[authentication.fallback-admin]
secret = "$6$thXj.qofkv.CIk2x$7SowwdHAFqNXrBm7IGnsYKnZyreoRHqMjWtJtxVLtPpM47OkrmGxYCB5ZqCdm2UvMsA3XcElnsTwr.4tkN8HH/"
user = "admin"

[directory.internal]
store = "rocksdb"
type = "internal"

[auth.dkim]
sign = [ { if = "is_local_domain('', sender_domain)", then = "['rsa-' + sender_domain, 'ed25519-' + sender_domain]" }, { else = false } ]
verify = "relaxed"

[report.dkim]
from-name = "'Report Subsystem'"
from-address = "'[email protected]'"
subject = "'DKIM Authentication Failure Report'"
sign = ["rsa", "ed25519"]
send = "1/1d"

[signature."ed25519"]
private-key = "%{file:/opt/stalwart-smtp/etc/private/dkim-ed.key}%"
domain = "mydomain.com"
selector = "ed-default"
headers = ["From", "To", "Date", "Subject", "Message-ID"]
algorithm = "ed25519-sha256"
canonicalization = "relaxed/relaxed"

[signature."rsa"]
private-key = "%{file:/opt/stalwart-smtp/etc/private/dkim-rsa.key}%"
domain = "mydomain.com"
selector = "rsa-default"
headers = ["From", "To", "Date", "Subject", "Message-ID"]
algorithm = "rsa-sha256"
canonicalization = "relaxed/relaxed"

[certificate."default"]
cert = "%{file:/data/certs/mail.mydomain.com/cert.pem}%"
default = true
private-key = "%{file:/data/certs/mail.mydomain.com/key.pem}%"

[lookup."default"]
hostname = "mail.mydomain.com"
[server."http"]
hsts = true
permissive-cors = false
url = "protocol + '://' + key_get('default', 'hostname') + ':' + local_port"
use-x-forwarded = true

[server.listener."http"]
bind = "[::]:8080"
protocol = "http"

[server.listener."https"]
bind = "[::]:443"
protocol = "http"
tls.implicit = true

[server.listener."jmap"]
bind = ["[::]:443"]
protocol = "http"
tls.implicit = true

[server.listener."imaptls"]
bind = "[::]:993"
protocol = "imap"
proxy.override = true
proxy.trusted-networks.0 = "172.19.0.2"
proxy.trusted-networks.1 = "172.19.0.0/16"
tls.implicit = true

[server.listener."smtp"]
bind = "[::]:25"
protocol = "smtp"
proxy.override = true
proxy.trusted-networks.0 = "172.19.0.2"
proxy.trusted-networks.1 = "172.19.0.0/16"

[server.listener."submissions"]
bind = "[::]:465"
protocol = "smtp"
proxy.override = true
proxy.trusted-networks.0 = "172.19.0.2"
proxy.trusted-networks.1 = "172.19.0.0/16"
tls.implicit = true

[storage]
blob = "rocksdb"
data = "rocksdb"
directory = "internal"
fts = "rocksdb"
lookup = "rocksdb"

[store."rocksdb"]
compression = "lz4"
path = "/opt/stalwart-mail/data"
type = "rocksdb"

[tracer.log]
ansi = false
enable = true
level = "info"
path = "/opt/stalwart-mail/logs"
prefix = "stalwart.log"
rotate = "daily"
type = "log"