Request 1975 (accepted)

guam.spec Changed

@@ -30,6 +30,8 @@
 
 Source0:            guam-%{version}.tar.gz
 
+Source100:          plesk.sys.config
+
 Patch9991:          guam-0.8.2-relax-dependencies.patch
 
 BuildRequires:      erlang >= 17.4
@@ -138,6 +140,10 @@
 mv %{buildroot}/opt/%{realname}/releases/*/sys.config \
     %{buildroot}%{_sysconfdir}/guam/sys.config
 
+%if 0%{?plesk}
+install -m 644 -p %{SOURCE100} %{buildroot}%{_sysconfdir}/guam/sys.config
+%endif
+
 ln -s ../../../..%{_sysconfdir}/%{name}/sys.config \
     $(ls -1d %{buildroot}/opt/%{realname}/releases/*/)/sys.config
 
@@ -179,6 +185,10 @@
 %post
 %systemd_post guam.service
 
+if [ ! -f "/etc/guam/dh_2048.pem" ]; then
+    openssl gendh -out /etc/guam/dh_2048.pem -2 2048 >/dev/null 2>&1
+fi
+
 %preun
 %systemd_preun guam.service
 
@@ -190,6 +200,10 @@
 %post
 chkconfig --add guam >/dev/null 2>&1 || :
 
+if [ ! -f "/etc/guam/dh_2048.pem" ]; then
+    openssl gendh -out /etc/guam/dh_2048.pem -2 2048 >/dev/null 2>&1
+fi
+
 %posttrans
 test -f /etc/sysconfig/guam-disable-posttrans || \
     %{_sbindir}/service restart guam 2>&1 || :

