# Listen addresses.
#   - '*' means all available IPv4 addresses.
#   - '[::]' means all available IPv6 addresses.
# Listen on all available addresses by default
listen = * [::]

#base_dir = /var/run/dovecot
mail_plugins = quota mailbox_alias acl

# Enabled mail protocols.
protocols = pop3 imap sieve lmtp

# User/group who owns the message files:
mail_uid = 2000
mail_gid = 2000

# Assign uid to virtual users.
first_valid_uid = 2000
last_valid_uid = 2000

# Logging. Reference: http://wiki2.dovecot.org/Logging
log_path = /var/log/dovecot.log

# Debug
#mail_debug = yes
#auth_verbose = yes
#auth_debug = yes
#auth_debug_passwords = yes
# Possible values: no, plain, sha1.
#auth_verbose_passwords = no

# SSL: Global settings.
# Refer to wiki site for per protocol, ip, server name SSL settings:
# http://wiki2.dovecot.org/SSL/DovecotConfiguration
ssl_protocols = !SSLv2 !SSLv3
ssl = required
verbose_ssl = no
#ssl_ca =</path/to/ca
ssl_cert = </etc/pki/tls/certs/iRedMail.crt
ssl_key = </etc/pki/tls/private/iRedMail.key

# Fix 'The Logjam Attack'
ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
# Dovecot 2.2.6 or greater:
# Specify the wanted DH parameters length
ssl_dh_parameters_length = 2048
ssl_prefer_server_ciphers = yes

# IP ranges specified by login_trusted_networks setting are assumed to be secure.
#login_trusted_networks = 127.0.0.1

# With disable_plaintext_auth=yes AND ssl=required, STARTTLS is mandatory.
# Set disable_plaintext_auth=no AND ssl=yes to allow plain password transmitted
# insecurely.
disable_plaintext_auth = yes
# Allow plain text password per IP address/net
#remote 192.168.0.0/24 {
#   disable_plaintext_auth = no
#}

# Mail location and mailbox format.
mail_location = maildir:%Lh/Maildir/:INDEX=%Lh/Maildir/

# Authentication related settings.
# Append this domain name if client gives empty realm.
auth_default_realm = 

# Authentication mechanisms.
auth_mechanisms = PLAIN LOGIN

# Limits the number of users that can be logging in at the same time.
# Default is 100.
# Note: this value can be overrided by "process_limit =" in service protocol.
# e.g.
#       protocol imap-login {
#           ...
#           process_limit = 500
#       }
#default_process_limit = 100

service auth {
    unix_listener /var/spool/postfix/private/dovecot-auth {
        user = postfix
        group = postfix
        mode = 0666
    }
    unix_listener auth-master {
        user = vmail
        group = vmail
        mode = 0666
    }
    unix_listener auth-userdb {
        user = vmail
        group = vmail
        mode = 0660
    }
}

# LMTP server (Local Mail Transfer Protocol).
# Reference: http://wiki2.dovecot.org/LMTP
service lmtp {
    user = vmail

    # For higher volume sites, it may be desirable to increase the number of
    # active listener processes. A range of 5 to 20 is probably good for most
    # sites.
    process_min_avail = 5

    # Logging.
    # Require 'info_log_path =' in 'protocol lmtp {}' block.
    executable = lmtp -L

    # Listening on socket file and TCP
    unix_listener /var/spool/postfix/private/dovecot-lmtp {
        user = postfix
        group = postfix
        mode = 0600
    }

    inet_listener lmtp {
        # Listen on localhost
        address = 127.0.0.1
        port = 24
    }
}

# Virtual mail accounts.
userdb {
    args = /etc/dovecot/dovecot-mysql.conf
    driver = sql
}
passdb {
    args = /etc/dovecot/dovecot-mysql.conf
    driver = sql
}

# Master user.
# Master users are able to log in as other users. It's also possible to
# directly log in as any user using a master password, although this isn't
# recommended.
# Reference: http://wiki2.dovecot.org/Authentication/MasterUsers
auth_master_user_separator = *
passdb {
    driver = passwd-file
    args = /etc/dovecot/dovecot-master-users
    master = yes
}

plugin {
    auth_socket_path = /var/run/dovecot/auth-master

    quota = dict:user::proxy::quotadict
    quota_rule = *:storage=1G
    #quota_rule2 = *:messages=0
    #quota_rule3 = Trash:storage=1G
    #quota_rule4 = Junk:ignore

