Changeset 2c1b61a for npl


Ignore:
Timestamp:
11/30/17 00:15:29 (7 years ago)
Author:
Edwin Eefting <edwin@datux.nl>
Branches:
gcc484, master, perl-5.22
Children:
94b5bc1
Parents:
6165e17
Message:

migrated settings to new default configs

Location:
npl/mailserver
Files:
7 added
1 deleted
8 edited

Legend:

Unmodified
Added
Removed
  • npl/mailserver/kopano_conf/root/etc/kopano/backup.cfg

    r6165e17 r2c1b61a  
     1##############################################################
     2# SERVER SETTINGS
    13
    2 # Login to the Kopano server using this SSL Key
    3 #sslkey_file = /etc/kopano/ssl/backup.pem
     4# Socket to find the connection to the storage server.
     5# Use https to reach servers over the network
     6#server_socket   =   file:///var/run/kopano/server.sock
     7
     8# Login to the storage server using this SSL Key
     9#sslkey_file         = /etc/kopano/ssl/search.pem
    410
    511# The password of the SSL Key
    6 #sslkey_pass = replace-with-server-cert-password
     12#sslkey_pass         = replace-with-server-cert-password
    713
    8 # Only backup stores from these servers. Leave blank for any server.
    9 # Only used when backing up all users, or a full company.
    10 backup_servers =
     14##############################################################
     15# LOG SETTINGS
    1116
    12 # Use multiple threads when backing up multiple stores.
    13 threads = 1
     17# Logging method (syslog, file)
     18#log_method          =   file
     19
     20# Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug))
     21#log_level           =   3
     22
     23# Logfile for log_method = file, use '-' for stderr
     24#log_file            =   /var/log/kopano/backup.log
     25
     26##############################################################
     27# BACKUP SETTINGS
     28
     29# maximum number of stores to backup in parallel
     30#worker_processes   =   1
  • npl/mailserver/kopano_conf/root/etc/kopano/dagent.cfg

    r6165e17 r2c1b61a  
    22# DAGENT SETTINGS
    33
     4# connection to the storage server
     5#server_socket = file:///var/run/kopano/server.sock
    46
    57##############################################################
    68# DAGENT SSL LOGIN SETTINGS
    7 # 
    8 # Note: server_socket must be set to https://servername:portname/kopano
     9#
     10# Note: server_socket must be set to https://servername:portname/
    911#       to use this type of login method
    1012
    11 # Login to the Kopano server using this SSL Key
     13# Login to the storage server using this SSL Key
    1214#sslkey_file = /etc/kopano/ssl/dagent.pem
    1315
     
    2123log_method      =       file
    2224
    23 # Loglevel (0=no logging, 5=full logging)
    24 log_level       =       2
     25# Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug))
     26#log_level      =       3
    2527
    2628# Logfile for log_method = file, use '-' for stderr
    27 log_file        =       -
    2829log_file = /var/log/kopano/dagent.log
    2930
    3031# Log timestamp - prefix each log line with timestamp in 'file' logging mode
    3132log_timestamp   =       1
     33
     34# Log raw message to a file, please specify a username,
     35# separate users with a space, or use 'all' to log all
     36log_raw_message = no
     37
     38# Log raw messages path
     39# consider mounting a `tmpfs' underneath this path
     40# note that MySQL may store (large) files under /tmp
     41log_raw_message_path = /tmp
     42
     43# Buffer logging in what sized blocks. 0 for line-buffered (syslog-style).
     44#log_buffer_size = 0
     45
     46# for temporary files
     47# consider mounting a `tmpfs' underneath this path (wherever you
     48# point it to)
     49tmp_path = /tmp
    3250
    3351##############################################################
     
    3654
    3755# binding address for LMTP daemon
    38 # change to 0.0.0.0 if you require connections over the network
    39 server_bind = 127.0.0.1
     56# change to the empty string if you require connections on other addresses
     57#server_bind =
     58# Limit connections to address of interface (IPv6),
     59# or route path interface (IPv4). Leave empty for to indicate "all".
     60#server_bind_intf =
    4061
    4162# LMTP port to listen on for LMTP connections
     
    4667lmtp_max_threads = 20
    4768
    48 # Process model for LMTP daemon, using pthreads (thread) or processes (fork)
    49 process_model = fork
    50 
    5169# run as specific user in LMTP mode.
    52 #   make sure this user is listed in local_admin_users in your kopano server config
     70#   make sure this user is listed in local_admin_users in your storage server config
    5371#   or use SSL connections with certificates to login
    54 run_as_user =
     72#run_as_user = kopano
    5573
    5674# run as specific group in LMTP mode.
    57 run_as_group =
     75#run_as_group = kopano
    5876
     77# control pid file
     78#pid_file = /var/run/kopano/dagent.pid
     79
     80# create memory coredumps upon crash [no, systemdefault, yes]
     81#coredump_enabled = systemdefault
    5982
    6083# The following e-mail header will mark the mail as spam, so the mail
     
    6285# The name is case insensitive.
    6386# set to empty to not use this detection scheme.
    64 spam_header_name =
     87#spam_header_name = X-Spam-Status
     88spam_header_name =
    6589
    6690# If the above header is found, and contains the following value
    6791# the mail will be considered as spam.
    68 # Notes: 
     92# Notes:
    6993#  - The value is case insensitive.
    7094#  - Leading and trailing spaces are stripped.
    7195#  - The word 'bayes' also contains the word 'yes'.
    72 spam_header_value = No
     96spam_header_value = Yes,
    7397
    74 ### For debugging
    75 # Log raw message to a file
    76 log_raw_message = no
    77 # Log raw messages path
    78 log_raw_message_path = /tmp
     98# Whether dagent should filter HTML messages or not. Usually, WebApp takes
     99# care of this. Letting dagent do this improves the user latency a
     100# bit, but uses more disk space. (yes/no)
     101#html_safety_filter = no
    79102
     103##############################################################
     104# DAGENT ARCHIVING SETTINGS
     105
     106# Enable archive_on_delivery to automatically archive all incoming
    80107# messages on delivery.
    81108# This will do nothing if no archive is attached to the target mailbox.
     
