[ { "@type": "update", "object": "DataStore", "value": { "@type": "PostgreSql", "host": "main-rw.postgres.svc.cluster.local", "port": 5432, "database": "stalwart", "authUsername": "stalwart", "authSecret": { "@type": "EnvironmentVariable", "variableName": "STALWART_DB_PASSWORD" }, "useTls": false, "allowInvalidCerts": false } }, { "@type": "update", "object": "BlobStore", "value": { "@type": "S3", "bucket": "stalwart", "accessKeyId": { "@type": "Value", "value": "stalwart" }, "secretKey": { "@type": "EnvironmentVariable", "variableName": "STALWART_S3_SECRET_KEY" }, "region": { "@type": "Custom", "url": "https://s3.quorate.internal", "region": "us-east-1" }, "allowInvalidCerts": false, "verifyAfterWrite": true } }, { "@type": "update", "object": "SearchStore", "value": { "@type": "PostgreSql", "host": "main-rw.postgres.svc.cluster.local", "port": 5432, "database": "stalwart", "authUsername": "stalwart", "authSecret": { "@type": "EnvironmentVariable", "variableName": "STALWART_DB_PASSWORD" }, "useTls": false, "allowInvalidCerts": false } }, { "@type": "update", "object": "InMemoryStore", "value": { "@type": "Redis", "url": { "$secretFile": "dragonfly_url" } } }, { "@type": "update", "object": "DnsResolver", "value": { "@type": "System", "attempts": 1, "maxConcurrentRequests": 4, "enableEdns": true, "preserveIntermediates": true, "timeout": 2000, "tcpOnError": true } }, { "@type": "update", "object": "Cache", "value": { "accessTokens": 10485760, "contacts": 10485760, "dnsIpv4": 5242880, "dnsIpv6": 5242880, "dnsMtaSts": 1048576, "dnsMx": 5242880, "dnsPtr": 1048576, "spamLookup": 5242880, "dnsTlsa": 1048576, "dnsTxt": 5242880, "events": 10485760, "scheduling": 1048576, "files": 10485760, "httpAuth": 1048576, "messages": 52428800, "domains": 5242880, "domainNames": 10485760, "domainNamesNegative": 1048576, "emailAddresses": 10485760, "emailAddressesNegative": 2097152, "accounts": 20971520, "roles": 5242880, "tenants": 5242880, "mailingLists": 2097152, "dkimSignatures": 10485760, "negativeTtl": 3600000 } }, { "@type": "update", "object": "TaskManager", "value": { "strategy": { "@type": "ExponentialBackoff", "factor": 2.0, "initialDelay": 60000, "maxDelay": 1800000, "jitter": true } } }, { "@type": "update", "object": "Asn", "value": { "@type": "Resource", "refreshInterval": 604800000, "maxSize": 104857600, "timeout": 30000, "asnUrls": { "https://cdn.jsdelivr.net/npm/@ip-location-db/asn/asn-ipv4.csv": true, "https://cdn.jsdelivr.net/npm/@ip-location-db/asn/asn-ipv6.csv": true }, "geoUrls": { "https://cdn.jsdelivr.net/npm/@ip-location-db/geolite2-geo-whois-asn-country/geolite2-geo-whois-asn-country-ipv4.csv": true, "https://cdn.jsdelivr.net/npm/@ip-location-db/geolite2-geo-whois-asn-country/geolite2-geo-whois-asn-country-ipv6.csv": true }, "httpAuth": { "@type": "Unauthenticated" }, "httpHeaders": {} } }, { "@type": "update", "object": "MtaExtensions", "value": { "chunking": { "match": {}, "else": "true" }, "deliverBy": { "match": {}, "else": "false" }, "dsn": { "match": {}, "else": "false" }, "expn": { "match": {}, "else": "false" }, "futureRelease": { "match": {}, "else": "false" }, "mtPriority": { "match": {}, "else": "false" }, "noSoliciting": { "match": {}, "else": "''" }, "pipelining": { "match": {}, "else": "true" }, "requireTls": { "match": {}, "else": "true" }, "vrfy": { "match": {}, "else": "false" } } }, { "@type": "update", "object": "MtaInboundSession", "value": { "maxDuration": { "match": {}, "else": "10m" }, "idleTimeout": { "match": {}, "else": "5m" }, "transferLimit": { "match": {}, "else": "262144000" } } }, { "@type": "update", "object": "MtaStageAuth", "value": { "maxFailures": { "match": {}, "else": "3" }, "waitOnFail": { "match": {}, "else": "5s" }, "saslMechanisms": { "match": { "0": { "if": "local_port == 587 || (local_port != 25 && is_tls)", "then": "[plain, login, oauthbearer, xoauth2]" }, "1": { "if": "local_port != 25", "then": "[oauthbearer, xoauth2]" } }, "else": "false" }, "mustMatchSender": { "match": {}, "else": "true" }, "require": { "match": { "0": { "if": "local_port != 25", "then": "true" } }, "else": "false" } } }, { "@type": "update", "object": "MtaStageRcpt", "value": { "maxFailures": { "match": {}, "else": "5" }, "waitOnFail": { "match": {}, "else": "5s" }, "maxRecipients": { "match": {}, "else": "100" }, "allowRelaying": { "match": {}, "else": "!is_empty(authenticated_as)" }, "rewrite": { "match": {}, "else": "false" }, "script": { "match": {}, "else": "false" } } }, { "@type": "update", "object": "MtaStageData", "value": { "addAuthResultsHeader": { "match": {}, "else": "local_port == 25" }, "addDateHeader": { "match": {}, "else": "local_port == 25" }, "addDeliveredToHeader": true, "addMessageIdHeader": { "match": {}, "else": "local_port == 25" }, "addReceivedHeader": { "match": {}, "else": "local_port == 25" }, "addReceivedSpfHeader": { "match": {}, "else": "local_port == 25" }, "addReturnPathHeader": { "match": {}, "else": "local_port == 25" }, "maxMessages": { "match": {}, "else": "10" }, "maxReceivedHeaders": { "match": {}, "else": "50" }, "maxMessageSize": { "match": {}, "else": "75000000" }, "script": { "match": {}, "else": "false" }, "enableSpamFilter": { "match": {}, "else": "is_empty(authenticated_as)" } } }, { "@type": "update", "object": "Search", "value": { "indexBatchSize": 100, "defaultLanguage": "en-US", "supportedLanguages": { "en-US": true }, "indexCalendar": false, "indexCalendarFields": {}, "indexContacts": false, "indexContactFields": {}, "indexEmail": true, "indexEmailFields": { "from": true, "to": true, "cc": true, "bcc": true, "subject": true, "body": true, "attachment": true }, "indexTelemetry": false } }, { "@type": "update", "object": "Security", "value": { "abuseBanRate": { "count": 35, "period": 86400000 }, "abuseBanPeriod": null, "authBanRate": { "count": 100, "period": 86400000 }, "authBanPeriod": null, "loiterBanRate": { "count": 150, "period": 86400000 }, "loiterBanPeriod": null, "scanBanPaths": {}, "scanBanRate": { "count": 30, "period": 86400000 }, "scanBanPeriod": null } }, { "@type": "update", "object": "SpamSettings", "value": { "trustContacts": true, "enable": true, "greylistFor": null, "scoreDiscard": 0.0, "scoreReject": 0.0, "scoreSpam": 5.0, "trustReplies": true, "spamFilterRulesUrl": "https://github.com/stalwartlabs/spam-filter/releases/latest/download/spam-filter-rules.json.gz" } }, { "@type": "update", "object": "SpamClassifier", "value": { "model": { "parameters": { "alpha": 2.0, "beta": 1.0, "numFeatures": "20", "l1Ratio": 0.001, "l2Ratio": 0.0001 }, "featureL2Normalize": true, "featureLogScale": true, "@type": "FtrlFh" }, "learnHamFromCard": false, "learnSpamFromRblHits": 2, "learnSpamFromTraps": false, "holdSamplesFor": 15552000000, "minHamSamples": 100, "minSpamSamples": 100, "reservoirCapacity": 1024, "trainInterval": null, "learnHamFromReply": false } }, { "@type": "update", "object": "SpamDnsblSettings", "value": { "domainLimit": 10, "emailLimit": 10, "ipLimit": 10, "urlLimit": 10 } }, { "@type": "reconcile", "object": "Directory", "matchOn": [ "description" ], "value": { "zitadel": { "@type": "Oidc", "description": "Zitadel