quorate/services/stalwart/k8s/base/plan.json

2486 lines
79 KiB
JSON

[
{
"@type": "update",
"object": "DataStore",
"value": {
"@type": "PostgreSql",
"host": "main-rw.postgres.svc.cluster.local",
"port": 5432,
"database": "stalwart",
"authUsername": "stalwart",
"authSecret": {
"@type": "EnvironmentVariable",
"variableName": "STALWART_DB_PASSWORD"
},
"useTls": false,
"allowInvalidCerts": false
}
},
{
"@type": "update",
"object": "BlobStore",
"value": {
"@type": "S3",
"bucket": "stalwart",
"accessKeyId": {
"@type": "Value",
"value": "stalwart"
},
"secretKey": {
"@type": "EnvironmentVariable",
"variableName": "STALWART_S3_SECRET_KEY"
},
"region": {
"@type": "Custom",
"url": "https://s3.quorate.internal",
"region": "us-east-1"
},
"allowInvalidCerts": false,
"verifyAfterWrite": true
}
},
{
"@type": "update",
"object": "SearchStore",
"value": {
"@type": "PostgreSql",
"host": "main-rw.postgres.svc.cluster.local",
"port": 5432,
"database": "stalwart",
"authUsername": "stalwart",
"authSecret": {
"@type": "EnvironmentVariable",
"variableName": "STALWART_DB_PASSWORD"
},
"useTls": false,
"allowInvalidCerts": false
}
},
{
"@type": "update",
"object": "InMemoryStore",
"value": {
"@type": "Redis",
"url": {
"$secretFile": "dragonfly_url"
}
}
},
{
"@type": "update",
"object": "DnsResolver",
"value": {
"@type": "System",
"attempts": 1,
"maxConcurrentRequests": 4,
"enableEdns": true,
"preserveIntermediates": true,
"timeout": 2000,
"tcpOnError": true
}
},
{
"@type": "update",
"object": "Cache",
"value": {
"accessTokens": 10485760,
"contacts": 10485760,
"dnsIpv4": 5242880,
"dnsIpv6": 5242880,
"dnsMtaSts": 1048576,
"dnsMx": 5242880,
"dnsPtr": 1048576,
"spamLookup": 5242880,
"dnsTlsa": 1048576,
"dnsTxt": 5242880,
"events": 10485760,
"scheduling": 1048576,
"files": 10485760,
"httpAuth": 1048576,
"messages": 52428800,
"domains": 5242880,
"domainNames": 10485760,
"domainNamesNegative": 1048576,
"emailAddresses": 10485760,
"emailAddressesNegative": 2097152,
"accounts": 20971520,
"roles": 5242880,
"tenants": 5242880,
"mailingLists": 2097152,
"dkimSignatures": 10485760,
"negativeTtl": 3600000
}
},
{
"@type": "update",
"object": "TaskManager",
"value": {
"strategy": {
"@type": "ExponentialBackoff",
"factor": 2.0,
"initialDelay": 60000,
"maxDelay": 1800000,
"jitter": true
}
}
},
{
"@type": "update",
"object": "Asn",
"value": {
"@type": "Resource",
"refreshInterval": 604800000,
"maxSize": 104857600,
"timeout": 30000,
"asnUrls": {
"https://cdn.jsdelivr.net/npm/@ip-location-db/asn/asn-ipv4.csv": true,
"https://cdn.jsdelivr.net/npm/@ip-location-db/asn/asn-ipv6.csv": true
},
"geoUrls": {
"https://cdn.jsdelivr.net/npm/@ip-location-db/geolite2-geo-whois-asn-country/geolite2-geo-whois-asn-country-ipv4.csv": true,
"https://cdn.jsdelivr.net/npm/@ip-location-db/geolite2-geo-whois-asn-country/geolite2-geo-whois-asn-country-ipv6.csv": true
},
"httpAuth": {
"@type": "Unauthenticated"
},
"httpHeaders": {}
}
},
{
"@type": "update",
"object": "MtaExtensions",
"value": {
"chunking": {
"match": {},
"else": "true"
},
"deliverBy": {
"match": {},
"else": "false"
},
"dsn": {
"match": {},
"else": "false"
},
"expn": {
"match": {},
"else": "false"
},
"futureRelease": {
"match": {},
"else": "false"
},
"mtPriority": {
"match": {},
"else": "false"
},
"noSoliciting": {
"match": {},
"else": "''"
},
"pipelining": {
"match": {},
"else": "true"
},
"requireTls": {
"match": {},
"else": "true"
},
"vrfy": {
"match": {},
"else": "false"
}
}
},
{
"@type": "update",
"object": "MtaInboundSession",
"value": {
"maxDuration": {
"match": {},
"else": "10m"
},
"idleTimeout": {
"match": {},
"else": "5m"
},
"transferLimit": {
"match": {},
"else": "262144000"
}
}
},
{
"@type": "update",
"object": "MtaStageAuth",
"value": {
"maxFailures": {
"match": {},
"else": "3"
},
"waitOnFail": {
"match": {},
"else": "5s"
},
"saslMechanisms": {
"match": {
"0": {
"if": "local_port == 587 || (local_port != 25 && is_tls)",
"then": "[plain, login, oauthbearer, xoauth2]"
},
"1": {
"if": "local_port != 25",
"then": "[oauthbearer, xoauth2]"
}
},
"else": "false"
},
"mustMatchSender": {
"match": {},
"else": "true"
},
"require": {
"match": {
"0": {
"if": "local_port != 25",
"then": "true"
}
},
"else": "false"
}
}
},
{
"@type": "update",
"object": "MtaStageRcpt",
"value": {
"maxFailures": {
"match": {},
"else": "5"
},
"waitOnFail": {
"match": {},
"else": "5s"
},
"maxRecipients": {
"match": {},
"else": "100"
},
"allowRelaying": {
"match": {},
"else": "!is_empty(authenticated_as)"
},
"rewrite": {
"match": {},
"else": "false"
},
"script": {
"match": {},
"else": "false"
}
}
},
{
"@type": "update",
"object": "MtaStageData",
"value": {
"addAuthResultsHeader": {
"match": {},
"else": "local_port == 25"
},
"addDateHeader": {
"match": {},
"else": "local_port == 25"
},
"addDeliveredToHeader": true,
"addMessageIdHeader": {
"match": {},
"else": "local_port == 25"
},
"addReceivedHeader": {
"match": {},
"else": "local_port == 25"
},
"addReceivedSpfHeader": {
"match": {},
"else": "local_port == 25"
},
"addReturnPathHeader": {
"match": {},
"else": "local_port == 25"
},
"maxMessages": {
"match": {},
"else": "10"
},
"maxReceivedHeaders": {
"match": {},
"else": "50"
},
"maxMessageSize": {
"match": {},
"else": "75000000"
},
"script": {
"match": {},
"else": "false"
},
"enableSpamFilter": {
"match": {},
"else": "is_empty(authenticated_as)"
}
}
},
{
"@type": "update",
"object": "Search",
"value": {
"indexBatchSize": 100,
"defaultLanguage": "en-US",
"supportedLanguages": {
"en-US": true
},
"indexCalendar": false,
"indexCalendarFields": {},
"indexContacts": false,
"indexContactFields": {},
"indexEmail": true,
"indexEmailFields": {
"from": true,
"to": true,
"cc": true,
"bcc": true,
"subject": true,
"body": true,
"attachment": true
},
"indexTelemetry": false
}
},
{
"@type": "update",
"object": "Security",
"value": {
"abuseBanRate": {
"count": 35,
"period": 86400000
},
"abuseBanPeriod": null,
"authBanRate": {
"count": 100,
"period": 86400000
},
"authBanPeriod": null,
"loiterBanRate": {
"count": 150,
"period": 86400000
},
"loiterBanPeriod": null,
"scanBanPaths": {},
"scanBanRate": {
"count": 30,
"period": 86400000
},
"scanBanPeriod": null
}
},
{
"@type": "update",
"object": "SpamSettings",
"value": {
"trustContacts": true,
"enable": true,
"greylistFor": null,
"scoreDiscard": 0.0,
"scoreReject": 0.0,
"scoreSpam": 5.0,
"trustReplies": true,
"spamFilterRulesUrl": "https://github.com/stalwartlabs/spam-filter/releases/latest/download/spam-filter-rules.json.gz"
}
},
{
"@type": "update",
"object": "SpamClassifier",
"value": {
"model": {
"parameters": {
"alpha": 2.0,
"beta": 1.0,
"numFeatures": "20",
"l1Ratio": 0.001,
"l2Ratio": 0.0001
},
"featureL2Normalize": true,
"featureLogScale": true,
"@type": "FtrlFh"
},
"learnHamFromCard": false,
"learnSpamFromRblHits": 2,
