rmails 0.1.1

data/system/dist/dovecot/dovecot-sql.conf.ext.erb

@@ -0,0 +1,14 @@
+driver = pgsql
+connect = <%= "host=#{host} dbname=#{name} user=#{user} password=#{password}" %>
+
+default_pass_scheme = SHA512 # PLAIN-MD5
+
+user_query = SELECT \
+  '/var/mail/%d/%n/Maildir' AS userdb_home, \
+#  5000 AS uid, 5000 AS gid, \
+  CONCAT('*:storage=',quota_kb,':messages=',quota_messages) AS quota_rule \
+  FROM virtual_users WHERE email='%u';
+
+password_query = SELECT \
+  email as user, encrypted_password as password \
+  FROM virtual_users WHERE email='%u';

data/system/dist/dovecot/dovecot.conf.erb

@@ -0,0 +1,297 @@
+postmaster_address = <%= begin;postmaster ;end; %>
+protocols = <%= protocols %> lmtp sieve
+
+mail_plugins = quota autocreate
+
+##
+## Authentication processes
+##
+
+disable_plaintext_auth = <%= begin;disable_plaintext_auth;rescue;'no';end; %>
+
+
+# XXX
+# Authentication cache size (e.g. 10M). 0 means it's disabled. Note that
+# bsdauth, PAM and vpopmail require cache_key to be set for caching to be used.
+#auth_cache_size = 0
+#auth_cache_ttl = 1 hour
+# TTL for negative hits (user not found, password mismatch).
+# 0 disables caching them completely.
+#auth_cache_negative_ttl = 1 hour
+# XXX
+
+#auth_realms =
+#auth_default_realm =
+auth_username_chars = <%= begin;auth_username_chars ;rescue;'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@' ;end; %>
+#auth_username_translation =
+auth_username_format = %Lu
+auth_worker_max_count = <%= begin;auth_worker_max_count ;rescue;'30' ;end; %>
+
+# Require a valid SSL client certificate or the authentication fails.
+#auth_ssl_require_client_cert = no
+# XXX
+auth_mechanisms = <%= begin;auth_mechanisms ;rescue;'plain' ;end; %>
+
+
+##
+## Director-specific settings.
+##
+
+#service imap-login {
+#  executable = imap-login director
+#}
+#service pop3-login {
+#  executable = pop3-login director
+#}
+
+
+
+## XXX
+## Log destination.
+##
+
+# Log file to use for error messages. "syslog" logs to syslog,
+# /dev/stderr logs to stderr.
+log_path = /var/log/dovecot.log
+
+# Log file to use for informational messages. Defaults to log_path.
+info_log_path = /var/log/dovecot.info
+# Log file to use for debug messages. Defaults to info_log_path.
+debug_log_path = /var/log/dovecot.debug
+
+##
+## Logging verbosity and debugging.
+##
+
+# Log unsuccessful authentication attempts and the reasons why they failed.
+auth_verbose = <%= begin;auth_verbose ;rescue;'no' ;end; %>
+
+# Even more verbose logging for debugging purposes. Shows for example SQL
+# queries. XXX XXX XXX XXX XXX XXX XXX XXX
+auth_debug = yes
+auth_debug_passwords=yes
+mail_debug = yes
+verbose_ssl = yes
+auth_verbose_passwords=plain
+
+login_log_format_elements = user=|%u| method=%m rip=%r lip=%l mpid=%e %c
+
+##
+## Mailbox locations and namespaces
+##
+
+mail_location = maildir:/var/mail/%d/%n/Maildir:INDEX=/var/mail/%d/%n/indexes
+
+namespace inbox {
+  # Namespace type: private, shared or public
+  type = private
+  separator = .
+
+  #prefix =
+  #location =
+  inbox = yes
+  #hidden = no
+  #list = yes
+  #subscriptions = yes
+}
+
+## TODO
+# System user and group used to access mails. If you use multiple, userdb
+# can override these by returning uid or gid fields. You can use either numbers
+# or names. <doc/wiki/UserIds.txt>
+mail_uid = 8
+mail_gid = 12
+
+first_valid_uid = 8
+last_valid_uid = 8
+
+first_valid_gid = 12
+last_valid_gid = 12
+
+mail_full_filesystem_access = no
+
+##
+## Mail processes
+##
+
+auth_socket_path = /var/run/dovecot/auth-userdb
+mail_cache_min_mail_count = <%= begin;mail_cache_min_mail_count ;rescue;'0' ;end; %>
+maildir_very_dirty_syncs = yes
+#default_vsz_limit = 256M
+default_internal_user = mail
+
+service imap-login {
+  inet_listener imap {
+    # imap_login__listener__port !!DO NOT REMOVE THIS LINE!!
+    port = <%= begin; imap_login__listener__port ;rescue;'143' ;end; %>
+  }
