dovecot: Enable plain authentication and non-TLS connections.

This saves encryption and issues with certificate verifcation when
connection from locally running webmail apps.

diff --git a/etc/dovecot/dovecot.conf b/etc/dovecot/dovecot.conf
index 3feb70fce537ed46a52ab35c84aab9b62a4635b2..9452f873dfe64a6fc2bec8229cc9a71bec2141bd 100644 (file)
--- a/etc/dovecot/dovecot.conf
+++ b/etc/dovecot/dovecot.conf
@@ -13,9 +13,13 @@
 # configuration of the managesieve plugin/daemon.
 
 
 # configuration of the managesieve plugin/daemon.
 
 

-# We server LDAP and use the deliver Local Delivery Agent
-protocols = imaps lda
+# We serve IMAP, IMAPS and use the deliver Local Delivery Agent
+protocols = imap imaps lda

 
 

+# Allow plaintext auth on non-TLS connections. We don't expose the non-secure
+# imap port 143 to the internet, just locally for the webmail apps. This should
+# therefore not introduce a security issue.
+disable_plaintext_auth = no

 
 protocol imap {
   # Enable virtual mailboxes
 
 protocol imap {
   # Enable virtual mailboxes