"learnSpamFromTraps": false,
"holdSamplesFor": 15552000000,
"minHamSamples": 100,
"minSpamSamples": 100,
"reservoirCapacity": 1024,
"trainInterval": null,
"learnHamFromReply": false
}
},
{
"@type": "update",
"object": "SpamDnsblSettings",
"value": {
"domainLimit": 10,
"emailLimit": 10,
"ipLimit": 10,
"urlLimit": 10
}
},
{
"@type": "reconcile",
"object": "Directory",
"matchOn": [
"description"
],
"value": {
"zitadel": {
"@type": "Oidc",
"description": "Zitadel identity",
"issuerUrl": {
"$secretFile": "oidc_issuer_url"
},
"acceptedAudiences": {
"$secretSet": "oidc_audience"
},
"claimUsername": "sub",
"usernameDomain": "mail-auth.quorate.internal",
"claimName": "sub",
"claimGroups": null,
"memberTenantId": null,
"opaqueTokenValidation": "userInfo",
"unscopedTokens": "full"
}
}
},
{
"@type": "update",
"object": "Authentication",
"value": {
"directoryId": "#zitadel"
}
},
{
"@type": "reconcile",
"object": "Domain",
"matchOn": [
"name"
],
"value": {
"domain": {
"name": "quorate.dev",
"description": "Authoritative mail domain",
"aliases": {},
"allowRelaying": false,
"catchAllAddress": null,
"certificateManagement": {
"@type": "Manual"
},
"directoryId": null,
"dkimManagement": {
"@type": "Manual"
},
"dnsManagement": {
"@type": "Manual"
},
"enable": true,
"logo": null,
"memberTenantId": null,
"reportAddressUri": "mailto:********",
"subAddressing": {
"@type": "Enabled"
}
},
"authentication-domain": {
"name": "mail-auth.quorate.internal",
"description": "Zitadel subject binding domain",
"aliases": {},
"allowRelaying": false,
"catchAllAddress": null,
"certificateManagement": {
"@type": "Manual"
},
"directoryId": null,
"dkimManagement": {
"@type": "Manual"
},
"dnsManagement": {
"@type": "Manual"
},
"enable": true,
"logo": null,
"memberTenantId": null,
"reportAddressUri": null,
"subAddressing": {
"@type": "Disabled"
}
}
}
},
{
"@type": "upsert",
"object": "Account",
"matchOn": [
"name",
"domainId"
],
"value": {
"operator": {
"@type": "Group",
"name": "operator",
"description": "Shared operational mailbox",
"aliases": {},
"domainId": "#domain",
"locale": "en-US",
"memberTenantId": null,
"permissions": {
"@type": "Replace",
"enabledPermissions": {
"emailReceive": true
},
"disabledPermissions": {}
},
"quotas": {},
"roles": {
"@type": "Default"
},
"timeZone": null
},
"human-admin": {
"@type": "User",
"name": "ms2k",
"description": "Zitadel human administrator",
"aliases": {
"0": {
"name": {
"$secretFile": "oidc_human_admin_subject"
},
"domainId": "#authentication-domain"
}
},
"domainId": "#domain",
"encryptionAtRest": {
"@type": "Disabled"
},
"locale": "en-US",
"memberGroupIds": {
"#operator": true
},
"memberTenantId": null,
"permissions": {
"@type": "Replace",
"enabledPermissions": {
"authenticate": true,
"authenticateWithAlias": true,
"interactAi": true,
"impersonate": true,
"unlimitedRequests": true,
"unlimitedUploads": true,
"fetchAnyBlob": true,
"liveTracing": true,
"liveMetrics": true,
"liveDeliveryTest": true,
"sysAccountGet": true,
"sysAccountCreate": true,
"sysAccountUpdate": true,
"sysAccountDestroy": true,
"sysAccountQuery": true,
"sysAccountPasswordGet": true,
"sysAccountPasswordUpdate": true,
"sysAccountSettingsGet": true,
"sysAccountSettingsUpdate": true,
"sysAcmeProviderGet": true,
"sysAcmeProviderCreate": true,
"sysAcmeProviderUpdate": true,
"sysAcmeProviderDestroy": true,
"sysAcmeProviderQuery": true,
"actionReloadSettings": true,
"actionReloadTlsCertificates": true,
"actionReloadLookupStores": true,
"actionReloadBlockedIps": true,
"actionUpdateApps": true,
"actionTroubleshootDmarc": true,
"actionClassifySpam": true,
"actionInvalidateCaches": true,
"actionInvalidateNegativeCaches": true,
"actionPauseMtaQueue": true,
"actionResumeMtaQueue": true,
"sysActionCreate": true,
"sysAddressBookGet": true,
"sysAddressBookUpdate": true,
"sysAiModelGet": true,
"sysAiModelCreate": true,
"sysAiModelUpdate": true,
"sysAiModelDestroy": true,
"sysAiModelQuery": true,
"sysAlertGet": true,
"sysAlertCreate": true,
"sysAlertUpdate": true,
"sysAlertDestroy": true,
"sysAlertQuery": true,
"sysAllowedIpGet": true,
"sysAllowedIpCreate": true,
"sysAllowedIpUpdate": true,
"sysAllowedIpDestroy": true,
"sysAllowedIpQuery": true,
"sysApiKeyGet": true,
"sysApiKeyCreate": true,
"sysApiKeyUpdate": true,
"sysApiKeyDestroy": true,
"sysApiKeyQuery": true,
"sysAppPasswordGet": true,
"sysAppPasswordCreate": true,
"sysAppPasswordUpdate": true,
"sysAppPasswordDestroy": true,
"sysAppPasswordQuery": true,
"sysApplicationGet": true,
"sysApplicationCreate": true,
"sysApplicationUpdate": true,
"sysApplicationDestroy": true,
"sysApplicationQuery": true,
"sysArchivedItemGet": true,
"sysArchivedItemUpdate": true,
"sysArchivedItemDestroy": true,
"sysArchivedItemQuery": true,
"sysArfExternalReportGet": true,
"sysArfExternalReportDestroy": true,
"sysArfExternalReportQuery": true,
"sysAsnGet": true,
"sysAsnUpdate": true,
"sysAuthenticationGet": true,
"sysAuthenticationUpdate": true,
"sysBlobStoreGet": true,
"sysBlobStoreUpdate": true,
"sysBlockedIpGet": true,
"sysBlockedIpCreate": true,
"sysBlockedIpUpdate": true,
"sysBlockedIpDestroy": true,
"sysBlockedIpQuery": true,
"sysBootstrapGet": true,
"sysBootstrapUpdate": true,
"sysCacheGet": true,
"sysCacheUpdate": true,
"sysCalendarGet": true,
"sysCalendarUpdate": true,
"sysCalendarAlarmGet": true,
"sysCalendarAlarmUpdate": true,
"sysCalendarSchedulingGet": true,
"sysCalendarSchedulingUpdate": true,
"sysCertificateGet": true,
"sysCertificateCreate": true,
"sysCertificateUpdate": true,
"sysCertificateDestroy": true,
"sysCertificateQuery": true,
"sysClusterNodeGet": true,
"sysClusterNodeQuery": true,
"sysClusterRoleGet": true,
"sysClusterRoleCreate": true,
"sysClusterRoleUpdate": true,
"sysClusterRoleDestroy": true,
"sysClusterRoleQuery": true,
"sysCoordinatorGet": true,
"sysCoordinatorUpdate": true,
"sysDataRetentionGet": true,
"sysDataRetentionUpdate": true,
"sysDataStoreGet": true,
"sysDataStoreUpdate": true,
"sysDirectoryGet": true,
"sysDirectoryCreate": true,
"sysDirectoryUpdate": true,
"sysDirectoryDestroy": true,
"sysDirectoryQuery": true,
"sysDkimReportSettingsGet": true,
"sysDkimReportSettingsUpdate": true,
"sysDkimSignatureGet": true,
"sysDkimSignatureCreate": true,
"sysDkimSignatureUpdate": true,
"sysDkimSignatureDestroy": true,
"sysDkimSignatureQuery": true,
"sysDmarcExternalReportGet": true,
"sysDmarcExternalReportDestroy": true,
"sysDmarcExternalReportQuery": true,
"sysDmarcInternalReportGet": true,
"sysDmarcInternalReportUpdate": true,
"sysDmarcInternalReportDestroy": true,
"sysDmarcInternalReportQuery": true,
"sysDmarcReportSettingsGet": true,
"sysDmarcReportSettingsUpdate": true,
"sysDnsResolverGet": true,
"sysDnsResolverUpdate": true,
"sysDnsServerGet": true,
"sysDnsServerCreate": true,
