Changeset 2c1b61a
- Timestamp:
- 11/30/17 00:15:29 (7 years ago)
- Branches:
- gcc484, master, perl-5.22
- Children:
- 94b5bc1
- Parents:
- 6165e17
- Files:
-
- 8 added
- 1 deleted
- 8 edited
Legend:
- Unmodified
- Added
- Removed
-
npl/mailserver/kopano_conf/root/etc/kopano/backup.cfg
r6165e17 r2c1b61a 1 ############################################################## 2 # SERVER SETTINGS 1 3 2 # Login to the Kopano server using this SSL Key 3 #sslkey_file = /etc/kopano/ssl/backup.pem 4 # Socket to find the connection to the storage server. 5 # Use https to reach servers over the network 6 #server_socket = file:///var/run/kopano/server.sock 7 8 # Login to the storage server using this SSL Key 9 #sslkey_file = /etc/kopano/ssl/search.pem 4 10 5 11 # The password of the SSL Key 6 #sslkey_pass = replace-with-server-cert-password12 #sslkey_pass = replace-with-server-cert-password 7 13 8 # Only backup stores from these servers. Leave blank for any server. 9 # Only used when backing up all users, or a full company. 10 backup_servers = 14 ############################################################## 15 # LOG SETTINGS 11 16 12 # Use multiple threads when backing up multiple stores. 13 threads = 1 17 # Logging method (syslog, file) 18 #log_method = file 19 20 # Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug)) 21 #log_level = 3 22 23 # Logfile for log_method = file, use '-' for stderr 24 #log_file = /var/log/kopano/backup.log 25 26 ############################################################## 27 # BACKUP SETTINGS 28 29 # maximum number of stores to backup in parallel 30 #worker_processes = 1 -
npl/mailserver/kopano_conf/root/etc/kopano/dagent.cfg
r6165e17 r2c1b61a 2 2 # DAGENT SETTINGS 3 3 4 # connection to the storage server 5 #server_socket = file:///var/run/kopano/server.sock 4 6 5 7 ############################################################## 6 8 # DAGENT SSL LOGIN SETTINGS 7 # 8 # Note: server_socket must be set to https://servername:portname/ kopano9 # 10 # Note: server_socket must be set to https://servername:portname/ 9 11 # to use this type of login method 10 12 11 # Login to the Kopanoserver using this SSL Key13 # Login to the storage server using this SSL Key 12 14 #sslkey_file = /etc/kopano/ssl/dagent.pem 13 15 … … 21 23 log_method = file 22 24 23 # Loglevel (0 =no logging, 5=full logging)24 log_level = 2 25 # Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug)) 26 #log_level = 3 25 27 26 28 # Logfile for log_method = file, use '-' for stderr 27 log_file = -28 29 log_file = /var/log/kopano/dagent.log 29 30 30 31 # Log timestamp - prefix each log line with timestamp in 'file' logging mode 31 32 log_timestamp = 1 33 34 # Log raw message to a file, please specify a username, 35 # separate users with a space, or use 'all' to log all 36 log_raw_message = no 37 38 # Log raw messages path 39 # consider mounting a `tmpfs' underneath this path 40 # note that MySQL may store (large) files under /tmp 41 log_raw_message_path = /tmp 42 43 # Buffer logging in what sized blocks. 0 for line-buffered (syslog-style). 44 #log_buffer_size = 0 45 46 # for temporary files 47 # consider mounting a `tmpfs' underneath this path (wherever you 48 # point it to) 49 tmp_path = /tmp 32 50 33 51 ############################################################## … … 36 54 37 55 # binding address for LMTP daemon 38 # change to 0.0.0.0 if you require connections over the network 39 server_bind = 127.0.0.1 56 # change to the empty string if you require connections on other addresses 57 #server_bind = 58 # Limit connections to address of interface (IPv6), 59 # or route path interface (IPv4). Leave empty for to indicate "all". 60 #server_bind_intf = 40 61 41 62 # LMTP port to listen on for LMTP connections … … 46 67 lmtp_max_threads = 20 47 68 48 # Process model for LMTP daemon, using pthreads (thread) or processes (fork)49 process_model = fork50 51 69 # run as specific user in LMTP mode. 52 # make sure this user is listed in local_admin_users in your kopanoserver config70 # make sure this user is listed in local_admin_users in your storage server config 53 71 # or use SSL connections with certificates to login 54 run_as_user = 72 #run_as_user = kopano 55 73 56 74 # run as specific group in LMTP mode. 57 run_as_group = 75 #run_as_group = kopano 58 76 77 # control pid file 78 #pid_file = /var/run/kopano/dagent.pid 79 80 # create memory coredumps upon crash [no, systemdefault, yes] 81 #coredump_enabled = systemdefault 59 82 60 83 # The following e-mail header will mark the mail as spam, so the mail … … 62 85 # The name is case insensitive. 63 86 # set to empty to not use this detection scheme. 64 spam_header_name = 87 #spam_header_name = X-Spam-Status 88 spam_header_name = 65 89 66 90 # If the above header is found, and contains the following value 67 91 # the mail will be considered as spam. 68 # Notes: 92 # Notes: 69 93 # - The value is case insensitive. 70 94 # - Leading and trailing spaces are stripped. 71 95 # - The word 'bayes' also contains the word 'yes'. 72 spam_header_value = No96 spam_header_value = Yes, 73 97 74 ### For debugging 75 # Log raw message to a file 76 log_raw_message = no 77 # Log raw messages path 78 log_raw_message_path = /tmp 98 # Whether dagent should filter HTML messages or not. Usually, WebApp takes 99 # care of this. Letting dagent do this improves the user latency a 100 # bit, but uses more disk space. (yes/no) 101 #html_safety_filter = no 79 102 103 ############################################################## 104 # DAGENT ARCHIVING SETTINGS 105 106 # Enable archive_on_delivery to automatically archive all incoming 80 107 # messages on delivery. 