dovecot-example.conf revision 379f0fdbaacaf60192efb5dec97e28bb258f2d0b
89a126810703c666309310d0f3189e9834d70b5bTimo Sirainen## Dovecot configuration file
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# If you're in a hurry, see http://wiki.dovecot.org/QuickConfiguration
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen# "dovecot -n" command gives a clean output of the changed settings. Use it
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen# instead of copy&pasting this file when posting to the Dovecot mailing list.
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen# '#' character and everything after it is treated as comments. Extra spaces
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# and tabs are ignored. If you want to use either of these explicitly, put the
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# value inside quotes, eg.: key = "# char and trailing whitespace "
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Default values are shown for each setting, it's not required to uncomment
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# any of the lines. Exception to this are paths, they're just examples with
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# the real defaults being based on configure options. The paths listed here
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# are for configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# --with-ssldir=/etc/ssl
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Base directory where to store runtime data.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Protocols we want to be serving: imap imaps pop3 pop3s
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# If you only want to use dovecot-auth, you can set this to "none".
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#protocols = imap imaps
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# A space separated list of IP or host addresses where to listen in for
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# connections. "*" listens in all IPv4 interfaces. "[::]" listens in all IPv6
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# interfaces, but may also listen in all IPv4 interfaces depending on the
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# operating system.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# If you want to specify ports for each service, you will need to configure
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# these settings inside the protocol imap/pop3 { ... } section, so you can
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# specify different ports for IMAP/POP3. For example:
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# protocol imap {
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# listen = *:10143
ad850190d946d34966a56838cfdb216e021b5b5fTimo Sirainen# ssl_listen = *:10943
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# protocol pop3 {
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# listen = *:10100
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Disable LOGIN command and all other plaintext authentications unless
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# SSL/TLS is used (LOGINDISABLED capability). Note that if the remote IP
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# matches the local IP (ie. you're connecting from the same computer), the
8aacc9e7c84f8376822823ec98c2f551d4919b2eTimo Sirainen# connection is considered secure and plaintext authentication is allowed.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#disable_plaintext_auth = yes
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Should all IMAP and POP3 processes be killed when Dovecot master process
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# shuts down. Setting this to "no" means that Dovecot can be upgraded without
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# forcing existing client connections to close (although that could also be
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# a problem if the upgrade is eg. because of a security fix). This however
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen# means that after master process has died, the client processes can't write
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen# to log files anymore.
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen#shutdown_clients = yes
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Log file to use for error messages, instead of sending them to syslog.
d9fdacd5fb3e07997e5c389739d2054f0c8441d8Timo Sirainen# /dev/stderr can be used to log into stderr.
d9fdacd5fb3e07997e5c389739d2054f0c8441d8Timo Sirainen# Log file to use for informational and debug messages.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Default is the same as log_path.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#info_log_path =
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Prefix for each line written to log file. % codes are in strftime(3)
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#log_timestamp = "%b %d %H:%M:%S "
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen# Syslog facility to use if you're logging to syslog. Usually if you don't
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen# want to use "mail", you'll use local0..local7. Also other standard
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen# facilities are supported.
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen#syslog_facility = mail
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen## SSL settings
3b20a37cb65c70f55e48dbdc912313fdacdab630Timo Sirainen# IP or host address where to listen in for SSL connections. Defaults
3b20a37cb65c70f55e48dbdc912313fdacdab630Timo Sirainen# to above if not specified.
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen# Disable SSL/TLS support.
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen#ssl_disable = no
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen# PEM encoded X.509 SSL/TLS certificate and private key. They're opened before
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen# dropping root privileges, so keep the key file unreadable by anyone but
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen# root. Included doc/mkcert.sh can be used to easily generate self-signed
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen# certificate, just make sure to update the domains in dovecot-openssl.cnf
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen#ssl_cert_file = /etc/ssl/certs/dovecot.pem
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen#ssl_key_file = /etc/ssl/private/dovecot.pem
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen# If key file is password protected, give the password here. Alternatively
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen# give it when starting dovecot with -p parameter.
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen#ssl_key_password =
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen# File containing trusted SSL certificate authorities. Usually not needed.
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen# The CAfile should contain the CA-certificate(s) followed by the matching
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen# CRL(s). CRL checking is new in dovecot .rc1
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen#ssl_ca_file =
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen# Request client to send a certificate. If you also want to require it, set
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen# ssl_require_client_cert=yes in auth section.
