Subversion Repositories configs

Rev

Details | Last modification | View Log | RSS feed

Rev Author Line No. Line
192 - 1 
#default_process_limit = 100
2 
#default_client_limit = 1000
3 
 
4 
# Default VSZ (virtual memory size) limit for service processes. This is mainly
5 
# intended to catch and kill processes that leak memory before they eat up
6 
# everything.
7 
#default_vsz_limit = 256M
8 
 
9 
# Login user is internally used by login processes. This is the most untrusted
10 
# user in Dovecot system. It shouldn't have access to anything at all.
11 
#default_login_user = dovenull
12 
 
13 
# Internal user is used by unprivileged processes. It should be separate from
14 
# login user, so that login processes can't disturb other processes.
15 
#default_internal_user = dovecot
16 
 
17 
service imap-login {
18 
  inet_listener imap {
19 
    #port = 143
20 
  }
21 
  inet_listener imaps {
22 
    #port = 993
23 
    #ssl = yes
24 
  }
25 
 
26 
  # Number of connections to handle before starting a new process. Typically
27 
  # the only useful values are 0 (unlimited) or 1. 1 is more secure, but 0
28 
  # is faster. <doc/wiki/LoginProcess.txt>
29 
  #service_count = 1
30 
 
31 
  # Number of processes to always keep waiting for more connections.
32 
  #process_min_avail = 0
33 
 
34 
  # If you set service_count=0, you probably need to grow this.
35 
  #vsz_limit = $default_vsz_limit
36 
}
37 
 
38 
service pop3-login {
39 
  inet_listener pop3 {
40 
    #port = 110
41 
  }
42 
  inet_listener pop3s {
43 
    #port = 995
44 
    #ssl = yes
45 
  }
46 
}
47 
 
48 
service submission-login {
49 
  inet_listener submission {
50 
    #port = 587
51 
  }
52 
}
53 
 
54 
service lmtp {
55 
  unix_listener /var/spool/postfix/private/dovecot-lmtp {
56 
    mode = 0600
57 
    user = postfix
58 
    group = postfix
59 
  }
60 
  # Create inet listener only if you can't use the above UNIX socket
61 
  #inet_listener lmtp {
62 
    # Avoid making LMTP visible for the entire internet
63 
    #address =
64 
    #port =
65 
  #}
66 
}
67 
 
68 
service imap {
69 
  # Most of the memory goes to mmap()ing files. You may need to increase this
70 
  # limit if you have huge mailboxes.
71 
  #vsz_limit = $default_vsz_limit
72 
 
73 
  # Max. number of IMAP processes (connections)
74 
  #process_limit = 1024
75 
}
76 
 
77 
service pop3 {
78 
  # Max. number of POP3 processes (connections)
79 
  #process_limit = 1024
80 
}
81 
 
82 
service submission {
83 
  # Max. number of SMTP Submission processes (connections)
84 
  #process_limit = 1024
85 
}
86 
 
87 
service auth {
88 
  # auth_socket_path points to this userdb socket by default. It's typically
89 
  # used by dovecot-lda, doveadm, possibly imap process, etc. Users that have
90 
  # full permissions to this socket are able to get a list of all usernames and
91 
  # get the results of everyone's userdb lookups.
92 
  #
93 
  # The default 0666 mode allows anyone to connect to the socket, but the
94 
  # userdb lookups will succeed only if the userdb returns an "uid" field that
95 
  # matches the caller process's UID. Also if caller's uid or gid matches the
96 
  # socket's uid or gid the lookup succeeds. Anything else causes a failure.
97 
  #
98 
  # To give the caller full permissions to lookup all users, set the mode to
99 
  # something else than 0666 and Dovecot lets the kernel enforce the
100 
  # permissions (e.g. 0777 allows everyone full permissions).
101 
  unix_listener /var/spool/postfix/private/auth {
102 
    mode = 0600
103 
    user = postfix
104 
    group = postfix
105 
  }
106 
 
107 
  # Postfix smtp-auth
108 
  #unix_listener /var/spool/postfix/private/auth {
109 
  #  mode = 0666
110 
  #}
111 
 
112 
  # Auth process is run as this user.
113 
  #user = $default_internal_user
114 
}
115 
 
116 
service auth-worker {
117 
  # Auth worker process is run as root by default, so that it can access
118 
  # /etc/shadow. If this isn't necessary, the user should be changed to
119 
  # $default_internal_user.
120 
  #user = root
121 
}
122 
 
123 
service dict {
124 
  # If dict proxy is used, mail processes should have access to its socket.
125 
  # For example: mode=0660, group=vmail and global mail_access_groups=vmail
126 
  unix_listener dict {
127 
    #mode = 0600
128 
    #user =
129 
    #group =
130 
  }
131 
}