summaryrefslogtreecommitdiffstats
path: root/roles/IMAP/files/etc/dovecot/conf.d/10-ssl.conf
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2013-12-16 06:06:33 +0100
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:51:30 +0200
commitb51df24e3b1b64c17a3aac652b142e2082c77a26 (patch)
treed2a4c1b42a0b4b43f535e934f06a2c87a0b2ade7 /roles/IMAP/files/etc/dovecot/conf.d/10-ssl.conf
parent522ba399d24e8166681b328f550904fcd4d8fad9 (diff)
Configure Sieve and ManageSieve.
Also, add the 'managesieve' RoundCube plugin to communicate with our server.
Diffstat (limited to 'roles/IMAP/files/etc/dovecot/conf.d/10-ssl.conf')
-rw-r--r--roles/IMAP/files/etc/dovecot/conf.d/10-ssl.conf4
1 files changed, 4 insertions, 0 deletions
diff --git a/roles/IMAP/files/etc/dovecot/conf.d/10-ssl.conf b/roles/IMAP/files/etc/dovecot/conf.d/10-ssl.conf
index 4eabe53..c727f4b 100644
--- a/roles/IMAP/files/etc/dovecot/conf.d/10-ssl.conf
+++ b/roles/IMAP/files/etc/dovecot/conf.d/10-ssl.conf
@@ -1,33 +1,37 @@
##
## SSL settings
##
# SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt>
ssl = required
# No need for SSL if the packets are protected by IPSec.
local 172.16.0.1 {
protocol imap {
disable_plaintext_auth = no
ssl = no
}
+ protocol sieve {
+ disable_plaintext_auth = no
+ ssl = no
+ }
}
# PEM encoded X.509 SSL/TLS certificate and private key. They're opened before
# dropping root privileges, so keep the key file unreadable by anyone but
# root. Included doc/mkcert.sh can be used to easily generate self-signed
# certificate, just make sure to update the domains in dovecot-openssl.cnf
ssl_cert = </etc/dovecot/dovecot.pem
ssl_key = </etc/dovecot/private/dovecot.pem
# If key file is password protected, give the password here. Alternatively
# give it when starting dovecot with -p parameter. Since this file is often
# world-readable, you may want to place this setting instead to a different
# root owned 0600 file by using ssl_key_password = <path.
#ssl_key_password =
# PEM encoded trusted certificate authority. Set this only if you intend to use
# ssl_verify_client_cert=yes. The file should contain the CA certificate(s)
# followed by the matching CRL(s). (e.g. ssl_ca = </etc/ssl/certs/ca.pem)
#ssl_ca =