README

First, run install.sh as a privileged user (root).

	doas sh install.sh

It is safe to run more than once.
install.sh does the following:

- installs packages
- enables daemons
- creates directories
- creates an unprivileged mail delivery system user
- installs configuration files
- initialises the accounts database if not present already
- restarts daemons

Extra steps that need to be run manually follow.

TLS certificate
------

Renew the certificate every night with an entry in root's crontab:

	0 4 * * * acme-client mail.srcbeat.com && rcctl restart smtpd dovecot

The required httpd and acme-client configuration are installed by install.sh.

Dovecot
------

Add the user and password database configuration to /etc/dovecot/conf.d/10-auth.conf:

	userdb {
	        driver = static
	        args = uid=vmail gid=vmail home=/mail/box/%d/%n
	}
	passdb {
	        driver = sql
	        args = /etc/dovecot/dovecot-sql.conf.ext
	}

dovecot-sql.conf.ext is already installed by install.sh.

Add the mail location to /etc/dovecot/conf.d/10-mail.conf:

	mail_location = maildir:/mail/box/%d/%n/Maildir:LAYOUT=fs

With this configuration mail for the account with the username "test@example.com"
is stored at /mail/box/example.com/test/Maildir.

Configure dovecot to load the TLS keys by adding the following to /etc/dovecot/conf.d/10-ssl.conf:

	ssl = required
	ssl_cert = </etc/ssl/mail.srcbeat.com.crt
	ssl_key = </etc/ssl/private/mail.srcbeat.com.key