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen#ssl_verify_client_cert = no
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen# How often to regenerate the SSL parameters file. Generation is quite CPU
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen# intensive operation. The value is in hours, 0 disables regeneration
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen#ssl_parameters_regenerate = 168
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen# SSL ciphers to use
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen#ssl_cipher_list = ALL:!LOW:!SSLv2
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen# Show protocol level SSL errors.
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen#verbose_ssl = no
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen## Login processes
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Directory where authentication process places authentication UNIX sockets
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainen# which login needs to be able to connect to. The sockets are created when
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainen# running as root, so you don't have to worry about permissions. Note that
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainen# everything in this directory is deleted when Dovecot is started.
69e03a846f6980144aa75bff0590c04852bffbbcTimo Sirainen# chroot login process to the login_dir. Only reason not to do this is if you
4b231ca0bbe3b536acbd350101e183441ce0247aTimo Sirainen# wish to run the whole Dovecot without roots. <doc/wiki/Rootless.txt>
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen#login_chroot = yes
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# User to use for the login process. Create a completely new user for this,
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# and don't use it anywhere else. The user must also belong to a group where
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# only it has access, it's used to control access for authentication process.
c53e8ee216904ffe6de4f6518d9f9f5107b7610eTimo Sirainen# Note that this user is NOT used to access mails. <doc/wiki/UserIds.txt>
c53e8ee216904ffe6de4f6518d9f9f5107b7610eTimo Sirainen#login_user = dovecot
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# Set max. process size in megabytes. If you don't use
df6478c4cf605bd81b3891c148b84c14eb6c4035Timo Sirainen# login_process_per_connection you might need to grow this.
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen#login_process_size = 32
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Should each login be processed in it's own process (yes), or should one
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# login process be allowed to process multiple connections (no)? Yes is more
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# secure, espcially with SSL/TLS enabled. No is faster since there's no need
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen# to create processes all the time.
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen#login_process_per_connection = yes
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# Number of login processes to keep for listening new connections.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#login_processes_count = 3
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen# Maximum number of login processes to create. The listening process count
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen# usually stays at login_processes_count, but when multiple users start logging
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainen# in at the same time more extra processes are created. To prevent fork-bombing
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainen# we check only once in a second if new processes should be created - if all
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainen# of them are used at the time, we double their amount until the limit set by
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# this setting is reached.
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen#login_max_processes_count = 128
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# Maximum number of connections allowed per each login process. This setting
58be9d6bcc3800f5b3d76a064ee767fbe31a5a8aTimo Sirainen# is used only if login_process_per_connection=no. Once the limit is reached,
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5dTimo Sirainen# the process notifies master so that it can create a new login process.
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# You should make sure that the process has at least
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# 16 + login_max_connections * 2 available file descriptors.
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen#login_max_connections = 256
6b85bc4b03e552cfaeeae872d63c2d8ac5fcb7c4Timo Sirainen# Greeting message for clients.
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen#login_greeting = Dovecot ready.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Space-separated list of elements we want to log. The elements which have
6ef7e31619edfaa17ed044b45861d106a86191efTimo Sirainen# a non-empty variable value are joined together to form a comma-separated
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen#login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Login log format. %$ contains login_log_format_elements string, %s contains
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# the data we want to log.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#login_log_format = %$: %s
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen## Mailbox locations and namespaces
a40d26f83af808a0ea1e212c001d682a96d870b0Timo Sirainen# Location for users' mailboxes. This is the same as the old default_mail_env
a40d26f83af808a0ea1e212c001d682a96d870b0Timo Sirainen# setting. The default is empty, which means that Dovecot tries to find the
e192a3b1ca8ae857e7d87298ea507d32977ba570Timo Sirainen# mailboxes automatically. This won't work if the user doesn't have any mail
e192a3b1ca8ae857e7d87298ea507d32977ba570Timo Sirainen# yet, so you should explicitly tell Dovecot the full location.
811f2e26d9782d9cb99fdf82e18ffa0a77564fe2Timo Sirainen# If you're using mbox, giving a path to the INBOX file (eg. /var/mail/%u)
a40d26f83af808a0ea1e212c001d682a96d870b0Timo Sirainen# isn't enough. You'll also need to tell Dovecot where the other mailboxes are
f501ad38c51cf1d8f4f84313922c785e6ae6e81fTimo Sirainen# kept. This is called the "root mail directory", and it must be the first
c4877db8b6559846f4b58be8e42422dc734c193fTimo Sirainen# path given in the mail_location setting.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# There are a few special variables you can use, eg.:
8b9342aa96b2f297e23afb261f9f7dd859800952Timo Sirainen# %u - username
8b9342aa96b2f297e23afb261f9f7dd859800952Timo Sirainen# %n - user part in user@domain, same as %u if there's no domain
8b9342aa96b2f297e23afb261f9f7dd859800952Timo Sirainen# %d - domain part in user@domain, empty if there's no domain
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# %h - home directory
37e6cf44d61a81c6839e3ab76234b54309d8d292Timo Sirainen# See doc/wiki/Variables.txt for full list. Some examples:
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# mail_location = maildir:~/Maildir
a40d26f83af808a0ea1e212c001d682a96d870b0Timo Sirainen# mail_location = mbox:~/mail:INBOX=/var/mail/%u
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# mail_location = mbox:/var/mail/%d/%1n/%n:INDEX=/var/indexes/%d/%1n/%n
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#mail_location =
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# If you need to set multiple mailbox locations or want to change default
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# namespace settings, you can do it by defining namespace sections.
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen# NOTE: Namespaces currently work ONLY with IMAP! POP3 and LDA currently ignore
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen# namespaces completely, they use only the mail_location setting.
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# You can have private, shared and public namespaces. The only difference
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# between them is how Dovecot announces them to client via NAMESPACE
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# extension. Shared namespaces are meant for user-owned mailboxes which are
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# shared to other users, while public namespaces are for more globally
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# accessible mailboxes.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# REMEMBER: If you add any namespaces, the default namespace must be added
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen# explicitly, ie. mail_location does nothing unless you have a namespace
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen# without a location setting. Default namespace is simply done by having a
6b85bc4b03e552cfaeeae872d63c2d8ac5fcb7c4Timo Sirainen# namespace with empty prefix.
6b85bc4b03e552cfaeeae872d63c2d8ac5fcb7c4Timo Sirainen#namespace private {
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen # Hierarchy separator to use. You should use the same separator for all
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen # namespaces or some clients get confused. '/' is usually a good one.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen # The default however depends on the underlying mail storage format.
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen # Prefix required to access this namespace. This needs to be different for
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen # all namespaces. For example "Public/".
1e47cfede3a0b62654105daab00e97b5d660bc6bTimo Sirainen # Physical location of the mailbox. This is in same format as
1e47cfede3a0b62654105daab00e97b5d660bc6bTimo Sirainen # mail_location, which is also the default for it.
1e47cfede3a0b62654105daab00e97b5d660bc6bTimo Sirainen # There can be only one INBOX, and this setting defines which namespace
1e47cfede3a0b62654105daab00e97b5d660bc6bTimo Sirainen # If namespace is hidden, it's not advertised to clients via NAMESPACE
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen # extension or shown in LIST replies. This is mostly useful when converting
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen # from another server with different namespaces which you want to depricate
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen # but still keep working. For example you can create hidden namespaces with
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen # prefixes "~/mail/", "~%u/mail/" and "mail/".
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen #hidden = yes
f501ad38c51cf1d8f4f84313922c785e6ae6e81fTimo Sirainen # Show the mailboxes under this namespace with LIST command. This makes the
f501ad38c51cf1d8f4f84313922c785e6ae6e81fTimo Sirainen # namespace visible for clients that don't support NAMESPACE extension.
f501ad38c51cf1d8f4f84313922c785e6ae6e81fTimo Sirainen# System user and group used to access mails. If you use multiple, userdb
f501ad38c51cf1d8f4f84313922c785e6ae6e81fTimo Sirainen# can override these by returning uid or gid fields. You can use either numbers
f501ad38c51cf1d8f4f84313922c785e6ae6e81fTimo Sirainen# Grant access to these extra groups for mail processes. Typical use would be
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen# to give "mail" group write access to /var/mail to be able to create dotlocks.
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen#mail_extra_groups =
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Allow full filesystem access to clients. There's no access checks other than
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# what the operating system does for the active UID/GID. It works with both
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# maildir and mboxes, allowing you to prefix mailboxes names with eg. /path/
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#mail_full_filesystem_access = no
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen## Mail processes
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# Enable mail process debugging. This can help you figure out why Dovecot
4b231ca0bbe3b536acbd350101e183441ce0247aTimo Sirainen# isn't finding your mails.
4b231ca0bbe3b536acbd350101e183441ce0247aTimo Sirainen#mail_debug = no
4b231ca0bbe3b536acbd350101e183441ce0247aTimo Sirainen# Log prefix for mail processes. See doc/wiki/Variables.txt for list of
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# possible variables you can use.
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen#mail_log_prefix = "%Us(%u): "
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Max. number of lines a mail process is allowed to log per second before it's
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# throttled. 0 means unlimited. Typically there's no need to change this
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# unless you're using mail_log plugin, which may log a lot.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#mail_log_max_lines_per_sec = 10
72cbf33ae81fde08384d30c779ff540752d9256cTimo Sirainen# Don't use mmap() at all. This is required if you store indexes to shared
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# filesystems (NFS or clustered filesystem).