81 108 # This will do nothing if no archive is attached to the target mailbox. … … 84 111 ############################################################## 85 112 # DAGENT PLUGIN SETTINGS 113 86 114 # Enable the dagent plugin framework 87 plugin_enabled = no 115 plugin_enabled = yes 116 88 117 # Path to the dagent plugin manager 89 118 plugin_manager_path = /usr/share/kopano-dagent/python 119 90 120 # Path to the activated dagent plugins. 91 121 # This folder contains symlinks to the kopano plugins and custom scripts. The plugins are … … 97 127 plugin_path = /var/lib/kopano/dagent/plugins 98 128 129 ############################################################## 130 # DAGENT RULE SETTINGS 131 132 # Enable the addition of X-Kopano-Rule-Action headers on messages 133 # that have been forwarded or replied by a rule. 134 # Default: yes 135 set_rule_headers = yes 136 137 # Enable this option to prevent rules to cause a loop. An e-mail can only be forwarded 138 # once. When this option is enabled, the set_rule_headers option must also be enabled. 139 # Default: no 140 no_double_forward = no 141 142 # Some emails do not contain any charset information, or may wrongly specify 143 # us-ascii when they are not. If this option is set, mails which would normally 144 # be decoded as ASCII will have their content instead interpreted in the 145 # alternate character set specified here (which must also be ASCII compatible). 146 #default_charset = us-ascii 147 148 # A list of space-separated domains to which forwarding via a rule is allowed. 149 # The '*' matches zero or more characters, _including_ dots. 150 # Example: 151 # forward_whitelist_domains = kopano.com *.kopano.com 152 # 153 # Example: 154 # forward_whitelist_domains = kopano.com sub.kopano.com 155 # 156 #forward_whitelist_domains = * 157 158 # A custom-defined reply subject to the user with a rule forwarding to a 159 # domain not in forward_whitelist_domains. 160 #forward_whitelist_domain_subject = REJECT: %subject not forwarded (administratively blocked) 161 162 # A custom-defined reply message to the user with a rule forwarding to a 163 # domain not in forward_whitelist_domains. 164 #forward_whitelist_domain_message = The Kopano mail system has rejected your request to forward your e-mail with subject %subject (via mail filters) to %sender: the operation is not permitted.\n\nRemove the rule or contact your administrator about the forward_whitelist_domains setting. -
npl/mailserver/kopano_conf/root/etc/kopano/gateway.cfg
r6165e17 r2c1b61a 2 2 # GATEWAY SETTINGS 3 3 4 server_bind = 0.0.0.0 4 #server_bind = 5 5 6 # WARNING!! YOU MUST RUN KOPANO GATEWAY UNDER A DIFFERENT USER THAN THE SERVER PROCESS 6 # Please refer to the administrator manual or manpage why HTTP is used rather than the UNIX socket. 7 #server_socket = http://localhost:236/ 8 9 # Set this value to a name to show in the logon greeting to clients. 10 # Leave empty to use DNS to find this name. 11 server_hostname = 12 13 # Whether to show the hostname in the logon greeting to clients. 14 server_hostname_greeting = no 15 7 16 # drop privileges and run the process as this user 8 run_as_user = kopano-gateway 17 #run_as_user = kopano 9 18 10 19 # drop privileges and run the process as this group 11 run_as_group = kopano-gateway 20 #run_as_group = kopano 12 21 22 # create a pid file for stopping the service via the init.d scripts 23 #pid_file = /var/run/kopano/gateway.pid 13 24 14 25 # run server in this path (when not using the -F switch) 15 running_path = / 26 #running_path = /var/lib/kopano 27 28 # create memory coredumps upon crash [no, systemdefault, yes] 29 #coredump_enabled = systemdefault 16 30 17 31 # enable/disable POP3, and POP3 listen port … … 40 54 imap_capability_idle = yes 41 55 56 # The maximum size of an email that can be uploaded to the gateway 57 imap_max_messagesize = 128M 58 59 # Override the e-mail charset and generate using utf-8 (when imap data is not present on the item) 60 imap_generate_utf8 = no 61 62 # Internally issue the expunge command to directly delete e-mail marked for deletion in IMAP. 63 imap_expunge_on_delete = no 64 65 # Store full rfc822 message during APPEND 66 imap_store_rfc822 = yes 67 68 # Maximum count of allowed failed IMAP command counts per client 69 imap_max_fail_commands = 10 70 71 # Some MUAs are sending commands via idle causing the connection 72 # to reach imap_max_fail_commands and leaves the client in a 73 # broken state. The clients include Apple Mail. If you experience 74 # problems or uses Apple Mail set this option to yes 75 #imap_ignore_command_idle = no 76 77 # Disable all plaintext authentications unless SSL/TLS is used 78 disable_plaintext_auth = no 79 42 80 # File with RSA key for SSL 43 81 ssl_private_key_file = /usr/webint/ssl/server.pem 44 82 45 83 #File with certificate for SSL 46 ssl_certificate_file = 84 ssl_certificate_file = /usr/webint/ssl/server.crt 47 85 48 86 # Verify client certificate … … 50 88 51 89 # Client verify file and/or path 52 ssl_verify_file = 90 ssl_verify_file = 53 91 ssl_verify_path = 54 92 93 # SSL protocols to use, space-separated list of protocols 94 # (SSLv3 TLSv1 TLSv1.1 TLSv1.2); prefix with ! to lock out a protocol. 95 #ssl_protocols = 96 97 # SSL ciphers to use, set to 'ALL' for backward compatibility 98 ssl_ciphers = ALL:!LOW:!SSLv2:!EXP:!aNULL 99 100 # Prefer the server's order of SSL ciphers over client's 101 ssl_prefer_server_ciphers = no 102 55 103 # Process model, using pthreads (thread) or processes (fork) 104 # Processes are potentially safer from a security point of view. 56 105 process_model = fork 57 106 107 # For temporary files. 108 # consider mounting a `tmpfs' underneath this path (wherever you 109 # point it to) 110 tmp_path = /tmp 58 111 59 imap_store_rfc822=yes 60 112 # Whether Gateway should filter HTML messages or not. Usually, WebApp 113 # takes care of this. Letting the gateways do this improves the user latency a 114 # bit, but uses more disk space. (yes/no) 115 #html_safety_filter = no 61 116 62 117 ############################################################## … … 66 121 log_method = file 67 122 68 # Loglevel (0 =no logging, 5=full logging)69 log_level = 2 123 # Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug)) 124 #log_level = 3 70 125 71 126 # Logfile for log_method = file, use '-' for stderr … … 75 130 log_timestamp = 1 76 131 132 # Buffer logging in what sized blocks. 0 for line-buffered (syslog-style). 133 #log_buffer_size = 0 77 134 78 79 135 # Bypass authentification when connecting as an administrator to the UNIX socket. 136 # bypass_auth = no -
