{"ok":true,"c":"## Dovecot configuration file\n\n# NOTICE FOR CPANEL SYSTEMS\n# On cPanel servers this file is generated by combining a\n# template at \/var\/cpanel\/templates\/dovecot2.2\/main.default\n# and a datastore at \/var\/cpanel\/conf\/dovecot\/main\n#\n# The template may be customized by making a copy of it at\n# \/var\/cpanel\/templates\/dovecot2.2\/main.local\n# similar to the way in which httpd.conf can be customized\n#\n# Direct edits of the rendered dovecot.conf file will not\n# be preserved when dovecot is updated. Use the\n# \"Mailserver Configuration\" interface in WebHostManager instead.\n\n\n# If you're in a hurry, see http:\/\/wiki.dovecot.org\/QuickConfiguration\n\n# \"dovecot -n\" command gives a clean output of the changed settings. Use it\n# instead of copy&pasting this file when posting to the Dovecot mailing list.\n\n# '#' character and everything after it is treated as comments. Extra spaces\n# and tabs are ignored. If you want to use either of these explicitly, put the\n# value inside quotes, eg.: key = \"# char and trailing whitespace \"\n\n# Default values are shown for each setting, it's not required to uncomment\n# any of the lines. Exception to this are paths, they're just examples with\n# the real defaults being based on configure options. The paths listed here\n# are for configure --prefix=\/usr --sysconfdir=\/etc --localstatedir=\/var\n# --with-ssldir=\/etc\/ssl\n\n# Base directory where to store runtime data.\n#base_dir = \/var\/run\/dovecot\n\n# Protocols we want to be serving: imap pop3\n# If you only want to use dovecot-auth, you can set this to \"none\".\nprotocols = lmtp imap pop3\n\n# Disable LOGIN command and all other plaintext authentications unless\n# SSL\/TLS is used (LOGINDISABLED capability). Note that if the remote IP\n# matches the local IP (ie. you're connecting from the same computer), the\n# connection is considered secure and plaintext authentication is allowed.\ndisable_plaintext_auth = no\n\n# Should all IMAP and POP3 processes be killed when Dovecot master process\n# shuts down. Setting this to \"no\" means that Dovecot can be upgraded without\n# forcing existing client connections to close (although that could also be\n# a problem if the upgrade is eg. because of a security fix). This however\n# means that after master process has died, the client processes can't write\n# to log files anymore.\n#shutdown_clients = yes\n\n##\n## SSL settings\n##\n\n# SSL\/TLS support: yes, no, required. \n#ssl = yes\n\n# PEM encoded X.509 SSL\/TLS certificate and private key. They're opened before\n# dropping root privileges, so keep the key file unreadable by anyone but\n# root. Included doc\/mkcert.sh can be used to easily generate self-signed\n# certificate, just make sure to update the domains in dovecot-openssl.cnf\nssl_cert = <\/etc\/dovecot\/ssl\/dovecot.crt\nssl_key = <\/etc\/dovecot\/ssl\/dovecot.key\n\n# If key file is password protected, give the password here. Alternatively\n# give it when starting dovecot with -p parameter.\n#ssl_key_password =\n\n# File containing trusted SSL certificate authorities. Set this only if you\n# intend to use ssl_verify_client_cert=yes. The CAfile should contain the\n# CA-certificate(s) followed by the matching CRL(s).\n#ssl_ca =\n\n# Request client to send a certificate. If you also want to require it, set\n# ssl_require_client_cert=yes in auth section.\n#ssl_verify_client_cert = no\n\n# Which field from certificate to use for username. commonName and\n# x500UniqueIdentifier are the usual choices. You'll also need to set\n# ssl_username_from_cert=yes.\n#ssl_cert_username_field = commonName\n\n# How often to regenerate the SSL parameters file. Generation is quite CPU\n# intensive operation. The value is in hours, 0 disables regeneration\n# entirely.\n#ssl_parameters_regenerate = 168\n\n# SSL ciphers to use\nssl_cipher_list = ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS\n\n# SSL\/TLS protocols to use\nssl_protocols = !SSLv2 !SSLv3\n\n# Show protocol level SSL errors.\n#verbose_ssl = no\n\nmail_prefetch_count = 20\nmailbox_list_index = yes\n# SNI hosts\n!include_try \/etc\/dovecot\/sni.conf\n\n\n##\n## Login processes\n##\n\n# \n\n\n\n# Greeting message for clients.\n#login_greeting = Dovecot ready.\n\n# Space separated list of trusted network ranges. Connections from these\n# IPs are allowed to override their IP addresses and ports (for logging and\n# for authentication checks). disable_plaintext_auth is also ignored for\n# these networks. Typically you'd specify your IMAP proxy servers here.