mirrors/maddy
1
0
Fork 0
mirror of https://github.com/foxcpp/maddy.git synced 2025-04-04 05:37:34 +03:00
Code Issues Projects Releases Packages Wiki Activity

Merge branch 'master' into dev

Browse source
This commit is contained in:
fox.cpp 2024-01-22 00:43:53 +03:00
commit 798c411824
No known key found for this signature in database
GPG key ID: 5B991F6215D2FCC0
109 changed files with 1968 additions and 1383 deletions
Download patch file Download diff file Expand all files Collapse all files

2
dist/README.md vendored
View file

@ -22,7 +22,7 @@ Additionally, unit files apply strict sandboxing, limiting maddy permissions on
the system to a bare minimum. Subset of these options makes it impossible for
privileged authentication helper binaries to gain required permissions, so you
may have to disable it when using system account-based authentication with
maddy running as a unprivilieged user.
maddy running as a unprivileged user.
## fail2ban configuration

7
dist/systemd/maddy.service vendored
View file

@ -3,7 +3,7 @@ Description=maddy mail server
Documentation=man:maddy(1)
Documentation=man:maddy.conf(5)
Documentation=https://maddy.email
After=network.target
After=network-online.target
[Service]
Type=notify
@ -54,8 +54,9 @@ KillSignal=SIGTERM
AmbientCapabilities=CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
# Force all files created by maddy to be only readable by it.
UMask=0027
# Force all files created by maddy to be only readable by it
# and maddy group.
UMask=0007
# Bump FD limitations. Even idle mail server can have a lot of FDs open (think
# of idle IMAP connections, especially ones abandoned on the other end and

7
dist/systemd/maddy@.service vendored
View file

@ -3,7 +3,7 @@ Description=maddy mail server (using %i.conf)
Documentation=man:maddy(1)
Documentation=man:maddy.conf(5)
Documentation=https://maddy.email
After=network.target
After=network-online.target
[Service]
Type=notify
@ -50,8 +50,9 @@ KillSignal=SIGTERM
AmbientCapabilities=CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
# Force all files created by maddy to be only readable by it.
UMask=0027
# Force all files created by maddy to be only readable by it and
# maddy group.
UMask=0007
# Bump FD limitations. Even idle mail server can have a lot of FDs open (think
# of idle IMAP connections, especially ones abandoned on the other end and