identity", "issuerUrl": { "$secretFile": "oidc_issuer_url" }, "acceptedAudiences": { "$secretSet": "oidc_audience" }, "claimUsername": "sub", "usernameDomain": "mail-auth.quorate.internal", "claimName": "sub", "claimGroups": null, "memberTenantId": null, "opaqueTokenValidation": "userInfo", "unscopedTokens": "full" } } }, { "@type": "update", "object": "Authentication", "value": { "directoryId": "#zitadel" } }, { "@type": "reconcile", "object": "Domain", "matchOn": [ "name" ], "value": { "domain": { "name": "quorate.dev", "description": "Authoritative mail domain", "aliases": {}, "allowRelaying": false, "catchAllAddress": null, "certificateManagement": { "@type": "Manual" }, "directoryId": null, "dkimManagement": { "@type": "Manual" }, "dnsManagement": { "@type": "Manual" }, "enable": true, "logo": null, "memberTenantId": null, "reportAddressUri": "mailto:********", "subAddressing": { "@type": "Enabled" } }, "authentication-domain": { "name": "mail-auth.quorate.internal", "description": "Zitadel subject binding domain", "aliases": {}, "allowRelaying": false, "catchAllAddress": null, "certificateManagement": { "@type": "Manual" }, "directoryId": null, "dkimManagement": { "@type": "Manual" }, "dnsManagement": { "@type": "Manual" }, "enable": true, "logo": null, "memberTenantId": null, "reportAddressUri": null, "subAddressing": { "@type": "Disabled" } } } }, { "@type": "upsert", "object": "Account", "matchOn": [ "name", "domainId" ], "value": { "operator": { "@type": "Group", "name": "operator", "description": "Shared operational mailbox", "aliases": {}, "domainId": "#domain", "locale": "en-US", "memberTenantId": null, "permissions": { "@type": "Replace", "enabledPermissions": { "emailReceive": true }, "disabledPermissions": {} }, "quotas": {}, "roles": { "@type": "Default" }, "timeZone": null }, "human-admin": { "@type": "User", "name": "ms2k", "description": "Zitadel human administrator", "aliases": { "0": { "name": { "$secretFile": "oidc_human_admin_subject" }, "domainId": "#authentication-domain" } }, "domainId": "#domain", "encryptionAtRest": { "@type": "Disabled" }, "locale": "en-US", "memberGroupIds": { "#operator": true }, "memberTenantId": null, "permissions": { "@type": "Replace", "enabledPermissions": { "authenticate": true, "authenticateWithAlias": true, "interactAi": true, "impersonate": true, "unlimitedRequests": true, "unlimitedUploads": true, "fetchAnyBlob": true, "liveTracing": true, "liveMetrics": true, "liveDeliveryTest": true, "sysAccountGet": true, "sysAccountCreate": true, "sysAccountUpdate": true, "sysAccountDestroy": true, "sysAccountQuery": true, "sysAccountPasswordGet": true, "sysAccountPasswordUpdate": true, "sysAccountSettingsGet": true, "sysAccountSettingsUpdate": true, "sysAcmeProviderGet": true, "sysAcmeProviderCreate": true, "sysAcmeProviderUpdate": true, "sysAcmeProviderDestroy": true, "sysAcmeProviderQuery": true, "actionReloadSettings": true, "actionReloadTlsCertificates": true, "actionReloadLookupStores": true, "actionReloadBlockedIps": true, "actionUpdateApps": true, "actionTroubleshootDmarc": true, "actionClassifySpam": true, "actionInvalidateCaches": true, "actionInvalidateNegativeCaches": true, "actionPauseMtaQueue": true, "actionResumeMtaQueue": true, "sysActionCreate": true, "sysAddressBookGet": true, "sysAddressBookUpdate": true, "sysAiModelGet": true, "sysAiModelCreate": true, "sysAiModelUpdate": true, "sysAiModelDestroy": true, "sysAiModelQuery": true, "sysAlertGet": true, "sysAlertCreate": true, "sysAlertUpdate": true, "sysAlertDestroy": true, "sysAlertQuery": true, "sysAllowedIpGet": true, "sysAllowedIpCreate": true, "sysAllowedIpUpdate": true, "sysAllowedIpDestroy": true, "sysAllowedIpQuery": true, "sysApiKeyGet": true, "sysApiKeyCreate": true, "sysApiKeyUpdate": true, "sysApiKeyDestroy": true, "sysApiKeyQuery": true, "sysAppPasswordGet": true, "sysAppPasswordCreate": true, "sysAppPasswordUpdate": true, "sysAppPasswordDestroy": true, "sysAppPasswordQuery": true, "sysApplicationGet": true, "sysApplicationCreate": true, "sysApplicationUpdate": true, "sysApplicationDestroy": true, "sysApplicationQuery": true, "sysArchivedItemGet": true, "sysArchivedItemUpdate": true, "sysArchivedItemDestroy": true, "sysArchivedItemQuery": true, "sysArfExternalReportGet": true, "sysArfExternalReportDestroy": true, "sysArfExternalReportQuery": true, "sysAsnGet": true, "sysAsnUpdate": true, "sysAuthenticationGet": true, "sysAuthenticationUpdate": true, "sysBlobStoreGet": true, "sysBlobStoreUpdate": true, "sysBlockedIpGet": true, "sysBlockedIpCreate": true, "sysBlockedIpUpdate": true, "sysBlockedIpDestroy": true, "sysBlockedIpQuery": true, "sysBootstrapGet": true, "sysBootstrapUpdate": true, "sysCacheGet": true, "sysCacheUpdate": true, "sysCalendarGet": true, "sysCalendarUpdate": true, "sysCalendarAlarmGet": true, "sysCalendarAlarmUpdate": true, "sysCalendarSchedulingGet": true, "sysCalendarSchedulingUpdate": true, "sysCertificateGet": true, "sysCertificateCreate": true, "sysCertificateUpdate": true, "sysCertificateDestroy": true, "sysCertificateQuery": true, "sysClusterNodeGet": true, "sysClusterNodeQuery": true, "sysClusterRoleGet": true, "sysClusterRoleCreate": true, "sysClusterRoleUpdate": true, "sysClusterRoleDestroy": true, "sysClusterRoleQuery": true, "sysCoordinatorGet": true, "sysCoordinatorUpdate": true, "sysDataRetentionGet": true, "sysDataRetentionUpdate": true, "sysDataStoreGet": true, "sysDataStoreUpdate": true, "sysDirectoryGet": true, "sysDirectoryCreate": true, "sysDirectoryUpdate": true, "sysDirectoryDestroy": true, "sysDirectoryQuery": true, "sysDkimReportSettingsGet": true, "sysDkimReportSettingsUpdate": true, "sysDkimSignatureGet": true, "sysDkimSignatureCreate": true, "sysDkimSignatureUpdate": true, "sysDkimSignatureDestroy": true, "sysDkimSignatureQuery": true, "sysDmarcExternalReportGet": true, "sysDmarcExternalReportDestroy": true, "sysDmarcExternalReportQuery": true, "sysDmarcInternalReportGet": true, "sysDmarcInternalReportUpdate": true, "sysDmarcInternalReportDestroy": true, "sysDmarcInternalReportQuery": true, "sysDmarcReportSettingsGet": true, "sysDmarcReportSettingsUpdate": true, "sysDnsResolverGet": true, "sysDnsResolverUpdate": true, "sysDnsServerGet": true, "sysDnsServerCreate": true, "sysDnsServerUpdate": true, "sysDnsServerDestroy": true, "sysDnsServerQuery": true, "sysDomainGet": true, "sysDomainCreate": true, "sysDomainUpdate": true, "sysDomainDestroy": true, "sysDomainQuery": true, "sysDsnReportSettingsGet": true, "sysDsnReportSettingsUpdate": true, "sysEmailGet": true, "sysEmailUpdate": true, "sysEnterpriseGet": true, "sysEnterpriseUpdate": true, "sysEventTracingLevelGet": true, "sysEventTracingLevelCreate": true, "sysEventTracingLevelUpdate": true, "sysEventTracingLevelDestroy": true, "sysEventTracingLevelQuery": true, "sysFileStorageGet": true, "sysFileStorageUpdate": true, "sysHttpGet": true, "sysHttpUpdate": true, "sysHttpFormGet": true, "sysHttpFormUpdate": true, "sysHttpLookupGet": true, "sysHttpLookupCreate": true, "sysHttpLookupUpdate": true, "sysHttpLookupDestroy": true, "sysHttpLookupQuery": true, "sysImapGet": true, "sysImapUpdate": true, "sysInMemoryStoreGet": true, "sysInMemoryStoreUpdate": true, "sysJmapGet": true, "sysJmapUpdate": true, "sysLogGet": true, "sysLogQuery": true, "sysMailingListGet": true, "sysMailingListCreate": true, "sysMailingListUpdate": true, "sysMailingListDestroy": true, "sysMailingListQuery": true, "sysMaskedEmailGet": true, "sysMaskedEmailCreate": true, "sysMaskedEmailUpdate": true, "sysMaskedEmailDestroy": true, "sysMaskedEmailQuery": true, "sysMemoryLookupKeyGet": true, "sysMemoryLookupKeyCreate": true, "sysMemoryLookupKeyUpdate": true, "sysMemoryLookupKeyDestroy": true, "sysMemoryLookupKeyQuery": true, "sysMemoryLookupKeyValueGet": true, "sysMemoryLookupKeyValueCreate": true, "sysMemoryLookupKeyValueUpdate": true, "sysMemoryLookupKeyValueDestroy": true, "sysMemoryLookupKeyValueQuery": true, "sysMetricGet": true, "sysMetricQuery": true, "sysMetricsGet": true, "sysMetricsUpdate": true, "sysMetricsStoreGet": true, "sysMetricsStoreUpdate": true, "sysMtaConnectionStrategyGet": true, "sysMtaConnectionStrategyCreate": true, "sysMtaConnectionStrategyUpdate": true, "sysMtaConnectionStrategyDestroy": true, "sysMtaConnectionStrategyQuery": true, "sysMtaDeliveryScheduleGet": true, "sysMtaDeliveryScheduleCreate": true, "sysMtaDeliveryScheduleUpdate": true, "sysMtaDeliveryScheduleDestroy": true, "sysMtaDeliveryScheduleQuery": true, "sysMtaExtensionsGet": true, "sysMtaExtensionsUpdate": true, "sysMtaHookGet": true, "sysMtaHookCreate": true, "sysMtaHookUpdate": true, "sysMtaHookDestroy": true, "sysMtaHookQuery": true, "sysMtaInboundSessionGet": true, "sysMtaInboundSessionUpdate": true, "sysMtaInboundThrottleGet": true, "sysMtaInboundThrottleCreate": true, "sysMtaInboundThrottleUpdate": true, "sysMtaInboundThrottleDestroy": true, "sysMtaInboundThrottleQuery": true, "sysMtaMilterGet": true, "sysMtaMilterCreate": true, "sysMtaMilterUpdate": true, "sysMtaMilterDestroy": true, "sysMtaMilterQuery": true, "sysMtaOutboundStrategyGet": true, "sysMtaOutboundStrategyUpdate": true, "sysMtaOutboundThrottleGet": true, "sysMtaOutboundThrottleCreate": true, "sysMtaOutboundThrottleUpdate": true, "sysMtaOutboundThrottleDestroy": true, "sysMtaOutboundThrottleQuery": true, "sysMtaQueueQuotaGet": true, "sysMtaQueueQuotaCreate": true, "sysMtaQueueQuotaUpdate": true, "sysMtaQueueQuotaDestroy": true, "sysMtaQueueQuotaQuery": true, "sysMtaRouteGet": true, "sysMtaRouteCreate": true, "sysMtaRouteUpdate": true, "sysMtaRouteDestroy": true, "sysMtaRouteQuery": true, "sysMtaStageAuthGet": true, "sysMtaStageAuthUpdate": true, "sysMtaStageConnectGet": true, "sysMtaStageConnectUpdate": true, "sysMtaStageDataGet": true, "sysMtaStageDataUpdate": true, "sysMtaStageEhloGet": true, "sysMtaStageEhloUpdate": true, "sysMtaStageMailGet": true, "sysMtaStageMailUpdate": true, "sysMtaStageRcptGet": true, "sysMtaStageRcptUpdate": true, "sysMtaStsGet": true, "sysMtaStsUpdate": true, "sysMtaTlsStrategyGet": true, "sysMtaTlsStrategyCreate": true, "sysMtaTlsStrategyUpdate": true, "sysMtaTlsStrategyDestroy": true, "sysMtaTlsStrategyQuery": true, "sysMtaVirtualQueueGet": true, "sysMtaVirtualQueueCreate": true, "sysMtaVirtualQueueUpdate": true, "sysMtaVirtualQueueDestroy": true, "sysMtaVirtualQueueQuery": true, "sysNetworkListenerGet": true, "sysNetworkListenerCreate": true, "sysNetworkListenerUpdate": true, "sysNetworkListenerDestroy": true, "sysNetworkListenerQuery": true, "sysOAuthClientGet": true, "sysOAuthClientCreate": true, "sysOAuthClientUpdate": true, "sysOAuthClientDestroy": true, "sysOAuthClientQuery": true, "sysOidcProviderGet": true, "sysOidcProviderUpdate": true, "sysPublicKeyGet": true, "sysPublicKeyCreate": true, "sysPublicKeyUpdate": true, "sysPublicKeyDestroy": true, "sysPublicKeyQuery": true, "sysQueuedMessageGet": true, "sysQueuedMessageUpdate": true, "sysQueuedMessageDestroy": true, "sysQueuedMessageQuery": true, "sysReportSettingsGet": true, "sysReportSettingsUpdate": true, "sysRoleGet": true, "sysRoleCreate": true, "sysRoleUpdate": true, "sysRoleDestroy": true, "sysRoleQuery": true, "sysSearchGet": true, "sysSearchUpdate": true, "sysSearchStoreGet": true, "sysSearchStoreUpdate": true, "sysSecurityGet": true, "sysSecurityUpdate": true, "sysSenderAuthGet": true, "sysSenderAuthUpdate": true, "sysSharingGet": true, "sysSharingUpdate": true, "sysSieveSystemInterpreterGet": true, "sysSieveSystemInterpreterUpdate": true, "sysSieveSystemScriptGet": true, "sysSieveSystemScriptCreate": true, "sysSieveSystemScriptUpdate": true, "sysSieveSystemScriptDestroy": true, "sysSieveSystemScriptQuery": true, "sysSieveUserInterpreterGet": true, "sysSieveUserInterpreterUpdate": true, "sysSieveUserScriptGet": true, "sysSieveUserScriptCreate": true, "sysSieveUserScriptUpdate": true, "sysSieveUserScriptDestroy": true, "sysSieveUserScriptQuery": true, "sysSpamClassifierGet": true, "sysSpamClassifierUpdate": true, "sysSpamDnsblServerGet": true, "sysSpamDnsblServerCreate": true, "sysSpamDnsblServerUpdate": true, "sysSpamDnsblServerDestroy": true, "sysSpamDnsblServerQuery": true, "sysSpamDnsblSettingsGet": true, "sysSpamDnsblSettingsUpdate": true, "sysSpamFileExtensionGet": true, "sysSpamFileExtensionCreate": true, "sysSpamFileExtensionUpdate": true, "sysSpamFileExtensionDestroy": true, "sysSpamFileExtensionQuery": true, "sysSpamAiGet": true, "sysSpamAiUpdate": true, "sysSpamPyzorGet": true, "sysSpamPyzorUpdate": true, "sysSpamRuleGet": true, "sysSpamRuleCreate": true, "sysSpamRuleUpdate": true, "sysSpamRuleDestroy": true, "sysSpamRuleQuery": true, "sysSpamSettingsGet": true, "sysSpamSettingsUpdate": true, "sysSpamTagGet": true, "sysSpamTagCreate": true, "sysSpamTagUpdate": true, "sysSpamTagDestroy": true, "sysSpamTagQuery": true, "sysSpamTrainingSampleGet": true, "sysSpamTrainingSampleCreate": true, "sysSpamTrainingSampleDestroy": true, "sysSpamTrainingSampleQuery": true, "sysSpfReportSettingsGet": true, "sysSpfReportSettingsUpdate": true, "sysStoreLookupGet": true, "sysStoreLookupCreate": true, "sysStoreLookupUpdate": true, "sysStoreLookupDestroy": true, "sysStoreLookupQuery": true, "sysSystemSettingsGet": true, "sysSystemSettingsUpdate": true, "taskCalendarAlarmEmail": true, "taskCalendarAlarmNotification": true, "taskCalendarItipMessage": true, "taskMergeThreads": true, "taskDmarcReport": true, "taskTlsReport": true, "taskRestoreArchivedItem": true, "taskDestroyAccount": true, "taskAccountMaintenance": true, "taskTenantMaintenance": true, "taskStoreMaintenance": true, "taskSpamFilterMaintenance": true, "taskAcmeRenewal": true, "taskDkimManagement": true, "taskDnsManagement": true, "sysTaskGet": true, "sysTaskCreate": true, "sysTaskUpdate": true, "sysTaskDestroy": true, "sysTaskQuery": true, "sysTaskManagerGet": true, "sysTaskManagerUpdate": true, "sysTenantGet": true, "sysTenantCreate": true, "sysTenantUpdate": true, "sysTenantDestroy": true, "sysTenantQuery": true, "sysTlsExternalReportGet": true, "sysTlsExternalReportDestroy": true, "sysTlsExternalReportQuery": true, "sysTlsInternalReportGet": true, "sysTlsInternalReportUpdate": true, "sysTlsInternalReportDestroy": true, "sysTlsInternalReportQuery": true, "sysTlsReportSettingsGet": true, "sysTlsReportSettingsUpdate": true, "sysTraceGet": true, "sysTraceQuery": true, "sysTracerGet": true, "sysTracerCreate": true, "sysTracerUpdate": true, "sysTracerDestroy": true, "sysTracerQuery": true, "sysTracingStoreGet": true, "sysTracingStoreUpdate": true, "sysWebDavGet": true, "sysWebDavUpdate": true, "sysWebHookGet": true, "sysWebHookCreate": true, "sysWebHookUpdate": true, "sysWebHookDestroy": true, "sysWebHookQuery": true, "emailSend": true, "emailReceive": true, "calendarAlarmsSend": true, "calendarSchedulingSend": true, "calendarSchedulingReceive": true, "jmapPushSubscriptionGet": true, "jmapPushSubscriptionCreate": true, "jmapPushSubscriptionUpdate": true, "jmapPushSubscriptionDestroy": true, "jmapMailboxGet": true, "jmapMailboxChanges": true, "jmapMailboxQuery": true, "jmapMailboxQueryChanges": true, "jmapMailboxCreate": true, "jmapMailboxUpdate": true, "jmapMailboxDestroy": true, "jmapThreadGet": true, "jmapThreadChanges": true, "jmapEmailGet": true, "jmapEmailChanges": true, "jmapEmailQuery": true, "jmapEmailQueryChanges": true, "jmapEmailCreate": true, "jmapEmailUpdate": true, "jmapEmailDestroy": true, "jmapEmailCopy": true, "jmapEmailImport": true, "jmapEmailParse": true, "jmapSearchSnippetGet": true, "jmapIdentityGet": true, "jmapIdentityChanges": true, "jmapIdentityCreate": true, "jmapIdentityUpdate": true, "jmapIdentityDestroy": true, "jmapEmailSubmissionGet": true, "jmapEmailSubmissionChanges": true, "jmapEmailSubmissionQuery": true, "jmapEmailSubmissionQueryChanges": true, "jmapEmailSubmissionCreate": true, "jmapEmailSubmissionUpdate": true, "jmapEmailSubmissionDestroy": true, "jmapVacationResponseGet": true, "jmapVacationResponseCreate": true, "jmapVacationResponseUpdate": true, "jmapVacationResponseDestroy": true, "jmapSieveScriptGet": true, "jmapSieveScriptQuery": true, "jmapSieveScriptValidate": true, "jmapSieveScriptCreate": true, "jmapSieveScriptUpdate": true, "jmapSieveScriptDestroy": true, "jmapPrincipalGet": true, "jmapPrincipalQuery": true, "jmapPrincipalChanges": true, "jmapPrincipalQueryChanges": true, "jmapPrincipalGetAvailability": true, "jmapQuotaGet": true, "jmapQuotaChanges": true, "jmapQuotaQuery": true, "jmapQuotaQueryChanges": true, "jmapBlobGet": true, "jmapBlobCopy": true, "jmapBlobLookup": true, "jmapBlobUpload": true, "jmapAddressBookGet": true, "jmapAddressBookChanges": true, "jmapAddressBookCreate": true, "jmapAddressBookUpdate": true, "jmapAddressBookDestroy": true, "jmapContactCardGet": true, "jmapContactCardChanges": true, "jmapContactCardQuery": true, "jmapContactCardQueryChanges": true, "jmapContactCardCreate": true, "jmapContactCardUpdate": true, "jmapContactCardDestroy": true, "jmapContactCardCopy": true, "jmapContactCardParse": true, "jmapFileNodeGet": true, "jmapFileNodeChanges": true, "jmapFileNodeQuery": true, "jmapFileNodeQueryChanges": true, "jmapFileNodeCreate": true, "jmapFileNodeUpdate": true, "jmapFileNodeDestroy": true, "jmapShareNotificationGet": true, "jmapShareNotificationChanges": true, "jmapShareNotificationQuery": true, "jmapShareNotificationQueryChanges": true, "jmapShareNotificationCreate": true, "jmapShareNotificationUpdate": true, "jmapShareNotificationDestroy": true, "jmapCalendarGet": true, "jmapCalendarChanges": true, "jmapCalendarCreate": true, "jmapCalendarUpdate": true, "jmapCalendarDestroy": true, "jmapCalendarEventGet": true, "jmapCalendarEventChanges": true, "jmapCalendarEventQuery": true, "jmapCalendarEventQueryChanges": true, "jmapCalendarEventCreate": true, "jmapCalendarEventUpdate": true, "jmapCalendarEventDestroy": true, "jmapCalendarEventCopy": true, "jmapCalendarEventParse": true, "jmapCalendarEventNotificationGet": true, "jmapCalendarEventNotificationChanges": true, "jmapCalendarEventNotificationQuery": true, "jmapCalendarEventNotificationQueryChanges": true, "jmapCalendarEventNotificationCreate": true, "jmapCalendarEventNotificationUpdate": true, "jmapCalendarEventNotificationDestroy": true, "jmapParticipantIdentityGet": true, "jmapParticipantIdentityChanges": true, "jmapParticipantIdentityCreate": true, "jmapParticipantIdentityUpdate": true, "jmapParticipantIdentityDestroy": true, "jmapCoreEcho": true, "imapAuthenticate": true, "imapAclGet": true, "imapAclSet": true, "imapMyRights": true, "imapListRights": true, "imapAppend": true, "imapCapability": true, "imapId": true, "imapCopy": true, "imapMove": true, "imapCreate": true, "imapDelete": true, "imapEnable": true, "imapExpunge": true, "imapFetch": true, "imapIdle": true, "imapList": true, "imapLsub": true, "imapNamespace": true, "imapRename": true, "imapSearch": true, "imapSort": true, "imapSelect": true, "imapExamine": true, "imapStatus": true, "imapStore": true, "imapSubscribe": true, "imapThread": true, "pop3Authenticate": true, "pop3List": true, "pop3Uidl": true, "pop3Stat": true, "pop3Retr": true, "pop3Dele": true, "sieveAuthenticate": true, "sieveListScripts": true, "sieveSetActive": true, "sieveGetScript": true, "sievePutScript": true, "sieveDeleteScript": true, "sieveRenameScript": true, "sieveCheckScript": true, "sieveHaveSpace": true, "davSyncCollection": true, "davExpandProperty": true, "davPrincipalAcl": true, "davPrincipalList": true, "davPrincipalMatch": true, "davPrincipalSearch": true, "davPrincipalSearchPropSet": true, "davFilePropFind": true, "davFilePropPatch": true, "davFileGet": true, "davFileMkCol": true, "davFileDelete": true, "davFilePut": true, "davFileCopy": true, "davFileMove": true, "davFileLock": true, "davFileAcl": true, "davCardPropFind": true, "davCardPropPatch": true, "davCardGet": true, "davCardMkCol": true, "davCardDelete": true, "davCardPut": true, "davCardCopy": true, "davCardMove": true, "davCardLock": true, "davCardAcl": true, "davCardQuery": true, "davCardMultiGet": true, "davCalPropFind": true, "davCalPropPatch": true, "davCalGet": true, "davCalMkCol": true, "davCalDelete": true, "davCalPut": true, "davCalCopy": true, "davCalMove": true, "davCalLock": true, "davCalAcl": true, "davCalQuery": true, "davCalMultiGet": true, "davCalFreeBusyQuery": true, "jmapFileNodeCopy": true }, "disabledPermissions": {} }, "quotas": {}, "roles": { "@type": "Admin" }, "timeZone": null }, "controller": { "@type": "User", "name": "controller", "description": "Continuous configuration