\n#login_trusted_networks =\n#login_trusted_networks =\n\n# Space-separated list of elements we want to log. The elements which have\n# a non-empty variable value are joined together to form a comma-separated\n# string.\n#login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c\n\n# Login log format. %$ contains login_log_format_elements string, %s contains\n# the data we want to log.\n#login_log_format = %$: %s\n\n##\n## Mailbox locations and namespaces\n##\n\n# Location for users' mailboxes. This is the same as the old default_mail_env\n# setting. The default is empty, which means that Dovecot tries to find the\n# mailboxes automatically. This won't work if the user doesn't have any mail\n# yet, so you should explicitly tell Dovecot the full location.\n#\n# If you're using mbox, giving a path to the INBOX file (eg. \/var\/mail\/%u)\n# isn't enough. You'll also need to tell Dovecot where the other mailboxes are\n# kept. This is called the \"root mail directory\", and it must be the first\n# path given in the mail_location setting.\n#\n# There are a few special variables you can use, eg.:\n#\n# %u - username\n# %n - user part in user@domain, same as %u if there's no domain\n# %d - domain part in user@domain, empty if there's no domain\n# %h - home directory\n#\n# See doc\/wiki\/Variables.txt for full list. Some examples:\n#\n# mail_location = maildir:~\/Maildir\n# mail_location = mbox:~\/mail:INBOX=\/var\/mail\/%u\n# mail_location = mbox:\/var\/mail\/%d\/%1n\/%n:INDEX=\/var\/indexes\/%d\/%1n\/%n\n#\n# \n#\n#mail_location =\n\n# If you need to set multiple mailbox locations or want to change default\n# namespace settings, you can do it by defining namespace sections.\n# NOTE: Namespaces currently work ONLY with IMAP! POP3 and LDA currently ignore\n# namespaces completely, they use only the mail_location setting.\n#\n# You can have private, shared and public namespaces. Private namespaces\n# are for user's personal mails. Shared namespaces are for accessing other\n# users' mailboxes that have been shared. Public namespaces are for shared\n# mailboxes that are managed by sysadmin. If you create any shared or public\n# namespaces you'll typically want to enable ACL plugin also, otherwise all\n# users can access all the shared mailboxes, assuming they have permissions\n# on filesystem level to do so.\n#\n# REMEMBER: If you add any namespaces, the default namespace must be added\n# explicitly, ie. mail_location does nothing unless you have a namespace\n# without a location setting. Default namespace is simply done by having a\n# namespace with empty prefix.\nnamespace inbox {\n type = private\n # Hierarchy separator to use. You should use the same separator for all\n # namespaces or some clients get confused. '\/' is usually a good one.\n # The default however depends on the underlying mail storage format.\n separator = .\n\n # Prefix required to access this namespace. This needs to be different for\n # all namespaces. For example \"Public\/\".\n prefix = INBOX.\n\n # Physical location of the mailbox. This is in same format as\n # mail_location, which is also the default for it.\n #location =\n\n # There can be only one INBOX, and this setting defines which namespace\n # has it.\n inbox = yes\n\n # If namespace is hidden, it's not advertised to clients via NAMESPACE\n # extension. You'll most likely also want to set list=no. This is mostly\n # useful when converting from another server with different namespaces which\n # you want to deprecate but still keep working. For example you can create\n # hidden namespaces with prefixes \"~\/mail\/\", \"~%u\/mail\/\" and \"mail\/\".\n #hidden = yes\n\n # Show the mailboxes under this namespace with LIST command. This makes the\n # namespace visible for clients that don't support NAMESPACE extension.\n # \"children\" value lists child mailboxes, but hides the namespace prefix.\n #list = yes\n\n # Namespace handles its own subscriptions. If set to \"no\", the parent\n # namespace handles them (empty prefix should always have this as \"yes\")\n #subscriptions = yes\n #subscriptions = yes\n\n mailbox Drafts {\n special_use = \\Drafts\n auto = subscribe\n }\n\n mailbox spam {\n special_use = \\Junk\n auto = subscribe\n }\n\n mailbox Trash {\n special_use = \\Trash\n auto = subscribe\n }\n\n mailbox Sent {\n special_use = \\Sent\n auto = subscribe\n }\n\n mailbox \"Sent Messages\" {\n special_use = \\Sent\n auto = no\n }\n\n mailbox Archive {\n special_use = \\Archive\n auto = create\n }\n\n mailbox \"Archives\" {\n special_use = \\Archive\n auto = no\n }\n}\n\n\n\n# Example shared namespace configuration\n#namespace shared {\n #separator = \/\n\n # Mailboxes are visible under \"shared\/user@domain\/\"\n # %%n, %%d and %%u are expanded to the destination user.