    # Quota warning.
    # If user suddenly receives a huge mail and the quota jumps from
    # 85% to 95%, only the 95% script is executed.
    quota_warning = storage=85%% quota-warning 85 %u
    quota_warning2 = storage=90%% quota-warning 90 %u
    quota_warning3 = storage=95%% quota-warning 95 %u

    # Plugin: expire.
    #expire = Trash 7 Trash/* 7 Junk 30
    #expire_dict = proxy::expire

    # ACL and share folder
    acl = vfile
    acl_shared_dict = proxy::acl

    # By default Dovecot doesn't allow using the IMAP "anyone" or
    # "authenticated" identifier, because it would be an easy way to spam
    # other users in the system. If you wish to allow it,
    #acl_anyone = allow

    # Pigeonhole managesieve service.
    # Reference: http://wiki2.dovecot.org/Pigeonhole/Sieve/Configuration
    # Per-user sieve settings.
    sieve_dir = %Lh/sieve
    sieve = %Lh/sieve/dovecot.sieve

    # Global sieve settings.
#    sieve_global_dir = /var/vmail/sieve
    sieve_global_dir = ./sieve
#Can't make sub-window at (15,12), size (1,70)./sieve
    # Note: if user has personal sieve script, global sieve rules defined in
    #       sieve_default will be ignored. Please use sieve_before or
    #       sieve_after instead.
    #sieve_default =

    sieve_before = ./sieve/dovecot.sieve
#Can't make sub-window at (15,12), size (1,70)./sieve/dovecot.sieve
    #sieve_after =

    # Reference: http://wiki2.dovecot.org/Plugins/MailboxAlias
    mailbox_alias_old = Sent
    mailbox_alias_new = Sent Messages
    mailbox_alias_old2 = Sent
    mailbox_alias_new2 = Sent Items
}

service quota-warning {
    executable = script /usr/local/bin/dovecot-quota-warning.sh
    unix_listener quota-warning {
        user = vmail
        group = vmail
        mode = 0660
    }
}

service dict {
    unix_listener dict {
        mode = 0660
        user = vmail
        group = vmail
    }
}

dict {
    #expire = db:/var/lib/dovecot/expire/expire.db
    quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf
    acl = mysql:/etc/dovecot/dovecot-share-folder.conf
}

protocol lda {
    # Reference: http://wiki2.dovecot.org/LDA
    mail_plugins = $mail_plugins sieve
    auth_socket_path = /var/run/dovecot/auth-master
    log_path = /var/log/dovecot-sieve.log
    lda_mailbox_autocreate = yes
    lda_mailbox_autosubscribe = yes
    postmaster_address = root
}

protocol lmtp {
    # Log file
    info_log_path = /var/log/dovecot-lmtp.log

    # Plugins
    mail_plugins = quota sieve
    postmaster_address = postmaster

    lmtp_save_to_detail_mailbox = yes
    recipient_delimiter = +
}

protocol imap {
    mail_plugins = $mail_plugins imap_quota imap_acl
    imap_client_workarounds = tb-extra-mailbox-sep

    # Maximum number of IMAP connections allowed for a user from each IP address.
    # NOTE: The username is compared case-sensitively.
    # Default is 10.
    # Increase it to avoid issue like below:
    # "Maximum number of concurrent IMAP connections exceeded"
    mail_max_userip_connections = 20
}
protocol pop3 {
    mail_plugins = $mail_plugins
    pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
    pop3_uidl_format = %08Xu%08Xv

    # Maximum number of IMAP connections allowed for a user from each IP address.
    # NOTE: The username is compared case-sensitively.
    # Default is 10.
    mail_max_userip_connections = 20
}

# Login processes. Refer to Dovecot wiki for more details:
# http://wiki2.dovecot.org/LoginProcess
service imap-login {
    service_count = 1

    # To avoid startup latency for new client connections, set process_min_avail
    # to higher than zero. That many idling processes are always kept around
    # waiting for new connections.
    #process_min_avail = 0