    84111##############################################################
    85112# DAGENT PLUGIN SETTINGS
     113
    86114# Enable the dagent plugin framework
    87 plugin_enabled = no
     115plugin_enabled = yes
     116
    88117# Path to the dagent plugin manager
    89118plugin_manager_path = /usr/share/kopano-dagent/python
     119
    90120# Path to the activated dagent plugins.
    91121#   This folder contains symlinks to the kopano plugins and custom scripts. The plugins are
     
    97127plugin_path = /var/lib/kopano/dagent/plugins
    98128
     129##############################################################
     130# DAGENT RULE SETTINGS
     131
     132# Enable the addition of X-Kopano-Rule-Action headers on messages
     133# that have been forwarded or replied by a rule.
     134# Default: yes
     135set_rule_headers = yes
     136
     137# Enable this option to prevent rules to cause a loop. An e-mail can only be forwarded
     138# once. When this option is enabled, the set_rule_headers option must also be enabled.
     139# Default: no
     140no_double_forward = no
     141
     142# Some emails do not contain any charset information, or may wrongly specify
     143# us-ascii when they are not. If this option is set, mails which would normally
     144# be decoded as ASCII will have their content instead interpreted in the
     145# alternate character set specified here (which must also be ASCII compatible).
     146#default_charset = us-ascii
     147
     148# A list of space-separated domains to which forwarding via a rule is allowed.
     149# The '*' matches zero or more characters, _including_ dots.
     150# Example:
     151#    forward_whitelist_domains = kopano.com *.kopano.com
     152#
     153# Example:
     154#    forward_whitelist_domains = kopano.com sub.kopano.com
     155#
     156#forward_whitelist_domains = *
     157
     158# A custom-defined reply subject to the user with a rule forwarding to a
     159# domain not in forward_whitelist_domains.
     160#forward_whitelist_domain_subject = REJECT: %subject not forwarded (administratively blocked)
     161
     162# A custom-defined reply message to the user with a rule forwarding to a
     163# domain not in forward_whitelist_domains.
     164#forward_whitelist_domain_message = The Kopano mail system has rejected your request to forward your e-mail with subject %subject (via mail filters) to %sender: the operation is not permitted.\n\nRemove the rule or contact your administrator about the forward_whitelist_domains setting.
  • npl/mailserver/kopano_conf/root/etc/kopano/gateway.cfg

    r6165e17 r2c1b61a  
    22# GATEWAY SETTINGS
    33
    4 server_bind     =       0.0.0.0
     4#server_bind    =
    55
    6 # WARNING!! YOU MUST RUN KOPANO GATEWAY UNDER A DIFFERENT USER THAN THE SERVER PROCESS
     6# Please refer to the administrator manual or manpage why HTTP is used rather than the UNIX socket.
     7#server_socket = http://localhost:236/
     8
     9# Set this value to a name to show in the logon greeting to clients.
     10# Leave empty to use DNS to find this name.
     11server_hostname =
     12
     13# Whether to show the hostname in the logon greeting to clients.
     14server_hostname_greeting = no
     15
    716# drop privileges and run the process as this user
    8 run_as_user = kopano-gateway
     17#run_as_user = kopano
    918
    1019# drop privileges and run the process as this group
    11 run_as_group = kopano-gateway
     20#run_as_group = kopano
    1221
     22# create a pid file for stopping the service via the init.d scripts
     23#pid_file = /var/run/kopano/gateway.pid
    1324
    1425# run server in this path (when not using the -F switch)
    15 running_path = /
     26#running_path = /var/lib/kopano
     27
     28# create memory coredumps upon crash [no, systemdefault, yes]
     29#coredump_enabled = systemdefault
    1630
    1731# enable/disable POP3, and POP3 listen port
     
    4054imap_capability_idle = yes
    4155
     56# The maximum size of an email that can be uploaded to the gateway
     57imap_max_messagesize = 128M
     58
     59# Override the e-mail charset and generate using utf-8 (when imap data is not present on the item)
     60imap_generate_utf8 = no
     61
     62# Internally issue the expunge command to directly delete e-mail marked for deletion in IMAP.
     63imap_expunge_on_delete = no
     64
     65# Store full rfc822 message during APPEND
     66imap_store_rfc822 = yes
     67
     68# Maximum count of allowed failed IMAP command counts per client
     69imap_max_fail_commands = 10
     70
     71# Some MUAs are sending commands via idle causing the connection
     72# to reach imap_max_fail_commands and leaves the client in a
     73# broken state. The clients include Apple Mail. If you experience
     74# problems or uses Apple Mail set this option to yes
     75#imap_ignore_command_idle = no
     76
     77# Disable all plaintext authentications unless SSL/TLS is used
     78disable_plaintext_auth = no
     79
    4280# File with RSA key for SSL
    4381ssl_private_key_file    =       /usr/webint/ssl/server.pem
    4482
    4583#File with certificate for SSL
    46 ssl_certificate_file    =       /usr/webint/ssl/server.crt
     84ssl_certificate_file    = /usr/webint/ssl/server.crt
    4785
    4886# Verify client certificate
     
    5088
    5189# Client verify file and/or path
    52 ssl_verify_file         =       
     90ssl_verify_file         =
    5391ssl_verify_path         =
    5492
     93# SSL protocols to use, space-separated list of protocols
     94# (SSLv3 TLSv1 TLSv1.1 TLSv1.2); prefix with ! to lock out a protocol.
     95#ssl_protocols =
     96
     97# SSL ciphers to use, set to 'ALL' for backward compatibility
     98ssl_ciphers = ALL:!LOW:!SSLv2:!EXP:!aNULL
     99
     100# Prefer the server's order of SSL ciphers over client's
     101ssl_prefer_server_ciphers = no
     102
    55103# Process model, using pthreads (thread) or processes (fork)
     104# Processes are potentially safer from a security point of view.
    56105process_model = fork
    57106
     107# For temporary files.
     108# consider mounting a `tmpfs' underneath this path (wherever you
     109# point it to)
     110tmp_path = /tmp
    58111
    59 imap_store_rfc822=yes
    60 
     112# Whether Gateway should filter HTML messages or not. Usually, WebApp
     113# takes care of this. Letting the gateways do this improves the user latency a
     114# bit, but uses more disk space. (yes/no)
     115#html_safety_filter = no
    61116
    62117##############################################################
     