"sysDnsServerUpdate": true,
"sysDnsServerDestroy": true,
"sysDnsServerQuery": true,
"sysDomainGet": true,
"sysDomainCreate": true,
"sysDomainUpdate": true,
"sysDomainDestroy": true,
"sysDomainQuery": true,
"sysDsnReportSettingsGet": true,
"sysDsnReportSettingsUpdate": true,
"sysEmailGet": true,
"sysEmailUpdate": true,
"sysEnterpriseGet": true,
"sysEnterpriseUpdate": true,
"sysEventTracingLevelGet": true,
"sysEventTracingLevelCreate": true,
"sysEventTracingLevelUpdate": true,
"sysEventTracingLevelDestroy": true,
"sysEventTracingLevelQuery": true,
"sysFileStorageGet": true,
"sysFileStorageUpdate": true,
"sysHttpGet": true,
"sysHttpUpdate": true,
"sysHttpFormGet": true,
"sysHttpFormUpdate": true,
"sysHttpLookupGet": true,
"sysHttpLookupCreate": true,
"sysHttpLookupUpdate": true,
"sysHttpLookupDestroy": true,
"sysHttpLookupQuery": true,
"sysImapGet": true,
"sysImapUpdate": true,
"sysInMemoryStoreGet": true,
"sysInMemoryStoreUpdate": true,
"sysJmapGet": true,
"sysJmapUpdate": true,
"sysLogGet": true,
"sysLogQuery": true,
"sysMailingListGet": true,
"sysMailingListCreate": true,
"sysMailingListUpdate": true,
"sysMailingListDestroy": true,
"sysMailingListQuery": true,
"sysMaskedEmailGet": true,
"sysMaskedEmailCreate": true,
"sysMaskedEmailUpdate": true,
"sysMaskedEmailDestroy": true,
"sysMaskedEmailQuery": true,
"sysMemoryLookupKeyGet": true,
"sysMemoryLookupKeyCreate": true,
"sysMemoryLookupKeyUpdate": true,
"sysMemoryLookupKeyDestroy": true,
"sysMemoryLookupKeyQuery": true,
"sysMemoryLookupKeyValueGet": true,
"sysMemoryLookupKeyValueCreate": true,
"sysMemoryLookupKeyValueUpdate": true,
"sysMemoryLookupKeyValueDestroy": true,
"sysMemoryLookupKeyValueQuery": true,
"sysMetricGet": true,
"sysMetricQuery": true,
"sysMetricsGet": true,
"sysMetricsUpdate": true,
"sysMetricsStoreGet": true,
"sysMetricsStoreUpdate": true,
"sysMtaConnectionStrategyGet": true,
"sysMtaConnectionStrategyCreate": true,
"sysMtaConnectionStrategyUpdate": true,
"sysMtaConnectionStrategyDestroy": true,
"sysMtaConnectionStrategyQuery": true,
"sysMtaDeliveryScheduleGet": true,
"sysMtaDeliveryScheduleCreate": true,
"sysMtaDeliveryScheduleUpdate": true,
"sysMtaDeliveryScheduleDestroy": true,
"sysMtaDeliveryScheduleQuery": true,
"sysMtaExtensionsGet": true,
"sysMtaExtensionsUpdate": true,
"sysMtaHookGet": true,
"sysMtaHookCreate": true,
"sysMtaHookUpdate": true,
"sysMtaHookDestroy": true,
"sysMtaHookQuery": true,
"sysMtaInboundSessionGet": true,
"sysMtaInboundSessionUpdate": true,
"sysMtaInboundThrottleGet": true,
"sysMtaInboundThrottleCreate": true,
"sysMtaInboundThrottleUpdate": true,
"sysMtaInboundThrottleDestroy": true,
"sysMtaInboundThrottleQuery": true,
"sysMtaMilterGet": true,
"sysMtaMilterCreate": true,
"sysMtaMilterUpdate": true,
"sysMtaMilterDestroy": true,
"sysMtaMilterQuery": true,
"sysMtaOutboundStrategyGet": true,
"sysMtaOutboundStrategyUpdate": true,
"sysMtaOutboundThrottleGet": true,
"sysMtaOutboundThrottleCreate": true,
"sysMtaOutboundThrottleUpdate": true,
"sysMtaOutboundThrottleDestroy": true,
"sysMtaOutboundThrottleQuery": true,
"sysMtaQueueQuotaGet": true,
"sysMtaQueueQuotaCreate": true,
"sysMtaQueueQuotaUpdate": true,
"sysMtaQueueQuotaDestroy": true,
"sysMtaQueueQuotaQuery": true,
"sysMtaRouteGet": true,
"sysMtaRouteCreate": true,
"sysMtaRouteUpdate": true,
"sysMtaRouteDestroy": true,
"sysMtaRouteQuery": true,
"sysMtaStageAuthGet": true,
"sysMtaStageAuthUpdate": true,
"sysMtaStageConnectGet": true,
"sysMtaStageConnectUpdate": true,
"sysMtaStageDataGet": true,
"sysMtaStageDataUpdate": true,
"sysMtaStageEhloGet": true,
"sysMtaStageEhloUpdate": true,
"sysMtaStageMailGet": true,
"sysMtaStageMailUpdate": true,
"sysMtaStageRcptGet": true,
"sysMtaStageRcptUpdate": true,
"sysMtaStsGet": true,
"sysMtaStsUpdate": true,
"sysMtaTlsStrategyGet": true,
"sysMtaTlsStrategyCreate": true,
"sysMtaTlsStrategyUpdate": true,
"sysMtaTlsStrategyDestroy": true,
"sysMtaTlsStrategyQuery": true,
"sysMtaVirtualQueueGet": true,
"sysMtaVirtualQueueCreate": true,
"sysMtaVirtualQueueUpdate": true,
"sysMtaVirtualQueueDestroy": true,
"sysMtaVirtualQueueQuery": true,
"sysNetworkListenerGet": true,
"sysNetworkListenerCreate": true,
"sysNetworkListenerUpdate": true,
"sysNetworkListenerDestroy": true,
"sysNetworkListenerQuery": true,
"sysOAuthClientGet": true,
"sysOAuthClientCreate": true,
"sysOAuthClientUpdate": true,
"sysOAuthClientDestroy": true,
"sysOAuthClientQuery": true,
"sysOidcProviderGet": true,
"sysOidcProviderUpdate": true,
"sysPublicKeyGet": true,
"sysPublicKeyCreate": true,
"sysPublicKeyUpdate": true,
"sysPublicKeyDestroy": true,
"sysPublicKeyQuery": true,
"sysQueuedMessageGet": true,
"sysQueuedMessageUpdate": true,
"sysQueuedMessageDestroy": true,
"sysQueuedMessageQuery": true,
"sysReportSettingsGet": true,
"sysReportSettingsUpdate": true,
"sysRoleGet": true,
"sysRoleCreate": true,
"sysRoleUpdate": true,
"sysRoleDestroy": true,
"sysRoleQuery": true,
"sysSearchGet": true,
"sysSearchUpdate": true,
"sysSearchStoreGet": true,
"sysSearchStoreUpdate": true,
"sysSecurityGet": true,
"sysSecurityUpdate": true,
"sysSenderAuthGet": true,
"sysSenderAuthUpdate": true,
"sysSharingGet": true,
"sysSharingUpdate": true,
"sysSieveSystemInterpreterGet": true,
"sysSieveSystemInterpreterUpdate": true,
"sysSieveSystemScriptGet": true,
"sysSieveSystemScriptCreate": true,
"sysSieveSystemScriptUpdate": true,
"sysSieveSystemScriptDestroy": true,
"sysSieveSystemScriptQuery": true,
"sysSieveUserInterpreterGet": true,
"sysSieveUserInterpreterUpdate": true,
"sysSieveUserScriptGet": true,
"sysSieveUserScriptCreate": true,
"sysSieveUserScriptUpdate": true,
"sysSieveUserScriptDestroy": true,
"sysSieveUserScriptQuery": true,
"sysSpamClassifierGet": true,
"sysSpamClassifierUpdate": true,
"sysSpamDnsblServerGet": true,
"sysSpamDnsblServerCreate": true,
"sysSpamDnsblServerUpdate": true,
"sysSpamDnsblServerDestroy": true,
"sysSpamDnsblServerQuery": true,
"sysSpamDnsblSettingsGet": true,
"sysSpamDnsblSettingsUpdate": true,
"sysSpamFileExtensionGet": true,
"sysSpamFileExtensionCreate": true,
"sysSpamFileExtensionUpdate": true,
"sysSpamFileExtensionDestroy": true,
"sysSpamFileExtensionQuery": true,
"sysSpamAiGet": true,
"sysSpamAiUpdate": true,
"sysSpamPyzorGet": true,
"sysSpamPyzorUpdate": true,
"sysSpamRuleGet": true,
"sysSpamRuleCreate": true,
"sysSpamRuleUpdate": true,
"sysSpamRuleDestroy": true,
"sysSpamRuleQuery": true,
"sysSpamSettingsGet": true,
"sysSpamSettingsUpdate": true,
"sysSpamTagGet": true,
"sysSpamTagCreate": true,
"sysSpamTagUpdate": true,
"sysSpamTagDestroy": true,
"sysSpamTagQuery": true,
"sysSpamTrainingSampleGet": true,
"sysSpamTrainingSampleCreate": true,
"sysSpamTrainingSampleDestroy": true,
"sysSpamTrainingSampleQuery": true,
"sysSpfReportSettingsGet": true,
"sysSpfReportSettingsUpdate": true,