owner", "aliases": { "0": { "name": { "$secretFile": "oidc_controller_subject" }, "domainId": "#authentication-domain" } }, "domainId": "#authentication-domain", "encryptionAtRest": { "@type": "Disabled" }, "locale": "en-US", "memberGroupIds": {}, "memberTenantId": null, "permissions": { "@type": "Replace", "enabledPermissions": { "authenticate": true, "authenticateWithAlias": true, "interactAi": true, "impersonate": true, "unlimitedRequests": true, "unlimitedUploads": true, "fetchAnyBlob": true, "liveTracing": true, "liveMetrics": true, "liveDeliveryTest": true, "sysAccountGet": true, "sysAccountCreate": true, "sysAccountUpdate": true, "sysAccountDestroy": true, "sysAccountQuery": true, "sysAccountPasswordGet": true, "sysAccountPasswordUpdate": true, "sysAccountSettingsGet": true, "sysAccountSettingsUpdate": true, "sysAcmeProviderGet": true, "sysAcmeProviderCreate": true, "sysAcmeProviderUpdate": true, "sysAcmeProviderDestroy": true, "sysAcmeProviderQuery": true, "actionReloadSettings": true, "actionReloadTlsCertificates": true, "actionReloadLookupStores": true, "actionReloadBlockedIps": true, "actionUpdateApps": true, "actionTroubleshootDmarc": true, "actionClassifySpam": true, "actionInvalidateCaches": true, "actionInvalidateNegativeCaches": true, "actionPauseMtaQueue": true, "actionResumeMtaQueue": true, "sysActionCreate": true, "sysAddressBookGet": true, "sysAddressBookUpdate": true, "sysAiModelGet": true, "sysAiModelCreate": true, "sysAiModelUpdate": true, "sysAiModelDestroy": true, "sysAiModelQuery": true, "sysAlertGet": true, "sysAlertCreate": true, "sysAlertUpdate": true, "sysAlertDestroy": true, "sysAlertQuery": true, "sysAllowedIpGet": true, "sysAllowedIpCreate": true, "sysAllowedIpUpdate": true, "sysAllowedIpDestroy": true, "sysAllowedIpQuery": true, "sysApiKeyGet": true, "sysApiKeyCreate": true, "sysApiKeyUpdate": true, "sysApiKeyDestroy": true, "sysApiKeyQuery": true, "sysAppPasswordGet": true, "sysAppPasswordCreate": true, "sysAppPasswordUpdate": true, "sysAppPasswordDestroy": true, "sysAppPasswordQuery": true, "sysApplicationGet": true, "sysApplicationCreate": true, "sysApplicationUpdate": true, "sysApplicationDestroy": true, "sysApplicationQuery": true, "sysArchivedItemGet": true, "sysArchivedItemUpdate": true, "sysArchivedItemDestroy": true, "sysArchivedItemQuery": true, "sysArfExternalReportGet": true, "sysArfExternalReportDestroy": true, "sysArfExternalReportQuery": true, "sysAsnGet": true, "sysAsnUpdate": true, "sysAuthenticationGet": true, "sysAuthenticationUpdate": true, "sysBlobStoreGet": true, "sysBlobStoreUpdate": true, "sysBlockedIpGet": true, "sysBlockedIpCreate": true, "sysBlockedIpUpdate": true, "sysBlockedIpDestroy": true, "sysBlockedIpQuery": true, "sysBootstrapGet": true, "sysBootstrapUpdate": true, "sysCacheGet": true, "sysCacheUpdate": true, "sysCalendarGet": true, "sysCalendarUpdate": true, "sysCalendarAlarmGet": true, "sysCalendarAlarmUpdate": true, "sysCalendarSchedulingGet": true, "sysCalendarSchedulingUpdate": true, "sysCertificateGet": true, "sysCertificateCreate": true, "sysCertificateUpdate": true, "sysCertificateDestroy": true, "sysCertificateQuery": true, "sysClusterNodeGet": true, "sysClusterNodeQuery": true, "sysClusterRoleGet": true, "sysClusterRoleCreate": true, "sysClusterRoleUpdate": true, "sysClusterRoleDestroy": true, "sysClusterRoleQuery": true, "sysCoordinatorGet": true, "sysCoordinatorUpdate": true, "sysDataRetentionGet": true, "sysDataRetentionUpdate": true, "sysDataStoreGet": true, "sysDataStoreUpdate": true, "sysDirectoryGet": true, "sysDirectoryCreate": true, "sysDirectoryUpdate": true, "sysDirectoryDestroy": true, "sysDirectoryQuery": true, "sysDkimReportSettingsGet": true, "sysDkimReportSettingsUpdate": true, "sysDkimSignatureGet": true, "sysDkimSignatureCreate": true, "sysDkimSignatureUpdate": true, "sysDkimSignatureDestroy": true, "sysDkimSignatureQuery": true, "sysDmarcExternalReportGet": true, "sysDmarcExternalReportDestroy": true, "sysDmarcExternalReportQuery": true, "sysDmarcInternalReportGet": true, "sysDmarcInternalReportUpdate": true, "sysDmarcInternalReportDestroy": true, "sysDmarcInternalReportQuery": true, "sysDmarcReportSettingsGet": true, "sysDmarcReportSettingsUpdate": true, "sysDnsResolverGet": true, "sysDnsResolverUpdate": true, "sysDnsServerGet": true, "sysDnsServerCreate": true, "sysDnsServerUpdate": true, "sysDnsServerDestroy": true, "sysDnsServerQuery": true, "sysDomainGet": true, "sysDomainCreate": true, "sysDomainUpdate": true, "sysDomainDestroy": true, "sysDomainQuery": true, "sysDsnReportSettingsGet": true, "sysDsnReportSettingsUpdate": true, "sysEmailGet": true, "sysEmailUpdate": true, "sysEnterpriseGet": true, "sysEnterpriseUpdate": true, "sysEventTracingLevelGet": true, "sysEventTracingLevelCreate": true, "sysEventTracingLevelUpdate": true, "sysEventTracingLevelDestroy": true, "sysEventTracingLevelQuery": true, "sysFileStorageGet": true, "sysFileStorageUpdate": true, "sysHttpGet": true, "sysHttpUpdate": true, "sysHttpFormGet": true, "sysHttpFormUpdate": true, "sysHttpLookupGet": true, "sysHttpLookupCreate": true, "sysHttpLookupUpdate": true, "sysHttpLookupDestroy": true, "sysHttpLookupQuery": true, "sysImapGet": true, "sysImapUpdate": true, "sysInMemoryStoreGet": true, "sysInMemoryStoreUpdate": true, "sysJmapGet": true, "sysJmapUpdate": true, "sysLogGet": true, "sysLogQuery": true, "sysMailingListGet": true, "sysMailingListCreate": true, "sysMailingListUpdate": true, "sysMailingListDestroy": true, "sysMailingListQuery": true, "sysMaskedEmailGet": true, "sysMaskedEmailCreate": true, "sysMaskedEmailUpdate": true, "sysMaskedEmailDestroy": true, "sysMaskedEmailQuery": true, "sysMemoryLookupKeyGet": true, "sysMemoryLookupKeyCreate": true, "sysMemoryLookupKeyUpdate": true, "sysMemoryLookupKeyDestroy": true, "sysMemoryLookupKeyQuery": true, "sysMemoryLookupKeyValueGet": true, "sysMemoryLookupKeyValueCreate": true, "sysMemoryLookupKeyValueUpdate": true, "sysMemoryLookupKeyValueDestroy": true, "sysMemoryLookupKeyValueQuery": true, "sysMetricGet": true, "sysMetricQuery": true, "sysMetricsGet": true, "sysMetricsUpdate": true, "sysMetricsStoreGet": true, "sysMetricsStoreUpdate": true, "sysMtaConnectionStrategyGet": true, "sysMtaConnectionStrategyCreate": true, "sysMtaConnectionStrategyUpdate": true, "sysMtaConnectionStrategyDestroy": true, "sysMtaConnectionStrategyQuery": true, "sysMtaDeliveryScheduleGet": true, "sysMtaDeliveryScheduleCreate": true, "sysMtaDeliveryScheduleUpdate": true, "sysMtaDeliveryScheduleDestroy": true, "sysMtaDeliveryScheduleQuery": true, "sysMtaExtensionsGet": true, "sysMtaExtensionsUpdate": true, "sysMtaHookGet": true, "sysMtaHookCreate": true, "sysMtaHookUpdate": true, "sysMtaHookDestroy": true, "sysMtaHookQuery": true, "sysMtaInboundSessionGet": true, "sysMtaInboundSessionUpdate": true, "sysMtaInboundThrottleGet": true, "sysMtaInboundThrottleCreate": true, "sysMtaInboundThrottleUpdate": true, "sysMtaInboundThrottleDestroy": true, "sysMtaInboundThrottleQuery": true, "sysMtaMilterGet": true, "sysMtaMilterCreate": true, "sysMtaMilterUpdate": true, "sysMtaMilterDestroy": true, "sysMtaMilterQuery": true, "sysMtaOutboundStrategyGet": true, "sysMtaOutboundStrategyUpdate": true, "sysMtaOutboundThrottleGet": true, "sysMtaOutboundThrottleCreate": true, "sysMtaOutboundThrottleUpdate": true, "sysMtaOutboundThrottleDestroy": true, "sysMtaOutboundThrottleQuery": true, "sysMtaQueueQuotaGet": true, "sysMtaQueueQuotaCreate": true, "sysMtaQueueQuotaUpdate": true, "sysMtaQueueQuotaDestroy": true, "sysMtaQueueQuotaQuery": true, "sysMtaRouteGet": true, "sysMtaRouteCreate": true, "sysMtaRouteUpdate": true, "sysMtaRouteDestroy": true, "sysMtaRouteQuery": true, "sysMtaStageAuthGet": true, "sysMtaStageAuthUpdate": true, "sysMtaStageConnectGet": true, "sysMtaStageConnectUpdate": true, "sysMtaStageDataGet": true, "sysMtaStageDataUpdate": true, "sysMtaStageEhloGet": true, "sysMtaStageEhloUpdate