\n #prefix = shared\/%%u\/\n\n # Mail location for other users' mailboxes. Note that %variables and ~\/\n # expands to the logged in user's data. %%n, %%d, %%u and %%h expand to the\n # destination user's data.\n #location = maildir:%%h\/Maildir:INDEX=~\/Maildir\/shared\/%%u\n\n # Use the default namespace for saving subscriptions.\n #subscriptions = no\n\n # List the shared\/ namespace only if there are visible shared mailboxes.\n #list = children\n#}\n\n# System user and group used to access mails. If you use multiple, userdb\n# can override these by returning uid or gid fields. You can use either numbers\n# or names. \n#mail_uid =\n#mail_gid =\n\n# Group to enable temporarily for privileged operations. Currently this is\n# used only with INBOX when either its initial creation or dotlocking fails.\n# Typically this is set to \"mail\" to give access to \/var\/mail.\n#mail_privileged_group =\n\n# Grant access to these supplementary groups for mail processes. Typically\n# these are used to set up access to shared mailboxes. Note that it may be\n# dangerous to set these if users can create symlinks (e.g. if \"mail\" group is\n# set here, ln -s \/var\/mail ~\/mail\/var could allow a user to delete others'\n# mailboxes, or ln -s \/secret\/shared\/box ~\/mail\/mybox would allow reading it).\n#mail_access_groups =\n\n# Allow full filesystem access to clients. There's no access checks other than\n# what the operating system does for the active UID\/GID. It works with both\n# maildir and mboxes, allowing you to prefix mailboxes names with eg. \/path\/\n# or ~user\/.\n#mail_full_filesystem_access = no\n\n##\n## Mail processes\n##\n\n# Enable mail process debugging. This can help you figure out why Dovecot\n# isn't finding your mails.\n#mail_debug = no\n\n# Log prefix for mail processes. See doc\/wiki\/Variables.txt for list of\n# possible variables you can use.\n#mail_log_prefix = \"%Us(%u): \"\n\n# Don't use mmap() at all. This is required if you store indexes to shared\n# filesystems (NFS or clustered filesystem).\n#mmap_disable = no\n\n# Rely on O_EXCL to work when creating dotlock files. NFS supports O_EXCL\n# since version 3, so this should be safe to use nowadays by default.\n#dotlock_use_excl = yes\n\n# Don't use fsync() or fdatasync() calls. This makes the performance better\n# at the cost of potential data loss if the server (or the file server)\n# goes down.\n#mail_fsync = yes\n\n# Mail storage exists in NFS. Set this to yes to make Dovecot flush NFS caches\n# whenever needed. If you're using only a single mail server this isn't needed.\n#mail_nfs_storage = no\n# Mail index files also exist in NFS. Setting this to yes requires\n# mmap_disable=yes and fsync_disable=no.\n#mail_nfs_index = no\n\n# Locking method for index files. Alternatives are fcntl, flock and dotlock.\n# Dotlocking uses some tricks which may create more disk I\/O than other locking\n# methods. NFS users: flock doesn't work, remember to change mmap_disable.\n#lock_method = fcntl\n\n# Show more verbose process titles (in ps). Currently shows user name and\n# IP address. Useful for seeing who are actually using the IMAP processes\n# (eg. shared mailboxes or if same uid is used for multiple accounts).\n#verbose_proctitle = no\n\n# Valid UID range for users, defaults to 500 and above. This is mostly\n# to make sure that users can't log in as daemons or other system users.\n# Note that denying root logins is hardcoded to dovecot binary and can't\n# be done even if first_valid_uid is set to 0.\nfirst_valid_uid = 201\n#last_valid_uid = 0\n\n# Valid GID range for users, defaults to non-root\/wheel. Users having\n# non-valid GID as primary group ID aren't allowed to log in. If user\n# belongs to supplementary groups with non-valid GIDs, those groups are\n# not set.\n#first_valid_gid = 1\n#last_valid_gid = 0\n\n\n# Maximum allowed length for mail keyword name. It's only forced when trying\n# to create new keywords.\n#mail_max_keyword_length = 50\n\n# ':' separated list of directories under which chrooting is allowed for mail\n# processes (ie. \/var\/mail will allow chrooting to \/var\/mail\/foo\/bar too).\n# This setting doesn't affect login_chroot, mail_chroot or auth chroot\n# settings.\n# WARNING: Never add directories here which local users can modify, that\n# may lead to root exploit. Usually this should be done only if you don't\n# allow shell access for users. \n#valid_chroot_dirs =\n\n# Default chroot directory for mail processes. This can be overridden for\n# specific users in user database by giving \/.