From b7a7ceb88ed5b44959920cde170bc6aaa83026bb Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Fri, 2 Jun 2017 14:25:21 +0200
Subject: dovecot: enable user iteration and add a cronjob for `doveadm purge
 -A`

---
 .../etc/systemd/system/dovecot-auth-proxy.service  | 23 ++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 roles/IMAP/files/etc/systemd/system/dovecot-auth-proxy.service

(limited to 'roles/IMAP/files/etc/systemd/system/dovecot-auth-proxy.service')

diff --git a/roles/IMAP/files/etc/systemd/system/dovecot-auth-proxy.service b/roles/IMAP/files/etc/systemd/system/dovecot-auth-proxy.service
new file mode 100644
index 0000000..ea5895c
--- /dev/null
+++ b/roles/IMAP/files/etc/systemd/system/dovecot-auth-proxy.service
@@ -0,0 +1,23 @@
+[Unit]
+Description=Dovecot authentication proxy
+After=dovecot.target
+Requires=dovecot-auth-proxy.socket
+
+[Service]
+User=vmail
+Group=vmail
+StandardInput=null
+SyslogFacility=mail
+ExecStart=/usr/local/bin/dovecot-auth-proxy.pl
+
+# Hardening
+NoNewPrivileges=yes
+PrivateDevices=yes
+ProtectSystem=full
+ProtectHome=read-only
+ReadOnlyDirectories=/
+RestrictAddressFamilies=
+
+[Install]
+WantedBy=multi-user.target
+Also=postfix-sender-login.socket
-- 
cgit v1.2.3