This commit is contained in:
Christoph Haas 2025-08-31 16:53:22 +02:00
parent 2e037932c8
commit 00185887bd

View file

@ -90,7 +90,7 @@ Check that Apache is running properly:
systemctl status apache2
```
In case of a problem run “`apache2ctl configtest` to find the cause.
In case of a problem run “`apache2ctl configtest`" to find the cause.
## Limit access to localhost
@ -149,15 +149,15 @@ Lets briefly cover the meaning of those lines:
- `$config['password_minimum_length'] = 12;`\
New passwords must be at least 12 characters long.
- `$config['password_force_save'] = true;`\
This will overwrite the password in the database even if it hasnt changed. It helps us improve the strength of the
password hash by re-encoding it with a better algorithm even if the user chooses to keep his old password.
This will overwrite the password in the database even if it hasnt changed. It helps us improve the strength of the password
hash by re-encoding it with a better algorithm even if the user chooses to keep his old password.
- `$config['password_algorithm'] = 'blowfish-crypt';`\
The cryptographic algorithm to encode the password. This one is considered very secure and supported by Dovecot.
- `$config['password_algorithm_prefix'] = '{CRYPT}';`\
Prepend every password with this string so that Dovecot knows how we encrypted the password.
- `$config['password_db_dsn'] = 'mysql://mailadmin:FIRST-PASSWORD-HERER@localhost/mailserver';`\
Connection information for the local database. Use your own password for the _mailadmin_ (!) database user here. We
cannot use the restricted _mailserver_ user because we have to write the new password to the database.
Connection information for the local database. Use your own password for the _mailadmin_ (!) database user here. We cannot
use the restricted _mailserver_ user because we have to write the new password to the database.
- `$config['password_query'] = "UPDATE virtual_users SET password=%P WHERE email=%u";`\
The SQL query that is run to write the new password hash into the database. `%P` is a placeholder for the new password
hash. `%u` is the logged-in user and conveniently matches the email address.