+  inet_listener imaps {
+    # imaps_login__listener__port !!DO NOT REMOVE THIS LINE!!
+    port = <%= begin; imaps_login__listener__port ;rescue;'993' ;end; %>
+    #ssl = yes
+  }
+  vsz_limit = $default_vsz_limit
+}
+
+service pop3-login {
+  inet_listener pop3 {
+    # pop3_login__listener__port !!DO NOT REMOVE THIS LINE!!
+    port = <%= begin; pop3_login__listener__port ;rescue;'110' ;end; %>
+  }
+  inet_listener pop3s {
+    # pop3s_login__listener__port !!DO NOT REMOVE THIS LINE!!
+    port = <%= begin; pop3s_login__listener__port ;rescue;'995' ;end; %>
+    ssl = yes
+  }
+}
+
+service lmtp {
+  unix_listener /var/spool/postfix/private/dovecot-lmtp {
+    mode = 0600
+    user = postfix
+    group = postfix
+  }
+}
+
+service imap {
+  #vsz_limit = $default_vsz_limit
+  # imap__process_limit  !!DO NOT REMOVE THIS LINE!!
+  process_limit = <%= begin; imap__process_limit ;rescue;'1024' ;end; %>
+}
+
+service pop3 {
+  # pop3__process_limit   !!DO NOT REMOVE THIS LINE!!
+  process_limit = <%= begin; pop3__process_limit ;rescue;'1024' ;end; %>
+}
+
+service auth {
+  unix_listener auth-userdb {
+    mode = 0600
+    user = mail
+    group = mail
+  }
+
+  # Postfix smtp-auth
+  unix_listener /var/spool/postfix/private/auth {
+    mode = 0666
+    user = postfix
+    group = postfix
+  }
+}
+
+service auth-worker {
+  user = $default_internal_user
+}
+
+service dict {
+  # If dict proxy is used, mail processes should have access to its socket.
+  # For example: mode=0660, group=vmail and global mail_access_groups=vmail
+  unix_listener dict {
+    #mode = 0600
+    #user =
+    #group =
+  }
+}
+
+##
+## ManageSieve specific settings
+##
+
+service managesieve-login {
+  inet_listener sieve {
+    port = 4190
+  }
+}
+
+service managesieve {
+  #process_count = 1024
+}
+
+##
+## SSL settings
+##
+
+# SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt>
+ssl = no
+
+ssl_cert = </etc/ssl/certs/dovecot.pem
+ssl_key = </etc/ssl/private/dovecot.pem
+
+
+##
+## LDA specific settings (also used by LMTP)
+##
+
+quota_full_tempfail = <%= begin;quota_full_tempfail;rescue;'no' ;end; %>
+
+# Subject: header to use for rejection mails. You can use the same variables
+# as for rejection_reason below.
+rejection_subject = <%= begin;rejection_subject;rescue;'Rejected: %s' ;end; %>
+# Human readable error message for rejection mails. You can use variables:
+#  %n = CRLF, %r = reason, %s = original subject, %t = recipient
+rejection_reason = <%= begin;rejection_reason;rescue;'Your message to %t was automatically rejected:%n%r' ;end; %>
+
+#recipient_delimiter = +
+lda_mailbox_autocreate = no
+lda_mailbox_autosubscribe = no
+
+
+# Enable director for LMTP proxying:
+protocol lmtp {
+  auth_socket_path = director-userdb
+  mail_plugins = $mail_plugins mail_log sieve
+}
+protocol lda {
+  mail_plugins = $mail_plugins
+}
+protocol imap {
+  mail_plugins = $mail_plugins imap_quota
+}
+protocol pop3 {
+  mail_plugins = $mail_plugins
+}
+
+##
+## Quota limits
+##
+
+plugin {
+  quota = maildir:User quota
+  quota_rule = *:storage=<%= begin;storage[:size] ;end; %>
+  quota_rule2 = Trash:storage=<%= begin;storage[:trash] ;end; %>
+  quota_rule3 = Spam:storage=<%= begin;storage[:spam] ;end; %>
+}
+
+plugin {
+  sieve = ~/.sieve
+  sieve_dir = ~/sieve
+}
+
+plugin {
+  autocreate = INBOX.Trash
+  autocreate2 = INBOX.Drafts
+  autocreate3 = INBOX.Sent
+  autocreate4 = INBOX.Spam
+  autosubscribe = INBOX.Trash
+  autosubscribe2 = INBOX.Drafts
+  autosubscribe3 = INBOX.Sent
+  autosubscribe4 = INBOX.Spam
+  mail_log_events = delete mailbox_delete
+  mail_log_fields = uid box msgid size flags vsize from subject
+}
+
+
+
+# Authentication for SQL users. Included from auth.conf.
+#
+# <doc/wiki/AuthDatabase.SQL.txt>
+
+passdb {
+  driver = sql
+  args = /etc/dovecot/dovecot-sql.conf.ext
+}
+
+userdb {
+  driver = sql
+  args = /etc/dovecot/dovecot-sql.conf.ext
+}

