protocols = imap lmtp sieve

ssl = yes
ssl_cert = </etc/dovecot/private/dovecot.pem
ssl_client_ca_dir = /etc/ssl/certs
ssl_dh = </usr/share/dovecot/dh.pem
ssl_key = </etc/dovecot/private/dovecot.key

service stats {
	inet_listener http {
		port = 9900
	}
}

metric auth_success {
  filter = (event=auth_request_finished AND success=yes)
}

metric imap_command {
  filter = event=imap_command_finished
  group_by = cmd_name tagged_reply_state
}

metric smtp_command {
  filter = event=smtp_server_command_finished
  group_by = cmd_name status_code duration:exponential:1:5:10
}

metric mail_delivery {
  filter = event=mail_delivery_finished
  group_by = duration:exponential:1:5:10
}

service imap-login {
	inet_listener imap {
		port = 0
	}
	inet_listener imaps {
		port = 993
	}
}

service lmtp {
	unix_listener /var/spool/postfix/private/dovecot-lmtp {
		mode = 0660
		group = postfix
		user = postfix
	}
	# TODO
	user = vmail
}

service auth {
	unix_listener /var/spool/postfix/private/auth {
		mode = 0660
		user = postfix
		group = postfix
	}
	# TODO
	unix_listener auth-userdb {
		mode = 0660
		user = vmail
		group = vmail
	}
}

protocol imap {
	mail_plugins = imap_sieve
	mail_max_userip_connections = 20 # TODO
	imap_idle_notify_interval = 29 mins # TODO
}

protocol lmtp {
	postmaster_address = {{ dovecot__lmtp_postmaster_address | enquote }}
	mail_plugins = sieve notify push_notification # TODO sieve ??
}

auth_default_realm = {{ dovecot__auth_default_realm | enquote }}

auth_mechanisms = plain
auth_username_format = %Lu
disable_plaintext_auth = yes

mail_uid = vmail
mail_gid = vmail
mail_privileged_group = vmail

mail_home = /srv/mail/%d/%n
mail_location = maildir:~/mail:LAYOUT=fs


# TODO userdb vs passdb
passdb {
	driver = passwd-file
	args = username_format=%u /etc/dovecot/auth
}

namespace inbox {
	inbox = yes

	mailbox Spam {
		auto = subscribe
		special_use = \Junk
	}

	mailbox Trash {
		auto = subscribe
		special_use = \Trash
	}

	mailbox Drafts {
		auto = subscribe
		special_use = \Drafts
	}

	mailbox Sent {
		auto = subscribe
		special_use = \Sent
	}
}