"sysStoreLookupGet": true,
"sysStoreLookupCreate": true,
"sysStoreLookupUpdate": true,
"sysStoreLookupDestroy": true,
"sysStoreLookupQuery": true,
"sysSystemSettingsGet": true,
"sysSystemSettingsUpdate": true,
"taskCalendarAlarmEmail": true,
"taskCalendarAlarmNotification": true,
"taskCalendarItipMessage": true,
"taskMergeThreads": true,
"taskDmarcReport": true,
"taskTlsReport": true,
"taskRestoreArchivedItem": true,
"taskDestroyAccount": true,
"taskAccountMaintenance": true,
"taskTenantMaintenance": true,
"taskStoreMaintenance": true,
"taskSpamFilterMaintenance": true,
"taskAcmeRenewal": true,
"taskDkimManagement": true,
"taskDnsManagement": true,
"sysTaskGet": true,
"sysTaskCreate": true,
"sysTaskUpdate": true,
"sysTaskDestroy": true,
"sysTaskQuery": true,
"sysTaskManagerGet": true,
"sysTaskManagerUpdate": true,
"sysTenantGet": true,
"sysTenantCreate": true,
"sysTenantUpdate": true,
"sysTenantDestroy": true,
"sysTenantQuery": true,
"sysTlsExternalReportGet": true,
"sysTlsExternalReportDestroy": true,
"sysTlsExternalReportQuery": true,
"sysTlsInternalReportGet": true,
"sysTlsInternalReportUpdate": true,
"sysTlsInternalReportDestroy": true,
"sysTlsInternalReportQuery": true,
"sysTlsReportSettingsGet": true,
"sysTlsReportSettingsUpdate": true,
"sysTraceGet": true,
"sysTraceQuery": true,
"sysTracerGet": true,
"sysTracerCreate": true,
"sysTracerUpdate": true,
"sysTracerDestroy": true,
"sysTracerQuery": true,
"sysTracingStoreGet": true,
"sysTracingStoreUpdate": true,
"sysWebDavGet": true,
"sysWebDavUpdate": true,
"sysWebHookGet": true,
"sysWebHookCreate": true,
"sysWebHookUpdate": true,
"sysWebHookDestroy": true,
"sysWebHookQuery": true,
"emailSend": true,
"emailReceive": true,
"calendarAlarmsSend": true,
"calendarSchedulingSend": true,
"calendarSchedulingReceive": true,
"jmapPushSubscriptionGet": true,
"jmapPushSubscriptionCreate": true,
"jmapPushSubscriptionUpdate": true,
"jmapPushSubscriptionDestroy": true,
"jmapMailboxGet": true,
"jmapMailboxChanges": true,
"jmapMailboxQuery": true,
"jmapMailboxQueryChanges": true,
"jmapMailboxCreate": true,
"jmapMailboxUpdate": true,
"jmapMailboxDestroy": true,
"jmapThreadGet": true,
"jmapThreadChanges": true,
"jmapEmailGet": true,
"jmapEmailChanges": true,
"jmapEmailQuery": true,
"jmapEmailQueryChanges": true,
"jmapEmailCreate": true,
"jmapEmailUpdate": true,
"jmapEmailDestroy": true,
"jmapEmailCopy": true,
"jmapEmailImport": true,
"jmapEmailParse": true,
"jmapSearchSnippetGet": true,
"jmapIdentityGet": true,
"jmapIdentityChanges": true,
"jmapIdentityCreate": true,
"jmapIdentityUpdate": true,
"jmapIdentityDestroy": true,
"jmapEmailSubmissionGet": true,
"jmapEmailSubmissionChanges": true,
"jmapEmailSubmissionQuery": true,
"jmapEmailSubmissionQueryChanges": true,
"jmapEmailSubmissionCreate": true,
"jmapEmailSubmissionUpdate": true,
"jmapEmailSubmissionDestroy": true,
"jmapVacationResponseGet": true,
"jmapVacationResponseCreate": true,
"jmapVacationResponseUpdate": true,
"jmapVacationResponseDestroy": true,
"jmapSieveScriptGet": true,
"jmapSieveScriptQuery": true,
"jmapSieveScriptValidate": true,
"jmapSieveScriptCreate": true,
"jmapSieveScriptUpdate": true,
"jmapSieveScriptDestroy": true,
"jmapPrincipalGet": true,
"jmapPrincipalQuery": true,
"jmapPrincipalChanges": true,
"jmapPrincipalQueryChanges": true,
"jmapPrincipalGetAvailability": true,
"jmapQuotaGet": true,
"jmapQuotaChanges": true,
"jmapQuotaQuery": true,
"jmapQuotaQueryChanges": true,
"jmapBlobGet": true,
"jmapBlobCopy": true,
"jmapBlobLookup": true,
"jmapBlobUpload": true,
"jmapAddressBookGet": true,
"jmapAddressBookChanges": true,
"jmapAddressBookCreate": true,
"jmapAddressBookUpdate": true,
"jmapAddressBookDestroy": true,
"jmapContactCardGet": true,
"jmapContactCardChanges": true,
"jmapContactCardQuery": true,
"jmapContactCardQueryChanges": true,
"jmapContactCardCreate": true,
"jmapContactCardUpdate": true,
"jmapContactCardDestroy": true,
"jmapContactCardCopy": true,
"jmapContactCardParse": true,
"jmapFileNodeGet": true,
"jmapFileNodeChanges": true,
"jmapFileNodeQuery": true,
"jmapFileNodeQueryChanges": true,
"jmapFileNodeCreate": true,
"jmapFileNodeUpdate": true,
"jmapFileNodeDestroy": true,
"jmapShareNotificationGet": true,
"jmapShareNotificationChanges": true,
"jmapShareNotificationQuery": true,
"jmapShareNotificationQueryChanges": true,
"jmapShareNotificationCreate": true,
"jmapShareNotificationUpdate": true,
"jmapShareNotificationDestroy": true,
"jmapCalendarGet": true,
"jmapCalendarChanges": true,
"jmapCalendarCreate": true,
"jmapCalendarUpdate": true,
"jmapCalendarDestroy": true,
"jmapCalendarEventGet": true,
"jmapCalendarEventChanges": true,
"jmapCalendarEventQuery": true,
"jmapCalendarEventQueryChanges": true,
"jmapCalendarEventCreate": true,
"jmapCalendarEventUpdate": true,
"jmapCalendarEventDestroy": true,
"jmapCalendarEventCopy": true,
"jmapCalendarEventParse": true,
"jmapCalendarEventNotificationGet": true,
"jmapCalendarEventNotificationChanges": true,
"jmapCalendarEventNotificationQuery": true,
"jmapCalendarEventNotificationQueryChanges": true,
"jmapCalendarEventNotificationCreate": true,
"jmapCalendarEventNotificationUpdate": true,
"jmapCalendarEventNotificationDestroy": true,
"jmapParticipantIdentityGet": true,
"jmapParticipantIdentityChanges": true,
"jmapParticipantIdentityCreate": true,
"jmapParticipantIdentityUpdate": true,
"jmapParticipantIdentityDestroy": true,
"jmapCoreEcho": true,
"imapAuthenticate": true,
"imapAclGet": true,
"imapAclSet": true,
"imapMyRights": true,
"imapListRights": true,
"imapAppend": true,
"imapCapability": true,
"imapId": true,
"imapCopy": true,
"imapMove": true,
"imapCreate": true,
"imapDelete": true,
"imapEnable": true,
"imapExpunge": true,
"imapFetch": true,
"imapIdle": true,
"imapList": true,
"imapLsub": true,
"imapNamespace": true,
"imapRename": true,
"imapSearch": true,
"imapSort": true,
"imapSelect": true,
"imapExamine": true,
"imapStatus": true,
"imapStore": true,
"imapSubscribe": true,
"imapThread": true,
"pop3Authenticate": true,
"pop3List": true,
"pop3Uidl": true,
"pop3Stat": true,
"pop3Retr": true,
"pop3Dele": true,
"sieveAuthenticate": true,
"sieveListScripts": true,
"sieveSetActive": true,
"sieveGetScript": true,
"sievePutScript": true,
"sieveDeleteScript": true,
"sieveRenameScript": true,
"sieveCheckScript": true,
"sieveHaveSpace": true,
"davSyncCollection": true,
"davExpandProperty": true,
"davPrincipalAcl": true,
"davPrincipalList": true,
"davPrincipalMatch": true,
"davPrincipalSearch": true,
"davPrincipalSearchPropSet": true,
"davFilePropFind": true,
"davFilePropPatch": true,
"davFileGet": true,
"davFileMkCol": true,
"davFileDelete": true,
"davFilePut": true,
"davFileCopy": true,
"davFileMove": true,
"davFileLock": true,
"davFileAcl": true,
