From 45d6c79f5ac9b889c34ba1e9d3bd9bd073cd0acc Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sat, 8 Aug 2026 18:40:54 -0500 Subject: [PATCH] Make some scalability corrections --- .../Fedora/43/etc/dovecot/conf.d/local.conf | 15 +++++++++++++++ .../Fedora/44/etc/dovecot/conf.d/local.conf | 15 +++++++++++++++ 2 files changed, 30 insertions(+) diff --git a/roles/ensure_dovecot/templates/Fedora/43/etc/dovecot/conf.d/local.conf b/roles/ensure_dovecot/templates/Fedora/43/etc/dovecot/conf.d/local.conf index 49349db..b791e24 100644 --- a/roles/ensure_dovecot/templates/Fedora/43/etc/dovecot/conf.d/local.conf +++ b/roles/ensure_dovecot/templates/Fedora/43/etc/dovecot/conf.d/local.conf @@ -48,6 +48,7 @@ protocol lmtp { } protocol imap { + mail_max_userip_connections = 100 mail_plugins { imap_quota = yes } @@ -81,3 +82,17 @@ protocol submission { mail_max_userip_connections = 10 } +# --- Scalability & Memory Tuning (1 vCPU, 1GB RAM) --- +# Safe limits to prevent OOM errors while accommodating concurrent connections +default_process_limit = 150 +default_client_limit = 1000 + +# --- Enhanced Diagnostic Logging --- +# Provides detailed information about authentication and connection drops +auth_verbose = yes +auth_debug = yes +mail_debug = yes + +# Delay failed authentication attempts by 2 seconds to slow brute force +auth_failure_delay = 2 secs +disable_plaintext_auth = yes diff --git a/roles/ensure_dovecot/templates/Fedora/44/etc/dovecot/conf.d/local.conf b/roles/ensure_dovecot/templates/Fedora/44/etc/dovecot/conf.d/local.conf index 49349db..b791e24 100644 --- a/roles/ensure_dovecot/templates/Fedora/44/etc/dovecot/conf.d/local.conf +++ b/roles/ensure_dovecot/templates/Fedora/44/etc/dovecot/conf.d/local.conf @@ -48,6 +48,7 @@ protocol lmtp { } protocol imap { + mail_max_userip_connections = 100 mail_plugins { imap_quota = yes } @@ -81,3 +82,17 @@ protocol submission { mail_max_userip_connections = 10 } +# --- Scalability & Memory Tuning (1 vCPU, 1GB RAM) --- +# Safe limits to prevent OOM errors while accommodating concurrent connections +default_process_limit = 150 +default_client_limit = 1000 + +# --- Enhanced Diagnostic Logging --- +# Provides detailed information about authentication and connection drops +auth_verbose = yes +auth_debug = yes +mail_debug = yes + +# Delay failed authentication attempts by 2 seconds to slow brute force +auth_failure_delay = 2 secs +disable_plaintext_auth = yes