    66121log_method      =       file
    67122
    68 # Loglevel (0=no logging, 5=full logging)
    69 log_level       =       2
     123# Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug))
     124#log_level      =       3
    70125
    71126# Logfile for log_method = file, use '-' for stderr
     
    75130log_timestamp   =       1
    76131
     132# Buffer logging in what sized blocks. 0 for line-buffered (syslog-style).
     133#log_buffer_size = 0
    77134
    78 
    79 
     135# Bypass authentification when connecting as an administrator to the UNIX socket.
     136# bypass_auth = no
  • npl/mailserver/kopano_conf/root/etc/kopano/ical.cfg

    r6165e17 r2c1b61a  
    33
    44# drop privileges and run the process as this user
    5 run_as_user = kopano
     5#run_as_user = kopano
    66
    77# drop privileges and run the process as this group
    8 run_as_group = kopano
     8#run_as_group = kopano
    99
     10# create a pid file for stopping the service via the init.d scripts
     11#pid_file = /var/run/kopano/ical.pid
    1012
    1113# run server in this path (when not using the -F switch)
    12 running_path = /
     14#running_path = /var/lib/kopano
    1315
    14 # IP Address to bind to (0.0.0.0 for ANY)
    15 server_bind = 0.0.0.0
     16# IP Address to bind to (empty for ANY)
     17#server_bind =
    1618
    17 # wether normal connections can be made to the ical server
     19# whether normal connections can be made to the ical server
    1820ical_enable = yes
    1921
    2022# port which the ical server listens on for normal connections
    21 ical_port = 8008
     23ical_port = 8080
    2224
    23 # wether ssl connections can be made to the ical server
     25# whether ssl connections can be made to the ical server
    2426icals_enable = yes
    2527
     
    2729icals_port = 8443
    2830
    29 # default connection to the Kopano server
    30 server_socket = http://localhost:236/kopano
     31# default connection to the storage server
     32# Please refer to the administrator manual or manpage why HTTP is used rather than the UNIX socket.
     33server_socket = http://localhost:236/
    3134
    3235# Process model, using pthreads (thread) or processes (fork)
    3336process_model = fork
    34 
    35 enable_ical_get=yes
    3637
    3738##############################################################
     
    4142log_method = file
    4243
    43 # Loglevel (0=no logging, 5=full logging)
    44 log_level = 2
     44# Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug))
     45#log_level = 3
    4546
    4647# Logfile for log_method = file, use '-' for stderr
     
    4950# Log timestamp - prefix each log line with timestamp in 'file' logging mode
    5051log_timestamp = 1
     52
     53# Buffer logging in what sized blocks. 0 for line-buffered (syslog-style).
     54#log_buffer_size = 0
    5155
    5256##############################################################
     
    6367
    6468# Client verify file and/or path
    65 ssl_verify_file = 
     69ssl_verify_file =
    6670ssl_verify_path =
     71
     72# SSL protocols to use, space-separated list of protocols
     73# (SSLv3 TLSv1 TLSv1.1 TLSv1.2); prefix with ! to lock out a protocol.
     74#ssl_protocols =
     75
     76# SSL ciphers to use, set to 'ALL' for backward compatibility
     77ssl_ciphers = ALL:!LOW:!SSLv2:!EXP:!aNULL
     78
     79# Prefer the server's order of SSL ciphers over client's
     80ssl_prefer_server_ciphers = no
    6781
    6882##############################################################
     
    7589default_charset = utf-8
    7690
     91# Enable the iCalendar GET method for downloading calendars
     92enable_ical_get = yes
  • npl/mailserver/kopano_conf/root/etc/kopano/monitor.cfg

    r6165e17 r2c1b61a  
    22# KOPANO MONITOR SETTINGS
    33
     4# Server Unix socket location
     5#server_socket = file:///var/run/kopano/server.sock
     6
     7# in a multi-server environment, which servers to monitor (default all)
     8servers =
    49
    510# drop privileges and run the process as this user
    6 run_as_user = kopano
     11#run_as_user = kopano
    712
    813# drop privileges and run the process as this group
    9 run_as_group = kopano
     14#run_as_group = kopano
    1015
     16# create a pid file for stopping the service via the init.d scripts
     17#pid_file = /var/run/kopano/monitor.pid
    1118
    1219# run server in this path (when not using the -F switch)
    13 running_path = /
     20#running_path = /var/lib/kopano
    1421
    1522##############################################################
     
    1926log_method      =       file
    2027
    21 # Loglevel (0=no logging, 5=full logging)
    22 log_level       =       2
     28# Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug))
     29#log_level      =       3
    2330
    2431# Logfile for log_method = file, use '-' for stderr
     
    2835log_timestamp   =       1
    2936
     37# Buffer logging in what sized blocks. 0 for line-buffered (syslog-style).
     38#log_buffer_size = 0
     39
    3040##############################################################
    3141# MONITOR SSL LOGIN SETTINGS
    3242#
    33 # Note: server_socket must be set to https://servername:portname/kopano
     43# Note: server_socket must be set to https://servername:portname/
    3444#       to use this type of login method
    3545
    36 # Login to the Kopano server using this SSL Key
    37 sslkey_file = /etc/kopano/ssl/monitor.pem
     46# Login to the storage server using this SSL Key
     47#sslkey_file = /etc/kopano/ssl/monitor.pem
    3848
    3949# The password of the SSL Key
    40 sslkey_pass = replace-with-monitor-cert-password
     50#sslkey_pass = replace-with-monitor-cert-password
     51
     52##############################################################
     53# KOPANO MONITOR INTERVAL SETTINGS
     54
     55# Quota check interval (in minutes)
     56quota_check_interval = 15
    4157
    4258##############################################################
     
