diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2017-06-02 14:25:21 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2017-06-05 16:44:46 +0200 |
| commit | b7a7ceb88ed5b44959920cde170bc6aaa83026bb (patch) | |
| tree | 57b529319a012b73d1f2b460c2484220e5203b7c /roles/IMAP/files/etc/systemd | |
| parent | 1395cc86969823d9972517833c614becba8660a0 (diff) | |
dovecot: enable user iteration and add a cronjob for `doveadm purge -A`
Diffstat (limited to 'roles/IMAP/files/etc/systemd')
| -rw-r--r-- | roles/IMAP/files/etc/systemd/system/dovecot-auth-proxy.service | 23 | ||||
| -rw-r--r-- | roles/IMAP/files/etc/systemd/system/dovecot-auth-proxy.socket | 8 |
2 files changed, 31 insertions, 0 deletions
diff --git a/roles/IMAP/files/etc/systemd/system/dovecot-auth-proxy.service b/roles/IMAP/files/etc/systemd/system/dovecot-auth-proxy.service new file mode 100644 index 0000000..ea5895c --- /dev/null +++ b/roles/IMAP/files/etc/systemd/system/dovecot-auth-proxy.service @@ -0,0 +1,23 @@ +[Unit] +Description=Dovecot authentication proxy +After=dovecot.target +Requires=dovecot-auth-proxy.socket + +[Service] +User=vmail +Group=vmail +StandardInput=null +SyslogFacility=mail +ExecStart=/usr/local/bin/dovecot-auth-proxy.pl + +# Hardening +NoNewPrivileges=yes +PrivateDevices=yes +ProtectSystem=full +ProtectHome=read-only +ReadOnlyDirectories=/ +RestrictAddressFamilies= + +[Install] +WantedBy=multi-user.target +Also=postfix-sender-login.socket diff --git a/roles/IMAP/files/etc/systemd/system/dovecot-auth-proxy.socket b/roles/IMAP/files/etc/systemd/system/dovecot-auth-proxy.socket new file mode 100644 index 0000000..6dee91a --- /dev/null +++ b/roles/IMAP/files/etc/systemd/system/dovecot-auth-proxy.socket @@ -0,0 +1,8 @@ +[Socket] +SocketUser=dovecot +SocketGroup=dovecot +SocketMode=0600 +ListenStream=/run/dovecot/auth-proxy + +[Install] +WantedBy=sockets.target |