": true, "sysMtaStageMailGet": true, "sysMtaStageMailUpdate": true, "sysMtaStageRcptGet": true, "sysMtaStageRcptUpdate": true, "sysMtaStsGet": true, "sysMtaStsUpdate": true, "sysMtaTlsStrategyGet": true, "sysMtaTlsStrategyCreate": true, "sysMtaTlsStrategyUpdate": true, "sysMtaTlsStrategyDestroy": true, "sysMtaTlsStrategyQuery": true, "sysMtaVirtualQueueGet": true, "sysMtaVirtualQueueCreate": true, "sysMtaVirtualQueueUpdate": true, "sysMtaVirtualQueueDestroy": true, "sysMtaVirtualQueueQuery": true, "sysNetworkListenerGet": true, "sysNetworkListenerCreate": true, "sysNetworkListenerUpdate": true, "sysNetworkListenerDestroy": true, "sysNetworkListenerQuery": true, "sysOAuthClientGet": true, "sysOAuthClientCreate": true, "sysOAuthClientUpdate": true, "sysOAuthClientDestroy": true, "sysOAuthClientQuery": true, "sysOidcProviderGet": true, "sysOidcProviderUpdate": true, "sysPublicKeyGet": true, "sysPublicKeyCreate": true, "sysPublicKeyUpdate": true, "sysPublicKeyDestroy": true, "sysPublicKeyQuery": true, "sysQueuedMessageGet": true, "sysQueuedMessageUpdate": true, "sysQueuedMessageDestroy": true, "sysQueuedMessageQuery": true, "sysReportSettingsGet": true, "sysReportSettingsUpdate": true, "sysRoleGet": true, "sysRoleCreate": true, "sysRoleUpdate": true, "sysRoleDestroy": true, "sysRoleQuery": true, "sysSearchGet": true, "sysSearchUpdate": true, "sysSearchStoreGet": true, "sysSearchStoreUpdate": true, "sysSecurityGet": true, "sysSecurityUpdate": true, "sysSenderAuthGet": true, "sysSenderAuthUpdate": true, "sysSharingGet": true, "sysSharingUpdate": true, "sysSieveSystemInterpreterGet": true, "sysSieveSystemInterpreterUpdate": true, "sysSieveSystemScriptGet": true, "sysSieveSystemScriptCreate": true, "sysSieveSystemScriptUpdate": true, "sysSieveSystemScriptDestroy": true, "sysSieveSystemScriptQuery": true, "sysSieveUserInterpreterGet": true, "sysSieveUserInterpreterUpdate": true, "sysSieveUserScriptGet": true, "sysSieveUserScriptCreate": true, "sysSieveUserScriptUpdate": true, "sysSieveUserScriptDestroy": true, "sysSieveUserScriptQuery": true, "sysSpamClassifierGet": true, "sysSpamClassifierUpdate": true, "sysSpamDnsblServerGet": true, "sysSpamDnsblServerCreate": true, "sysSpamDnsblServerUpdate": true, "sysSpamDnsblServerDestroy": true, "sysSpamDnsblServerQuery": true, "sysSpamDnsblSettingsGet": true, "sysSpamDnsblSettingsUpdate": true, "sysSpamFileExtensionGet": true, "sysSpamFileExtensionCreate": true, "sysSpamFileExtensionUpdate": true, "sysSpamFileExtensionDestroy": true, "sysSpamFileExtensionQuery": true, "sysSpamAiGet": true, "sysSpamAiUpdate": true, "sysSpamPyzorGet": true, "sysSpamPyzorUpdate": true, "sysSpamRuleGet": true, "sysSpamRuleCreate": true, "sysSpamRuleUpdate": true, "sysSpamRuleDestroy": true, "sysSpamRuleQuery": true, "sysSpamSettingsGet": true, "sysSpamSettingsUpdate": true, "sysSpamTagGet": true, "sysSpamTagCreate": true, "sysSpamTagUpdate": true, "sysSpamTagDestroy": true, "sysSpamTagQuery": true, "sysSpamTrainingSampleGet": true, "sysSpamTrainingSampleCreate": true, "sysSpamTrainingSampleDestroy": true, "sysSpamTrainingSampleQuery": true, "sysSpfReportSettingsGet": true, "sysSpfReportSettingsUpdate": true, "sysStoreLookupGet": true, "sysStoreLookupCreate": true, "sysStoreLookupUpdate": true, "sysStoreLookupDestroy": true, "sysStoreLookupQuery": true, "sysSystemSettingsGet": true, "sysSystemSettingsUpdate": true, "taskCalendarAlarmEmail": true, "taskCalendarAlarmNotification": true, "taskCalendarItipMessage": true, "taskMergeThreads": true, "taskDmarcReport": true, "taskTlsReport": true, "taskRestoreArchivedItem": true, "taskDestroyAccount": true, "taskAccountMaintenance": true, "taskTenantMaintenance": true, "taskStoreMaintenance": true, "taskSpamFilterMaintenance": true, "taskAcmeRenewal": true, "taskDkimManagement": true, "taskDnsManagement": true, "sysTaskGet": true, "sysTaskCreate": true, "sysTaskUpdate": true, "sysTaskDestroy": true, "sysTaskQuery": true, "sysTaskManagerGet": true, "sysTaskManagerUpdate": true, "sysTenantGet": true, "sysTenantCreate": true, "sysTenantUpdate": true, "sysTenantDestroy": true, "sysTenantQuery": true, "sysTlsExternalReportGet": true, "sysTlsExternalReportDestroy": true, "sysTlsExternalReportQuery": true, "sysTlsInternalReportGet": true, "sysTlsInternalReportUpdate": true, "sysTlsInternalReportDestroy": true, "sysTlsInternalReportQuery": true, "sysTlsReportSettingsGet": true, "sysTlsReportSettingsUpdate": true, "sysTraceGet": true, "sysTraceQuery": true, "sysTracerGet": true, "sysTracerCreate": true, "sysTracerUpdate": true, "sysTracerDestroy": true, "sysTracerQuery": true, "sysTracingStoreGet": true, "sysTracingStoreUpdate": true, "sysWebDavGet": true, "sysWebDavUpdate": true, "sysWebHookGet": true, "sysWebHookCreate": true, "sysWebHookUpdate": true, "sysWebHookDestroy": true, "sysWebHookQuery": true, "emailSend": true, "emailReceive": true, "calendarAlarmsSend": true, "calendarSchedulingSend": true, "calendarSchedulingReceive": true, "jmapPushSubscriptionGet": true, "jmapPushSubscriptionCreate": true, "jmapPushSubscriptionUpdate": true, "jmapPushSubscriptionDestroy": true, "jmapMailboxGet": true, "jmapMailboxChanges": true, "jmapMailboxQuery": true, "jmapMailboxQueryChanges": true, "jmapMailboxCreate": true, "jmapMailboxUpdate": true, "jmapMailboxDestroy": true, "jmapThreadGet": true, "jmapThreadChanges": true, "jmapEmailGet": true, "jmapEmailChanges": true, "jmapEmailQuery": true, "jmapEmailQueryChanges": true, "jmapEmailCreate": true, "jmapEmailUpdate": true, "jmapEmailDestroy": true, "jmapEmailCopy": true, "jmapEmailImport": true, "jmapEmailParse": true, "jmapSearchSnippetGet": true, "jmapIdentityGet": true, "jmapIdentityChanges": true, "jmapIdentityCreate": true, "jmapIdentityUpdate": true, "jmapIdentityDestroy": true, "jmapEmailSubmissionGet": true, "jmapEmailSubmissionChanges": true, "jmapEmailSubmissionQuery": true, "jmapEmailSubmissionQueryChanges": true, "jmapEmailSubmissionCreate": true, "jmapEmailSubmissionUpdate": true, "jmapEmailSubmissionDestroy": true, "jmapVacationResponseGet": true, "jmapVacationResponseCreate": true, "jmapVacationResponseUpdate": true, "jmapVacationResponseDestroy": true, "jmapSieveScriptGet": true, "jmapSieveScriptQuery": true, "jmapSieveScriptValidate": true, "jmapSieveScriptCreate": true, "jmapSieveScriptUpdate": true, "jmapSieveScriptDestroy": true, "jmapPrincipalGet": true, "jmapPrincipalQuery": true, "jmapPrincipalChanges": true, "jmapPrincipalQueryChanges": true, "jmapPrincipalGetAvailability": true, "jmapQuotaGet": true, "jmapQuotaChanges": true, "jmapQuotaQuery": true, "jmapQuotaQueryChanges": true, "jmapBlobGet": true, "jmapBlobCopy": true, "jmapBlobLookup": true, "jmapBlobUpload": true, "jmapAddressBookGet": true, "jmapAddressBookChanges": true, "jmapAddressBookCreate": true, "jmapAddressBookUpdate": true, "jmapAddressBookDestroy": true, "jmapContactCardGet": true, "jmapContactCardChanges": true, "jmapContactCardQuery": true, "jmapContactCardQueryChanges": true, "jmapContactCardCreate": true, "jmapContactCardUpdate": true, "jmapContactCardDestroy": true, "jmapContactCardCopy": true, "