    # number of simultaneous IMAP connections
    #process_limit = $default_process_limit
    process_limit = 500

    # vsz_limit should be fine at its default 64MB value
    #vsz_limit = 64M
}
service pop3-login {
    service_count = 1

    # number of simultaneous POP3 connections
    #process_limit = 500
}

service managesieve-login {
    inet_listener sieve {
        # Listen on localhost
        address = 127.0.0.1
        port = 4190
    }
}

namespace {
    type = private
    separator = /
    prefix =
    #location defaults to mail_location.
    inbox = yes

    mailbox Sent {
        auto = subscribe
        special_use = \Sent
    }
    # This is an alias mailbox for "Sent".
    # Reference: http://wiki2.dovecot.org/MailboxSettings
    mailbox "Sent Messages" {
        auto = no
        special_use = \Sent
    }

    mailbox Drafts {
        auto = subscribe
        special_use = \Drafts
    }
    mailbox Trash {
        auto = subscribe
        special_use = \Trash
    }

    mailbox Junk {
        auto = subscribe
        special_use = \Junk
    }
    # Alias mailbox for "Junk".
    mailbox Spam {
        auto = no
        special_use = \Junk
    }
}

namespace {
    type = shared
    separator = /
    prefix = Shared/%%u/
    location = maildir:%%Lh/Maildir/:INDEX=%%Lh/Maildir/Shared/%%u
    # this namespace should handle its own subscriptions or not.
    subscriptions = yes
    list = children
}

# Public mailboxes.
# Refer to Dovecot wiki page for more details:
# http://wiki2.dovecot.org/SharedMailboxes/Public
#namespace {
#    type = public
#    separator = /
#    prefix = Public/
#
#    # CONTROL=: Mark this public folder as read-only mailbox
#    # INDEX=: Per-user \Seen flag
#    location = maildir:/var/vmail/public/:CONTROL=~/Maildir/public:INDEX=~/Maildir/public
#
#    # Allow users to subscribe to the public folders.
#    subscriptions = yes
#}  

id vmail
id: vmail: nie ma takiego użytkownika

nginx:x:992:991:Nginx web server:/var/lib/nginx:/sbin/nologin
dovecot:x:97:97:Dovecot IMAP server:/usr/libexec/dovecot:/sbin/nologin
dovenull:x:991:990:Dovecot's unauthorized user:/usr/libexec/dovecot:/sbin/nologin
sogo:x:990:989:SOGo daemon:/var/lib/sogo:/sbin/nologin
amavis:x:989:988:User for amavisd-new:/var/spool/amavisd:/sbin/nologin
iredadmin:x:2001:2001::/home/iredadmin:/sbin/nologin
iredapd:x:2002:2002::/home/iredapd:/sbin/nologin
cluebringer:x:2003:2003::/home/cbpolicyd:/sbin/nologin

vmail:x:2000:

