This commit is contained in:
Christoph Haas 2025-08-31 16:53:22 +02:00
parent 2e037932c8
commit 00185887bd

View file

@ -90,7 +90,7 @@ Check that Apache is running properly:
systemctl status apache2 systemctl status apache2
``` ```
In case of a problem run “`apache2ctl configtest` to find the cause. In case of a problem run “`apache2ctl configtest`" to find the cause.
## Limit access to localhost ## Limit access to localhost
@ -149,15 +149,15 @@ Lets briefly cover the meaning of those lines:
- `$config['password_minimum_length'] = 12;`\ - `$config['password_minimum_length'] = 12;`\
New passwords must be at least 12 characters long. New passwords must be at least 12 characters long.
- `$config['password_force_save'] = true;`\ - `$config['password_force_save'] = true;`\
This will overwrite the password in the database even if it hasnt changed. It helps us improve the strength of the This will overwrite the password in the database even if it hasnt changed. It helps us improve the strength of the password
password hash by re-encoding it with a better algorithm even if the user chooses to keep his old password. hash by re-encoding it with a better algorithm even if the user chooses to keep his old password.
- `$config['password_algorithm'] = 'blowfish-crypt';`\ - `$config['password_algorithm'] = 'blowfish-crypt';`\
The cryptographic algorithm to encode the password. This one is considered very secure and supported by Dovecot. The cryptographic algorithm to encode the password. This one is considered very secure and supported by Dovecot.
- `$config['password_algorithm_prefix'] = '{CRYPT}';`\ - `$config['password_algorithm_prefix'] = '{CRYPT}';`\
Prepend every password with this string so that Dovecot knows how we encrypted the password. Prepend every password with this string so that Dovecot knows how we encrypted the password.
- `$config['password_db_dsn'] = 'mysql://mailadmin:FIRST-PASSWORD-HERER@localhost/mailserver';`\ - `$config['password_db_dsn'] = 'mysql://mailadmin:FIRST-PASSWORD-HERER@localhost/mailserver';`\
Connection information for the local database. Use your own password for the _mailadmin_ (!) database user here. We Connection information for the local database. Use your own password for the _mailadmin_ (!) database user here. We cannot
cannot use the restricted _mailserver_ user because we have to write the new password to the database. use the restricted _mailserver_ user because we have to write the new password to the database.
- `$config['password_query'] = "UPDATE virtual_users SET password=%P WHERE email=%u";`\ - `$config['password_query'] = "UPDATE virtual_users SET password=%P WHERE email=%u";`\
The SQL query that is run to write the new password hash into the database. `%P` is a placeholder for the new password The SQL query that is run to write the new password hash into the database. `%P` is a placeholder for the new password
hash. `%u` is the logged-in user and conveniently matches the email address. hash. `%u` is the logged-in user and conveniently matches the email address.