From 98fa66b5ad13c8f203fcfe40d42240417951f218 Mon Sep 17 00:00:00 2001
From: Georg
Date: Mon, 13 Sep 2021 09:40:35 +0200
Subject: Init MC update + Dovecot/SOGo LDAP configuration

Signed-off-by: Georg <georg@lysergic.dev>
---
 mailcow/data/conf/dovecot/extra.conf       |  5 ++++
 mailcow/data/conf/dovecot/ldap/passdb.conf |  9 ++++++
 mailcow/data/conf/sogo/plist_ldap          | 44 ++++++++++++++++++++++++++++++
 3 files changed, 58 insertions(+)
 create mode 100644 mailcow/data/conf/dovecot/extra.conf
 create mode 100644 mailcow/data/conf/dovecot/ldap/passdb.conf
 create mode 100644 mailcow/data/conf/sogo/plist_ldap

(limited to 'mailcow/data/conf')

diff --git a/mailcow/data/conf/dovecot/extra.conf b/mailcow/data/conf/dovecot/extra.conf
new file mode 100644
index 0000000..2ec91d8
--- /dev/null
+++ b/mailcow/data/conf/dovecot/extra.conf
@@ -0,0 +1,5 @@
+passdb {
+  args = /etc/dovecot/ldap/passdb.conf
+  driver = ldap
+}
+
diff --git a/mailcow/data/conf/dovecot/ldap/passdb.conf b/mailcow/data/conf/dovecot/ldap/passdb.conf
new file mode 100644
index 0000000..28feedd
--- /dev/null
+++ b/mailcow/data/conf/dovecot/ldap/passdb.conf
@@ -0,0 +1,9 @@
+uris = ldaps://orpheus.syscid.com
+ldap_version = 3
+base = OU=syscid-users,DC=syscid,DC=com
+auth_bind = yes
+dn = $BINDDN
+dnpass = $BINDSEC
+pass_attrs = userPassword=password
+pass_filter = (&(memberof=cn=syscid_email_mailcow,ou=syscid-groups,dc=syscid,dc=com)(|(uid=%n)(mail=%u)))
+
diff --git a/mailcow/data/conf/sogo/plist_ldap b/mailcow/data/conf/sogo/plist_ldap
new file mode 100644
index 0000000..dfa203e
--- /dev/null
+++ b/mailcow/data/conf/sogo/plist_ldap
@@ -0,0 +1,44 @@
+<!-- LDAP Configuration -->
+<dict>
+    <key>type</key>
+    <string>ldap</string>
+    <key>id</key>
+    <string>${line}_ldap</string>
+
+    <key>CNFieldName</key>
+    <string>cn</string>
+    <key>IDFieldName</key>
+    <string>uid</string>
+    <key>UIDFieldName</key>
+    <string>uid</string>
+
+    <key>baseDN</key>
+    <string>OU=syscid-users,DC=syscid,DC=com</string>
+
+    <key>bindDN</key>
+    <string>$BINDDN</string>
+    <key>bindPassword</key>
+    <string>$BINDSEC</string>
+    <key>bindFields</key>
+    <array>
+        <string>uid</string>
+        <string>mail</string>
+    </array>
+
+    <key>bindAsCurrentUser</key>
+    <string>YES</string>
+
+    <key>hostname</key>
+    <string>ldaps://orpheus.syscid.com</string>
+    <key>canAuthenticate</key>
+    <string>YES</string>
+
+    <key>isAddressBook</key>
+    <string>NO</string>
+    <key>displayName</key>
+    <string>LibertaCasa</string>
+
+    <key>scope</key>
+    <string>SUB</string>
+</dict>
+
-- 
cgit v1.2.3