1 { lib, pkgs, config, myconfig, ... }:
3 sieve_bin = pkgs.runCommand "sieve_bin" {
4 buildInputs = [ pkgs.makeWrapper ];
6 cp -a ${./sieve_bin} $out
10 wrapProgram "$i" --prefix PATH : ${lib.makeBinPath [ pkgs.coreutils ]}
15 config = lib.mkIf config.myServices.mail.enable {
16 services.duplyBackup.profiles.mail.excludeFile = ''
22 dest = "dovecot/ldap";
23 user = config.services.dovecot2.user;
24 group = config.services.dovecot2.group;
27 hosts = ${myconfig.env.mail.dovecot.ldap.host}
30 dn = ${myconfig.env.mail.dovecot.ldap.dn}
31 dnpass = ${myconfig.env.mail.dovecot.ldap.password}
37 base = ${myconfig.env.mail.dovecot.ldap.base}
40 pass_filter = ${myconfig.env.mail.dovecot.ldap.filter}
41 pass_attrs = ${myconfig.env.mail.dovecot.ldap.pass_attrs}
43 user_attrs = ${myconfig.env.mail.dovecot.ldap.user_attrs}
44 user_filter = ${myconfig.env.mail.dovecot.ldap.filter}
45 iterate_attrs = ${myconfig.env.mail.dovecot.ldap.iterate_attrs}
46 iterate_filter = ${myconfig.env.mail.dovecot.ldap.iterate_filter}
53 uid = config.ids.uids.vhost;
55 users.groups.vhost.gid = config.ids.gids.vhost;
57 # https://blog.zeninc.net/index.php?post/2018/04/01/Un-annuaire-pour-les-gouverner-tous.......
64 protocols = [ "sieve" ];
66 pkgs.dovecot_pigeonhole
67 pkgs.dovecot_fts-xapian
71 createMailUser = false;
73 { name = "Trash"; auto = "subscribe"; specialUse = "Trash"; }
74 { name = "Junk"; auto = "subscribe"; specialUse = "Junk"; }
75 { name = "Sent"; auto = "subscribe"; specialUse = "Sent"; }
76 { name = "Drafts"; auto = "subscribe"; specialUse = "Drafts"; }
78 mailLocation = "mbox:~/Mail:INBOX=~/Mail/Inbox:INDEX=~/.imap";
79 sslServerCert = "/var/lib/acme/mail/fullchain.pem";
80 sslServerKey = "/var/lib/acme/mail/key.pem";
81 sslCACert = "/var/lib/acme/mail/fullchain.pem";
82 extraConfig = builtins.concatStringsSep "\n" [
84 postmaster_address = postmaster@immae.eu
85 mail_attribute_dict = file:%h/dovecot-attributes
86 imap_idle_notify_interval = 20 mins
97 # needs to be bigger than any mailbox size
98 default_vsz_limit = 2GB
99 mail_plugins = $mail_plugins fts fts_xapian
101 plugin = fts fts_xapian
103 fts_xapian = partial=2 full=20
105 fts_autoindex_exclude = \Junk
106 fts_autoindex_exclude2 = \Trash
107 fts_autoindex_exclude3 = Virtual/*
112 # https://docs.iredmail.org/dovecot.imapsieve.html
114 # imap_sieve plugin added below
117 sieve_plugins = sieve_imapsieve sieve_extprograms
118 imapsieve_url = sieve://127.0.0.1:4190
120 # From elsewhere to Junk folder
121 imapsieve_mailbox1_name = Junk
122 imapsieve_mailbox1_causes = COPY APPEND
123 imapsieve_mailbox1_before = file:${./sieve_scripts}/report_spam.sieve;bindir=/var/lib/vhost/.imapsieve_bin
125 # From Junk folder to elsewhere
126 imapsieve_mailbox2_name = *
127 imapsieve_mailbox2_from = Junk
128 imapsieve_mailbox2_causes = COPY
129 imapsieve_mailbox2_before = file:${./sieve_scripts}/report_ham.sieve;bindir=/var/lib/vhost/.imapsieve_bin
131 sieve_pipe_bin_dir = ${sieve_bin}
133 sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.environment
141 inet_listener imaps {
147 inet_listener pop3s {
155 unix_listener auth-userdb {
157 unix_listener ${config.services.postfix.config.queue_directory}/private/auth {
161 service auth-worker {
168 unix_listener stats-reader {
173 unix_listener stats-writer {
183 first_valid_uid = ${toString config.ids.uids.vhost}
184 disable_plaintext_auth = yes
187 args = ${config.secrets.fullPaths."dovecot/ldap"}
191 args = ${config.secrets.fullPaths."dovecot/ldap"}
197 mail_plugins = $mail_plugins zlib
207 sieve = file:~/sieve;bindir=~/.sieve-bin;active=~/.dovecot.sieve
209 service managesieve-login {
211 service managesieve {
217 mail_plugins = $mail_plugins virtual
220 location = virtual:~/Virtual
224 # Protocol specific configuration
225 # Needs to come last if there are mail_plugins entries
228 mail_plugins = $mail_plugins imap_sieve
231 mail_plugins = $mail_plugins sieve
236 networking.firewall.allowedTCPPorts = [ 110 143 993 995 4190 ];
237 system.activationScripts.dovecot = {
240 install -m 0755 -o vhost -g vhost -d /var/lib/vhost
244 services.cron.systemCronJobs = let
245 cron_script = pkgs.writeScriptBin "cleanup-imap-folders" ''
246 ${pkgs.dovecot}/bin/doveadm expunge -A MAILBOX "Backup/*" NOT UID 1:256
247 ${pkgs.dovecot}/bin/doveadm expunge -A MAILBOX Junk SEEN NOT FLAGGED BEFORE 4w
248 ${pkgs.dovecot}/bin/doveadm search -A MAILBOX Trash NOT FLAGGED BEFORE 4w
252 "0 2 * * * root ${cron_script}/bin/cleanup-imap-folders"
254 security.acme.certs."mail" = {
256 systemctl restart dovecot2.service
259 "imap.immae.eu" = null;
260 "pop3.immae.eu" = null;