Maddy Mail Server - default configuration file (2021-03-07)
Suitable for small-scale deployments. Uses its own format for local users DB,
should be managed via maddyctl utility.
See tutorials at https://maddy.email for guidance on typical
configuration changes.
See manual pages (also available at https://maddy.email) for reference
documentation.
----------------------------------------------------------------------------
Base variables
state_dir ${stateDir}
$(hostname) = mx.mydomain.com
hostname $(hostname)
$(primary_domain) = mydomain.com
$(local_domains) = $(primary_domain)
tls off
----------------------------------------------------------------------------
Local storage & authentication
pass_table provides local hashed passwords storage for authentication of
users. It can be configured to use any "table" module, in default
configuration a table in SQLite DB is used.
Table can be replaced to use e.g. a file for passwords. Or pass_table module
can be replaced altogether to use some external source of credentials (e.g.
PAM, /etc/shadow file).
If table module supports it (sql_table does) - credentials can be managed
using 'maddyctl creds' command.
TODO replace with a static table with password hashes stored in the
config, if possible
auth.pass_table local_authdb {
table sql_table {
driver sqlite3
dsn credentials.db
table_name passwords
}
}
----------------------------------------------------------------------------
Outgoing SMTP
target.smtp forward_to_vultr {
targets tcp://mediocre-vultr.private-domain.com:587
attempt_starttls no
auth plain "mediocre-desktop" "XXX"
}
target.queue outgoing_queue {
target &forward_to_vultr
autogenerated_msg_domain $(primary_domain)
bounce {
destination postmaster $(local_domains) {
deliver_to &incoming_routing
}
default_destination {
reject 550 5.0.0 "Refusing to send DSNs to non-local addresses"
}
}
}
submission tcp://0.0.0.0:587 {
limits {
all rate 5 1s
}
auth &local_authdb
insecure_auth true
source $(local_domains) {
# If sending to a local domain, route this to the incoming pipeline
# internally
destination postmaster $(local_domains) {
deliver_to &incoming_routing
}
default_destination {
deliver_to &outgoing_queue
}
}
default_source {
reject 501 5.1.8 "Non-local sender domain"
}
}
----------------------------------------------------------------------------
Incoming SMTP
msgpipeline incoming_routing {
destination postmaster $(primary_domain) {
modify {
replace_rcpt regexp ".+@mydomain.com" "me@mydomain.com"
}
deliver_to &local_mailboxes
}
default_destination {
reject 550 5.1.1 "User doesn't exist"
}
}
smtp tcp://0.0.0.0:25 {
default_source {
destination postmaster $(local_domains) {
deliver_to &incoming_routing
}
default_destination {
reject 550 5.1.1 "User doesn't exist"
}
}
}
----------------------------------------------------------------------------
IMAP
imapsql module stores all indexes and metadata necessary for IMAP using a
relational database. It is used by IMAP endpoint for mailbox access and
also by SMTP & Submission endpoints for delivery of local messages.
IMAP accounts, mailboxes and all message metadata can be inspected using
imap-* subcommands of maddyctl utility.
storage.imapsql local_mailboxes {
driver sqlite3
dsn imapsql.db
}
TODO imap tls://0.0.0.0:993 tcp://0.0.0.0:143 {
imap tcp://0.0.0.0:143 {
tls off
auth &local_authdb
storage &local_mailboxes
}