1# Suggested Murder (Cyrus Aggregation) frontend imapd.conf
2# See imapd.conf(5) for more information and more options
3
4# Space-separated users who have admin rights for all services.
5# This MUST include the Murder user (which need not be named "murder")
6admins: cyrus murder
7
8###################################################################
9## Cyrus Aggregation - Murder - frontend configuration.
10## This server will merely refer clients to the pertinent backend,
11## or proxy requests for them, as dictated by local security regime.
12## For more information:
13## http://www.cyrusimap.org/imap/reference/admin/murder/murder-installation.html
14###################################################################
15
16# How this host identifies itself to other members of the murder.
17servername: imap1.example.org
18
19# Whitespace separated list of backend server names.  Used for finding
20# server with the most available free space for proxying CREATE.
21serverlist: mailbox
22
23# Authentication credentials
24mupdate_server: postman.example.org
25mupdate_username: postman
26mupdate_authname: postman
27mupdate_password: <secret>
28
29# The credentials below must match the account listed in lmtp_admins
30# on the backend servers.
31proxy_authname: mailproxy
32proxy_password: <secret>
33
34# If desired, force use of PLAIN for clients...
35#force_sasl_client_mech: PLAIN
36
37# ...and the same for other servers.
38# Note that each _mechs line is prefixed by the "short" name of the
39# host to which it applies (as listed above).
40#postman_mechs: PLAIN
41#mailbox_mechs: PLAIN
42
43# Permit moving user mailboxes between backends.  If used, this must be
44# set the same on all instances in the murder.
45allowusermoves: true
46
47# If desired, prevent the passing of IMAP referrals to clients.  This
48# could be needed due to fire-walling.  For example, if local policy
49# prohibits global access to the IMAP, Sieve, LMTP, etc. ports of the
50# backend server, then uncomment these lines and the frontend will
51# proxy all services on the client's behalf.
52#proxyd_disable_mailbox_referrals: true
53#sieve_allowreferrals: false
54
55
56###################################################################
57## File, socket and DB location settings.
58###################################################################
59
60# Configuration directory
61configdirectory: /var/lib/cyrus
62
63# Directories for proc and lock files
64proc_path: /run/cyrus/proc
65mboxname_lockpath: /run/cyrus/lock
66
67# Locations for DB files
68# The following DB are recreated upon initialization, so should live in
69# ephemeral storage for best performance.
70duplicate_db_path: /run/cyrus/deliver.db
71ptscache_db_path:  /run/cyrus/ptscache.db
72statuscache_db_path: /run/cyrus/statuscache.db
73tls_sessions_db_path: /run/cyrus/tls_sessions.db
74
75# Which partition to use for default mailboxes
76defaultpartition: default
77partition-default: /var/spool/cyrus/mail
78
79# If sieveusehomedir is false (the default), this directory is searched
80# for Sieve scripts.
81sievedir: /var/spool/sieve
82
83###################################################################
84## Important: KEEP THESE IN SYNC WITH cyrus.conf
85###################################################################
86
87lmtpsocket: /run/cyrus/socket/lmtp
88idlesocket: /run/cyrus/socket/idle
89notifysocket: /run/cyrus/socket/notify
90
91# Syslog prefix. Defaults to cyrus (so logging is done as cyrus/imap
92# etc.)
93syslog_prefix: cyrus
94
95###################################################################
96## Server behaviour settings
97###################################################################
98
99# Space-separated list of HTTP modules that will be enabled in
100# httpd(8).  This option has no effect on modules that are disabled at
101# compile time due to missing dependencies (e.g. libical).
102#
103# Allowed values: caldav, carddav, domainkey, ischedule, rss
104httpmodules: caldav carddav
105
106# If enabled, the partitions will also be hashed, in addition to the
107# hashing done on configuration directories. This is recommended if one
108# partition has a very bushy mailbox tree.
109hashimapspool: true
110
111###################################################################
112## User experience settings
113###################################################################
114
115# Minimum time between POP mail fetches in minutes
116popminpoll: 1
117
118###################################################################
119## User Authentication settings
120###################################################################
121
122# Allow plaintext logins by default (SASL PLAIN)
123allowplaintext: yes
124
125###################################################################
126## SASL library options (these are handled directly by the SASL
127## libraries, refer to SASL documentation for an up-to-date list of
128## these)
129###################################################################
130
131# The mechanism(s) used by the server to verify plaintext passwords.
132# Possible values are "saslauthd", "auxprop", "pwcheck" and
133# "alwaystrue".  They are tried in order, you can specify more than one,
134# separated by spaces.
135sasl_pwcheck_method: saslauthd
136
137# If enabled, the SASL library will automatically create authentication
138# secrets when given a plaintext password. Refer to SASL documentation
139sasl_auto_transition: no
140
141###################################################################
142## SSL/TLS Options
143###################################################################
144
145# File containing the global certificate used for ALL services (imap,
146# pop3, lmtp, sieve)
147#tls_server_cert: /etc/ssl/certs/ssl-cert-snakeoil.pem
148
149# File containing the private key belonging to the global server
150# certificate.
151#tls_server_key: /etc/ssl/private/ssl-cert-snakeoil.key
152
153
154# File containing one or more Certificate Authority (CA) certificates.
155#tls_client_ca_file: /etc/ssl/certs/cyrus-imapd-ca.pem
156
157# Path to directory with certificates of CAs.
158tls_client_ca_dir: /etc/ssl/certs
159
160# The length of time (in minutes) that a TLS session will be cached for
161# later reuse.  The maximum value is 1440 (24 hours), the default.  A
162# value of 0 will disable session caching.
163tls_session_timeout: 1440
164