npl/mailserver/kopano_conf/root/etc/kopano/ical.cfg
r6165e17 r2c1b61a 3 3 4 4 # drop privileges and run the process as this user 5 run_as_user = kopano5 #run_as_user = kopano 6 6 7 7 # drop privileges and run the process as this group 8 run_as_group = kopano8 #run_as_group = kopano 9 9 10 # create a pid file for stopping the service via the init.d scripts 11 #pid_file = /var/run/kopano/ical.pid 10 12 11 13 # run server in this path (when not using the -F switch) 12 running_path = / 14 #running_path = /var/lib/kopano 13 15 14 # IP Address to bind to ( 0.0.0.0for ANY)15 server_bind = 0.0.0.0 16 # IP Address to bind to (empty for ANY) 17 #server_bind = 16 18 17 # w ether normal connections can be made to the ical server19 # whether normal connections can be made to the ical server 18 20 ical_enable = yes 19 21 20 22 # port which the ical server listens on for normal connections 21 ical_port = 80 0823 ical_port = 8080 22 24 23 # w ether ssl connections can be made to the ical server25 # whether ssl connections can be made to the ical server 24 26 icals_enable = yes 25 27 … … 27 29 icals_port = 8443 28 30 29 # default connection to the Kopano server 30 server_socket = http://localhost:236/kopano 31 # default connection to the storage server 32 # Please refer to the administrator manual or manpage why HTTP is used rather than the UNIX socket. 33 server_socket = http://localhost:236/ 31 34 32 35 # Process model, using pthreads (thread) or processes (fork) 33 36 process_model = fork 34 35 enable_ical_get=yes36 37 37 38 ############################################################## … … 41 42 log_method = file 42 43 43 # Loglevel (0 =no logging, 5=full logging)44 log_level = 2 44 # Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug)) 45 #log_level = 3 45 46 46 47 # Logfile for log_method = file, use '-' for stderr … … 49 50 # Log timestamp - prefix each log line with timestamp in 'file' logging mode 50 51 log_timestamp = 1 52 53 # Buffer logging in what sized blocks. 0 for line-buffered (syslog-style). 54 #log_buffer_size = 0 51 55 52 56 ############################################################## … … 63 67 64 68 # Client verify file and/or path 65 ssl_verify_file = 69 ssl_verify_file = 66 70 ssl_verify_path = 71 72 # SSL protocols to use, space-separated list of protocols 73 # (SSLv3 TLSv1 TLSv1.1 TLSv1.2); prefix with ! to lock out a protocol. 74 #ssl_protocols = 75 76 # SSL ciphers to use, set to 'ALL' for backward compatibility 77 ssl_ciphers = ALL:!LOW:!SSLv2:!EXP:!aNULL 78 79 # Prefer the server's order of SSL ciphers over client's 80 ssl_prefer_server_ciphers = no 67 81 68 82 ############################################################## … … 75 89 default_charset = utf-8 76 90 91 # Enable the iCalendar GET method for downloading calendars 92 enable_ical_get = yes -
npl/mailserver/kopano_conf/root/etc/kopano/monitor.cfg
r6165e17 r2c1b61a 2 2 # KOPANO MONITOR SETTINGS 3 3 4 # Server Unix socket location 5 #server_socket = file:///var/run/kopano/server.sock 6 7 # in a multi-server environment, which servers to monitor (default all) 8 servers = 4 9 5 10 # drop privileges and run the process as this user 6 run_as_user = kopano11 #run_as_user = kopano 7 12 8 13 # drop privileges and run the process as this group 9 run_as_group = kopano14 #run_as_group = kopano 10 15 16 # create a pid file for stopping the service via the init.d scripts 17 #pid_file = /var/run/kopano/monitor.pid 11 18 12 19 # run server in this path (when not using the -F switch) 13 running_path = / 20 #running_path = /var/lib/kopano 14 21 15 22 ############################################################## … … 19 26 log_method = file 20 27 21 # Loglevel (0 =no logging, 5=full logging)22 log_level = 2 28 # Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug)) 29 #log_level = 3 23 30 24 31 # Logfile for log_method = file, use '-' for stderr … … 28 35 log_timestamp = 1 29 36 37 # Buffer logging in what sized blocks. 0 for line-buffered (syslog-style). 38 #log_buffer_size = 0 39 30 40 ############################################################## 31 41 # MONITOR SSL LOGIN SETTINGS 32 42 # 33 # Note: server_socket must be set to https://servername:portname/ kopano43 # Note: server_socket must be set to https://servername:portname/ 34 44 # to use this type of login method 35 45 36 # Login to the Kopanoserver using this SSL Key37 sslkey_file = /etc/kopano/ssl/monitor.pem46 # Login to the storage server using this SSL Key 47 #sslkey_file = /etc/kopano/ssl/monitor.pem 38 48 39 49 # The password of the SSL Key 40 sslkey_pass = replace-with-monitor-cert-password 50 #sslkey_pass = replace-with-monitor-cert-password 51 52 ############################################################## 53 # KOPANO MONITOR INTERVAL SETTINGS 54 55 # Quota check interval (in minutes) 56 quota_check_interval = 15 41 57 42 58 ############################################################## … … 46 62 mailquota_resend_interval = 1 47 63 48 # Template s to be used for quota emails which are sendto the user64 # Template to be used for quota emails which are sent to the user 49 65 # when the various user quota levels have been exceeded. 50 userquota_warning_template = /etc/kopano/quotamail/userwarning.mail 51 userquota_soft_template = /etc/kopano/quotamail/usersoft.mail 52 userquota_hard_template = /etc/kopano/quotamail/userhard.mail 66 userquota_warning_template = /etc/kopano/quotamail/userwarning.mail 53 67 54 # Templates to be used for quota emails which are send to the company administrators 55 # when the various company quota levels have been exceeded. 56 companyquota_warning_template = /etc/kopano/quotamail/companywarning.mail 57 companyquota_soft_template = /etc/kopano/quotamail/companysoft.mail 58 companyquota_hard_template = /etc/kopano/quotamail/companyhard.mail 68 # Templates to be used for quota emails which are sent to the company administrators 69 # when the company quota level has been exceeded. 70 companyquota_warning_template = /etc/kopano/quotamail/companywarning.mail -
