Dovecot - Revision history

Vincent: No need to restart dovecot after certificates

2017-04-02T09:45:32Z

No need to restart dovecot after certificates

← Older revision		Revision as of 09:45, 2 April 2017
Line 6:		Line 6:
	== Install ==		== Install ==
	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	# apt install dovecot-imapd dovecot-managesieved		$ sudo apt install dovecot-imapd dovecot-managesieved
	</syntaxhighlight>		</syntaxhighlight>

Line 15:		Line 15:
	User vmail will be used to store mail related data		User vmail will be used to store mail related data
	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	# adduser --system --home /var/vmail/ --uid 800 --group vmail		$ sudo adduser --system --home /var/vmail/ --uid 800 --group vmail
	Adding system user `vmail' (UID 800) ...		Adding system user `vmail' (UID 800) ...
	Adding new group `vmail' (GID 800) ...		Adding new group `vmail' (GID 800) ...
Line 69:		Line 69:
	Create file <code>/etc/dovecot/users</code>		Create file <code>/etc/dovecot/users</code>
	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	# touch /etc/dovecot/users		$ sudo touch /etc/dovecot/users
	# chmod 640 /etc/dovecot/users		$ sudo chmod 640 /etc/dovecot/users
	# chown root:dovecot /etc/dovecot/users		$ sudo chown root:dovecot /etc/dovecot/users
	</syntaxhighlight>		</syntaxhighlight>

Line 136:		Line 136:
	</syntaxhighlight>		</syntaxhighlight>

	Add your new certificate to <code>/usr/local/~~sbin~~/~~renew_certificates~~</code>		Add your new certificate to <code>/usr/local/etc/certmanage/main.json</code>
	<syntaxhighlight lang="python">		<syntaxhighlight lang="python">
	{		{
	'domains': ['imap.example.org'],		'domains': ['imap.example.org']
	~~'reload': [['service', 'dovecot', 'reload']~~]
	}		}
	</syntaxhighlight>		</syntaxhighlight>

	And finally generate the certificate		And finally generate the certificate
	{{Let’s Encrypt/New Cert Command\|domain = imap.example.org\|~~command~~ = ~~service dovecot~~ reload		{{Let’s Encrypt/New Cert Command\|domain = imap.example.org \|beforeCommand=$ sudo systemctl reload nginx}}
	~~[ ok ] Reloading IMAP/POP3 mail server: dovecot.\|beforeCommand=# service~~ nginx ~~reload~~}}

	==== Configure ====		==== Configure ====

Vincent: page title

2016-08-06T01:52:47Z

page title

← Older revision		Revision as of 01:52, 6 August 2016
Line 1:		Line 1:
			{{DISPLAYTITLE:Dovecot installation guide}}

	== Prerequisite ==		== Prerequisite ==
	You will need to have setup [[Let’s Encrypt]] before going to this guide.		You will need to have setup [[Let’s Encrypt]] before going to this guide.

Vincent: Modernise TLS config

2016-07-23T21:18:19Z

Modernise TLS config

← Older revision		Revision as of 21:18, 23 July 2016
Line 164:		Line 164:

	# SSL protocols to use		# SSL protocols to use
	ssl_protocols = ~~!SSLv2 !SSLv3~~		ssl_protocols = TLSv1.2

	# SSL ciphers to use		# SSL ciphers to use
	ssl_cipher_list = EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH ~~EDH+aRSA~~ !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4 !CAMELLIA !SEED		ssl_cipher_list = EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4 !CAMELLIA !SEED

	# Prefer the server's order of ciphers over client's.		# Prefer the server's order of ciphers over client's.

Vincent: /* Firewall */ Fix title level

2016-07-03T10:21:36Z

Firewall: Fix title level

← Older revision		Revision as of 10:21, 3 July 2016
Line 117:		Line 117:
	</syntaxhighlight>If you change default port, don't forget to change it in the firewall configuration bellow.		</syntaxhighlight>If you change default port, don't forget to change it in the firewall configuration bellow.

	==== Firewall ====		=== Firewall ===
	You will need to open 2 ports in your firewall:		You will need to open 2 ports in your firewall:
	* <code>993</code> for imap		* <code>993</code> for imap

Vincent: firewall category name

2016-06-05T13:06:56Z

firewall category name

← Older revision		Revision as of 13:06, 5 June 2016
Line 121:		Line 121:
	* <code>993</code> for imap		* <code>993</code> for imap
	* <code>4190</code> for managesieve (if enabled above)		* <code>4190</code> for managesieve (if enabled above)
	{{nftables/config\|category = ~~Mail~~\|tcp_port_out = \|udp_port_out = \|user_out = \|tcp_port_in = 993, 4190\|udp_port_in = }}		{{nftables/config\|category = Dovecot\|tcp_port_out = \|udp_port_out = \|user_out = \|tcp_port_in = 993, 4190\|udp_port_in = }}

	=== TLS ===		=== TLS ===

Vincent: Sieve delivery plugin

2016-06-05T13:04:12Z

Sieve delivery plugin

← Older revision		Revision as of 13:04, 5 June 2016
Line 96:		Line 96:
	</syntaxhighlight>		</syntaxhighlight>