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#mmap_disable = no
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Rely on O_EXCL to work when creating dotlock files. The default is to use
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# hard linking. O_EXCL makes the dotlocking faster, but it doesn't always
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# work with NFS.
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen#dotlock_use_excl = no
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen# Don't use fsync() or fdatasync() calls. This makes the performance better
58be9d6bcc3800f5b3d76a064ee767fbe31a5a8aTimo Sirainen# at the cost of potential data loss if the server (or the file server)
58be9d6bcc3800f5b3d76a064ee767fbe31a5a8aTimo Sirainen#fsync_disable = no
d565eaa943f29a49b97230ced57eec40ee65b4f9Timo Sirainen# Mail storage exists in NFS. Set this to yes to make Dovecot flush NFS caches
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# whenever needed. If you're using only a single mail server this isn't needed.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#mail_nfs_storage = no
f501ad38c51cf1d8f4f84313922c785e6ae6e81fTimo Sirainen# Mail index files also exist in NFS. Setting this to yes requires
da5d50534cfca45d0aaaf0bdac17b287b4588809Timo Sirainen# mmap_disable=yes and fsync_disable=no.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#mail_nfs_index = no
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen# Disable mailbox list indexing.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#mailbox_list_index_disable = no
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen# Locking method for index files. Alternatives are fcntl, flock and dotlock.
4b231ca0bbe3b536acbd350101e183441ce0247aTimo Sirainen# Dotlocking uses some tricks which may create more disk I/O than other locking
4b231ca0bbe3b536acbd350101e183441ce0247aTimo Sirainen# methods. NFS users: flock doesn't work, remember to change mmap_disable.
4b231ca0bbe3b536acbd350101e183441ce0247aTimo Sirainen#lock_method = fcntl
c53e8ee216904ffe6de4f6518d9f9f5107b7610eTimo Sirainen# Drop all privileges before exec()ing the mail process. This is mostly
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# meant for debugging, otherwise you don't get core dumps. It could be a small
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen# security risk if you use single UID for multiple users, as the users could
df6478c4cf605bd81b3891c148b84c14eb6c4035Timo Sirainen# ptrace() each others processes then.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#mail_drop_priv_before_exec = no
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Show more verbose process titles (in ps). Currently shows user name and
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# IP address. Useful for seeing who are actually using the IMAP processes
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# (eg. shared mailboxes or if same uid is used for multiple accounts).
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#verbose_proctitle = no
abe7afb8f1766fbcef1b9df513109e43d7d16e49Timo Sirainen# Valid UID range for users, defaults to 500 and above. This is mostly
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen# to make sure that users can't log in as daemons or other system users.
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen# Note that denying root logins is hardcoded to dovecot binary and can't
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen# be done even if first_valid_uid is set to 0.
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen#first_valid_uid = 500
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen#last_valid_uid = 0
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen# Valid GID range for users, defaults to non-root/wheel. Users having
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen# non-valid GID as primary group ID aren't allowed to log in. If user
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen# belongs to supplementary groups with non-valid GIDs, those groups are
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen#first_valid_gid = 1
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen#last_valid_gid = 0
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen# Maximum number of running mail processes. When this limit is reached,
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen# new users aren't allowed to log in.
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen#max_mail_processes = 1024
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen# Set max. process size in megabytes. Most of the memory goes to mmap()ing
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen# files, so it shouldn't harm much even if this limit is set pretty high.
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen#mail_process_size = 256
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Maximum allowed length for mail keyword name. It's only forced when trying
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen# to create new keywords.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#mail_max_keyword_length = 50
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# Default umask to use for mail files and directories.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# ':' separated list of directories under which chrooting is allowed for mail
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen# processes (ie. /var/mail will allow chrooting to /var/mail/foo/bar too).
a835194f9a9dae88528367a791cbc282589f6c01Timo Sirainen# This setting doesn't affect login_chroot or auth chroot variables.