    4662mailquota_resend_interval = 1
    4763
    48 # Templates to be used for quota emails which are send to the user
     64# Template to be used for quota emails which are sent to the user
    4965# when the various user quota levels have been exceeded.
    50 userquota_warning_template  =   /etc/kopano/quotamail/userwarning.mail
    51 userquota_soft_template     =   /etc/kopano/quotamail/usersoft.mail
    52 userquota_hard_template     =   /etc/kopano/quotamail/userhard.mail
     66userquota_warning_template = /etc/kopano/quotamail/userwarning.mail
    5367
    54 # Templates to be used for quota emails which are send to the company administrators
    55 # when the various company quota levels have been exceeded.
    56 companyquota_warning_template   =   /etc/kopano/quotamail/companywarning.mail
    57 companyquota_soft_template      =   /etc/kopano/quotamail/companysoft.mail
    58 companyquota_hard_template      =   /etc/kopano/quotamail/companyhard.mail
     68# Templates to be used for quota emails which are sent to the company administrators
     69# when the company quota level has been exceeded.
     70companyquota_warning_template = /etc/kopano/quotamail/companywarning.mail
  • npl/mailserver/kopano_conf/root/etc/kopano/search.cfg

    r6165e17 r2c1b61a  
    33
    44# Location of the index files
    5 index_path          = /home/system/kopano_index/
     5# index_path          =   /var/lib/kopano/search
     6index_path          =   /home/system/kopano_index/
    67
    78# run as specific user
    8 run_as_user         = kopano
     9#run_as_user         = kopano
    910
    1011# run as specific group
    11 run_as_group        = kopano
     12#run_as_group        = kopano
    1213
     14# control pid file
     15#pid_file            =   /var/run/kopano/search.pid
    1316
    1417# run server in this path (when not using the -F switch)
    15 running_path        =   /
     18#running_path = /var/lib/kopano
    1619
    1720# Limit the number of results returned (0 = don't limit)
    18 limit_results           =       0
    19 
     21limit_results           =       1000
    2022
    2123##############################################################
    22 # CONNECTION TO KOPANO SERVER SETTINGS
     24# CONNECTION TO STORAGE SERVER SETTINGS
    2325#
    2426
     27# Socket to find the connection to the storage server.
     28# Use https to reach servers over the network
     29#server_socket = file:///var/run/kopano/server.sock
    2530
    26 # Login to the Kopano server using this SSL Key
     31# Login to the storage server using this SSL Key
    2732#sslkey_file         = /etc/kopano/ssl/search.pem
    2833
     
    3439#
    3540
     41# binding address
     42# To setup for multi-server, use: http://0.0.0.0:port or https://0.0.0.0:port
     43server_bind_name   =   file:///var/run/kopano/search.sock
    3644
    3745# File with RSA key for SSL, used then server_bind_name uses https
    38 #ssl_private_key_file= /etc/kopano/search/privkey.pem
     46ssl_private_key_file = /etc/kopano/search/privkey.pem
    3947
    4048# File with certificate for SSL, used then server_bind_name uses https
    41 #ssl_certificate_file= /etc/kopano/search/cert.pem
     49ssl_certificate_file = /etc/kopano/search/cert.pem
    4250
    4351##############################################################
     
    4755log_method          =   file
    4856
    49 # Loglevel (0=no logging, 5=full logging, 6=debugging)
    50 log_level           =   5
     57# Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug))
     58#log_level           =   3
    5159
    5260# Logfile for log_method = file, use '-' for stderr
     
    5664log_timestamp       =   1
    5765
    58 log_buffer_size = 0
    5966
    6067##############################################################
    6168# ADVANCED INDEXED SEARCH SETTINGS
     69
     70# Back end search engine (currently only xapian is supported)
     71#search_engine = xapian
    6272
    6373# Size of indexing cache (used for indexing only, not for searching)
     
    6878#index_exclude_properties = 007D 0064 0C1E 0075 678E 678F
    6979
    70 ##############################################################
    71 # INDEX OPTIMIZATION SCHEDULE
     80# Number of indexing processes used during initial indexing
     81# Setting this to a higher value can greatly speed up initial indexing,
     82# especially when attachments are indexed.
     83index_processes         =   1
    7284
    73 # Start the optimization routine at this hour, in 24h notation.
    74 #optimize_start = 2
     85# Index junk folder
     86#index_junk = yes
    7587
    76 # Stop the optimization routine at this hour, in 24h notation.
    77 # The current index that is being optimized is finished before stopping.
    78 #optimize_stop = 5
    79 
    80 # Only optimize indexes which wern't optimized for the past X days.
    81 #optimize_age = 7
     88# Prepare search suggestions ("did-you-mean?") during indexing
     89# This takes up a large percentage of the used disk space
     90#suggestions = yes
    8291
    8392##############################################################
     
    8998# Maximum file size for attachments
    9099index_attachment_max_size = 5M
    91 
    92 # Scripts to attachment to text parser
    93 index_attachment_parser = /etc/kopano/searchscripts/attachments_parser
    94 
    95 # Maximum amount of memory which a parser may use in bytes (set to 0 for unlimited)
    96 # If this maximum is exceeded the parser will be killed
    97 index_attachment_parser_max_memory = 0
    98 
    99 # Maximim amount of CPU time (in seconds) which a parser may spend on parsing (set to 0 for unlimited)
    100 # If this maximum is exceeded the parser will be killed
    101 index_attachment_parser_max_cputime = 0
    102 
    103 # Filter out parsing of attachment which has a mimetype from this list
    104 # Only the first part of the mime needs to be given, like 'image'.
    105 # This field is SPACE separated
    106 index_attachment_mime_filter =
    107 
    108 # Filter out parsing of attachment which has an extension from this list
    109 # (only tested if mimetype was not found on the attachment)
    110 # This field is SPACE separated
    111 index_attachment_extension_filter =
    112 
    113 #number of parallel indexers
    114 index_processes=4
    115 
  • npl/mailserver/kopano_conf/root/etc/kopano/server.cfg

    r6165e17 r2c1b61a  
    22# SERVER SETTINGS
    33
    4 # IP Address to bind to (0.0.0.0 for ANY)
    5 # Set to 127.0.0.1 if connections should only come from localhost
     4# IP Address to bind to (empty for ANY)
     5# Set to ::1 or 127.0.0.1 if connections should only come from localhost
    66# and through the webserver proxy
    7 server_bind             = 0.0.0.0
     7#server_bind            =
    88
    99# Accept normal TCP connections (not recommended to disable)
     