"davCardPropFind": true,
"davCardPropPatch": true,
"davCardGet": true,
"davCardMkCol": true,
"davCardDelete": true,
"davCardPut": true,
"davCardCopy": true,
"davCardMove": true,
"davCardLock": true,
"davCardAcl": true,
"davCardQuery": true,
"davCardMultiGet": true,
"davCalPropFind": true,
"davCalPropPatch": true,
"davCalGet": true,
"davCalMkCol": true,
"davCalDelete": true,
"davCalPut": true,
"davCalCopy": true,
"davCalMove": true,
"davCalLock": true,
"davCalAcl": true,
"davCalQuery": true,
"davCalMultiGet": true,
"davCalFreeBusyQuery": true,
"jmapFileNodeCopy": true
},
"disabledPermissions": {}
},
"quotas": {},
"roles": {
"@type": "Admin"
},
"timeZone": null
},
"controller": {
"@type": "User",
"name": "controller",
"description": "Continuous configuration owner",
"aliases": {
"0": {
"name": {
"$secretFile": "oidc_controller_subject"
},
"domainId": "#authentication-domain"
}
},
"domainId": "#authentication-domain",
"encryptionAtRest": {
"@type": "Disabled"
},
"locale": "en-US",
"memberGroupIds": {},
"memberTenantId": null,
"permissions": {
"@type": "Replace",
"enabledPermissions": {
"authenticate": true,
"authenticateWithAlias": true,
"interactAi": true,
"impersonate": true,
"unlimitedRequests": true,
"unlimitedUploads": true,
"fetchAnyBlob": true,
"liveTracing": true,
"liveMetrics": true,
"liveDeliveryTest": true,
"sysAccountGet": true,
"sysAccountCreate": true,
"sysAccountUpdate": true,
"sysAccountDestroy": true,
"sysAccountQuery": true,
"sysAccountPasswordGet": true,
"sysAccountPasswordUpdate": true,
"sysAccountSettingsGet": true,
"sysAccountSettingsUpdate": true,
"sysAcmeProviderGet": true,
"sysAcmeProviderCreate": true,
"sysAcmeProviderUpdate": true,
"sysAcmeProviderDestroy": true,
"sysAcmeProviderQuery": true,
"actionReloadSettings": true,
"actionReloadTlsCertificates": true,
"actionReloadLookupStores": true,
"actionReloadBlockedIps": true,
"actionUpdateApps": true,
"actionTroubleshootDmarc": true,
"actionClassifySpam": true,
"actionInvalidateCaches": true,
"actionInvalidateNegativeCaches": true,
"actionPauseMtaQueue": true,
"actionResumeMtaQueue": true,
"sysActionCreate": true,
"sysAddressBookGet": true,
"sysAddressBookUpdate": true,
"sysAiModelGet": true,
"sysAiModelCreate": true,
"sysAiModelUpdate": true,
"sysAiModelDestroy": true,
"sysAiModelQuery": true,
"sysAlertGet": true,
"sysAlertCreate": true,
"sysAlertUpdate": true,
"sysAlertDestroy": true,
"sysAlertQuery": true,
"sysAllowedIpGet": true,
"sysAllowedIpCreate": true,
"sysAllowedIpUpdate": true,
"sysAllowedIpDestroy": true,
"sysAllowedIpQuery": true,
"sysApiKeyGet": true,
"sysApiKeyCreate": true,
"sysApiKeyUpdate": true,
"sysApiKeyDestroy": true,
"sysApiKeyQuery": true,
"sysAppPasswordGet": true,
"sysAppPasswordCreate": true,
"sysAppPasswordUpdate": true,
"sysAppPasswordDestroy": true,
"sysAppPasswordQuery": true,
"sysApplicationGet": true,
"sysApplicationCreate": true,
"sysApplicationUpdate": true,
"sysApplicationDestroy": true,
"sysApplicationQuery": true,
"sysArchivedItemGet": true,
"sysArchivedItemUpdate": true,
"sysArchivedItemDestroy": true,
"sysArchivedItemQuery": true,
"sysArfExternalReportGet": true,
"sysArfExternalReportDestroy": true,
"sysArfExternalReportQuery": true,
"sysAsnGet": true,
"sysAsnUpdate": true,
"sysAuthenticationGet": true,
"sysAuthenticationUpdate": true,
"sysBlobStoreGet": true,
"sysBlobStoreUpdate": true,
"sysBlockedIpGet": true,
"sysBlockedIpCreate": true,
"sysBlockedIpUpdate": true,
"sysBlockedIpDestroy": true,
"sysBlockedIpQuery": true,
"sysBootstrapGet": true,
"sysBootstrapUpdate": true,
"sysCacheGet": true,
"sysCacheUpdate": true,
"sysCalendarGet": true,
"sysCalendarUpdate": true,
"sysCalendarAlarmGet": true,
"sysCalendarAlarmUpdate": true,
"sysCalendarSchedulingGet": true,
"sysCalendarSchedulingUpdate": true,
"sysCertificateGet": true,
"sysCertificateCreate": true,
"sysCertificateUpdate": true,
"sysCertificateDestroy": true,
"sysCertificateQuery": true,
"sysClusterNodeGet": true,
"sysClusterNodeQuery": true,
"sysClusterRoleGet": true,
"sysClusterRoleCreate": true,
"sysClusterRoleUpdate": true,
"sysClusterRoleDestroy": true,
"sysClusterRoleQuery": true,
"sysCoordinatorGet": true,
"sysCoordinatorUpdate": true,
"sysDataRetentionGet": true,
"sysDataRetentionUpdate": true,
"sysDataStoreGet": true,
"sysDataStoreUpdate": true,
"sysDirectoryGet": true,
"sysDirectoryCreate": true,
"sysDirectoryUpdate": true,
"sysDirectoryDestroy": true,
"sysDirectoryQuery": true,
"sysDkimReportSettingsGet": true,
"sysDkimReportSettingsUpdate": true,
"sysDkimSignatureGet": true,
"sysDkimSignatureCreate": true,
"sysDkimSignatureUpdate": true,
"sysDkimSignatureDestroy": true,
"sysDkimSignatureQuery": true,
"sysDmarcExternalReportGet": true,
"sysDmarcExternalReportDestroy": true,
"sysDmarcExternalReportQuery": true,
"sysDmarcInternalReportGet": true,
"sysDmarcInternalReportUpdate": true,
"sysDmarcInternalReportDestroy": true,
"sysDmarcInternalReportQuery": true,
"sysDmarcReportSettingsGet": true,
"sysDmarcReportSettingsUpdate": true,
"sysDnsResolverGet": true,
"sysDnsResolverUpdate": true,
"sysDnsServerGet": true,
"sysDnsServerCreate": true,
"sysDnsServerUpdate": true,
"sysDnsServerDestroy": true,
"sysDnsServerQuery": true,
"sysDomainGet": true,
"sysDomainCreate": true,
"sysDomainUpdate": true,
"sysDomainDestroy": true,
"sysDomainQuery": true,
"sysDsnReportSettingsGet": true,
"sysDsnReportSettingsUpdate": true,
"sysEmailGet": true,
"sysEmailUpdate": true,
"sysEnterpriseGet": true,
"sysEnterpriseUpdate": true,
"sysEventTracingLevelGet": true,
"sysEventTracingLevelCreate": true,
"sysEventTracingLevelUpdate": true,
"sysEventTracingLevelDestroy": true,
"sysEventTracingLevelQuery": true,
"sysFileStorageGet": true,
"sysFileStorageUpdate": true,
"sysHttpGet": true,
"sysHttpUpdate": true,
"sysHttpFormGet": true,
"sysHttpFormUpdate": true,
"sysHttpLookupGet": true,
"sysHttpLookupCreate": true,
"sysHttpLookupUpdate": true,
"sysHttpLookupDestroy": true,
"sysHttpLookupQuery": true,
"sysImapGet": true,
"sysImapUpdate": true,
"sysInMemoryStoreGet": true,
"sysInMemoryStoreUpdate": true,
"sysJmapGet": true,
"sysJmapUpdate": true,
"sysLogGet": true,
"sysLogQuery": true,
"sysMailingListGet": true,
"sysMailingListCreate": true,
"sysMailingListUpdate": true,
"sysMailingListDestroy": true,
"sysMailingListQuery": true,
"sysMaskedEmailGet": true,
"sysMaskedEmailCreate": true,
"sysMaskedEmailUpdate": true,
"sysMaskedEmailDestroy": true,
"sysMaskedEmailQuery": true,
"sysMemoryLookupKeyGet": true,
"sysMemoryLookupKeyCreate": true,
"sysMemoryLookupKeyUpdate": true,
"sysMemoryLookupKeyDestroy": true,
"sysMemoryLookupKeyQuery": true,
"sysMemoryLookupKeyValueGet": true,
"sysMemoryLookupKeyValueCreate": true,
"sysMemoryLookupKeyValueUpdate": true,