13c6532dc104d23061e6901783ceb1ff8872c206Timo Sirainen# WARNING: Never add directories here which local users can modify, that
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen# may lead to root exploit. Usually this should be done only if you don't
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen# allow shell access for users. <doc/wiki/Chrooting.txt>
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen#valid_chroot_dirs =
8887bf3757d51d73887dd20b1db3334d867d3817Timo Sirainen# Default chroot directory for mail processes. This can be overridden for
8da095519878426b012058e6f331a669f327f47fTimo Sirainen# specific users in user database by giving /./ in user's home directory
13c6532dc104d23061e6901783ceb1ff8872c206Timo Sirainen# (eg. /home/./user chroots into /home). Note that usually there is no real
13c6532dc104d23061e6901783ceb1ff8872c206Timo Sirainen# need to do chrooting, Dovecot doesn't allow users to access files outside
13c6532dc104d23061e6901783ceb1ff8872c206Timo Sirainen# their mail directory anyway. <doc/wiki/Chrooting.txt>
4b231ca0bbe3b536acbd350101e183441ce0247aTimo Sirainen#mail_chroot =
4b231ca0bbe3b536acbd350101e183441ce0247aTimo Sirainen## Mailbox handling optimizations
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainen# Space-separated list of fields to initially save into cache file. Currently
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainen# these fields are allowed:
59151b71059df1190acd75d8717ed04a7920c862Timo Sirainen# flags, date.sent, date.received, size.virtual, size.physical
9315dd69233d554452df0c12bc57002d2042a8f4Timo Sirainen# Different IMAP clients work in different ways, so they benefit from
9315dd69233d554452df0c12bc57002d2042a8f4Timo Sirainen# different cached fields. Some do not benefit from them at all. Caching more
69bd816e46fdee6182d0cb2e4c6be32399a555c8Timo Sirainen# than necessary generates useless disk I/O, so you don't want to do that
f23298fea47eecbeded985ee2537a34c4c4ef56bTimo Sirainen# Dovecot attempts to automatically figure out what client wants and it keeps
f23298fea47eecbeded985ee2537a34c4c4ef56bTimo Sirainen# only that. However the first few times a mailbox is opened, Dovecot hasn't
f23298fea47eecbeded985ee2537a34c4c4ef56bTimo Sirainen# yet figured out what client needs, so it may not perform optimally. If you
f23298fea47eecbeded985ee2537a34c4c4ef56bTimo Sirainen# know what fields the majority of your clients need, it may be useful to set
da5d50534cfca45d0aaaf0bdac17b287b4588809Timo Sirainen# these fields by hand. If client doesn't actually use them, Dovecot will
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# eventually drop them.
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen# Usually you should just leave this field alone. The potential benefits are
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen# typically unnoticeable.
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen#mail_cache_fields =
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen# Space-separated list of fields that Dovecot should never save to cache file.
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen# Useful if you want to save disk space at the cost of more I/O when the fields
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen#mail_never_cache_fields =
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen# The minimum number of mails in a mailbox before updates are done to cache
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen# file. This allows optimizing Dovecot's behavior to do less disk writes at
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen# the cost of more disk reads.
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen#mail_cache_min_mail_count = 0
5196f9ea42d02000f9c3d22f20aa816140af4422Timo Sirainen# When IDLE command is running, mailbox is checked once in a while to see if
5196f9ea42d02000f9c3d22f20aa816140af4422Timo Sirainen# there are any new mails or other changes. This setting defines the minimum
5196f9ea42d02000f9c3d22f20aa816140af4422Timo Sirainen# time to wait between those checks. Dovecot is however able to use dnotify
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen# and inotify with Linux to reply immediately after the change occurs.
f239eb76f77afcbc0bfc97c9b52b4407d1bc3fe6Timo Sirainen#mailbox_idle_check_interval = 30
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5dTimo Sirainen# Save mails with CR+LF instead of plain LF. This makes sending those mails
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# take less CPU, especially with sendfile() syscall with Linux and FreeBSD.
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5dTimo Sirainen# But it also creates a bit more disk I/O which may just make it slower.
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5dTimo Sirainen# Also note that if other software reads the mboxes/maildirs, they may handle
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5dTimo Sirainen# the extra CRs wrong and cause problems.
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen#mail_save_crlf = no
519e0a461271843833a2b42626ad93f6e7ddc497Timo Sirainen## Maildir-specific settings
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen# By default LIST command returns all entries in maildir beginning with a dot.
519e0a461271843833a2b42626ad93f6e7ddc497Timo Sirainen# Enabling this option makes Dovecot return only entries which are directories.
519e0a461271843833a2b42626ad93f6e7ddc497Timo Sirainen# This is done by stat()ing each entry, so it causes more disk I/O.
519e0a461271843833a2b42626ad93f6e7ddc497Timo Sirainen# (For systems setting struct dirent->d_type, this check is free and it's
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# done always regardless of this setting)
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#maildir_stat_dirs = no
648d24583c1574441c4fa0331a90bd4d6e7996c5Timo Sirainen# When copying a message, do it with hard links whenever possible. This makes
0cea9b1f4fa0495a48f5f097e40492517d67e1baTimo Sirainen# the performance much better, and it's unlikely to have any side effects.
