# Dovecot IMAP proxy configuration (dovecot 2.4 syntax)
#
# Terminates SSL/TLS for the local hostname (e.g. imap.example.com) and
# proxies every login, credentials included, to the destination server
# (e.g. imap.example.net) over its own SSL/TLS connection. After the login
# succeeds, dovecot forwards the connection bit-by-bit in both directions.

dovecot_config_version = 2.4.0
dovecot_storage_version = 2.4.0

protocols = imap
log_path = /dev/stdout

ssl = yes
ssl_server_cert_file = /etc/dovecot/ssl/cert.pem
ssl_server_key_file = /etc/dovecot/ssl/key.pem
ssl_min_protocol = TLSv1.2
ssl_client_ca_file = /etc/ssl/certs/ca-certificates.crt

auth_mechanisms = plain login

service imap-login {
  inet_listener imap {
    port = 143
  }
  inet_listener imaps {
    port = 993
    ssl = yes
  }
}

passdb static {
  fields {
    nopassword = yes
    proxy = yes
    host = imap.example.net
    port = 993
    ssl = yes
  }
}