npl/mailserver/kopano_conf/root/etc/kopano/search.cfg
r6165e17 r2c1b61a 3 3 4 4 # Location of the index files 5 index_path = /home/system/kopano_index/ 5 # index_path = /var/lib/kopano/search 6 index_path = /home/system/kopano_index/ 6 7 7 8 # run as specific user 8 run_as_user = kopano9 #run_as_user = kopano 9 10 10 11 # run as specific group 11 run_as_group = kopano12 #run_as_group = kopano 12 13 14 # control pid file 15 #pid_file = /var/run/kopano/search.pid 13 16 14 17 # run server in this path (when not using the -F switch) 15 running_path = / 18 #running_path = /var/lib/kopano 16 19 17 20 # Limit the number of results returned (0 = don't limit) 18 limit_results = 0 19 21 limit_results = 1000 20 22 21 23 ############################################################## 22 # CONNECTION TO KOPANOSERVER SETTINGS24 # CONNECTION TO STORAGE SERVER SETTINGS 23 25 # 24 26 27 # Socket to find the connection to the storage server. 28 # Use https to reach servers over the network 29 #server_socket = file:///var/run/kopano/server.sock 25 30 26 # Login to the Kopanoserver using this SSL Key31 # Login to the storage server using this SSL Key 27 32 #sslkey_file = /etc/kopano/ssl/search.pem 28 33 … … 34 39 # 35 40 41 # binding address 42 # To setup for multi-server, use: http://0.0.0.0:port or https://0.0.0.0:port 43 server_bind_name = file:///var/run/kopano/search.sock 36 44 37 45 # File with RSA key for SSL, used then server_bind_name uses https 38 #ssl_private_key_file= /etc/kopano/search/privkey.pem46 ssl_private_key_file = /etc/kopano/search/privkey.pem 39 47 40 48 # File with certificate for SSL, used then server_bind_name uses https 41 #ssl_certificate_file= /etc/kopano/search/cert.pem49 ssl_certificate_file = /etc/kopano/search/cert.pem 42 50 43 51 ############################################################## … … 47 55 log_method = file 48 56 49 # Loglevel (0 =no logging, 5=full logging, 6=debugging)50 log_level = 5 57 # Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug)) 58 #log_level = 3 51 59 52 60 # Logfile for log_method = file, use '-' for stderr … … 56 64 log_timestamp = 1 57 65 58 log_buffer_size = 059 66 60 67 ############################################################## 61 68 # ADVANCED INDEXED SEARCH SETTINGS 69 70 # Back end search engine (currently only xapian is supported) 71 #search_engine = xapian 62 72 63 73 # Size of indexing cache (used for indexing only, not for searching) … … 68 78 #index_exclude_properties = 007D 0064 0C1E 0075 678E 678F 69 79 70 ############################################################## 71 # INDEX OPTIMIZATION SCHEDULE 80 # Number of indexing processes used during initial indexing 81 # Setting this to a higher value can greatly speed up initial indexing, 82 # especially when attachments are indexed. 83 index_processes = 1 72 84 73 # Start the optimization routine at this hour, in 24h notation.74 # optimize_start = 285 # Index junk folder 86 #index_junk = yes 75 87 76 # Stop the optimization routine at this hour, in 24h notation. 77 # The current index that is being optimized is finished before stopping. 78 #optimize_stop = 5 79 80 # Only optimize indexes which wern't optimized for the past X days. 81 #optimize_age = 7 88 # Prepare search suggestions ("did-you-mean?") during indexing 89 # This takes up a large percentage of the used disk space 90 #suggestions = yes 82 91 83 92 ############################################################## … … 89 98 # Maximum file size for attachments 90 99 index_attachment_max_size = 5M 91 92 # Scripts to attachment to text parser93 index_attachment_parser = /etc/kopano/searchscripts/attachments_parser94 95 # Maximum amount of memory which a parser may use in bytes (set to 0 for unlimited)96 # If this maximum is exceeded the parser will be killed97 index_attachment_parser_max_memory = 098 99 # Maximim amount of CPU time (in seconds) which a parser may spend on parsing (set to 0 for unlimited)100 # If this maximum is exceeded the parser will be killed101 index_attachment_parser_max_cputime = 0102 103 # Filter out parsing of attachment which has a mimetype from this list104 # Only the first part of the mime needs to be given, like 'image'.105 # This field is SPACE separated106 index_attachment_mime_filter =107 108 # Filter out parsing of attachment which has an extension from this list109 # (only tested if mimetype was not found on the attachment)110 # This field is SPACE separated111 index_attachment_extension_filter =112 113 #number of parallel indexers114 index_processes=4115 -
npl/mailserver/kopano_conf/root/etc/kopano/server.cfg