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen#maildir_copy_with_hardlinks = yes
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# When copying a message, try to preserve the base filename. Only if the
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# destination mailbox already contains the same name (ie. the mail is being
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# copied there twice), a new name is given. The destination filename check is
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# done only by looking at dovecot-uidlist file, so if something outside
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# Dovecot does similar filename preserving copies, you may run into problems.
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# NOTE: This setting requires maildir_copy_with_hardlinks = yes to work.
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen#maildir_copy_preserve_filename = no
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen## mbox-specific settings
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# Which locking methods to use for locking mbox. There are four available:
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# dotlock: Create <mailbox>.lock file. This is the oldest and most NFS-safe
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# solution. If you want to use /var/mail/ like directory, the users
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# will need write access to that directory.
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# dotlock_try: Same as dotlock, but if it fails because of permissions or
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# because there isn't enough disk space, just skip it.
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# fcntl : Use this if possible. Works with NFS too if lockd is used.
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# flock : May not exist in all systems. Doesn't work with NFS.
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# lockf : May not exist in all systems. Doesn't work with NFS.
2af769daebd83719ac696a440e06f6020471cec0Timo Sirainen# You can use multiple locking methods; if you do the order they're declared
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# in is important to avoid deadlocks if other MTAs/MUAs are using multiple
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# locking methods as well. Some operating systems don't allow using some of
d9fdacd5fb3e07997e5c389739d2054f0c8441d8Timo Sirainen# them simultaneously.
d9fdacd5fb3e07997e5c389739d2054f0c8441d8Timo Sirainen#mbox_read_locks = fcntl
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen#mbox_write_locks = dotlock fcntl
cc833a7a4e2258afdc834ace4bfe6579820a1df3Timo Sirainen# Maximum time in seconds to wait for lock (all of them) before aborting.
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen#mbox_lock_timeout = 300
d9fdacd5fb3e07997e5c389739d2054f0c8441d8Timo Sirainen# If dotlock exists but the mailbox isn't modified in any way, override the
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# lock file after this many seconds.
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen#mbox_dotlock_change_timeout = 120
5bdad39213d28ab35e615a7f4ea1712ab25b6a80Timo Sirainen# When mbox changes unexpectedly we have to fully read it to find out what
5bdad39213d28ab35e615a7f4ea1712ab25b6a80Timo Sirainen# changed. If the mbox is large this can take a long time. Since the change
5bdad39213d28ab35e615a7f4ea1712ab25b6a80Timo Sirainen# is usually just a newly appended mail, it'd be faster to simply read the
d9fdacd5fb3e07997e5c389739d2054f0c8441d8Timo Sirainen# new mails. If this setting is enabled, Dovecot does this but still safely
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# fallbacks to re-reading the whole mbox file whenever something in mbox isn't
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# how it's expected to be. The only real downside to this setting is that if
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# some other MUA changes message flags, Dovecot doesn't notice it immediately.
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen# Note that a full sync is done with SELECT, EXAMINE, EXPUNGE and CHECK
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen#mbox_dirty_syncs = yes
d9fdacd5fb3e07997e5c389739d2054f0c8441d8Timo Sirainen# Like mbox_dirty_syncs, but don't do full syncs even with SELECT, EXAMINE,
d9fdacd5fb3e07997e5c389739d2054f0c8441d8Timo Sirainen# EXPUNGE or CHECK commands. If this is set, mbox_dirty_syncs is ignored.
d9fdacd5fb3e07997e5c389739d2054f0c8441d8Timo Sirainen#mbox_very_dirty_syncs = no
d9fdacd5fb3e07997e5c389739d2054f0c8441d8Timo Sirainen# Delay writing mbox headers until doing a full write sync (EXPUNGE and CHECK
d9fdacd5fb3e07997e5c389739d2054f0c8441d8Timo Sirainen# commands and when closing the mailbox). This is especially useful for POP3
d9fdacd5fb3e07997e5c389739d2054f0c8441d8Timo Sirainen# where clients often delete all mails. The downside is that our changes
2af769daebd83719ac696a440e06f6020471cec0Timo Sirainen# aren't immediately visible to other MUAs.
2af769daebd83719ac696a440e06f6020471cec0Timo Sirainen#mbox_lazy_writes = yes
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# If mbox size is smaller than this (in kilobytes), don't write index files.