    1313server_tcp_port         = 236
    1414
    15 # Accept unix pipe connections (not recommended to disable)
     15# Accept Unix pipe connections (not recommended to disable)
    1616server_pipe_enabled     = yes
    1717
     18# Unix socket location
     19server_pipe_name        = /var/run/kopano/server.sock
     20
     21# Priority Unix socket location
     22server_pipe_priority    = /var/run/kopano/prio.sock
    1823
    1924# Name for identifying the server in a multi-server environment
    2025server_name = Kopano
    2126
     27# Override the hostname of this server, used by Kerberos SSO if enabled
     28server_hostname =
     29
    2230# Database engine (mysql)
    2331database_engine         = mysql
    2432
    25 # Allow connections from normal users through the unix socket
     33# Allow connections from normal users through the Unix socket
    2634allow_local_users       = yes
    2735
     
    2937# field is SPACE separated
    3038# eg: local_admin_users = root vmail
     39#local_admin_users      = root kopano
    3140local_admin_users       = root alias
     41
     42# The user has full rights on a folder by default, uncomment the following line to disable this.
     43# owner_auto_full_access = false
     44owner_auto_full_access = true
    3245
    3346# e-mail address of the Kopano System user
     
    3548
    3649# drop privileges and run the process as this user
    37 run_as_user             = kopano
     50#run_as_user            = kopano
    3851
    3952# drop privileges and run the process as this group
    40 run_as_group            = kopano
    41 
     53#run_as_group           = kopano
     54
     55# create a pid file for stopping the service via the init.d scripts
     56#pid_file               = /var/run/kopano/server.pid
    4257
    4358# run server in this path (when not using the -F switch)
    44 running_path = /
     59#running_path = /var/lib/kopano
     60
     61# Use given allocator library. Values like libtcmalloc.so.4,
     62# libtcmalloc_minimal.so.4 and libjemalloc.so.2 would work.
     63#allocator_library = default
     64
     65# create memory coredumps upon crash [no, systemdefault, yes]
     66#coredump_enabled = systemdefault
    4567
    4668# session timeout for clients. Values lower than 300 will be upped to 300
     
    4870# seconds, then the session is killed.
    4971session_timeout         = 300
    50 session_ip_check = yes
    51 
    52 # Socket to connect to for license server
    53 license_socket          = /var/run/kopanod/kopano-licensed
    54 
    55 # Time (in seconds) to wait for a connection to the license server before
    56 # terminating the request.
    57 license_timeout = 10
     72
     73# for temporary files
     74# consider mounting a `tmpfs' underneath this path (wherever you
     75# point it to)
     76tmp_path = /tmp
    5877
    5978##############################################################
    6079# LOG SETTINGS
    6180
    62 # Logging method (syslog, file)
    63 # (DatuX: use syslog for now, because file seems to triggers a glibc locking bug in __pthread_rwlock_rdlock_slow, at least in 2.21)
    64 log_method              = syslog
     81# Logging method (syslog, file), syslog facility is 'mail'
     82log_method              = file
    6583
    6684# Logfile (for log_method = file, '-' for stderr)
    6785log_file                = /var/log/kopano/server.log
    6886
    69 # Loglevel (0=no logging, 5=full logging)
    70 log_level               = 2
     87# Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug))
     88#log_level              = 3
    7189
    7290# Log timestamp - prefix each log line with timestamp in 'file' logging mode
    7391log_timestamp           = 1
    7492
     93# Buffer logging in what sized blocks. 0 for line-buffered (syslog-style).
     94#log_buffer_size = 0
     95
     96##############################################################
     97# AUDIT LOG SETTINGS
     98
     99# Audit logging is by default not enabled
     100audit_log_enabled       = no
     101
     102# Audit logging method (syslog, file), syslog facility is 'authpriv'
     103audit_log_method        = syslog
     104
     105# Audit logfile (for log_method = file, '-' for stderr)
     106audit_log_file          = /var/log/kopano/audit.log
     107
     108# Audit loglevel (0=no logging, 1=full logging)
     109audit_log_level         = 1
     110
     111# Audit log timestamp - prefix each log line with timestamp in 'file' logging mode
     112audit_log_timestamp     = 1
     113
    75114##############################################################
    76115# MYSQL SETTINGS (for database_engine = mysql)
    77116
    78117# MySQL hostname to connect to for database access
    79 #mysql_host             = localhost
    80 mysql_socket            = /var/run/mysql/mysql.sock
     118mysql_host              = localhost
    81119
    82120# MySQL port to connect with (usually 3306)
     
    89127mysql_password          = %mysql_passwd%
    90128
     129# Override the default MySQL socket to access mysql locally
     130# Works only if the mysql_host value is empty or 'localhost'
     131#mysql_socket           =
     132mysql_socket            = /var/run/mysql/mysql.sock
     133
    91134# Database to connect to
    92135mysql_database          = zarafa
    93136
    94 # Where to place attachments. Value can be 'database' or 'files'
     137# Where to place attachments. Value can be 'database', 'files' or 's3'
    95138attachment_storage      = files
    96139
     140# Enable fsync as method to make sure attachments are stored on disk where
     141# supported and will not be buffered by OS and/or filesystem. Please note
     142# this setting will lower attachment write performance depending on your
     143# environment but enhances data safety with disaster recovery.
     144# Only affects 'files' attachment storage backend.
     145attachment_files_fsync  = yes
     146
    97147# When attachment_storage is 'files', use this path to store the files
     148# When attachment_storage is 's3', use this path to set a prefix to all
     149# attachment data of a certain cluster, for example 'attach'
    98150attachment_path         = /home/system/kopano
    99151
     