r6165e17 r2c1b61a 2 2 # SERVER SETTINGS 3 3 4 # IP Address to bind to ( 0.0.0.0for ANY)5 # Set to 127.0.0.1 if connections should only come from localhost4 # IP Address to bind to (empty for ANY) 5 # Set to ::1 or 127.0.0.1 if connections should only come from localhost 6 6 # and through the webserver proxy 7 server_bind = 0.0.0.0 7 #server_bind = 8 8 9 9 # Accept normal TCP connections (not recommended to disable) … … 13 13 server_tcp_port = 236 14 14 15 # Accept unix pipe connections (not recommended to disable)15 # Accept Unix pipe connections (not recommended to disable) 16 16 server_pipe_enabled = yes 17 17 18 # Unix socket location 19 server_pipe_name = /var/run/kopano/server.sock 20 21 # Priority Unix socket location 22 server_pipe_priority = /var/run/kopano/prio.sock 18 23 19 24 # Name for identifying the server in a multi-server environment 20 25 server_name = Kopano 21 26 27 # Override the hostname of this server, used by Kerberos SSO if enabled 28 server_hostname = 29 22 30 # Database engine (mysql) 23 31 database_engine = mysql 24 32 25 # Allow connections from normal users through the unix socket33 # Allow connections from normal users through the Unix socket 26 34 allow_local_users = yes 27 35 … … 29 37 # field is SPACE separated 30 38 # eg: local_admin_users = root vmail 39 #local_admin_users = root kopano 31 40 local_admin_users = root alias 41 42 # The user has full rights on a folder by default, uncomment the following line to disable this. 43 # owner_auto_full_access = false 44 owner_auto_full_access = true 32 45 33 46 # e-mail address of the Kopano System user … … 35 48 36 49 # drop privileges and run the process as this user 37 run_as_user = kopano50 #run_as_user = kopano 38 51 39 52 # drop privileges and run the process as this group 40 run_as_group = kopano 41 53 #run_as_group = kopano 54 55 # create a pid file for stopping the service via the init.d scripts 56 #pid_file = /var/run/kopano/server.pid 42 57 43 58 # run server in this path (when not using the -F switch) 44 running_path = / 59 #running_path = /var/lib/kopano 60 61 # Use given allocator library. Values like libtcmalloc.so.4, 62 # libtcmalloc_minimal.so.4 and libjemalloc.so.2 would work. 63 #allocator_library = default 64 65 # create memory coredumps upon crash [no, systemdefault, yes] 66 #coredump_enabled = systemdefault 45 67 46 68 # session timeout for clients. Values lower than 300 will be upped to 300 … … 48 70 # seconds, then the session is killed. 49 71 session_timeout = 300 50 session_ip_check = yes 51 52 # Socket to connect to for license server 53 license_socket = /var/run/kopanod/kopano-licensed 54 55 # Time (in seconds) to wait for a connection to the license server before 56 # terminating the request. 57 license_timeout = 10 72 73 # for temporary files 74 # consider mounting a `tmpfs' underneath this path (wherever you 75 # point it to) 76 tmp_path = /tmp 58 77 59 78 ############################################################## 60 79 # LOG SETTINGS 61 80 62 # Logging method (syslog, file) 63 # (DatuX: use syslog for now, because file seems to triggers a glibc locking bug in __pthread_rwlock_rdlock_slow, at least in 2.21) 64 log_method = syslog 81 # Logging method (syslog, file), syslog facility is 'mail' 82 log_method = file 65 83 66 84 # Logfile (for log_method = file, '-' for stderr) 67 85 log_file = /var/log/kopano/server.log 68 86 69 # Loglevel (0 =no logging, 5=full logging)70 log_level = 2 87 # Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug)) 88 #log_level = 3 71 89 72 90 # Log timestamp - prefix each log line with timestamp in 'file' logging mode 73 91 log_timestamp = 1 74 92 93 # Buffer logging in what sized blocks. 0 for line-buffered (syslog-style). 94 #log_buffer_size = 0 95 96 ############################################################## 97 # AUDIT LOG SETTINGS 98 99 # Audit logging is by default not enabled 100 audit_log_enabled = no 101 102 # Audit logging method (syslog, file), syslog facility is 'authpriv' 103 audit_log_method = syslog 104 105 # Audit logfile (for log_method = file, '-' for stderr) 106 audit_log_file = /var/log/kopano/audit.log 107 108 # Audit loglevel (0=no logging, 1=full logging) 109 audit_log_level = 1 110 111 # Audit log timestamp - prefix each log line with timestamp in 'file' logging mode 112 audit_log_timestamp = 1 113 75 114 ############################################################## 76 115 # MYSQL SETTINGS (for database_engine = mysql) 77 116 78 117 # MySQL hostname to connect to for database access 79 #mysql_host = localhost 80 mysql_socket = /var/run/mysql/mysql.sock 118 mysql_host = localhost 81 119 82 120 # MySQL port to connect with (usually 3306) … … 89 127 mysql_password = %mysql_passwd% 90 128 129 # Override the default MySQL socket to access mysql locally 130 # Works only if the mysql_host value is empty or 'localhost' 131 #mysql_socket = 132 mysql_socket = /var/run/mysql/mysql.sock 133 91 134 # Database to connect to 92 135 mysql_database = zarafa 93 136 94 # Where to place attachments. Value can be 'database' or 'files'137 # Where to place attachments. Value can be 'database', 'files' or 's3' 95 138 attachment_storage = files 96 139 140 # Enable fsync as method to make sure attachments are stored on disk where 141 # supported and will not be buffered by OS and/or filesystem. Please note 142 # this setting will lower attachment write performance depending on your 143 # environment but enhances data safety with disaster recovery. 144 # Only affects 'files' attachment storage backend. 