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainen# If an index file already exists it's still read, just not updated.
df6478c4cf605bd81b3891c148b84c14eb6c4035Timo Sirainen#mbox_min_index_size = 0
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen## dbox-specific settings
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen# Maximum dbox file size in kilobytes until it's rotated.
6a8a4c9f530668cd8961b73d702856ed94f05f80Timo Sirainen#dbox_rotate_size = 2048
0d0451206a91e9f96e522075dce28a89adc2325dTimo Sirainen# Minimum dbox file size in kilobytes before it's rotated
0d0451206a91e9f96e522075dce28a89adc2325dTimo Sirainen# (overrides dbox_rotate_days)
ba482d3624ca4f1b3d638e6e8470ba5134f21493Timo Sirainen#dbox_rotate_min_size = 16
df6478c4cf605bd81b3891c148b84c14eb6c4035Timo Sirainen# Maximum dbox file age in days until it's rotated. Day always begins from
df6478c4cf605bd81b3891c148b84c14eb6c4035Timo Sirainen# midnight, so 1 = today, 2 = yesterday, etc. 0 = check disabled.
df6478c4cf605bd81b3891c148b84c14eb6c4035Timo Sirainen#dbox_rotate_days = 0
df6478c4cf605bd81b3891c148b84c14eb6c4035Timo Sirainen## IMAP specific settings
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen #login_executable = /usr/libexec/dovecot/imap-login
cf3bea6d9b57f8608bec22d98ad547a507b05f66Timo Sirainen # IMAP executable location. Changing this allows you to execute other
cf3bea6d9b57f8608bec22d98ad547a507b05f66Timo Sirainen # binaries before the imap process is executed.
e6e43b396799aa5704c679a3017d6c7195f9347dTimo Sirainen # This would write rawlogs into ~/dovecot.rawlog/ directory:
cf3bea6d9b57f8608bec22d98ad547a507b05f66Timo Sirainen # mail_executable = /usr/libexec/dovecot/rawlog /usr/libexec/dovecot/imap
cf3bea6d9b57f8608bec22d98ad547a507b05f66Timo Sirainen # This would attach gdb into the imap process and write backtraces into
2af769daebd83719ac696a440e06f6020471cec0Timo Sirainen # mail_executable = /usr/libexec/dovecot/gdbhelper /usr/libexec/dovecot/imap
df6478c4cf605bd81b3891c148b84c14eb6c4035Timo Sirainen # Maximum IMAP command line length in bytes. Some clients generate very long
df6478c4cf605bd81b3891c148b84c14eb6c4035Timo Sirainen # command lines with huge mailboxes, so you may need to raise this if you get
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen # "Too long argument" or "IMAP command line too large" errors often.
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen # Maximum number of IMAP connections allowed for a user from each IP address.
fd2f5fbc1f07aa93e2214a28cdf02437fb7d06c8Timo Sirainen # NOTE: The username is compared compared case-sensitively.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen # Support for dynamically loadable plugins. mail_plugins is a space separated
114a0f74e0f825c6bd8aeadfafb248a030762a1fTimo Sirainen # Send IMAP capabilities in greeting message. This makes it unnecessary for
114a0f74e0f825c6bd8aeadfafb248a030762a1fTimo Sirainen # clients to request it with CAPABILITY command, so it saves one round-trip.
114a0f74e0f825c6bd8aeadfafb248a030762a1fTimo Sirainen # Many clients however don't understand it and ask the CAPABILITY anyway.
72cbf33ae81fde08384d30c779ff540752d9256cTimo Sirainen # Send EXISTS/RECENT new mail notifications only when replying to NOOP
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen # and CHECK commands. Some clients ignore them otherwise, for example OSX
72cbf33ae81fde08384d30c779ff540752d9256cTimo Sirainen # Mail (<v2.1). Outlook Express breaks more badly though, without this it
72cbf33ae81fde08384d30c779ff540752d9256cTimo Sirainen # may show user "Message no longer in server" errors. Note that OE6 still
72cbf33ae81fde08384d30c779ff540752d9256cTimo Sirainen # breaks even with this workaround if synchronization is set to
3697080532ccd9f51fac108be6079b616c7a2ddfTimo Sirainen # Outlook and Outlook Express never abort IDLE command, so if no mail
3697080532ccd9f51fac108be6079b616c7a2ddfTimo Sirainen # arrives in half a hour, Dovecot closes the connection. This is still
1a21e7049796c98d6d998fcf7a438d7a97193dc4Timo Sirainen # fine, except Outlook doesn't connect back so you don't see if new mail
58be9d6bcc3800f5b3d76a064ee767fbe31a5a8aTimo Sirainen # Netscape 4.x breaks if message headers don't end with the empty "end of
72cbf33ae81fde08384d30c779ff540752d9256cTimo Sirainen # headers" line. Normally all messages have this, but setting this
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen # workaround makes sure that Netscape never breaks by adding the line if
72cbf33ae81fde08384d30c779ff540752d9256cTimo Sirainen # it doesn't exist. This is done only for FETCH BODY[HEADER.FIELDS..]