[ INFO ] Create required system account: vmail, iredadmin, iredapd.
 + < DEBUG > Create HOME folder for vmail user.
 + < DEBUG > Create system account: vmail:vmail (2000:2000).
useradd: invalid home directory 'Can't'
rm: cannot remove 'Can\'t': Is a directory
rm: cannot remove 'make': Is a directory
rm: cannot remove 'sub-window': Is a directory
rm: cannot remove 'at': Is a directory
rm: cannot remove '(15,12),': Is a directory
rm: cannot remove 'size': Is a directory
rm: cannot remove '(1,70)./.': Is a directory
rm: cannot remove '(1,70)./..': Is a directory
 + < DEBUG > Create directory to store user sieve rule files: 
Can't make sub-window at (15,12), size (1,70)./sieve.
 + < DEBUG > Create system account: iredadmin:iredadmin (2001:2001)
useradd: warning: the home directory already exists.
Not copying any file from skel directory into it.
 + < DEBUG > Create system account: iredapd:iredapd (2002:2002).
useradd: warning: the home directory already exists.
Not copying any file from skel directory into it.
[ INFO ] Configure Nginx web server and uWSGI.
 + < DEBUG > Setting logrotate for uwsgi log file: /var/log/uwsgi/uwsgi.log.
[ INFO ] Configure PHP.
 + < DEBUG > Hide PHP Version in Apache from remote users requests: /etc/php.ini.
 + < DEBUG > Increase 'memory_limit' to 256M: /etc/php.ini.
 + < DEBUG > Increase 'upload_max_filesize', 'post_max_size' to 10/12M: /etc/php.ini.
 + < DEBUG > Disable php extension: suhosin. /etc/php.ini.
[ INFO ] Configure MariaDB database server.
 + < DEBUG > Generate temporary defauts file for MySQL client option --defaults-file: /root/iRedMail-0.9.2/.mysql-root-defaults-file.
 + < DEBUG > Starting MySQL.
 + < DEBUG > Service control: restart mariadb.
 + < DEBUG > Sleep 5 seconds for MySQL daemon initialization ...
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)
 + < DEBUG > Initialize MySQL database.
 + < DEBUG > Generating SQL template for postfix virtual hosts: /root/iRedMail-0.9.2/runtime/mysql_vmail.sql.
 + < DEBUG > Import postfix virtual hosts/users: /root/iRedMail-0.9.2/runtime/mysql_vmail.sql.
[ INFO ] Setup daily cron job to backup SQL databases: 
Can't make sub-window at (15,12), size (1,70)./backup/backup_mysql.sh
[ INFO ] Configure Postfix (Message Transfer Agent).
 + < DEBUG > Enable chroot.
 + < DEBUG > Copy: /etc/{hosts,resolv.conf,localtime,services} -> /var/spool/postfix/etc/
 + < DEBUG > Configure Postfix for MySQL lookup.
 + < DEBUG > Set file permission: Owner/Group -> postfix/postfix, Mode -> 0640.
 + < DEBUG > Configure SMTP SASL authentication.
 + < DEBUG > Enable TLS/SSL support in Postfix.
[ INFO ] Configure Cluebringer (postfix policy server).
 + < DEBUG > Add user and group for Cluebringer: cluebringer:cluebringer.
 + < DEBUG > Initialize SQL database for policyd.
[ INFO ] Configure Dovecot (pop3/imap/managesieve server).
 + < DEBUG > Configure dovecot: /etc/dovecot/dovecot.conf.
 + < DEBUG > Copy global sieve filter rule file: 
Can't make sub-window at (15,12), size (1,70)./sieve/dovecot.sieve.
 + < DEBUG > Create dovecot log file: /var/log/dovecot.log.
 + < DEBUG > Create dovecot log file: /var/log/dovecot-sieve.log.
 + < DEBUG > Create dovecot log file: /var/log/dovecot-lmtp.log.
 + < DEBUG > Enable dovecot SASL support in postfix: /etc/postfix/main.cf.
 + < DEBUG > Create directory for Dovecot plugin: Expire.
 + < DEBUG > Setting logrotate for dovecot log file.
[ INFO ] Configure ClamAV (anti-virus toolkit).
 + < DEBUG > Configure ClamAV: /etc/clamd.d/amavisd.conf.
 + < DEBUG > Configure freshclam: /etc/freshclam.conf.
 + < DEBUG > Add clamav user to amavid group.
 + < DEBUG > Set permission to 750: /var/spool/amavisd/tmp, /var/spool/amavisd/quarantine,
[ INFO ] Configure Amavisd-new (interface between MTA and content checkers).
 + < DEBUG > Configure amavisd-new: /etc/amavisd/amavisd.conf.
 + < DEBUG > Generate DKIM pem files: /var/lib/dkim/olecka.mebis.com.pl.pem.
 + < DEBUG > Setting cron job for vmail user to delete virus mail per month.
 + < DEBUG > Import Amavisd database and privileges.
[ INFO ] Configure SpamAssassin (content-based spam filter).
 + < DEBUG > Copy sample SpamAssassin config file: /root/iRedMail-0.9.2/samples/spamassassin/local.cf -> /etc/mail/spamassassin/local.cf.
 + < DEBUG > Enable crontabs for SpamAssassin update.
[ INFO ] Configure iRedAPD (postfix policy daemon).
 + < DEBUG > Extracting: iRedAPD-1.6.0.tar.bz2 -> /opt
 + < DEBUG > Configure iRedAPD.
 + < DEBUG > Make iredapd start after system startup.
 + < DEBUG > Service control: enable iredapd.
iredapd.service is not a native service, redirecting to /sbin/chkconfig.
Executing /sbin/chkconfig iredapd on
The unit files have no [Install] section. They are not meant to be enabled
using systemctl.
Possible reasons for having this kind of units are:
1) A unit may be statically enabled by being symlinked from another unit's
   .wants/ or .requires/ directory.
2) A unit's purpose may be to act as a helper for some other unit which has
   a requirement dependency on it.
3) A unit may be started when needed via activation (socket, path, timer,
   D-Bus, udev, scripted systemctl call, ...).
 + < DEBUG > Setting logrotate for iRedAPD log file.
[ INFO ] Configure iRedAdmin (official web-based admin panel).
 + < DEBUG > Extracting: iRedAdmin-0.4.2.tar.bz2 -> /var/www
 + < DEBUG > Set correct permission for iRedAdmin: /var/www/iRedAdmin-0.4.2.
 + < DEBUG > Import iredadmin database template.
 + < DEBUG > Configure iRedAdmin.
 + < DEBUG > Configure general settings.
 + < DEBUG > Configure iredadmin database related settings.
 + < DEBUG > Configure SQL mail accounts related settings.
 + < DEBUG > Configure Cluebringer related settings.
 + < DEBUG > Configure Amavisd related settings.
[ INFO ] Configure Fail2ban (authentication failure monitor).
 + < DEBUG > Log into syslog instead of log file.
 + < DEBUG > Disable all default filters in /etc/fail2ban/jail.conf.
 + < DEBUG > Create Fail2ban config file: /etc/fail2ban/jail.local.
 + < DEBUG > Copy sample Fail2ban filter config files.
[ INFO ] Configure Roundcube webmail.
 + < DEBUG > Extracting: roundcubemail-1.1.1-complete.tar.gz -> /var/www
 + < DEBUG > Set correct permission for Roundcubemail: /var/www/roundcubemail-1.1.1.
 + < DEBUG > Import SQL database and privileges for Roundcubemail.
 + < DEBUG > Configure database for Roundcubemail: /var/www/roundcubemail-1.1.1/config/*.
 + < DEBUG > Config plugin: managesieve.
 + < DEBUG > Enable and config plugin: password.
[ INFO ] Configure SOGo Groupware (Webmail, Calendar, Address Book, ActiveSync).
 + < DEBUG > Service control: restart sogod.
 + < DEBUG > Mail sensitive administration info to .
 + < DEBUG > Set file permission to 0600: /var/spool/cron/root.
 + < DEBUG > Set file permission to 0600: /var/spool/cron/amavis.
 + < DEBUG > Set file permission to 0600: /var/spool/cron/sogo.
[ INFO ] Disable SELinux in /etc/selinux/config.
[ INFO ] Copy firewall sample rules: /etc/firewalld/zones/iredmail.xml.
 + < DEBUG > Service control: enable firewalld.
[ INFO ] Restarting firewall ...
Error: 'iredmail'
[ INFO ] Copy MySQL sample file: /etc/my.cnf.
[ INFO ] Enable SSL support for MySQL server.
[ INFO ] Updating ClamAV database (freshclam), please wait ... 