data/system/dist/dovecot/old_dovecot.conf.erb

@@ -0,0 +1,63 @@
+protocols = <%= protocols %> sieve
+
+protocol imap {
+  mail_plugins = autocreate quota imap_quota
+}
+
+protocol pop3 {
+  mail_plugins = autocreate quota
+  listen = *:110
+  ssl_listen = *:995
+}
+
+protocol lda {
+  auth_socket_path = /var/run/dovecot/auth-master
+  postmaster_address = <%= postmaster %>
+  mail_plugins = sieve quota
+  log_path =
+}
+
+ssl = yes
+ssl_cert_file = /etc/ssl/certs/dovecot.pem
+ssl_key_file = /etc/ssl/private/dovecot.pem
+#ssl_parameters_regenerate = 168
+
+quota = maildir:User quota
+quota_rule = *:storage=<%= storage[:size] %>
+quota_rule2 = Trash:storage=<%= storage[:trash] %>
+quota_rule = Spam:storage=<%= storage[:spam] %>
+
+mail_location = maildir:/var/vmail/%d/%n/Maildir
+
+namespace private {
+     separator = .
+     inbox = yes
+}
+
+auth default {
+  mechanisms = plain
+  passdb sql {
+    args = /etc/dovecot/dovecot-sql.conf
+  }
+  userdb sql {
+    args = /etc/dovecot/dovecot-sql.conf
+  }
+  !include_try /etc/dovecot/auth.d/*.auth
+}
+
+auth external {
+  socket connect {
+    master {
+      path = /var/run/dovecot/auth-master
+      mode = 0600
+      user = vmail
+    }
+    client {
+      path = /var/spool/postfix/private/auth
+      mode = 0600
+      user = postfix
+      group = postfix
+    }
+  }
+}
+

data/system/dist/dspam/conf.erb

@@ -0,0 +1,96 @@
+Home /var/spool/dspam
+OnFail error
+
+Trust root
+Trust vmail
+Trust mail
+Trust dspam
+
+# send scanned mails via smtp back to postfix
+DeliveryProto SMTP
+DeliveryHost  127.0.0.1
+DeliveryPort  7711 # <%#= delivery_port %>
+DeliveryIdent localhost
+
+# run dspam server on socket
+ServerMode             auto
+ServerParameters       "--deliver=innocent,spam"
+ServerIdent            "<%= hostname %>"
+ServerPID              /var/run/dspam/dspam.pid
+ServerDomainSocketPath /var/run/dspam/dspam.sock
+
+
+WebStats                off
+TrainingMode            teft
+TestConditionalTraining on
+Tokenizer               chain
+Feature                 chained
+Feature                 whitelist
+Feature                 tb=5
+Algorithm               graham burton
+PValue                  graham
+ImprobabilityDrive      on
+
+# deliver spam to mailbox (filter it with sieve)
+Preference "spamAction=deliver"
+Preference "signatureLocation=headers"  # 'message' or 'headers'
+Preference "showFactors=on"
+Preference "whitelistThreshold=10"
+Preference "statisticalSedation=5"
+
+
+AllowOverride trainingMode
+AllowOverride spamAction spamSubject
+AllowOverride statisticalSedation
+AllowOverride enableBNR
+AllowOverride enableWhitelist
+AllowOverride signatureLocation
+AllowOverride showFactors
+AllowOverride optIn optOut
+AllowOverride whitelistThreshold
+
+Notifications off
+
+#
+# PostgreSQL
+#
+# Socket Method
+#
+PgSQLServer    127.0.0.1
+PgSQLPort	     <%= database_port %>
+PgSQLUser      <%= database_user %>
+PgSQLPass      <%= database_pass %>
+PgSQLDb        <%= database %>
+PgSQLConnectionCache    30
+PgSQLUIDInSignature     on
+
+HashRecMax          98317
+HashAutoExtend      on
+HashMaxExtents      0
+HashExtentSize      49157
+HashMaxSeek         100
+HashConnectionCache 10
+
+#
+# Purge configuration for SQL-based installations using purge.sql
+#
+PurgeSignature 14
+PurgeNeutral   90
+PurgeUnused    90
+PurgeHapaxes   30
+PurgeHits1S    15
+PurgeHits1I    15
+
+LocalMX 127.0.0.1
+SystemLog         on
+ParseToHeaders    on
+ChangeModeOnParse on
+ChangeUserOnParse full
+
+#ProcessorBias on
+#UserLog   on
+#TrainPristine off
+#Opt out
+#Broken case
+#Broken lineStripping
+