An administrator moves a domain in from inbuxa Admin. The server keeps the guide's answers as an inbuxa:Migration and runs the bundled inbuxa-migrate on them as a child process: preview, move, final pass, stop, the new passwords once, close. Spec: docs/spec/features/migrations.md. - sysMigrationRun, for administrators only; a tenant is refused. - The child writes as the administrator who started the migration, with a run token held in memory, taken from loopback only and never cached, and audited as via: migration. - The source's secret is held in memory and passed in the child's environment, which holds only it, the token and PATH. - The image carries inbuxa-migrate 27.1-rc.8, pinned by checksum. - Tests: system::migration with a stand-in engine, and on demand the real engine against a Dovecot (tests/resources/migrations/dovecot-source).
32 lines
593 B
Plaintext
32 lines
593 B
Plaintext
# SPDX-FileCopyrightText: 2026 Coffey Labs LLC
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
protocols = imap
|
|
listen = *
|
|
mail_location = maildir:/var/vmail/%u/Maildir
|
|
mail_uid = 5000
|
|
mail_gid = 5000
|
|
namespace inbox {
|
|
inbox = yes
|
|
separator = /
|
|
prefix =
|
|
}
|
|
auth_mechanisms = plain login
|
|
disable_plaintext_auth = no
|
|
auth_master_user_separator = *
|
|
passdb {
|
|
driver = passwd-file
|
|
args = /etc/dovecot/masters
|
|
master = yes
|
|
}
|
|
passdb {
|
|
driver = passwd-file
|
|
args = /etc/dovecot/users
|
|
}
|
|
userdb {
|
|
driver = static
|
|
args = uid=5000 gid=5000 home=/var/vmail/%u
|
|
}
|
|
ssl = no
|
|
log_path = /dev/stderr
|