Re: starttls for some services only

2020-02-10 Thread Bjoern Jacke
Hello Aki, On 10.02.20 20:34, Aki Tuomi wrote: > - configure HAproxy to use PROXYv1 or PROXYv2 to protocol to pass > connections details to dovecot. With recent enough dovecot, you can include > TLS information with haproxy to dovecot. > - configure login_trusted_networks and haproxy_trusted_ne

Re: starttls for some services only

2020-02-10 Thread Aki Tuomi
> On 10/02/2020 19:17 Bjoern Jacke wrote: > > > Hi Aki, > > On 10.02.20 17:03, Aki Tuomi wrote: > > Try setting > > > > login_trusted_networks = lb-ip/32 > > > > See  > > https://doc.dovecot.org/settings/dovecot_core_settings/#login-trusted-networks > > I do have login-trusted_networks se

Re: starttls for some services only

2020-02-10 Thread Bjoern Jacke
Hi Aki, On 10.02.20 17:03, Aki Tuomi wrote: > Try setting > > login_trusted_networks = lb-ip/32 > > See  > https://doc.dovecot.org/settings/dovecot_core_settings/#login-trusted-networks I do have login-trusted_networks set already. Along with the proxy protocol (haproxy_trusted_networks = lb-ip

Re: Email Server Backup Strategy

2020-02-10 Thread Germain
On Sun, 9 Feb 2020 18:26:25 +0100 Esteban L wrote: > Was thinking it would be wise to backup my server, in case anything > "bad" ever happened, so that I could quickly get up to speed. Thanks for asking (I could not find a lot of threads about it when I looked into it.) I am obsessive so I hav

Re: starttls for some services only

2020-02-10 Thread Aki Tuomi
Try setting login_trusted_networks = lb-ip/32 See  https://doc.dovecot.org/settings/dovecot_core_settings/#login-trusted-networks Aki On 10/02/2020 15:38 Bjoern Jacke < lists2...@j3e.de> wrote:

postmaster_address parameter scope

2020-02-10 Thread mabi
Hello, I was wondering when I define the following dovecot parameter: postmaster_address = postmas...@mydomain.com in my local.conf config file, does this parameter apply globally? I mean because it is not inside any {} curly braces does it also appliy to: protocol lmtp { ... } or do I need

starttls for some services only

2020-02-10 Thread Bjoern Jacke
Hi, I would like to disable offering starttls to clients for certain dovecot services. Background is that I want to do let a load balancer do the TLS stuff right on connect time and let dovecot only do plain imap without offering starttls (because the clients do imaps actually). Getting rid of th

Reload Dovecot with thousands of domains.

2020-02-10 Thread Victor
Hello!, I have a dovecot server configured with about 3k different domains. It worked without problems until SSL certificates has been installed. After increase available RAM and stabilizing the service my current problem is in renewals. Dovecot reload process consumes a lot of memory for every

Re: Email Server Backup Strategy

2020-02-10 Thread 3xakr5x68hyouaqafze0rj
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On 10/2/20 8:37 pm, Francis Augusto Medeiros-Logeay wrote: > On 09.02.2020 19:08, Andrew McGlashan wrote: > >> >> If rsync is not fast... then how about doing a snapshot and then rsync >> off the snapshot?  (I do rsync over lvm snapshots to ba

Re: Email Server Backup Strategy

2020-02-10 Thread Francis Augusto Medeiros-Logeay
On 09.02.2020 19:08, Andrew McGlashan wrote: If rsync is not fast... then how about doing a snapshot and then rsync off the snapshot? (I do rsync over lvm snapshots to back up file systems cleanly) and, btw, perform file system dumps [ufsdump / ufsrestore like, but dump and restore on Linux

Re: Email Server Backup Strategy

2020-02-10 Thread Francis Augusto Medeiros-Logeay
On 09.02.2020 19:08, Andrew McGlashan wrote: Hi, On 10/2/20 4:59 am, Francis Augusto Medeiros-Logeay wrote: What I do: 1 - I ran a maildirlock command to my mail folder 2 - I then rsync the folder where my maildirs are, as well as the indexes, to a remote location If rsync is not fast...

Re: Email Server Backup Strategy

2020-02-10 Thread Francis Augusto Medeiros-Logeay
What I do: 1 - I ran a maildirlock command to my mail folder 2 - I then rsync the folder where my maildirs are, as well as the indexes, to a remote location 3 - I tar.gz the daily backup 4 - I kill the maildirlock process I also use replication of my server so that I keep getting mail when my