debian.changelog Changed

debian.control Changed

debian.rules Changed

debian.tar.gz/postinst Added

guam.dsc Changed

plesk.sys.config Added

@@ -0,0 +1,180 @@
+%% Example configuration for Guam.
+[
+    {
+        kolab_guam, [
+            {
+                imap_servers, [
+                    {
+                        imap, [
+                            { host, "127.0.0.1" },
+                            { port, 9143 },
+                            { tls, no }
+                        ]
+                    },
+                    {
+                        imaps, [
+                            { host, "127.0.0.1" },
+                            { port, 9993 },
+                            { tls, true }
+                        ]
+                    }
+                ]
+            },
+            {
+                listeners, [
+                    {
+                        imap, [
+                            { port, 143 },
+                            { imap_server, imap },
+                            {
+                                rules, [
+                                    { filter_groupware, [] }
+                                ]
+                            },
+                            {
+                                tls_config, [
+                                    { certfile, "/etc/dovecot/private/ssl-cert-and-key.pem" },
+                                    { dhfile, "/etc/guam/dh_2048.pem" },
+                                    { verify, verify_none },
+                                    { versions, [ 'tlsv1.2', 'tlsv1.1', tlsv1] },
+                                    { fail_if_no_peer_cert, false },
+                                    { honor_cipher_order, true },
+                                    { ciphers, [
+                                                    "ECDHE-ECDSA-AES256-GCM-SHA384",
+                                                    "ECDHE-RSA-AES256-GCM-SHA384",
+                                                    "ECDHE-ECDSA-AES256-SHA384",
+                                                    "ECDHE-RSA-AES256-SHA384",
+                                                    "ECDHE-ECDSA-DES-CBC3-SHA",
+                                                    "ECDH-ECDSA-AES256-GCM-SHA384",
+                                                    "ECDH-RSA-AES256-GCM-SHA384",
+                                                    "ECDH-ECDSA-AES256-SHA384",
+                                                    "ECDH-RSA-AES256-SHA384",
+                                                    "DHE-DSS-AES256-GCM-SHA384",
+                                                    "DHE-DSS-AES256-SHA256",
+                                                    "AES256-GCM-SHA384",
+                                                    "AES256-SHA256",
+                                                    "ECDHE-ECDSA-AES128-GCM-SHA256",
+                                                    "ECDHE-RSA-AES128-GCM-SHA256",
+                                                    "ECDHE-ECDSA-AES128-SHA256",
+                                                    "ECDHE-RSA-AES128-SHA256",
+                                                    "ECDH-ECDSA-AES128-GCM-SHA256",
+                                                    "ECDH-RSA-AES128-GCM-SHA256",
+                                                    "ECDH-ECDSA-AES128-SHA256",
+                                                    "ECDH-RSA-AES128-SHA256",
+                                                    "DHE-DSS-AES128-GCM-SHA256",
+                                                    "DHE-DSS-AES128-SHA256",
+                                                    "AES128-GCM-SHA256",
+                                                    "AES128-SHA256",
+                                                    "ECDHE-ECDSA-AES256-SHA",
+                                                    "ECDHE-RSA-AES256-SHA",
+                                                    "DHE-DSS-AES256-SHA",
+                                                    "ECDH-ECDSA-AES256-SHA",
+                                                    "ECDH-RSA-AES256-SHA",
+                                                    "AES256-SHA",
+                                                    "ECDHE-ECDSA-AES128-SHA",
+                                                    "ECDHE-RSA-AES128-SHA",
+                                                    "DHE-DSS-AES128-SHA",
+                                                    "ECDH-ECDSA-AES128-SHA",
+                                                    "ECDH-RSA-AES128-SHA",
+                                                    "AES128-SHA"
+                                                ]
+                                        },
+                                    { client_renegotiation, false },
+                                    { secure_renegotiate, true }
+                                ]
+                            }
+                        ]
+                    },
+                    {
+                        imaps, [
+                            { port, 993 },
+                            { implicit_tls, true },
+                            { imap_server, imaps },
+                            {
+                                rules, [
+                                    { filter_groupware, [] }
+                                ]
+                            },
+                            {
+                                tls_config, [
+                                    { certfile, "/etc/dovecot/private/ssl-cert-and-key.pem" },
+                                    { dhfile, "/etc/guam/dh_2048.pem" },
+                                    { verify, verify_none },
+                                    { versions, [ 'tlsv1.2', 'tlsv1.1', tlsv1] },
+                                    { fail_if_no_peer_cert, false },
+                                    { honor_cipher_order, true },
+                                    { ciphers, [
+                                                    "ECDHE-ECDSA-AES256-GCM-SHA384",
+                                                    "ECDHE-RSA-AES256-GCM-SHA384",
+                                                    "ECDHE-ECDSA-AES256-SHA384",
+                                                    "ECDHE-RSA-AES256-SHA384",
+                                                    "ECDHE-ECDSA-DES-CBC3-SHA",
+                                                    "ECDH-ECDSA-AES256-GCM-SHA384",
+                                                    "ECDH-RSA-AES256-GCM-SHA384",
+                                                    "ECDH-ECDSA-AES256-SHA384",
+                                                    "ECDH-RSA-AES256-SHA384",
+                                                    "DHE-DSS-AES256-GCM-SHA384",
+                                                    "DHE-DSS-AES256-SHA256",
+                                                    "AES256-GCM-SHA384",
+                                                    "AES256-SHA256",
+                                                    "ECDHE-ECDSA-AES128-GCM-SHA256",
+                                                    "ECDHE-RSA-AES128-GCM-SHA256",
+                                                    "ECDHE-ECDSA-AES128-SHA256",
+                                                    "ECDHE-RSA-AES128-SHA256",
+                                                    "ECDH-ECDSA-AES128-GCM-SHA256",
+                                                    "ECDH-RSA-AES128-GCM-SHA256",
+                                                    "ECDH-ECDSA-AES128-SHA256",
+                                                    "ECDH-RSA-AES128-SHA256",
+                                                    "DHE-DSS-AES128-GCM-SHA256",
+                                                    "DHE-DSS-AES128-SHA256",
+                                                    "AES128-GCM-SHA256",
+                                                    "AES128-SHA256",
+                                                    "ECDHE-ECDSA-AES256-SHA",
+                                                    "ECDHE-RSA-AES256-SHA",
+                                                    "DHE-DSS-AES256-SHA",
+                                                    "ECDH-ECDSA-AES256-SHA",
+                                                    "ECDH-RSA-AES256-SHA",
+                                                    "AES256-SHA",
+                                                    "ECDHE-ECDSA-AES128-SHA",
+                                                    "ECDHE-RSA-AES128-SHA",
+                                                    "DHE-DSS-AES128-SHA",
+                                                    "ECDH-ECDSA-AES128-SHA",
+                                                    "ECDH-RSA-AES128-SHA",
+                                                    "AES128-SHA"
+                                                ]
+                                        },
+                                    { client_renegotiation, false },
+                                    { secure_renegotiate, true }
+                                ]
+                            }
+                        ]
+                    }
+                ]
+            }
+        ]
+    },
+
+    {
+        lager, [
+            {
+                handlers, [
+                    { lager_console_backend, debug },
+                    { lager_syslog_backend, ["guam", mail, info] },
+                    { lager_file_backend, [ { file, "log/error.log"}, { level, error } ] },
+                    { lager_file_backend, [ { file, "log/console.log"}, { level, info } ] }
+                ]
+            }
+        ]
+    },
+
+    %% SASL config
+    {
+        sasl, [
+            { sasl_error_logger, { file, "log/sasl-error.log" } },
+            { errlog_type, error },
+            { error_logger_mf_dir, "log/sasl" },      % Log directory
+            { error_logger_mf_maxbytes, 10485760 },   % 10 MB max file size
+            { error_logger_mf_maxfiles, 5 }           % 5 files max
+        ]
+    }
+].

Overview

Request 1975 (accepted)

Request History