\/ in user's home directory\n# (eg. \/home\/.\/user chroots into \/home). Note that usually there is no real\n# need to do chrooting, Dovecot doesn't allow users to access files outside\n# their mail directory anyway. If your home directories are prefixed with\n# the chroot directory, append \"\/.\" to mail_chroot. \n#mail_chroot =\n\n##\n## Mailbox handling optimizations\n##\n\n# The minimum number of mails in a mailbox before updates are done to cache\n# file. This allows optimizing Dovecot's behavior to do less disk writes at\n# the cost of more disk reads.\n#mail_cache_min_mail_count = 0\n\n# When IDLE command is running, mailbox is checked once in a while to see if\n# there are any new mails or other changes. This setting defines the minimum\n# time in seconds to wait between those checks. Dovecot can also use dnotify,\n# inotify and kqueue to find out immediately when changes occur.\nmailbox_idle_check_interval = 30\n\n# Save mails with CR+LF instead of plain LF. This makes sending those mails\n# take less CPU, especially with sendfile() syscall with Linux and FreeBSD.\n# But it also creates a bit more disk I\/O which may just make it slower.\n# Also note that if other software reads the mboxes\/maildirs, they may handle\n# the extra CRs wrong and cause problems.\n#mail_save_crlf = no\n\n##\n## Maildir-specific settings\n##\n\n# By default LIST command returns all entries in maildir beginning with a dot.\n# Enabling this option makes Dovecot return only entries which are directories.\n# This is done by stat()ing each entry, so it causes more disk I\/O.\n# (For systems setting struct dirent->d_type, this check is free and it's\n# done always regardless of this setting)\n#maildir_stat_dirs = no\n\n# When copying a message, do it with hard links whenever possible. This makes\n# the performance much better, and it's unlikely to have any side effects.\nmaildir_copy_with_hardlinks = yes\n\n# Assume Dovecot is the only MUA accessing Maildir: Scan cur\/ directory only\n# when its mtime changes unexpectedly or when we can't find the mail otherwise.\n#maildir_very_dirty_syncs = no\nmaildir_very_dirty_syncs = yes\n\n\n# Quota support must be enabled globally for the quota-status\n# service to work\nmail_plugins = quota quota_clone zlib \n\n##\n## IMAP specific settings\n##\n\nprotocol imap {\n # Login executable location.\n #login_executable = \/usr\/libexec\/dovecot\/imap-login\n\n # IMAP executable location. Changing this allows you to execute other\n # binaries before the imap process is executed.\n #\n # This would write rawlogs into user's ~\/dovecot.rawlog\/, if it exists:\n # mail_executable = \/usr\/libexec\/dovecot\/rawlog \/usr\/libexec\/dovecot\/imap\n # \n #\n # This would attach gdb into the imap process and write backtraces into\n # \/tmp\/gdbhelper.* files:\n # mail_executable = \/usr\/libexec\/dovecot\/gdbhelper \/usr\/libexec\/dovecot\/imap\n #\n #mail_executable = \/usr\/libexec\/dovecot\/imap\n\n # Maximum IMAP command line length in bytes. Some clients generate very long\n # command lines with huge mailboxes, so you may need to raise this if you get\n # \"Too long argument\" or \"IMAP command line too large\" errors often.\n #imap_max_line_length = 65536\n\n # Maximum number of IMAP connections allowed for a user from each IP address.\n # NOTE: The username is compared case-sensitively.\n mail_max_userip_connections = 20\n\n # Support for dynamically loadable plugins. mail_plugins is a space separated\n # list of plugins to load.\n mail_plugins = acl quota imap_quota\n\n mail_plugins = $mail_plugins zlib imap_zlib quota_clone virtual \n #mail_plugin_dir = \/usr\/lib\/dovecot\/imap\n # IMAP logout format string:\n # %i - total number of bytes read from client\n # %o - total number of bytes sent to client\n imap_logout_format = in=%i, out=%o, bytes=%i\/%o\n\n # Override the IMAP CAPABILITY response.\n imap_capability = +NAMESPACE\n\n # How many seconds to wait between \"OK Still here\" notifications when\n # client is IDLEing.\n imap_idle_notify_interval = 24 min\n\n # ID field names and values to send to clients. Using * as the value makes\n # Dovecot use the default value. The following fields have default values\n # currently: name, version, os, os-version, support-url, support-email.\n #imap_id_send =\n\n # ID fields sent by client to log. * means everything.\n #imap_id_log =\n\n # Workarounds for various client bugs:\n # delay-newmail:\n # Send EXISTS\/RECENT new mail notifications only when replying to NOOP\n # and CHECK commands. Some clients ignore them otherwise, for example OSX\n # Mail (