fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	Remove the IMAP caching proxy.	Guilhem Moulin	2016-05-28	1
\| \| \| \| \| \| \| \| \|	Dovecot imapc requires two authentication rounds to the IMAP backend for each connection. It seems suboptimal that Roundcube keeps connecting to the IMAP server for each new connection, but benchmarks shows little advantage in caching the IMAP sessions with imapproxy: http://www.dovecot.org/list/dovecot/2012-February/133544.html
*	Use systemd unit files for stunnel4.	Guilhem Moulin	2016-05-12	1
\|
*	Use stunnel to secure the connection from the IMAP proxy to the IMAP server.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \| \|	The reason is that we don't want to rely on CAs to verify the certificate of our server. Dovecot currently doesn't offer a way to match said cert against a local copy or known fingerprint. stunnel does.
*	Use a local IMAP caching proxy under the webmail.	Guilhem Moulin	2015-06-07	1
	(Unless the webmail is itself a full IMAP server.) It replaces RoundCube's own IMAP and message caches. Dovecot's IMAPC storage backend is not very documented, but provides smart IMAP proxying. References include: http://dovecot.org/pipermail/dovecot/2011-January/056975.html http://wiki2.dovecot.org/HowTo/ImapcProxy http://wiki2.dovecot.org/Migration/Dsync