1 { lib, pkgs, config, ... }:
3 sieve_bin = pkgs.runCommand "sieve_bin" {
4 buildInputs = [ pkgs.makeWrapper ];
6 cp -a ${./sieve_bin} $out
10 wrapProgram "$i" --prefix PATH : ${lib.makeBinPath [ pkgs.coreutils ]}
15 config = lib.mkIf config.myServices.mail.enable {
16 systemd.services.dovecot2.serviceConfig.Slice = "mail.slice";
17 services.duplyBackup.profiles.mail.excludeFile = ''
21 secrets.keys."dovecot/ldap" = {
22 user = config.services.dovecot2.user;
23 group = config.services.dovecot2.group;
26 hosts = ${config.myEnv.mail.dovecot.ldap.host}
29 dn = ${config.myEnv.mail.dovecot.ldap.dn}
30 dnpass = ${config.myEnv.mail.dovecot.ldap.password}
36 base = ${config.myEnv.mail.dovecot.ldap.base}
39 pass_filter = ${config.myEnv.mail.dovecot.ldap.filter}
40 pass_attrs = ${config.myEnv.mail.dovecot.ldap.pass_attrs}
42 user_attrs = ${config.myEnv.mail.dovecot.ldap.user_attrs}
43 user_filter = ${config.myEnv.mail.dovecot.ldap.filter}
44 iterate_attrs = ${config.myEnv.mail.dovecot.ldap.iterate_attrs}
45 iterate_filter = ${config.myEnv.mail.dovecot.ldap.iterate_filter}
51 uid = config.ids.uids.vhost;
53 users.groups.vhost.gid = config.ids.gids.vhost;
55 # https://blog.zeninc.net/index.php?post/2018/04/01/Un-annuaire-pour-les-gouverner-tous.......
62 protocols = [ "sieve" ];
64 pkgs.dovecot_pigeonhole
65 pkgs.dovecot_fts-xapian
69 createMailUser = false;
71 Trash = { auto = "subscribe"; specialUse = "Trash"; };
72 Junk = { auto = "subscribe"; specialUse = "Junk"; };
73 Sent = { auto = "subscribe"; specialUse = "Sent"; };
74 Drafts = { auto = "subscribe"; specialUse = "Drafts"; };
76 mailLocation = "mbox:~/Mail:INBOX=~/Mail/Inbox:INDEX=~/.imap";
77 sslServerCert = "/var/lib/acme/mail/fullchain.pem";
78 sslServerKey = "/var/lib/acme/mail/key.pem";
79 sslCACert = "/var/lib/acme/mail/fullchain.pem";
80 extraConfig = builtins.concatStringsSep "\n" [
81 # For printer which doesn’t support elliptic curve
83 ssl_alt_cert = </var/lib/acme/mail-rsa/fullchain.pem
84 ssl_alt_key = </var/lib/acme/mail-rsa/key.pem
88 postmaster_address = postmaster@immae.eu
89 mail_attribute_dict = file:%h/dovecot-attributes
90 imap_idle_notify_interval = 20 mins
101 mail_plugins = $mail_plugins acl
103 acl = vfile:${pkgs.writeText "dovecot-acl" ''
106 acl_globals_only = yes
112 # needs to be bigger than any mailbox size
113 default_vsz_limit = 2GB
114 mail_plugins = $mail_plugins fts fts_xapian
116 plugin = fts fts_xapian
118 fts_xapian = partial=2 full=20
120 fts_autoindex_exclude = \Junk
121 fts_autoindex_exclude2 = \Trash
122 fts_autoindex_exclude3 = Virtual/*
127 # https://docs.iredmail.org/dovecot.imapsieve.html
129 # imap_sieve plugin added below
132 sieve_plugins = sieve_imapsieve sieve_extprograms
133 imapsieve_url = sieve://127.0.0.1:4190
135 sieve_before = file:${./sieve_scripts}/backup.sieve;bindir=/var/lib/vhost/.sieve_bin
137 # From elsewhere to Junk folder
138 imapsieve_mailbox1_name = Junk
139 imapsieve_mailbox1_causes = COPY APPEND
140 imapsieve_mailbox1_before = file:${./sieve_scripts}/report_spam.sieve;bindir=/var/lib/vhost/.imapsieve_bin
142 # From Junk folder to elsewhere
143 imapsieve_mailbox2_name = *
144 imapsieve_mailbox2_from = Junk
145 imapsieve_mailbox2_causes = COPY
146 imapsieve_mailbox2_before = file:${./sieve_scripts}/report_ham.sieve;bindir=/var/lib/vhost/.imapsieve_bin
148 # From anywhere to NoJunk folder
149 imapsieve_mailbox3_name = NoJunk
150 imapsieve_mailbox3_causes = COPY APPEND
151 imapsieve_mailbox3_before = file:${./sieve_scripts}/report_ham.sieve;bindir=/var/lib/vhost/.imapsieve_bin
153 sieve_pipe_bin_dir = ${sieve_bin}
155 sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.environment
163 inet_listener imaps {
169 inet_listener pop3s {
177 unix_listener auth-userdb {
179 unix_listener ${config.services.postfix.config.queue_directory}/private/auth {
183 service auth-worker {
190 unix_listener stats-reader {
195 unix_listener stats-writer {
205 first_valid_uid = ${toString config.ids.uids.vhost}
206 disable_plaintext_auth = yes
209 args = ${config.secrets.fullPaths."dovecot/ldap"}
213 args = ${config.secrets.fullPaths."dovecot/ldap"}
219 mail_plugins = $mail_plugins zlib
229 sieve = file:~/sieve;bindir=~/.sieve-bin;active=~/.dovecot.sieve
231 service managesieve-login {
233 service managesieve {
239 mail_plugins = $mail_plugins virtual
242 location = virtual:~/Virtual
246 # Protocol specific configuration
247 # Needs to come last if there are mail_plugins entries
250 mail_plugins = $mail_plugins imap_sieve imap_acl
253 mail_plugins = $mail_plugins sieve
258 networking.firewall.allowedTCPPorts = [ 110 143 993 995 4190 ];
259 system.activationScripts.dovecot = {
262 install -m 0755 -o vhost -g vhost -d /var/lib/vhost
266 services.cron.systemCronJobs = let
267 cron_script = pkgs.writeScriptBin "cleanup-imap-folders" ''
268 ${pkgs.dovecot}/bin/doveadm expunge -A MAILBOX "Backup/*" NOT FLAGGED BEFORE 8w 2>&1 > /dev/null | grep -v "Mailbox doesn't exist:" | grep -v "Info: Opening DB"
269 ${pkgs.dovecot}/bin/doveadm expunge -A MAILBOX Junk SEEN NOT FLAGGED BEFORE 4w 2>&1 > /dev/null | grep -v "Mailbox doesn't exist:" | grep -v "Info: Opening DB"
270 ${pkgs.dovecot}/bin/doveadm expunge -A MAILBOX Trash NOT FLAGGED BEFORE 4w 2>&1 > /dev/null | grep -v "Mailbox doesn't exist:" | grep -v "Info: Opening DB"
274 "0 2 * * * root ${cron_script}/bin/cleanup-imap-folders"
276 security.acme.certs."mail-rsa" = {
278 systemctl restart dovecot2.service
281 "imap.immae.eu" = null;
282 "pop3.immae.eu" = null;
285 security.acme.certs."mail" = {
287 systemctl restart dovecot2.service
290 "imap.immae.eu" = null;
291 "pop3.immae.eu" = null;