"sysMemoryLookupKeyValueDestroy": true,
"sysMemoryLookupKeyValueQuery": true,
"sysMetricGet": true,
"sysMetricQuery": true,
"sysMetricsGet": true,
"sysMetricsUpdate": true,
"sysMetricsStoreGet": true,
"sysMetricsStoreUpdate": true,
"sysMtaConnectionStrategyGet": true,
"sysMtaConnectionStrategyCreate": true,
"sysMtaConnectionStrategyUpdate": true,
"sysMtaConnectionStrategyDestroy": true,
"sysMtaConnectionStrategyQuery": true,
"sysMtaDeliveryScheduleGet": true,
"sysMtaDeliveryScheduleCreate": true,
"sysMtaDeliveryScheduleUpdate": true,
"sysMtaDeliveryScheduleDestroy": true,
"sysMtaDeliveryScheduleQuery": true,
"sysMtaExtensionsGet": true,
"sysMtaExtensionsUpdate": true,
"sysMtaHookGet": true,
"sysMtaHookCreate": true,
"sysMtaHookUpdate": true,
"sysMtaHookDestroy": true,
"sysMtaHookQuery": true,
"sysMtaInboundSessionGet": true,
"sysMtaInboundSessionUpdate": true,
"sysMtaInboundThrottleGet": true,
"sysMtaInboundThrottleCreate": true,
"sysMtaInboundThrottleUpdate": true,
"sysMtaInboundThrottleDestroy": true,
"sysMtaInboundThrottleQuery": true,
"sysMtaMilterGet": true,
"sysMtaMilterCreate": true,
"sysMtaMilterUpdate": true,
"sysMtaMilterDestroy": true,
"sysMtaMilterQuery": true,
"sysMtaOutboundStrategyGet": true,
"sysMtaOutboundStrategyUpdate": true,
"sysMtaOutboundThrottleGet": true,
"sysMtaOutboundThrottleCreate": true,
"sysMtaOutboundThrottleUpdate": true,
"sysMtaOutboundThrottleDestroy": true,
"sysMtaOutboundThrottleQuery": true,
"sysMtaQueueQuotaGet": true,
"sysMtaQueueQuotaCreate": true,
"sysMtaQueueQuotaUpdate": true,
"sysMtaQueueQuotaDestroy": true,
"sysMtaQueueQuotaQuery": true,
"sysMtaRouteGet": true,
"sysMtaRouteCreate": true,
"sysMtaRouteUpdate": true,
"sysMtaRouteDestroy": true,
"sysMtaRouteQuery": true,
"sysMtaStageAuthGet": true,
"sysMtaStageAuthUpdate": true,
"sysMtaStageConnectGet": true,
"sysMtaStageConnectUpdate": true,
"sysMtaStageDataGet": true,
"sysMtaStageDataUpdate": true,
"sysMtaStageEhloGet": true,
"sysMtaStageEhloUpdate": true,
"sysMtaStageMailGet": true,
"sysMtaStageMailUpdate": true,
"sysMtaStageRcptGet": true,
"sysMtaStageRcptUpdate": true,
"sysMtaStsGet": true,
"sysMtaStsUpdate": true,
"sysMtaTlsStrategyGet": true,
"sysMtaTlsStrategyCreate": true,
"sysMtaTlsStrategyUpdate": true,
"sysMtaTlsStrategyDestroy": true,
"sysMtaTlsStrategyQuery": true,
"sysMtaVirtualQueueGet": true,
"sysMtaVirtualQueueCreate": true,
"sysMtaVirtualQueueUpdate": true,
"sysMtaVirtualQueueDestroy": true,
"sysMtaVirtualQueueQuery": true,
"sysNetworkListenerGet": true,
"sysNetworkListenerCreate": true,
"sysNetworkListenerUpdate": true,
"sysNetworkListenerDestroy": true,
"sysNetworkListenerQuery": true,
"sysOAuthClientGet": true,
"sysOAuthClientCreate": true,
"sysOAuthClientUpdate": true,
"sysOAuthClientDestroy": true,
"sysOAuthClientQuery": true,
"sysOidcProviderGet": true,
"sysOidcProviderUpdate": true,
"sysPublicKeyGet": true,
"sysPublicKeyCreate": true,
"sysPublicKeyUpdate": true,
"sysPublicKeyDestroy": true,
"sysPublicKeyQuery": true,
"sysQueuedMessageGet": true,
"sysQueuedMessageUpdate": true,
"sysQueuedMessageDestroy": true,
"sysQueuedMessageQuery": true,
"sysReportSettingsGet": true,
"sysReportSettingsUpdate": true,
"sysRoleGet": true,
"sysRoleCreate": true,
"sysRoleUpdate": true,
"sysRoleDestroy": true,
"sysRoleQuery": true,
"sysSearchGet": true,
"sysSearchUpdate": true,
"sysSearchStoreGet": true,
"sysSearchStoreUpdate": true,
"sysSecurityGet": true,
"sysSecurityUpdate": true,
"sysSenderAuthGet": true,
"sysSenderAuthUpdate": true,
"sysSharingGet": true,
"sysSharingUpdate": true,
"sysSieveSystemInterpreterGet": true,
"sysSieveSystemInterpreterUpdate": true,
"sysSieveSystemScriptGet": true,
"sysSieveSystemScriptCreate": true,
"sysSieveSystemScriptUpdate": true,
"sysSieveSystemScriptDestroy": true,
"sysSieveSystemScriptQuery": true,
"sysSieveUserInterpreterGet": true,
"sysSieveUserInterpreterUpdate": true,
"sysSieveUserScriptGet": true,
"sysSieveUserScriptCreate": true,
"sysSieveUserScriptUpdate": true,
"sysSieveUserScriptDestroy": true,
"sysSieveUserScriptQuery": true,
"sysSpamClassifierGet": true,
"sysSpamClassifierUpdate": true,
"sysSpamDnsblServerGet": true,
"sysSpamDnsblServerCreate": true,
"sysSpamDnsblServerUpdate": true,
"sysSpamDnsblServerDestroy": true,
"sysSpamDnsblServerQuery": true,
"sysSpamDnsblSettingsGet": true,
"sysSpamDnsblSettingsUpdate": true,
"sysSpamFileExtensionGet": true,
"sysSpamFileExtensionCreate": true,
"sysSpamFileExtensionUpdate": true,
"sysSpamFileExtensionDestroy": true,
"sysSpamFileExtensionQuery": true,
"sysSpamAiGet": true,
"sysSpamAiUpdate": true,
"sysSpamPyzorGet": true,
"sysSpamPyzorUpdate": true,
"sysSpamRuleGet": true,
"sysSpamRuleCreate": true,
"sysSpamRuleUpdate": true,
"sysSpamRuleDestroy": true,
"sysSpamRuleQuery": true,
"sysSpamSettingsGet": true,
"sysSpamSettingsUpdate": true,
"sysSpamTagGet": true,
"sysSpamTagCreate": true,
"sysSpamTagUpdate": true,
"sysSpamTagDestroy": true,
"sysSpamTagQuery": true,
"sysSpamTrainingSampleGet": true,
"sysSpamTrainingSampleCreate": true,
"sysSpamTrainingSampleDestroy": true,
"sysSpamTrainingSampleQuery": true,
"sysSpfReportSettingsGet": true,
"sysSpfReportSettingsUpdate": true,
"sysStoreLookupGet": true,
"sysStoreLookupCreate": true,
"sysStoreLookupUpdate": true,
"sysStoreLookupDestroy": true,
"sysStoreLookupQuery": true,
"sysSystemSettingsGet": true,
"sysSystemSettingsUpdate": true,
"taskCalendarAlarmEmail": true,
"taskCalendarAlarmNotification": true,
"taskCalendarItipMessage": true,
"taskMergeThreads": true,
"taskDmarcReport": true,
"taskTlsReport": true,
"taskRestoreArchivedItem": true,
"taskDestroyAccount": true,
"taskAccountMaintenance": true,
"taskTenantMaintenance": true,
"taskStoreMaintenance": true,
"taskSpamFilterMaintenance": true,
"taskAcmeRenewal": true,
"taskDkimManagement": true,
"taskDnsManagement": true,
"sysTaskGet": true,
"sysTaskCreate": true,
"sysTaskUpdate": true,
"sysTaskDestroy": true,
"sysTaskQuery": true,
"sysTaskManagerGet": true,
"sysTaskManagerUpdate": true,
"sysTenantGet": true,
"sysTenantCreate": true,
"sysTenantUpdate": true,
"sysTenantDestroy": true,
"sysTenantQuery": true,
"sysTlsExternalReportGet": true,
"sysTlsExternalReportDestroy": true,
"sysTlsExternalReportQuery": true,
"sysTlsInternalReportGet": true,
"sysTlsInternalReportUpdate": true,
"sysTlsInternalReportDestroy": true,
"sysTlsInternalReportQuery": true,
"sysTlsReportSettingsGet": true,
"sysTlsReportSettingsUpdate": true,
"sysTraceGet": true,
"sysTraceQuery": true,
"sysTracerGet": true,
"sysTracerCreate": true,
"sysTracerUpdate": true,
"sysTracerDestroy": true,
"sysTracerQuery": true,
"sysTracingStoreGet": true,
"sysTracingStoreUpdate": true,
"sysWebDavGet": true,
"sysWebDavUpdate": true,
"sysWebHookGet": true,
"sysWebHookCreate": true,
"sysWebHookUpdate": true,