jmapContactCardParse": true, "jmapFileNodeGet": true, "jmapFileNodeChanges": true, "jmapFileNodeQuery": true, "jmapFileNodeQueryChanges": true, "jmapFileNodeCreate": true, "jmapFileNodeUpdate": true, "jmapFileNodeDestroy": true, "jmapShareNotificationGet": true, "jmapShareNotificationChanges": true, "jmapShareNotificationQuery": true, "jmapShareNotificationQueryChanges": true, "jmapShareNotificationCreate": true, "jmapShareNotificationUpdate": true, "jmapShareNotificationDestroy": true, "jmapCalendarGet": true, "jmapCalendarChanges": true, "jmapCalendarCreate": true, "jmapCalendarUpdate": true, "jmapCalendarDestroy": true, "jmapCalendarEventGet": true, "jmapCalendarEventChanges": true, "jmapCalendarEventQuery": true, "jmapCalendarEventQueryChanges": true, "jmapCalendarEventCreate": true, "jmapCalendarEventUpdate": true, "jmapCalendarEventDestroy": true, "jmapCalendarEventCopy": true, "jmapCalendarEventParse": true, "jmapCalendarEventNotificationGet": true, "jmapCalendarEventNotificationChanges": true, "jmapCalendarEventNotificationQuery": true, "jmapCalendarEventNotificationQueryChanges": true, "jmapCalendarEventNotificationCreate": true, "jmapCalendarEventNotificationUpdate": true, "jmapCalendarEventNotificationDestroy": true, "jmapParticipantIdentityGet": true, "jmapParticipantIdentityChanges": true, "jmapParticipantIdentityCreate": true, "jmapParticipantIdentityUpdate": true, "jmapParticipantIdentityDestroy": true, "jmapCoreEcho": true, "imapAuthenticate": true, "imapAclGet": true, "imapAclSet": true, "imapMyRights": true, "imapListRights": true, "imapAppend": true, "imapCapability": true, "imapId": true, "imapCopy": true, "imapMove": true, "imapCreate": true, "imapDelete": true, "imapEnable": true, "imapExpunge": true, "imapFetch": true, "imapIdle": true, "imapList": true, "imapLsub": true, "imapNamespace": true, "imapRename": true, "imapSearch": true, "imapSort": true, "imapSelect": true, "imapExamine": true, "imapStatus": true, "imapStore": true, "imapSubscribe": true, "imapThread": true, "pop3Authenticate": true, "pop3List": true, "pop3Uidl": true, "pop3Stat": true, "pop3Retr": true, "pop3Dele": true, "sieveAuthenticate": true, "sieveListScripts": true, "sieveSetActive": true, "sieveGetScript": true, "sievePutScript": true, "sieveDeleteScript": true, "sieveRenameScript": true, "sieveCheckScript": true, "sieveHaveSpace": true, "davSyncCollection": true, "davExpandProperty": true, "davPrincipalAcl": true, "davPrincipalList": true, "davPrincipalMatch": true, "davPrincipalSearch": true, "davPrincipalSearchPropSet": true, "davFilePropFind": true, "davFilePropPatch": true, "davFileGet": true, "davFileMkCol": true, "davFileDelete": true, "davFilePut": true, "davFileCopy": true, "davFileMove": true, "davFileLock": true, "davFileAcl": true, "davCardPropFind": true, "davCardPropPatch": true, "davCardGet": true, "davCardMkCol": true, "davCardDelete": true, "davCardPut": true, "davCardCopy": true, "davCardMove": true, "davCardLock": true, "davCardAcl": true, "davCardQuery": true, "davCardMultiGet": true, "davCalPropFind": true, "davCalPropPatch": true, "davCalGet": true, "davCalMkCol": true, "davCalDelete": true, "davCalPut": true, "davCalCopy": true, "davCalMove": true, "davCalLock": true, "davCalAcl": true, "davCalQuery": true, "davCalMultiGet": true, "davCalFreeBusyQuery": true, "jmapFileNodeCopy": true }, "disabledPermissions": {} }, "quotas": {}, "roles": { "@type": "Admin" }, "timeZone": null }, "alert-sender": { "@type": "User", "name": "stalwart-submitter", "description": "Zitadel-owned cluster-local SMTP submitter", "aliases": { "0": { "name": { "$secretFile": "oidc_sender_subject" }, "domainId": "#authentication-domain" } }, "domainId": "#authentication-domain", "encryptionAtRest": { "@type": "Disabled" }, "locale": "en-US", "memberGroupIds": {}, "memberTenantId": null, "permissions": { "@type": "Replace", "enabledPermissions": { "authenticate": true, "emailSend": true, "sysAppPasswordCreate": true, "sysAppPasswordDestroy": true, "sysAppPasswordGet": true, "sysAppPasswordQuery": true, "sysAppPasswordUpdate": true }, "disabledPermissions": {} }, "quotas": {}, "roles": { "@type": "User" }, "timeZone": null }, "notification-sender": { "@type": "User", "name": "noreply", "description": "Zitadel-owned notification sender", "aliases": { "0": { "name": { "$secretFile": "oidc_notifier_subject" }, "domainId": "#authentication-domain" } }, "domainId": "#domain", "encryptionAtRest": { "@type": "Disabled" }, "locale": "en-US", "memberGroupIds": {}, "memberTenantId": null, "permissions": { "@type": "Replace", "enabledPermissions": { "authenticate": true, "emailSend": true, "sysAppPasswordCreate": true, "sysAppPasswordDestroy": true, "sysAppPasswordGet": true, "sysAppPasswordQuery": true, "sysAppPasswordUpdate": true }, "disabledPermissions": {} }, "quotas": {}, "roles": { "@type": "User" }, "timeZone": null }, "test-client": { "@type": "User", "name": "test", "description": "Authenticated client ingress test mailbox", "aliases": { "0": { "name": { "$secretFile": "oidc_test_subject" }, "domainId": "#authentication-domain" } }, "domainId": "#domain", "encryptionAtRest": { "@type": "Disabled" }, "locale": "en-US", "memberGroupIds": {}, "memberTenantId": null, "permissions": { "@type": "Replace", "enabledPermissions": { "authenticate": true, "emailReceive": true, "emailSend": true, "imapAuthenticate": true, "imapCapability": true, "imapExamine": true, "imapFetch": true, "imapIdle": true, "imapList": true, "imapSearch": true, "imapSelect": true, "imapStatus": true, "sysAppPasswordCreate": true, "sysAppPasswordDestroy": true, "sysAppPasswordGet": true, "sysAppPasswordQuery": true, "sysAppPasswordUpdate": true }, "disabledPermissions": {} }, "quotas": {}, "roles": { "@type": "User" }, "timeZone": null } } }, { "@type": "reconcile", "object": "NetworkListener", "matchOn": [ "name" ], "value": { "management": { "name": "management", "protocol": "http", "bind": { "[::]:8080": true }, "maxConnections": 64, "overrideProxyTrustedNetworks": {}, "socketBacklog": 128, "socketNoDelay": true, "socketReceiveBufferSize": null, "socketReuseAddress": true, "socketReusePort": true, "socketSendBufferSize": null, "socketTosV4": null, "socketTtl": null, "tlsDisableCipherSuites": {}, "tlsDisableProtocols": {}, "tlsIgnoreClientOrder": true, "implicitTls": false, "tlsTimeout": 60000, "useTls": false }, "user-http": { "name": "user-http", "protocol": "http", "bind": { "[::]:8081": true }, "maxConnections": 256, "overrideProxyTrustedNetworks": {}, "socketBacklog": 256, "socketNoDelay": true, "socketReceiveBufferSize": null, "socketReuseAddress": true, "socketReusePort": true, "socketSendBufferSize": null, "socketTosV4": null, "socketTtl": null, "tlsDisableCipherSuites": {}, "tlsDisableProtocols": {}, "tlsIgnoreClientOrder": true, "implicitTls": false, "tlsTimeout": 60000, "useTls": false }, "smtp": { "name": "smtp", "protocol": "smtp", "bind": { "[::]:25": true }, "maxConnections": 512, "overrideProxyTrustedNetworks": { "10.115.187.218/24": true }, "socketBacklog": 