145 attachment_files_fsync = yes 146 97 147 # When attachment_storage is 'files', use this path to store the files 148 # When attachment_storage is 's3', use this path to set a prefix to all 149 # attachment data of a certain cluster, for example 'attach' 98 150 attachment_path = /home/system/kopano 99 151 … … 103 155 104 156 ############################################################## 157 # S3 STORAGE SETTINGS (for attachment_storage = s3) 158 159 # The hostname of the entry point to the S3 cloud where the bucket is located 160 # If you are using miniio or an other S3 compatible implementation that 161 # is using another port, you can specify the port with hostname:port. 162 #attachment_s3_hostname = s3-eu-west-1.amazonaws.com 163 164 # The region where the bucket is located 165 #attachment_s3_region = eu-west-1 166 167 # The protocol that should be used to connect to S3, 'http' or 'https' (preferred) 168 #attachment_s3_protocol = https 169 170 # The URL style of the bucket, "virtualhost" or "path" 171 #attachment_s3_uristyle = virtualhost 172 173 # The access key id of your S3 account 174 #attachment_s3_accesskeyid = 175 176 # The secret access key of your S3 account 177 #attachment_s3_secretaccesskey = 178 179 # The bucket name in which the files will be stored 180 #attachment_s3_bucketname = 181 182 ############################################################## 105 183 # SSL SETTINGS 106 184 107 185 # enable SSL support in server 108 server_ssl_enabled = no186 server_ssl_enabled = yes 109 187 110 188 # Listen for SSL connections on this port … … 115 193 116 194 # Password of Server certificate 117 server_ssl_key_pass = 195 server_ssl_key_pass = replace-with-server-cert-password 118 196 119 197 # Required Certificate Authority of server 120 server_ssl_ca_file = / etc/kopano/ssl/server.crt198 server_ssl_ca_file = /usr/webint/ssl/server.crt 121 199 122 200 # Path with CA certificates, e.g. /etc/ssl/certs 123 201 server_ssl_ca_path = 124 202 203 # SSL protocols to use, space-separated list of protocols 204 # (SSLv3 TLSv1 TLSv1.1 TLSv1.2); prefix with ! to lock out a protocol. 205 #server_ssl_protocols = 206 207 # SSL ciphers to use, set to 'ALL' for backward compatibility 208 server_ssl_ciphers = ALL:!LOW:!SSLv2:!EXP:!aNULL 209 210 # Prefer the server's order of SSL ciphers over client's 211 server_ssl_prefer_server_ciphers = no 212 125 213 # Path of SSL Public keys of clients 126 214 sslkeys_path = /etc/kopano/sslkeys … … 131 219 # Number of server threads 132 220 # default: 8 221 #threads = 8 133 222 threads = 16 134 223 … … 146 235 server_max_keep_alive_requests = 100 147 236 148 # SOAP recv timeout value 237 # SOAP recv timeout value (time between requests) 149 238 # default: 5 150 239 server_recv_timeout = 5 240 241 # SOAP read timeout value (time during requests) 242 # default: 60 243 server_read_timeout = 60 151 244 152 245 # SOAP send timeout value … … 158 251 159 252 # Softdelete clean cycle (in days) 0=never running 253 # softdelete_lifetime = 30 160 254 # (SYN-3 uses a cronjob) 161 255 softdelete_lifetime = 0 … … 164 258 sync_lifetime = 90 165 259 166 # Set to 'yes' if all changes (for synchronization) to messages should be logged to the database 167 sync_log_all_changes = yes 168 260 # Set to 'yes' if you have Kerberos or NTLM correctly configured for single sign-on 261 enable_sso = no 169 262 170 263 # Set to 'yes' if you want to show the GAB to your users 171 264 enable_gab = yes 172 265 173 # Synchronize GAB users on every open of the GAB (otherwise, only on174 # kopano-admin --sync)175 sync_gab_realtime = yes176 177 266 # Authentication can be through plugin (default, recommended), pam or kerberos 178 267 auth_method = plugin … … 184 273 ############################################################# 185 274 # CACHE SETTINGS 186 275 # 276 # To see the live cache usage, use 'kopano-stats --system'. 187 277 #SYN-3 caching config for around 1000 users. 188 278 279 # Size in bytes of the 'cell' cache (should be set as high as you can afford to set it) 280 #cache_cell_size = 256M 189 281 # around 25% of total RAM size 190 282 cache_cell_size = 1G 191 283 284 # Size in bytes of the 'object' cache 285 #cache_object_size = 16M 192 286 # about 100kb per user 193 287 cache_object_size = 100M 194 288 289 # Size in bytes of the 'indexed object' cache 290 #cache_indexedobject_size = 32M 195 291 # about 512kb per user 196 292 cache_indexedobject_size = 512M 197 293 198 cache_store_size=512M 294 295 # Size in bytes of the userquota details 296 cache_quota_size = 1M 199 297 200 298 # Lifetime for userquota details 201 299 cache_quota_lifetime = 1 202 300 301 # Size in bytes of the acl cache 302 cache_acl_size = 1M 303 304 # Size in bytes of the store id/guid cache 305 #cache_store_size = 1M 306 cache_store_size=512M 307 308 # Size in bytes of the 'user id' cache (this is allocated twice) 309 cache_user_size = 1M 310 311 # Size in bytes of the 'user details' cache 312 cache_userdetails_size = 25M 313 203 314 # Lifetime for user details 204 cache_userdetails_lifetime = 5 205 206 # Thread size in KB, default is 512 207 # WARNING: Do not set too small, your server WILL crash 208 thread_stacksize = 512 315 cache_userdetails_lifetime = 0 316 317 # Size in bytes of the server details (multiserver setups only) 318 cache_server_size = 1M 319 320 # Lifetime for server details (multiserver setups only) 321 cache_server_lifetime = 30 322 209 323 210 324 ############################################################## … … 225 339 quota_hard = 0 226 340 227 # The default Warning Quota Level . Set to 0 to disable this level.228 # The companyadministrator will receive an email when this level is reached. Value is in Mb. Default value is 0.341 # The default Warning Quota Level for multitenant public stores. Set to 0 to disable this level. 342 # The tenant administrator will receive an email when this level is reached. Value is in Mb. Default value is 0. 229 343 companyquota_warn = 0 230 344 345 231 346 ############################################################## 232 347 # USER PLUGIN SETTINGS 233 348 234 349 # Name of the plugin that handles users 235 # Required, default = ldap350 # Required, default = db 236 351 # Values: ldap, unix, db 237 #user_plugin = db238 352 user_plugin = ldap 239 353 240 # configuration file of the user plugin, examples can be found in /usr/share/ kopano/example-config354 # configuration file of the user plugin, examples can be found in /usr/share/doc/kopano/example-config 241 355 user_plugin_config = /etc/kopano/ldap.cfg 242 243 # location of the kopano plugins244 # if you have a 64bit distribution, this probably should be changed to /usr/lib64/kopano245 plugin_path = /usr/lib/kopano246 356 247 357 # scripts which create stores for users from an external source … … 254 364 deletecompany_script = /etc/kopano/userscripts/deletecompany 255 365 366 # Set this option to 'yes' to skip the creation and deletion of new users 367 # The action will be logged, so you can see if your changes to the plugin 368 # configuration are correct. 