"sysWebHookDestroy": true,
"sysWebHookQuery": true,
"emailSend": true,
"emailReceive": true,
"calendarAlarmsSend": true,
"calendarSchedulingSend": true,
"calendarSchedulingReceive": true,
"jmapPushSubscriptionGet": true,
"jmapPushSubscriptionCreate": true,
"jmapPushSubscriptionUpdate": true,
"jmapPushSubscriptionDestroy": true,
"jmapMailboxGet": true,
"jmapMailboxChanges": true,
"jmapMailboxQuery": true,
"jmapMailboxQueryChanges": true,
"jmapMailboxCreate": true,
"jmapMailboxUpdate": true,
"jmapMailboxDestroy": true,
"jmapThreadGet": true,
"jmapThreadChanges": true,
"jmapEmailGet": true,
"jmapEmailChanges": true,
"jmapEmailQuery": true,
"jmapEmailQueryChanges": true,
"jmapEmailCreate": true,
"jmapEmailUpdate": true,
"jmapEmailDestroy": true,
"jmapEmailCopy": true,
"jmapEmailImport": true,
"jmapEmailParse": true,
"jmapSearchSnippetGet": true,
"jmapIdentityGet": true,
"jmapIdentityChanges": true,
"jmapIdentityCreate": true,
"jmapIdentityUpdate": true,
"jmapIdentityDestroy": true,
"jmapEmailSubmissionGet": true,
"jmapEmailSubmissionChanges": true,
"jmapEmailSubmissionQuery": true,
"jmapEmailSubmissionQueryChanges": true,
"jmapEmailSubmissionCreate": true,
"jmapEmailSubmissionUpdate": true,
"jmapEmailSubmissionDestroy": true,
"jmapVacationResponseGet": true,
"jmapVacationResponseCreate": true,
"jmapVacationResponseUpdate": true,
"jmapVacationResponseDestroy": true,
"jmapSieveScriptGet": true,
"jmapSieveScriptQuery": true,
"jmapSieveScriptValidate": true,
"jmapSieveScriptCreate": true,
"jmapSieveScriptUpdate": true,
"jmapSieveScriptDestroy": true,
"jmapPrincipalGet": true,
"jmapPrincipalQuery": true,
"jmapPrincipalChanges": true,
"jmapPrincipalQueryChanges": true,
"jmapPrincipalGetAvailability": true,
"jmapQuotaGet": true,
"jmapQuotaChanges": true,
"jmapQuotaQuery": true,
"jmapQuotaQueryChanges": true,
"jmapBlobGet": true,
"jmapBlobCopy": true,
"jmapBlobLookup": true,
"jmapBlobUpload": true,
"jmapAddressBookGet": true,
"jmapAddressBookChanges": true,
"jmapAddressBookCreate": true,
"jmapAddressBookUpdate": true,
"jmapAddressBookDestroy": true,
"jmapContactCardGet": true,
"jmapContactCardChanges": true,
"jmapContactCardQuery": true,
"jmapContactCardQueryChanges": true,
"jmapContactCardCreate": true,
"jmapContactCardUpdate": true,
"jmapContactCardDestroy": true,
"jmapContactCardCopy": true,
"jmapContactCardParse": true,
"jmapFileNodeGet": true,
"jmapFileNodeChanges": true,
"jmapFileNodeQuery": true,
"jmapFileNodeQueryChanges": true,
"jmapFileNodeCreate": true,
"jmapFileNodeUpdate": true,
"jmapFileNodeDestroy": true,
"jmapShareNotificationGet": true,
"jmapShareNotificationChanges": true,
"jmapShareNotificationQuery": true,
"jmapShareNotificationQueryChanges": true,
"jmapShareNotificationCreate": true,
"jmapShareNotificationUpdate": true,
"jmapShareNotificationDestroy": true,
"jmapCalendarGet": true,
"jmapCalendarChanges": true,
"jmapCalendarCreate": true,
"jmapCalendarUpdate": true,
"jmapCalendarDestroy": true,
"jmapCalendarEventGet": true,
"jmapCalendarEventChanges": true,
"jmapCalendarEventQuery": true,
"jmapCalendarEventQueryChanges": true,
"jmapCalendarEventCreate": true,
"jmapCalendarEventUpdate": true,
"jmapCalendarEventDestroy": true,
"jmapCalendarEventCopy": true,
"jmapCalendarEventParse": true,
"jmapCalendarEventNotificationGet": true,
"jmapCalendarEventNotificationChanges": true,
"jmapCalendarEventNotificationQuery": true,
"jmapCalendarEventNotificationQueryChanges": true,
"jmapCalendarEventNotificationCreate": true,
"jmapCalendarEventNotificationUpdate": true,
"jmapCalendarEventNotificationDestroy": true,
"jmapParticipantIdentityGet": true,
"jmapParticipantIdentityChanges": true,
"jmapParticipantIdentityCreate": true,
"jmapParticipantIdentityUpdate": true,
"jmapParticipantIdentityDestroy": true,
"jmapCoreEcho": true,
"imapAuthenticate": true,
"imapAclGet": true,
"imapAclSet": true,
"imapMyRights": true,
"imapListRights": true,
"imapAppend": true,
"imapCapability": true,
"imapId": true,
"imapCopy": true,
"imapMove": true,
"imapCreate": true,
"imapDelete": true,
"imapEnable": true,
"imapExpunge": true,
"imapFetch": true,
"imapIdle": true,
"imapList": true,
"imapLsub": true,
"imapNamespace": true,
"imapRename": true,
"imapSearch": true,
"imapSort": true,
"imapSelect": true,
"imapExamine": true,
"imapStatus": true,
"imapStore": true,
"imapSubscribe": true,
"imapThread": true,
"pop3Authenticate": true,
"pop3List": true,
"pop3Uidl": true,
"pop3Stat": true,
"pop3Retr": true,
"pop3Dele": true,
"sieveAuthenticate": true,
"sieveListScripts": true,
"sieveSetActive": true,
"sieveGetScript": true,
"sievePutScript": true,
"sieveDeleteScript": true,
"sieveRenameScript": true,
"sieveCheckScript": true,
"sieveHaveSpace": true,
"davSyncCollection": true,
"davExpandProperty": true,
"davPrincipalAcl": true,
"davPrincipalList": true,
"davPrincipalMatch": true,
"davPrincipalSearch": true,
"davPrincipalSearchPropSet": true,
"davFilePropFind": true,
"davFilePropPatch": true,
"davFileGet": true,
"davFileMkCol": true,
"davFileDelete": true,
"davFilePut": true,
"davFileCopy": true,
"davFileMove": true,
"davFileLock": true,
"davFileAcl": true,
"davCardPropFind": true,
"davCardPropPatch": true,
"davCardGet": true,
"davCardMkCol": true,
"davCardDelete": true,
"davCardPut": true,
"davCardCopy": true,
"davCardMove": true,
"davCardLock": true,
"davCardAcl": true,
"davCardQuery": true,
"davCardMultiGet": true,
"davCalPropFind": true,
"davCalPropPatch": true,
"davCalGet": true,
"davCalMkCol": true,
"davCalDelete": true,
"davCalPut": true,
"davCalCopy": true,
"davCalMove": true,
"davCalLock": true,
"davCalAcl": true,
"davCalQuery": true,
"davCalMultiGet": true,
"davCalFreeBusyQuery": true,
"jmapFileNodeCopy": true
},
"disabledPermissions": {}
},
"quotas": {},
"roles": {
"@type": "Admin"
},
"timeZone": null
},
"alert-sender": {
"@type": "User",
"name": "stalwart-submitter",
"description": "Zitadel-owned cluster-local SMTP submitter",
"aliases": {
"0": {
"name": {
"$secretFile": "oidc_sender_subject"
},
"domainId": "#authentication-domain"
}
},
"domainId": "#authentication-domain",
"encryptionAtRest": {
"@type": "Disabled"
},
"locale": "en-US",
"memberGroupIds": {},
"memberTenantId": null,
"permissions": {
"@type": "Replace",
"enabledPermissions": {
"authenticate": true,
"emailSend": true,
"sysAppPasswordCreate": true,
"sysAppPasswordDestroy": true,
"sysAppPasswordGet": true,
"sysAppPasswordQuery": true,
"sysAppPasswordUpdate": true
},
"disabledPermissions": {}
},
"quotas": {},
"roles": {
"@type": "User"
},
"timeZone": null
},
"notification-sender": {
"@type": "User",
"name": "noreply",
"description": "Zitadel-owned notification sender",
"aliases": {
"0": {
"name": {
"$secretFile": "oidc_notifier_subject"
},
"domainId": "#authentication-domain"