	=== ManageSieve ===		=== Sieve ===

			==== Enable ====
			To enable sieve filters during mail delivery, edit file <code>/etc/dovecot/conf.d/15-lda.conf</code> and uncomment/modify the following lines<syntaxhighlight lang="sh">
			protocol lda {
			# Space separated list of plugins to load (default is global mail_plugins).
			mail_plugins = $mail_plugins sieve
			}
			</syntaxhighlight>

			==== ManageSieve ====
	The manageSieve allows you mail client to set and modify the sieve scripts on your server. To enable it, uncomment/modify the following lines in <code>/etc/dovecot/conf.d/20-managesieve.conf</code><syntaxhighlight lang="sh">		The manageSieve allows you mail client to set and modify the sieve scripts on your server. To enable it, uncomment/modify the following lines in <code>/etc/dovecot/conf.d/20-managesieve.conf</code><syntaxhighlight lang="sh">
	protocols = $protocols sieve		protocols = $protocols sieve
Line 107:		Line 117:
	</syntaxhighlight>If you change default port, don't forget to change it in the firewall configuration bellow.		</syntaxhighlight>If you change default port, don't forget to change it in the firewall configuration bellow.

	=== Firewall ===		==== Firewall ====
	You will need to open 2 ports in your firewall:		You will need to open 2 ports in your firewall:
	* <code>993</code> for imap		* <code>993</code> for imap
Line 172:		Line 182:
	# Maximum number of IMAP connections allowed for a user from each IP address.		# Maximum number of IMAP connections allowed for a user from each IP address.
	# NOTE: The username is compared case-sensitively.		# NOTE: The username is compared case-sensitively.
	mail_max_userip_connections = 50		mail_max_userip_connections = 100

	...		...

Vincent: Use template for nftables configuration

2016-05-30T21:44:51Z

Use template for nftables configuration

← Older revision		Revision as of 21:44, 30 May 2016
Line 111:		Line 111:
	* <code>993</code> for imap		* <code>993</code> for imap
	* <code>4190</code> for managesieve (if enabled above)		* <code>4190</code> for managesieve (if enabled above)
	~~If you are using [[~~nftables\|~~nftables as described]], simply add the line <code>add element inet main tcp_port_in {~~ 993, ~~14190~~ }~~</code> to <code>/etc/nftables/main_config.conf</code> and apply it by running <code>/etc/nftables/reload_main.conf</code>.~~		{{nftables/config\|category = Mail\|tcp_port_out = \|udp_port_out = \|user_out = \|tcp_port_in = 993, 4190\|udp_port_in = }}

	=== TLS ===		=== TLS ===

Vincent: Managesieve

2016-05-30T15:15:31Z

Managesieve

@@ Line 95: / Line 95: @@
 mail_location = mdbox:~/mdbox
 </syntaxhighlight>
 === TLS ===
@@ Line 172: / Line 189: @@
 [[Category:Fail2Ban]]
 [[Category:Linux Server]]

Vincent: /* Configure */

2016-04-27T06:29:48Z

Configure

← Older revision		Revision as of 06:29, 27 April 2016
Line 39:		Line 39:
	#!include auth-static.conf.ext		#!include auth-static.conf.ext
	</syntaxhighlight>		</syntaxhighlight>


	Edit file <code>/etc/dovecot/conf.d/auth-passwdfile.conf.ext</code> and set option <code>default_fields</code>		Edit file <code>/etc/dovecot/conf.d/auth-passwdfile.conf.ext</code> and set option <code>default_fields</code>
Line 65:		Line 64:
	}		}
	</syntaxhighlight>		</syntaxhighlight>


	Create file <code>/etc/dovecot/users</code>		Create file <code>/etc/dovecot/users</code>
Line 146:		Line 144:
	# Prefer the server's order of ciphers over client's.		# Prefer the server's order of ciphers over client's.
	ssl_prefer_server_ciphers = yes		ssl_prefer_server_ciphers = yes
			</syntaxhighlight>

			=== Limits ===
			By default dovecot limit IMAP connections to 10 per IP and per user. Given that each email client can use multiple connections and that you might have multiple devices at home, it is quite easy to reach the limit.

			On a server with few users, it is safe to raise the limit. To do so, edit <code>mail_max_userip_connections</code> in file <code>/etc/dovecot/conf.d/20-imap.conf</code><syntaxhighlight lang="sh">
			protocol imap {
			...

			# Maximum number of IMAP connections allowed for a user from each IP address.
			# NOTE: The username is compared case-sensitively.
			mail_max_userip_connections = 50

			...
			}
	</syntaxhighlight>		</syntaxhighlight>

Vincent: .org

2016-03-21T00:16:22Z

.org

← Older revision		Revision as of 00:16, 21 March 2016
Line 118:		Line 118:

	And finally generate the certificate		And finally generate the certificate
	{{Let’s Encrypt/New Cert Command\|domain = imap.example.~~com~~\|command = service dovecot reload		{{Let’s Encrypt/New Cert Command\|domain = imap.example.org\|command = service dovecot reload
	[ ok ] Reloading IMAP/POP3 mail server: dovecot.\|beforeCommand=# service nginx reload}}		[ ok ] Reloading IMAP/POP3 mail server: dovecot.\|beforeCommand=# service nginx reload}}