    103155
    104156##############################################################
     157# S3 STORAGE SETTINGS (for attachment_storage = s3)
     158
     159# The hostname of the entry point to the S3 cloud where the bucket is located
     160# If you are using miniio or an other S3 compatible implementation that
     161# is using another port, you can specify the port with hostname:port.
     162#attachment_s3_hostname = s3-eu-west-1.amazonaws.com
     163
     164# The region where the bucket is located
     165#attachment_s3_region = eu-west-1
     166
     167# The protocol that should be used to connect to S3, 'http' or 'https' (preferred)
     168#attachment_s3_protocol = https
     169
     170# The URL style of the bucket, "virtualhost" or "path"
     171#attachment_s3_uristyle = virtualhost
     172
     173# The access key id of your S3 account
     174#attachment_s3_accesskeyid =
     175
     176# The secret access key of your S3 account
     177#attachment_s3_secretaccesskey =
     178
     179# The bucket name in which the files will be stored
     180#attachment_s3_bucketname =
     181
     182##############################################################
    105183#  SSL SETTINGS
    106184
    107185# enable SSL support in server
    108 server_ssl_enabled      = no
     186server_ssl_enabled      = yes
    109187
    110188# Listen for SSL connections on this port
     
    115193
    116194# Password of Server certificate
    117 server_ssl_key_pass     =
     195server_ssl_key_pass     = replace-with-server-cert-password
    118196
    119197# Required Certificate Authority of server
    120 server_ssl_ca_file      = /etc/kopano/ssl/server.crt
     198server_ssl_ca_file      = /usr/webint/ssl/server.crt
    121199
    122200# Path with CA certificates, e.g. /etc/ssl/certs
    123201server_ssl_ca_path      =
    124202
     203# SSL protocols to use, space-separated list of protocols
     204# (SSLv3 TLSv1 TLSv1.1 TLSv1.2); prefix with ! to lock out a protocol.
     205#server_ssl_protocols =
     206
     207# SSL ciphers to use, set to 'ALL' for backward compatibility
     208server_ssl_ciphers = ALL:!LOW:!SSLv2:!EXP:!aNULL
     209
     210# Prefer the server's order of SSL ciphers over client's
     211server_ssl_prefer_server_ciphers = no
     212
    125213# Path of SSL Public keys of clients
    126214sslkeys_path            = /etc/kopano/sslkeys
     
    131219# Number of server threads
    132220# default: 8
     221#threads                                =       8
    133222threads                         =       16
    134223
     
    146235server_max_keep_alive_requests  =       100
    147236
    148 # SOAP recv timeout value
     237# SOAP recv timeout value (time between requests)
    149238# default: 5
    150239server_recv_timeout     =       5
     240
     241# SOAP read timeout value (time during requests)
     242# default: 60
     243server_read_timeout     =       60
    151244
    152245# SOAP send timeout value
     
    158251
    159252# Softdelete clean cycle (in days) 0=never running
     253# softdelete_lifetime   = 30
    160254# (SYN-3 uses a cronjob)
    161255softdelete_lifetime     = 0
     
    164258sync_lifetime           = 90
    165259
    166 # Set to 'yes' if all changes (for synchronization) to messages should be logged to the database
    167 sync_log_all_changes = yes
    168 
     260# Set to 'yes' if you have Kerberos or NTLM correctly configured for single sign-on
     261enable_sso = no
    169262
    170263# Set to 'yes' if you want to show the GAB to your users
    171264enable_gab = yes
    172265
    173 # Synchronize GAB users on every open of the GAB (otherwise, only on
    174 # kopano-admin --sync)
    175 sync_gab_realtime = yes
    176 
    177266# Authentication can be through plugin (default, recommended), pam or kerberos
    178267auth_method = plugin
     
    184273#############################################################
    185274# CACHE SETTINGS
    186 
     275#
     276# To see the live cache usage, use 'kopano-stats --system'.
    187277#SYN-3 caching config for around 1000 users.
    188278
     279# Size in bytes of the 'cell' cache (should be set as high as you can afford to set it)
     280#cache_cell_size                                = 256M
    189281# around 25% of total RAM size
    190282cache_cell_size                 = 1G
    191283
     284# Size in bytes of the 'object' cache
     285#cache_object_size = 16M
    192286#  about 100kb per user
    193287cache_object_size               = 100M
    194288
     289# Size in bytes of the 'indexed object' cache
     290#cache_indexedobject_size = 32M
    195291# about 512kb per user
    196292cache_indexedobject_size        = 512M
    197293
    198 cache_store_size=512M
     294
     295# Size in bytes of the userquota details
     296cache_quota_size                        = 1M
    199297
    200298# Lifetime for userquota details
    201299cache_quota_lifetime            = 1
    202300
     301# Size in bytes of the acl cache
     302cache_acl_size                          = 1M
     303
     304# Size in bytes of the store id/guid cache
     305#cache_store_size                       = 1M
     306cache_store_size=512M
     307
     308# Size in bytes of the 'user id' cache (this is allocated twice)
     309cache_user_size                         = 1M
     310
     311# Size in bytes of the 'user details' cache
     312cache_userdetails_size          = 25M
     313
    203314# Lifetime for user details
    204 cache_userdetails_lifetime      = 5
    205 
    206 # Thread size in KB, default is 512
    207 # WARNING: Do not set too small, your server WILL crash
    208 thread_stacksize = 512
     315cache_userdetails_lifetime      = 0
     316
     317# Size in bytes of the server details (multiserver setups only)
     318cache_server_size                       = 1M
     319
     320# Lifetime for server details (multiserver setups only)
     321cache_server_lifetime   = 30
     322
    209323
    210324##############################################################
     