369 user_safe_mode = no 370 256 371 ############################################################## 257 372 # MISC SETTINGS 258 373 259 # Enable multi- company environment260 # When set to true it is possible to create companies within the374 # Enable multi-tenancy environment 375 # When set to true it is possible to create tenants within the 261 376 # kopano instance and assign all users and groups to particular 262 # companies.263 # When set to false, the normal single- company environment is created.377 # tenants. 378 # When set to false, the normal single-tenancy environment is created. 264 379 enable_hosted_kopano = false 265 380 266 381 # Enable multi-server environment 267 # When set to true it is possible to place users and companies on382 # When set to true it is possible to place users and tenants on 268 383 # specific servers. 269 384 # When set to false, the normal single-server environment is created. … … 273 388 # Allowed variables: 274 389 # %u Username 275 # %f Full name276 # %c Companyname390 # %f Full name 391 # %c Tenant's name 277 392 # default: %f 278 393 storename_format = %f 279 394 280 # Loginname format (for Hostedinstallations)395 # Loginname format (for Multi-tenancy installations) 281 396 # When the user does not login through a system-wide unique 282 397 # username (like the email address) a unique name is created 283 # by combining the username and the companyname.398 # by combining the username and the tenantname. 284 399 # With this configuration option you can set how the 285 400 # loginname should be built up. … … 288 403 # 289 404 # Allowed variables: 290 # %u username291 # %c companyname405 # %u Username 406 # %c Teantname 292 407 # 293 408 # default: %u 294 409 loginname_format = %u 295 296 # Set to yes for Windows clients to be able to download the latest297 # Kopano Outlook client from the Kopano server298 client_update_enabled = false299 300 # Place the correct Kopano Outlook Client in this directory for301 # Windows clients to download through the Kopano server302 client_update_path = /var/lib/kopano/client303 304 # Recieve update information from the client (0 = disabled, 1 = only on error, 2 = log always)305 #client_update_log_level = 1306 # Log location for the client auto update files307 #client_update_log_path = /var/log/kopano/autoupdate308 410 309 411 # Everyone is a special internal group, which contains every user and group … … 317 419 hide_system = yes 318 420 421 # Use Indexing service for faster searching. 422 # Enabling this option requires the kopano-search service to 423 # be running. 424 search_enabled = yes 425 426 # Path to the kopano-search service, this option is only required 427 # if the server is going to make use of the indexing service. 428 search_socket = file:///var/run/kopano/search.sock 429 430 # Time (in seconds) to wait for a connection to the kopano-search service 431 # before terminating the indexed search request. 432 search_timeout = 10 433 319 434 # Allow enhanced ICS operations to speedup synchronization with cached profiles. 320 435 # default: yes 321 436 enable_enhanced_ics = yes 322 437 323 # AUDIT LOG SETTINGS324 # Audit logging is by default not enabled325 audit_log_enabled = no326 # Audit logging method (syslog, file), syslog facility is 'authpriv'327 audit_log_method = syslog328 # Audit logfile (for log_method = file, '-' for stderr)329 audit_log_file = /var/log/kopano/audit.log330 # Audit loglevel (0=no logging, 1=full logging)331 audit_log_level = 1332 # Audit log timestamp - prefix each log line with timestamp in 'file' logging mode333 audit_log_timestamp = 1334 335 # Disable features for users. Default all features are enabled. This336 # list is space separated. Currently valid values: imap337 disabled_features =338 339 340 #The server has a list of deferred writes to the tproperties table, to improve overall I/O performance. The number of deferred writes is kept below this value; setting it high will allow writes to be more efficient by grouping more writes together, but may slow down reading, and setting it low will force writes to complete directly, but speed up reading of tables.341 #max_deferred_records=342 #max_deferred_records_folder=343 344 345 346 # Enabling this option requires the kopano-search service to347 # be running.348 search_enabled = yes349 350 438 # SQL Procedures allow for some optimized queries when streaming with enhanced ICS. 351 439 # This is default disabled because you must set 'thread_stack = 256k' in your 352 440 # MySQL server config under the [mysqld] tag and restart your MySQL server. 441 #enable_sql_procedures = no 353 442 enable_sql_procedures = yes 354 443 355 356 # Time (in seconds) to wait for a connection to the kopano-search service 357 # before terminating the indexed search request. 358 search_timeout = 10 444 # Synchronize GAB users on every open of the GAB (otherwise, only on 445 # kopano-admin --sync) 446 sync_gab_realtime = yes 447 448 # Disable features for users. This list is space separated. 449 # Currently valid values: imap pop3 mobile outlook 450 #disabled_features = imap pop3 451 disabled_features = 452 453 # Maximum number of deferred records in total 454 max_deferred_records = 0 455 456 # Maximum number of deferred records per folder 457 max_deferred_records_folder = 20 359 458 360 459 # Restrict the permissions that admins receive to folder permissions only. Please … … 375 474 # and the value of '*' is used to indicate that all connections are proxied 376 475 proxy_header = 476 477 # Enable/disable reminders for shared stores 478 shared_reminders = yes -