ls -l /root/iRedMail-0.9.2
razem 144
dr-x------.  2 root root  4096 09-26 15:24 (15,12),
drwx------.  4 root root  4096 09-26 15:24 (1,70).
dr-x------.  2 root root  4096 09-26 15:24 at
dr-x------.  2 root root  4096 09-26 15:24 Can't
-rw-r--r--.  1 root root 55610 07-27 03:39 ChangeLog
drwxr-xr-x.  2 root root  4096 08-15 03:36 conf
-rw-r--r--.  1 root root  2051 09-26 15:20 config
drwxr-xr-x.  2 root root  4096 09-03 04:34 dialog
-rw-r--r--.  1 root root   889 07-27 03:39 Documentations
drwxr-xr-x.  2 root root  4096 08-15 03:36 functions
-rw-r--r--.  1 root root  4955 07-27 03:40 iRedMail.sh
-rw-r--r--.  1 root root  7660 09-26 15:25 iRedMail.tips
dr-x------.  2 root root  4096 09-26 15:24 make
drwxr-xr-x.  3 root root  4096 07-27 03:40 patches
drwxr-xr-x.  4 root root  4096 09-26 14:50 pkgs
-rw-r--r--.  1 root root   725 07-27 03:40 README.md
drwxr-xr-x.  2 root root  4096 09-26 15:24 runtime
drwxr-xr-x. 16 root root  4096 09-26 15:24 samples
dr-x------.  2 root root  4096 09-26 15:24 size
dr-x------.  2 root root  4096 09-26 15:24 sub-window
drwxr-xr-x.  2 root root  4096 07-27 03:41 tools