    225339quota_hard              = 0
    226340
    227 # The default Warning Quota Level. Set to 0 to disable this level.
    228 # The company administrator will receive an email when this level is reached. Value is in Mb. Default value is 0.
     341# The default Warning Quota Level for multitenant public stores. Set to 0 to disable this level.
     342# The tenant administrator will receive an email when this level is reached. Value is in Mb. Default value is 0.
    229343companyquota_warn      = 0
    230344
     345
    231346##############################################################
    232347#  USER PLUGIN SETTINGS
    233348
    234349# Name of the plugin that handles users
    235 # Required, default = ldap
     350# Required, default = db
    236351# Values: ldap, unix, db
    237 #user_plugin            = db
    238352user_plugin             = ldap
    239353
    240 # configuration file of the user plugin, examples can be found in /usr/share/kopano/example-config
     354# configuration file of the user plugin, examples can be found in /usr/share/doc/kopano/example-config
    241355user_plugin_config      = /etc/kopano/ldap.cfg
    242 
    243 # location of the kopano plugins
    244 # if you have a 64bit distribution, this probably should be changed to /usr/lib64/kopano
    245 plugin_path             = /usr/lib/kopano
    246356
    247357# scripts which create stores for users from an external source
     
    254364deletecompany_script    =       /etc/kopano/userscripts/deletecompany
    255365
     366# Set this option to 'yes' to skip the creation and deletion of new users
     367# The action will be logged, so you can see if your changes to the plugin
     368# configuration are correct.
     369user_safe_mode = no
     370
    256371##############################################################
    257372# MISC SETTINGS
    258373
    259 # Enable multi-company environment
    260 # When set to true it is possible to create companies within the
     374# Enable multi-tenancy environment
     375# When set to true it is possible to create tenants within the
    261376# kopano instance and assign all users and groups to particular
    262 # companies.
    263 # When set to false, the normal single-company environment is created.
     377# tenants.
     378# When set to false, the normal single-tenancy environment is created.
    264379enable_hosted_kopano = false
    265380
    266381# Enable multi-server environment
    267 # When set to true it is possible to place users and companies on
     382# When set to true it is possible to place users and tenants on
    268383# specific servers.
    269384# When set to false, the normal single-server environment is created.
     
    273388# Allowed variables:
    274389#  %u Username
    275 #  %f Fullname
    276 #  %c Companyname
     390#  %f Full name
     391#  %c Tenant's name
    277392# default: %f
    278393storename_format = %f
    279394
    280 # Loginname format (for Hosted installations)
     395# Loginname format (for Multi-tenancy installations)
    281396# When the user does not login through a system-wide unique
    282397# username (like the email address) a unique name is created
    283 # by combining the username and the companyname.
     398# by combining the username and the tenantname.
    284399# With this configuration option you can set how the
    285400# loginname should be built up.
     
    288403#
    289404# Allowed variables:
    290 #  %u username
    291 #  %c companyname
     405#  %u Username
     406#  %c Teantname
    292407#
    293408# default: %u
    294409loginname_format = %u
    295 
    296 # Set to yes for Windows clients to be able to download the latest
    297 # Kopano Outlook client from the Kopano server
    298 client_update_enabled = false
    299 
    300 # Place the correct Kopano Outlook Client in this directory for
    301 # Windows clients to download through the Kopano server
    302 client_update_path = /var/lib/kopano/client
    303 
    304 # Recieve update information from the client (0 = disabled, 1 = only on error, 2 = log always)
    305 #client_update_log_level = 1
    306 # Log location for the client auto update files
    307 #client_update_log_path = /var/log/kopano/autoupdate
    308410
    309411# Everyone is a special internal group, which contains every user and group
     
    317419hide_system = yes
    318420
     421# Use Indexing service for faster searching.
     422# Enabling this option requires the kopano-search service to
     423# be running.
     424search_enabled = yes
     425
     426# Path to the kopano-search service, this option is only required
     427# if the server is going to make use of the indexing service.
     428search_socket = file:///var/run/kopano/search.sock
     429
     430# Time (in seconds) to wait for a connection to the kopano-search service
     431# before terminating the indexed search request.
     432search_timeout = 10
     433
    319434# Allow enhanced ICS operations to speedup synchronization with cached profiles.
    320435# default: yes
    321436enable_enhanced_ics = yes
    322437
    323 # AUDIT LOG SETTINGS
    324 # Audit logging is by default not enabled
    325 audit_log_enabled     = no
    326 # Audit logging method (syslog, file), syslog facility is 'authpriv'
    327 audit_log_method      = syslog
    328 # Audit logfile (for log_method = file, '-' for stderr)
    329 audit_log_file                = /var/log/kopano/audit.log
    330 # Audit loglevel (0=no logging, 1=full logging)
    331 audit_log_level               = 1
    332 # Audit log timestamp - prefix each log line with timestamp in 'file' logging mode
    333 audit_log_timestamp   = 1
    334 
    335 # Disable features for users. Default all features are enabled. This
    336 # list is space separated. Currently valid values: imap
    337 disabled_features =
    338 
    339 
    340 #The server has a list of deferred writes to the tproperties table, to improve overall I/O performance. The number of deferred writes is kept below this value; setting it high will allow writes to be more efficient by grouping more writes together, but may slow down reading, and setting it low will force writes to complete directly, but speed up reading of tables.
    341 #max_deferred_records=
    342 #max_deferred_records_folder=
    343 
    344 
    345 
    346 # Enabling this option requires the kopano-search service to
    347 # be running.
    348 search_enabled = yes
    349 
    350438# SQL Procedures allow for some optimized queries when streaming with enhanced ICS.
    351439# This is default disabled because you must set 'thread_stack = 256k' in your
    352440# MySQL server config under the [mysqld] tag and restart your MySQL server.
     441#enable_sql_procedures = no
    353442enable_sql_procedures = yes
    354443
    355 
    356 # Time (in seconds) to wait for a connection to the kopano-search service
    357 # before terminating the indexed search request.
    358 search_timeout = 10
     444# Synchronize GAB users on every open of the GAB (otherwise, only on
     445# kopano-admin --sync)
     446sync_gab_realtime = yes
     447
     448# Disable features for users. This list is space separated.
     449# Currently valid values: imap pop3 mobile outlook
     450#disabled_features = imap pop3
     451disabled_features =
     452
     453# Maximum number of deferred records in total
     454max_deferred_records = 0
     455
     456# Maximum number of deferred records per folder
     457max_deferred_records_folder = 20
    359458
    360459# Restrict the permissions that admins receive to folder permissions only. Please
     
