Files
jcoffey-dev fdf6d9df5d
ci / fork-checks (pull_request) Skipped
ci / build (pull_request) Skipped
github/ci (branch) GitHub Actions
ci / github (pull_request) Successful in 11m8s
Migrations into this server: inbuxa:Migration
An administrator moves a domain in from inbuxa Admin. The server keeps
the guide's answers as an inbuxa:Migration and runs the bundled
inbuxa-migrate on them as a child process: preview, move, final pass,
stop, the new passwords once, close. Spec: docs/spec/features/migrations.md.

- sysMigrationRun, for administrators only; a tenant is refused.
- The child writes as the administrator who started the migration, with a
  run token held in memory, taken from loopback only and never cached, and
  audited as via: migration.
- The source's secret is held in memory and passed in the child's
  environment, which holds only it, the token and PATH.
- The image carries inbuxa-migrate 27.1-rc.8, pinned by checksum.
- Tests: system::migration with a stand-in engine, and on demand the real
  engine against a Dovecot (tests/resources/migrations/dovecot-source).
2026-10-30 19:48:31 -07:00

32 lines
593 B
Plaintext

# SPDX-FileCopyrightText: 2026 Coffey Labs LLC
# SPDX-License-Identifier: AGPL-3.0-only
protocols = imap
listen = *
mail_location = maildir:/var/vmail/%u/Maildir
mail_uid = 5000
mail_gid = 5000
namespace inbox {
inbox = yes
separator = /
prefix =
}
auth_mechanisms = plain login
disable_plaintext_auth = no
auth_master_user_separator = *
passdb {
driver = passwd-file
args = /etc/dovecot/masters
master = yes
}
passdb {
driver = passwd-file
args = /etc/dovecot/users
}
userdb {
driver = static
args = uid=5000 gid=5000 home=/var/vmail/%u
}
ssl = no
log_path = /dev/stderr