diff options
| author | Quentin <quentin@deuxfleurs.fr> | 2020-09-12 10:03:48 +0200 |
|---|---|---|
| committer | Quentin <quentin@deuxfleurs.fr> | 2020-09-12 10:03:48 +0200 |
| commit | c4a6cf1534b864d3941c839d4a4dca7e505bd828 (patch) | |
| tree | 3e866768cf39ae947def5b205f74fddfb435725d /app_config/configuration/email/dovecot | |
| parent | 0550647b9348d1e36431400e0832b4340564c658 (diff) | |
| download | infrastructure-c4a6cf1534b864d3941c839d4a4dca7e505bd828.tar.gz infrastructure-c4a6cf1534b864d3941c839d4a4dca7e505bd828.zip | |
Rebase first step
Diffstat (limited to 'app_config/configuration/email/dovecot')
| -rwxr-xr-x | app_config/configuration/email/dovecot/certs.gen | 13 | ||||
| -rw-r--r-- | app_config/configuration/email/dovecot/dovecot-ldap.conf.tpl | 8 |
2 files changed, 21 insertions, 0 deletions
diff --git a/app_config/configuration/email/dovecot/certs.gen b/app_config/configuration/email/dovecot/certs.gen new file mode 100755 index 0000000..f26e917 --- /dev/null +++ b/app_config/configuration/email/dovecot/certs.gen @@ -0,0 +1,13 @@ +#!/bin/bash + +TLSINFO="/C=FR/ST=Bretagne/L=Rennes/O=Deuxfleurs/CN=imap.deuxfleurs.fr" +openssl req \ + -new \ + -newkey rsa:4096 \ + -days 3650 \ + -nodes \ + -x509 \ + -subj ${TLSINFO} \ + -keyout dovecot.key \ + -out dovecot.crt + diff --git a/app_config/configuration/email/dovecot/dovecot-ldap.conf.tpl b/app_config/configuration/email/dovecot/dovecot-ldap.conf.tpl new file mode 100644 index 0000000..9fb1ea6 --- /dev/null +++ b/app_config/configuration/email/dovecot/dovecot-ldap.conf.tpl @@ -0,0 +1,8 @@ +hosts = bottin2.service.2.cluster.deuxfleurs.fr +dn = {{ key "secrets/email/dovecot/ldap_binddn" | trimSpace }} +dnpass = {{ key "secrets/email/dovecot/ldap_bindpwd" | trimSpace }} +base = dc=deuxfleurs,dc=fr +scope = subtree +user_filter = (&(mail=%u)(&(objectClass=inetOrgPerson)(memberOf=cn=email,ou=groups,dc=deuxfleurs,dc=fr))) +pass_filter = (&(mail=%u)(&(objectClass=inetOrgPerson)(memberOf=cn=email,ou=groups,dc=deuxfleurs,dc=fr))) +user_attrs = mail=/var/mail/%{ldap:mail} |