512, "socketNoDelay": true, "socketReceiveBufferSize": null, "socketReuseAddress": true, "socketReusePort": true, "socketSendBufferSize": null, "socketTosV4": null, "socketTtl": null, "tlsDisableCipherSuites": {}, "tlsDisableProtocols": {}, "tlsIgnoreClientOrder": true, "implicitTls": false, "tlsTimeout": 60000, "useTls": true }, "submission": { "name": "submission", "protocol": "smtp", "bind": { "[::]:587": true }, "maxConnections": 128, "overrideProxyTrustedNetworks": {}, "socketBacklog": 128, "socketNoDelay": true, "socketReceiveBufferSize": null, "socketReuseAddress": true, "socketReusePort": true, "socketSendBufferSize": null, "socketTosV4": null, "socketTtl": null, "tlsDisableCipherSuites": {}, "tlsDisableProtocols": {}, "tlsIgnoreClientOrder": true, "implicitTls": false, "tlsTimeout": 60000, "useTls": false }, "submissions": { "name": "submissions", "protocol": "smtp", "bind": { "[::]:465": true }, "maxConnections": 128, "overrideProxyTrustedNetworks": { "10.115.187.218/24": true }, "socketBacklog": 128, "socketNoDelay": true, "socketReceiveBufferSize": null, "socketReuseAddress": true, "socketReusePort": true, "socketSendBufferSize": null, "socketTosV4": null, "socketTtl": null, "tlsDisableCipherSuites": {}, "tlsDisableProtocols": {}, "tlsIgnoreClientOrder": true, "implicitTls": true, "tlsTimeout": 60000, "useTls": true }, "imaps": { "name": "imaps", "protocol": "imap", "bind": { "[::]:993": true }, "maxConnections": 128, "overrideProxyTrustedNetworks": { "10.115.187.218/24": true }, "socketBacklog": 128, "socketNoDelay": true, "socketReceiveBufferSize": null, "socketReuseAddress": true, "socketReusePort": true, "socketSendBufferSize": null, "socketTosV4": null, "socketTtl": null, "tlsDisableCipherSuites": {}, "tlsDisableProtocols": {}, "tlsIgnoreClientOrder": true, "implicitTls": true, "tlsTimeout": 60000, "useTls": true } } }, { "@type": "reconcile", "object": "MtaRoute", "matchOn": [ "name" ], "value": { "local": { "@type": "Local", "name": "local", "description": "Hosted delivery" }, "oci": { "@type": "Relay", "name": "oci-email-delivery", "description": "External delivery through OCI", "host": { "$secretFile": "relay_endpoint" }, "port": 587, "protocol": "smtp", "implicitTls": false, "allowInvalidCerts": false, "authUsername": { "$secretFile": "relay_username" }, "authSecret": { "@type": "EnvironmentVariable", "variableName": "STALWART_RELAY_PASSWORD" } } } }, { "@type": "reconcile", "object": "MtaTlsStrategy", "matchOn": [ "name" ], "value": { "oci-required": { "name": "oci-required", "description": "Authenticated OCI relay transport", "allowInvalidCerts": false, "dane": "disable", "mtaSts": "disable", "startTls": "require", "mtaStsTimeout": 300000, "tlsTimeout": 60000 } } }, { "@type": "reconcile", "object": "MtaVirtualQueue", "matchOn": [ "name" ], "value": { "queue-local": { "name": "local", "description": "Local delivery queue", "threadsPerNode": 25 }, "queue-remote": { "name": "remote", "description": "Remote delivery queue", "threadsPerNode": 50 }, "queue-dsn": { "name": "dsn", "description": "Delivery Status Notification delivery queue", "threadsPerNode": 5 }, "queue-report": { "name": "report", "description": "DMARC and TLS report delivery queue", "threadsPerNode": 5 } } }, { "@type": "reconcile", "object": "MtaDeliverySchedule", "matchOn": [ "name" ], "value": { "schedule-local": { "name": "local", "description": "Local delivery schedule", "expiry": { "@type": "Ttl", "expire": 259200000 }, "notify": { "@type": "Default" }, "queueId": "#queue-local", "retry": { "@type": "Default" } }, "schedule-remote": { "name": "remote", "description": "Remote delivery schedule", "expiry": { "@type": "Ttl", "expire": 259200000 }, "notify": { "@type": "Default" }, "queueId": "#queue-remote", "retry": { "@type": "Default" } }, "schedule-dsn": { "name": "dsn", "description": "Delivery Status Notification delivery schedule", "expiry": { "@type": "Attempts", "maxAttempts": 10 }, "notify": { "@type": "Default" }, "queueId": "#queue-dsn", "retry": { "@type": "Custom", "intervals": { "0": { "duration": 900000 }, "1": { "duration": 1800000 }, "2": { "duration": 3600000 }, "3": { "duration": 7200000 } } } }, "schedule-report": { "name": "report", "description": "DMARC and TLS report delivery schedule", "expiry": { "@type": "Attempts", "maxAttempts": 8 }, "notify": { "@type": "Default" }, "queueId": "#queue-report", "retry": { "@type": "Custom", "intervals": { "0": { "duration": 1800000 }, "1": { "duration": 3600000 }, "2": { "duration": 7200000 } } } } } }, { "@type": "update", "object": "Coordinator", "value": { "@type": "Default" } }, { "@type": "update", "object": "Email", "value": { "compressionAlgorithm": "lz4", "defaultFolders": {}, "encryptAtRest": true, "encryptOnAppend": true, "maxAttachmentSize": 50000000, "maxIdentities": 20, "maxMailboxDepth": 10, "maxMailboxNameLength": 255, "maxMailboxes": 250, "maxMaskedAddresses": 5, "maxMessageSize": 75000000, "maxMessages": null, "maxPublicKeys": 5, "maxSubmissions": 500 } }, { "@type": "update", "object": "Http", "value": { "allowedEndpoints": { "match": { "0": { "if": "listener == \"user-http\" && starts_with(path, \"/api\") && path != \"/api/schema\" && !starts_with(path, \"/api/schema/\") && path != \"/api/account\" && !starts_with(path, \"/api/discover/\")", "then": "403" } }, "else": "200" }, "enableHsts": false, "rateLimitAnonymous": { "count": 100, "period": 60000 }, "rateLimitAuthenticated": { "count": 1000, "period": 60000 }, "responseHeaders": {}, "usePermissiveCors": false, "clientIpSource": "xForwardedFor" } }, { "@type": "update", "object": "SystemSettings", "value": { "defaultDomainId": "#domain", "defaultHostname": "mail.quorate.dev", "mailExchangers": { "0": { "hostname": "mail.quorate.dev", "priority": 10 } }, "maxConnections": 128, "providerInfo": {}, "proxyTrustedNetworks": {}, "services": { "imap": { "cleartext": false, "hostname": "mail.quorate.dev" }, "jmap": { "cleartext": false, "hostname": "mail.quorate.dev" }, "smtp": { "cleartext": false, "hostname": "mail.quorate.dev" } } } }, { "@type": "update", "object": "MtaOutboundStrategy", "value": { "route": { "match": { "0": { "if": "is_local_domain(rcpt_domain)", "then": "'local'" } }, "else": "'oci-email-delivery'" }, "schedule": { "match": { "0": { "if": "is_local_domain(rcpt_domain)", "then": "'local'" }, "1": { "if": "source == 'dsn'", "then": "'dsn'" }, "2": { "if": "source == 'report'", "then": "'report'" } }, "else": "'remote'" }, "connection": { "match": {}, "else": "'default'" }, "tls": { "match": {}, "else": "'oci-required'" } } }, { "@type": "reconcile", "object": "Application", "matchOn": [ "resourceUrl" ], "value": { "bundled-webui": { "enable": false, "description": "Built-in WebUI", "resourceUrl": "https://github.com/stalwartlabs/webui/releases/latest/download/webui.zip", "urlPrefix": { "/admin": true }, "autoUpdateInterval": 7776000000, "unpackDirectory": null } } }, { "@type": "upsert", "object": "Tracer", "value": { "stdout": { "@type": "Stdout", "buffered": false, "ansi": false, "multiline": false, "enable": true, "level": "info", "lossy": false, "events": {}, "eventsPolicy": "exclude" } } } ]