1a21e7049796c98d6d998fcf7a438d7a97193dc4Timo Sirainen # commands. Note that RFC says this shouldn't be done.
72cbf33ae81fde08384d30c779ff540752d9256cTimo Sirainen # With mbox storage a mailbox can contain either mails or submailboxes,
1a21e7049796c98d6d998fcf7a438d7a97193dc4Timo Sirainen # but not both. Thunderbird separates these two by forcing server to
58be9d6bcc3800f5b3d76a064ee767fbe31a5a8aTimo Sirainen # accept '/' suffix in mailbox names in subscriptions list.
a817fdcc43aedf423e2134091d5f83f91d64bcc9Timo Sirainen## POP3 specific settings
4bbee99b3aef449a9a2a11a5b5cf1ca486915c49Timo Sirainen #login_executable = /usr/libexec/dovecot/pop3-login
72cbf33ae81fde08384d30c779ff540752d9256cTimo Sirainen # POP3 executable location. See IMAP's mail_executable above for examples
a817fdcc43aedf423e2134091d5f83f91d64bcc9Timo Sirainen # Don't try to set mails non-recent or seen with POP3 sessions. This is
62cfc346eb7b0a4fd9e1ab6edd63b98711161229Timo Sirainen # mostly intended to reduce disk I/O. With maildir it doesn't move files
62cfc346eb7b0a4fd9e1ab6edd63b98711161229Timo Sirainen # from new/ to cur/, with mbox it doesn't write Status-header.
a817fdcc43aedf423e2134091d5f83f91d64bcc9Timo Sirainen # Support LAST command which exists in old POP3 specs, but has been removed
a817fdcc43aedf423e2134091d5f83f91d64bcc9Timo Sirainen # from new ones. Some clients still wish to use this though. Enabling this
a817fdcc43aedf423e2134091d5f83f91d64bcc9Timo Sirainen # makes RSET command clear all \Seen flags from messages.
72cbf33ae81fde08384d30c779ff540752d9256cTimo Sirainen # If mail has X-UIDL header, use it as the mail's UIDL.
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen # Keep the mailbox locked for the entire POP3 session.
51b979b6414b940f04677a7e2d064be119345954Timo Sirainen # POP3 UIDL (unique mail identifier) format to use. You can use following
d9fdacd5fb3e07997e5c389739d2054f0c8441d8Timo Sirainen # variables, along with the variable modifiers described in
a817fdcc43aedf423e2134091d5f83f91d64bcc9Timo Sirainen # doc/wiki/Variables.txt (e.g. %Uf for the filename in uppercase)
dbd9604da561399cc6255289d5b6f6f662ab2d00Timo Sirainen # %m - MD5 sum of the mailbox headers in hex (mbox only)
dbd9604da561399cc6255289d5b6f6f662ab2d00Timo Sirainen # If you want UIDL compatibility with other POP3 servers, use:
dbd9604da561399cc6255289d5b6f6f662ab2d00Timo Sirainen # Courier : %f or %v-%u (both might be used simultaneosly)
9566c1b4506d49778659e3dc65997f3c0399cb7eTimo Sirainen # Note that Outlook 2003 seems to have problems with %v.%u format which was
9566c1b4506d49778659e3dc65997f3c0399cb7eTimo Sirainen # Dovecot's default, so if you're building a new server it would be a good
9566c1b4506d49778659e3dc65997f3c0399cb7eTimo Sirainen # idea to change this. %08Xu%08Xv should be pretty fail-safe.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen # %p - number of bytes sent to client as a result of TOP command
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen # %b - number of bytes sent to client as a result of RETR command
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen # %s - mailbox size in bytes (before deletion)
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen #pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen # Maximum number of POP3 connections allowed for a user from each IP address.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen # NOTE: The username is compared compared case-sensitively.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen # Support for dynamically loadable plugins. mail_plugins is a space separated
0f66f12eb4cdbf47670975044c88d8f388bf92dfTimo Sirainen # Outlook and Outlook Express hang if mails contain NUL characters.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen # This setting replaces them with 0x80 character.
#auth_executable = /usr/libexec/dovecot/dovecot-auth
# default (usually /etc/krb5.keytab) if not specified.
# path = /var/run/dovecot/auth-master