npl/mailserver/kopano_conf/root/etc/kopano/spooler.cfg
r6165e17 r2c1b61a 3 3 4 4 # Outgoing mailserver name or IP address 5 # Use 127.0.0.1 to disable virusscanning for webmail. (not recommended) 5 ; smtp_server = localhost 6 6 smtp_server = 127.0.0.3 7 7 8 # Port number for outgoing mailserver 9 smtp_port = 25 10 11 # Server Unix socket location 12 #server_socket = file:///var/run/kopano/server.sock 8 13 9 14 # drop privileges and run the process as this user 10 run_as_user = kopano15 #run_as_user = kopano 11 16 12 17 # drop privileges and run the process as this group 13 run_as_group = kopano18 #run_as_group = kopano 14 19 20 # create a pid file for stopping the service via the init.d scripts 21 #pid_file = /var/run/kopano/spooler.pid 15 22 16 23 # run server in this path (when not using the -F switch) 17 running_path = / 24 #running_path = /var/lib/kopano 18 25 19 # The us-ascii charset will be upgraded to this charset, to allow more 20 # use of high-characters. Not used when always_send_utf8 is enabled. 21 charset_upgrade = windows-1252 26 # create memory coredumps upon crash [no, systemdefault, yes] 27 #coredump_enabled = systemdefault 22 28 23 # Request SMTP Delivery Status Notifications if the MTA support it 24 enable_dsn = yes 29 # for temporary files 30 # consider mounting a `tmpfs' underneath this path (wherever you 31 # point it to) 32 tmp_path = /tmp 25 33 26 34 ############################################################## … … 30 38 log_method = file 31 39 32 # Loglevel (0 =no logging, 5=full logging)33 log_level = 340 # Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug)) 41 #log_level = 3 34 42 35 43 # Logfile for log_method = file, use '-' for stderr … … 39 47 log_timestamp = 1 40 48 49 # Buffer logging in what sized blocks. 0 for line-buffered (syslog-style). 50 #log_buffer_size = 0 41 51 42 52 ############################################################## 43 53 # SPOOLER SSL LOGIN SETTINGS 44 # 45 # Note: server_socket must be set to https://servername:portname/ kopano54 # 55 # Note: server_socket must be set to https://servername:portname/ 46 56 # to use this type of login method 47 57 48 # Login to the Kopanoserver using this SSL Key49 sslkey_file = /etc/kopano/ssl/spooler.pem58 # Login to the storage server using this SSL Key 59 #sslkey_file = /etc/kopano/ssl/spooler.pem 50 60 51 61 # The password of the SSL Key 52 sslkey_pass = replace-with-server-cert-password62 #sslkey_pass = replace-with-server-cert-password 53 63 54 64 ############################################################## … … 76 86 # Set this value to 'yes' to let the spooler always send emails with 77 87 # delegates (other user than yourself in the From: header) 78 # In installations before 6.20, this value was always 'yes' 88 # In installations before 6.20, this value was always 'yes'. 89 # IMPORTANT: This feature overrides "send-as" functionality. 90 # always_send_delegates = no 79 91 always_send_delegates = yes 80 81 # This does the same as always_send_delegates, but gets rid of the 'on behalf of' text.82 #always_send_as = yes83 92 84 93 # Set this value to 'no' if you do NOT want to allow redirected e-mails … … 90 99 copy_delegate_mails = yes 91 100 92 # Setting this option to no will disallow sending to the everyone group. 93 allow_send_to_everyone=yes 101 # Allow to forward and sent a meeting request as delegate Kopano and 102 # SMTP user. 103 allow_delegate_meeting_request = yes 104 105 # Allow users to send email to the 'everyone' group 106 allow_send_to_everyone = yes 94 107 95 108 ############################################################## 96 # SPOOLER MEETING REQUEST SETTINGS109 # SPOOLER OUTPUT SETTINGS 97 110 98 111 # Set this value to 'yes' to always send meeting request information 99 # using TNEF method (winmail.dat attachments) 100 # Otherwise, the meeting request information is sent using 101 # iCalendar (calendar.ics attachment). 112 # using TNEF method (winmail.dat attachments). 113 # Otherwise, the meeting request information is sent using 114 # iCalendar (calendar.ics attachment). 115 # Mail bodies created in RTF text format will also use TNEF. 102 116 always_send_tnef = no 117 118 # Send all e-mail always using the UTF-8 charset. 119 # Normally, the requested charset is used, which can be any charset. 120 always_send_utf8 = no 121 122 # The us-ascii charset will be upgraded to this charset, to allow more 123 # use of high-characters. Not used when always_send_utf8 is enabled. 124 charset_upgrade = windows-1252 125 126 # Request SMTP Delivery Status Notifications if the MTA support it 127 enable_dsn = yes 103 128 104 129 ############################################################## … … 120 145 # This will do nothing if no archive is attached to the source mailbox. 121 146 archive_on_send = no 122 123 #################################### 147 ############################################################## 124 148 # SPOOLER PLUGIN SETTINGS 125 149 126 150 # Enable the spooler plugin framework 127 plugin_enabled = no 151 plugin_enabled = yes 152 128 153 # Path to the spooler plugin manager 129 154 plugin_manager_path = /usr/share/kopano-spooler/python 155 130 156 # Path to the activated spooler plugins. 131 157 # This folder contains symlinks to the kopano plugins and custom scripts. The plugins are … … 136 162 # $ ln -s /usr/share/kopano-spooler/python/plugins/disclaimer.py /var/lib/kopano/spooler/plugins/disclaimer.py 137 163 plugin_path = /var/lib/kopano/spooler/plugins 138 139
Note: See TracChangeset
for help on using the changeset viewer.