    375474# and the value of '*' is used to indicate that all connections are proxied
    376475proxy_header =
     476
     477# Enable/disable reminders for shared stores
     478shared_reminders = yes
  • npl/mailserver/kopano_conf/root/etc/kopano/spooler.cfg

    r6165e17 r2c1b61a  
    33
    44# Outgoing mailserver name or IP address
    5 # Use 127.0.0.1 to disable virusscanning for webmail. (not recommended)
     5; smtp_server   =       localhost
    66smtp_server     =       127.0.0.3
    77
     8# Port number for outgoing mailserver
     9smtp_port = 25
     10
     11# Server Unix socket location
     12#server_socket = file:///var/run/kopano/server.sock
    813
    914# drop privileges and run the process as this user
    10 run_as_user = kopano
     15#run_as_user = kopano
    1116
    1217# drop privileges and run the process as this group
    13 run_as_group = kopano
     18#run_as_group = kopano
    1419
     20# create a pid file for stopping the service via the init.d scripts
     21#pid_file = /var/run/kopano/spooler.pid
    1522
    1623# run server in this path (when not using the -F switch)
    17 running_path = /
     24#running_path = /var/lib/kopano
    1825
    19 # The us-ascii charset will be upgraded to this charset, to allow more
    20 # use of high-characters. Not used when always_send_utf8 is enabled.
    21 charset_upgrade = windows-1252
     26# create memory coredumps upon crash [no, systemdefault, yes]
     27#coredump_enabled = systemdefault
    2228
    23 # Request SMTP Delivery Status Notifications if the MTA support it
    24 enable_dsn = yes
     29# for temporary files
     30# consider mounting a `tmpfs' underneath this path (wherever you
     31# point it to)
     32tmp_path = /tmp
    2533
    2634##############################################################
     
    3038log_method      =       file
    3139
    32 # Loglevel (0=no logging, 5=full logging)
    33 log_level       =       3
     40# Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug))
     41#log_level      =       3
    3442
    3543# Logfile for log_method = file, use '-' for stderr
     
    3947log_timestamp   =       1
    4048
     49# Buffer logging in what sized blocks. 0 for line-buffered (syslog-style).
     50#log_buffer_size = 0
    4151
    4252##############################################################
    4353# SPOOLER SSL LOGIN SETTINGS
    44 # 
    45 # Note: server_socket must be set to https://servername:portname/kopano
     54#
     55# Note: server_socket must be set to https://servername:portname/
    4656#       to use this type of login method
    4757
    48 # Login to the Kopano server using this SSL Key
    49 sslkey_file = /etc/kopano/ssl/spooler.pem
     58# Login to the storage server using this SSL Key
     59#sslkey_file = /etc/kopano/ssl/spooler.pem
    5060
    5161# The password of the SSL Key
    52 sslkey_pass = replace-with-server-cert-password
     62#sslkey_pass = replace-with-server-cert-password
    5363
    5464##############################################################
     
    7686# Set this value to 'yes' to let the spooler always send emails with
    7787# delegates (other user than yourself in the From: header)
    78 # In installations before 6.20, this value was always 'yes'
     88# In installations before 6.20, this value was always 'yes'.
     89# IMPORTANT: This feature overrides "send-as" functionality.
     90# always_send_delegates = no
    7991always_send_delegates = yes
    80 
    81 # This does the same as always_send_delegates, but gets rid of the 'on behalf of' text.
    82 #always_send_as = yes
    8392
    8493# Set this value to 'no' if you do NOT want to allow redirected e-mails
     
    9099copy_delegate_mails = yes
    91100
    92 # Setting this option to no will disallow sending to the everyone group.
    93 allow_send_to_everyone=yes
     101# Allow to forward and sent a meeting request as delegate Kopano and
     102# SMTP user.
     103allow_delegate_meeting_request = yes
     104
     105# Allow users to send email to the 'everyone' group
     106allow_send_to_everyone = yes
    94107
    95108##############################################################
    96 # SPOOLER MEETING REQUEST SETTINGS
     109# SPOOLER OUTPUT SETTINGS
    97110
    98111# Set this value to 'yes' to always send meeting request information
    99 # using TNEF method (winmail.dat attachments)
    100 # Otherwise, the meeting request information is sent using
    101 # iCalendar (calendar.ics attachment).
     112#   using TNEF method (winmail.dat attachments).
     113#   Otherwise, the meeting request information is sent using
     114#   iCalendar (calendar.ics attachment).
     115# Mail bodies created in RTF text format will also use TNEF.
    102116always_send_tnef = no
     117
     118# Send all e-mail always using the UTF-8 charset.
     119# Normally, the requested charset is used, which can be any charset.
     120always_send_utf8 = no
     121
     122# The us-ascii charset will be upgraded to this charset, to allow more
     123# use of high-characters. Not used when always_send_utf8 is enabled.
     124charset_upgrade = windows-1252
     125
     126# Request SMTP Delivery Status Notifications if the MTA support it
     127enable_dsn = yes
    103128
    104129##############################################################
     
    120145# This will do nothing if no archive is attached to the source mailbox.
    121146archive_on_send = no
    122 
    123 ####################################
     147##############################################################
    124148# SPOOLER PLUGIN SETTINGS
    125149
    126150# Enable the spooler plugin framework
    127 plugin_enabled = no
     151plugin_enabled = yes
     152
    128153# Path to the spooler plugin manager
    129154plugin_manager_path = /usr/share/kopano-spooler/python
     155
    130156# Path to the activated spooler plugins.
    131157#   This folder contains symlinks to the kopano plugins and custom scripts. The plugins are
     
    136162#  $ ln -s /usr/share/kopano-spooler/python/plugins/disclaimer.py /var/lib/kopano/spooler/plugins/disclaimer.py
    137163plugin_path = /var/lib/kopano/spooler/plugins
    138 
    139 
Note: See TracChangeset for help on using the changeset viewer.