ext
!include auth-passwdfile.conf.ext
#!include auth-checkpassword.conf.ext
#!include auth-vpopmail.conf.ext
#!include auth-static.conf.ext
</code>
</hidden>


==== auth-passwdfile.conf.ext ====
<code bash>
nano auth-passwdfile.conf.ext
</code>
<hidden auth-passwdfile.conf.ext -edit>
  * <code txt>
# Authentication for passwd-file users. Included from 10-auth.conf.
#
# passwd-like file with specified location.
# <doc/wiki/AuthDatabase.PasswdFile.txt>

passdb {
  driver = passwd-file
  args = scheme=SHA512-CRYPT username_format=%u /etc/dovecot/dovecot-users
}

userdb {
  driver = static
  args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n
}
</code>
</hidden>


==== Dovecot Users PasswdFile ====
<code bash>
doveadm pw -l
doveadm pw -s SHA512-CRYPT
nano ../dovecot-users
</code>
<hidden dovecot-users -edit>
  * <code txt>
#meinekleinefarm.net
xenadmin@meinekleinefarm.net:{SHA512-CRYPT}$6$XYZxyzXYZxyzXYZxyzXYZxyzXYZxyzXYZxyzXYZxyzXYZxyzXYZxyzXYZxyz

#mgs-ullrich.de
example@mgs-ullrich.de:{SHA512-CRYPT}$6$XYZxyzXYZxyzXYZxyzXYZxyzXYZxyzXYZxyzXYZxyzXYZxyzXYZxyzXYZxyz
</code>
</hidden>


==== 10-ssl.conf ====
<code bash>
nano 10-ssl.conf
</code>
<hidden 10-ssl.conf -edit>
  * <code txt>
ssl = required
ssl_cert = </etc/letsencrypt/live/meinekleinefarm.net/fullchain.pem
ssl_key = </etc/letsencrypt/live/meinekleinefarm.net/privkey.pem
</code>
</hidden>


==== 10-logging.conf ====
<code bash>
nano 10-logging.conf
</code>
<hidden 10-logging.conf -edit>
  * <code txt>
log_path = /var/log/dovecot.log
</code>
</hidden>


==== 15-mailboxes.conf ====
<code bash>
nano 15-mailboxes.conf
</code>
<hidden 15-mailboxes.conf -edit>
  * <code txt>
namespace inbox {

  # These mailboxes are widely used and could perhaps be created automatically:
  mailbox Drafts {
    special_use = \Drafts
    auto=subscribe
  }

  mailbox Junk {
    special_use = \Junk
    auto=subscribe
  }

  mailbox Trash {
    special_use = \Trash
    auto=subscribe
  }

  # For \Sent mailboxes there are two widely used names. We'll mark both of
  # them as \Sent. User typically deletes one of them if duplicates are created.
  mailbox Sent {
    special_use = \Sent
    auto=subscribe
  }
  mailbox "Sent Messages" {
    special_use = \Sent
  }

  # If you have a virtual "All messages" mailbox:
  #mailbox virtual/All {
  #  special_use = \All
  #  comment = All my messages
  #}

  # If you have a virtual "Flagged" mailbox:
  mailbox virtual/Flagged {
    special_use = \Flagged
    auto=no
    comment = All my flagged messages
  }
}
</code>
</hidden>


==== Setup logrotate ====
<code bash>
nano /etc/logrotate.d/dovecot
</code>
<hidden logrotate.d/dovecot -edit>
  * <code txt>
/var/log/dovecot*.log {
  missingok
  notifempty
  delaycompress
  sharedscripts
  postrotate
    doveadm log reopen
  endscript
}
</code>
</hidden>


==== Fin ====
<code bash>
systemctl restart dovecot
</code>