}
},
"domainId": "#domain",
"encryptionAtRest": {
"@type": "Disabled"
},
"locale": "en-US",
"memberGroupIds": {},
"memberTenantId": null,
"permissions": {
"@type": "Replace",
"enabledPermissions": {
"authenticate": true,
"emailSend": true,
"sysAppPasswordCreate": true,
"sysAppPasswordDestroy": true,
"sysAppPasswordGet": true,
"sysAppPasswordQuery": true,
"sysAppPasswordUpdate": true
},
"disabledPermissions": {}
},
"quotas": {},
"roles": {
"@type": "User"
},
"timeZone": null
},
"test-client": {
"@type": "User",
"name": "test",
"description": "Authenticated client ingress test mailbox",
"aliases": {
"0": {
"name": {
"$secretFile": "oidc_test_subject"
},
"domainId": "#authentication-domain"
}
},
"domainId": "#domain",
"encryptionAtRest": {
"@type": "Disabled"
},
"locale": "en-US",
"memberGroupIds": {},
"memberTenantId": null,
"permissions": {
"@type": "Replace",
"enabledPermissions": {
"authenticate": true,
"emailReceive": true,
"emailSend": true,
"imapAuthenticate": true,
"imapCapability": true,
"imapExamine": true,
"imapFetch": true,
"imapIdle": true,
"imapList": true,
"imapSearch": true,
"imapSelect": true,
"imapStatus": true,
"sysAppPasswordCreate": true,
"sysAppPasswordDestroy": true,
"sysAppPasswordGet": true,
"sysAppPasswordQuery": true,
"sysAppPasswordUpdate": true
},
"disabledPermissions": {}
},
"quotas": {},
"roles": {
"@type": "User"
},
"timeZone": null
}
}
},
{
"@type": "reconcile",
"object": "NetworkListener",
"matchOn": [
"name"
],
"value": {
"management": {
"name": "management",
"protocol": "http",
"bind": {
"[::]:8080": true
},
"maxConnections": 64,
"overrideProxyTrustedNetworks": {},
"socketBacklog": 128,
"socketNoDelay": true,
"socketReceiveBufferSize": null,
"socketReuseAddress": true,
"socketReusePort": true,
"socketSendBufferSize": null,
"socketTosV4": null,
"socketTtl": null,
"tlsDisableCipherSuites": {},
"tlsDisableProtocols": {},
"tlsIgnoreClientOrder": true,
"implicitTls": false,
"tlsTimeout": 60000,
"useTls": false
},
"user-http": {
"name": "user-http",
"protocol": "http",
"bind": {
"[::]:8081": true
},
"maxConnections": 256,
"overrideProxyTrustedNetworks": {},
"socketBacklog": 256,
"socketNoDelay": true,
"socketReceiveBufferSize": null,
"socketReuseAddress": true,
"socketReusePort": true,
"socketSendBufferSize": null,
"socketTosV4": null,
"socketTtl": null,
"tlsDisableCipherSuites": {},
"tlsDisableProtocols": {},
"tlsIgnoreClientOrder": true,
"implicitTls": false,
"tlsTimeout": 60000,
"useTls": false
},
"smtp": {
"name": "smtp",
"protocol": "smtp",
"bind": {
"[::]:25": true
},
"maxConnections": 512,
"overrideProxyTrustedNetworks": {
"10.115.187.218/24": true
},
"socketBacklog": 512,
"socketNoDelay": true,
"socketReceiveBufferSize": null,
"socketReuseAddress": true,
"socketReusePort": true,
"socketSendBufferSize": null,
"socketTosV4": null,
"socketTtl": null,
"tlsDisableCipherSuites": {},
"tlsDisableProtocols": {},
"tlsIgnoreClientOrder": true,
"implicitTls": false,
"tlsTimeout": 60000,
"useTls": true
},
"submission": {
"name": "submission",
"protocol": "smtp",
"bind": {
"[::]:587": true
},
"maxConnections": 128,
"overrideProxyTrustedNetworks": {},
"socketBacklog": 128,
"socketNoDelay": true,
"socketReceiveBufferSize": null,
"socketReuseAddress": true,
"socketReusePort": true,
"socketSendBufferSize": null,
"socketTosV4": null,
"socketTtl": null,
"tlsDisableCipherSuites": {},
"tlsDisableProtocols": {},
"tlsIgnoreClientOrder": true,
"implicitTls": false,
"tlsTimeout": 60000,
"useTls": false
},
"submissions": {
"name": "submissions",
"protocol": "smtp",
"bind": {
"[::]:465": true
},
"maxConnections": 128,
"overrideProxyTrustedNetworks": {
"10.115.187.218/24": true
},
"socketBacklog": 128,
"socketNoDelay": true,
"socketReceiveBufferSize": null,
"socketReuseAddress": true,
"socketReusePort": true,
"socketSendBufferSize": null,
"socketTosV4": null,
"socketTtl": null,
"tlsDisableCipherSuites": {},
"tlsDisableProtocols": {},
"tlsIgnoreClientOrder": true,
"implicitTls": true,
"tlsTimeout": 60000,
"useTls": true
},
"imaps": {
"name": "imaps",
"protocol": "imap",
"bind": {
"[::]:993": true
},
"maxConnections": 128,
"overrideProxyTrustedNetworks": {
"10.115.187.218/24": true
},
"socketBacklog": 128,
"socketNoDelay": true,
"socketReceiveBufferSize": null,
"socketReuseAddress": true,
"socketReusePort": true,
"socketSendBufferSize": null,
"socketTosV4": null,
"socketTtl": null,
"tlsDisableCipherSuites": {},
"tlsDisableProtocols": {},
"tlsIgnoreClientOrder": true,
"implicitTls": true,
"tlsTimeout": 60000,
"useTls": true
}
}
},
{
"@type": "reconcile",
"object": "MtaRoute",
"matchOn": [
"name"
],
"value": {
"local": {
"@type": "Local",
"name": "local",
"description": "Hosted delivery"
},
"oci": {
"@type": "Relay",
"name": "oci-email-delivery",
"description": "External delivery through OCI",
"host": {
"$secretFile": "relay_endpoint"
},
"port": 587,
"protocol": "smtp",
"implicitTls": false,
"allowInvalidCerts": false,
"authUsername": {
"$secretFile": "relay_username"
},
"authSecret": {
"@type": "EnvironmentVariable",
"variableName": "STALWART_RELAY_PASSWORD"
}
}
}
},
{
"@type": "reconcile",
"object": "MtaTlsStrategy",
"matchOn": [
"name"
],
"value": {
"oci-required": {
"name": "oci-required",
"description": "Authenticated OCI relay transport",
"allowInvalidCerts": false,
"dane": "disable",
"mtaSts": "disable",
"startTls": "require",
"mtaStsTimeout": 300000,
"tlsTimeout": 60000
}
}
},
{
"@type": "reconcile",
"object": "MtaVirtualQueue",
"matchOn": [
"name"
],
"value": {
"queue-local": {
"name": "local",
"description": "Local delivery queue",
"threadsPerNode": 25
},
"queue-remote": {
"name": "remote",
"description": "Remote delivery queue",
"threadsPerNode": 50
},
"queue-dsn": {
"name": "dsn",
"description": "Delivery Status Notification delivery queue",
"threadsPerNode": 5
},
"queue-report": {
"name": "report",
"description": "DMARC and TLS report delivery queue",
"threadsPerNode": 5
}
}
},
{
"@type": "reconcile",
"object": "MtaDeliverySchedule",
"matchOn": [
"name"
],
"value": {
"schedule-local": {
"name": "local",
"description": "Local delivery schedule",
"expiry": {
"@type": "Ttl",
"expire": 259200000
},
"notify": {
"@type": "Default"
},
"queueId": "#queue-local",
"retry": {
"@type": "Default"
}
},
"schedule-remote": {
"name": "remote",
"description": "Remote delivery schedule",
"expiry": {
"@type": "Ttl",
"expire": 259200000
},
"notify": {
"@type": "Default"
},
"queueId": "#queue-remote",
"retry": {
"@type": "Default"
}
},
"schedule-dsn": {
"name": "dsn",
"description": "Delivery Status Notification delivery schedule",
"expiry": {
"@type": "Attempts",
"maxAttempts": 10
},
"notify": {
"@type": "Default"
},
"queueId": "#queue-dsn",
"retry": {
"@type": "Custom",
"intervals": {
"0": {
"duration": 900000
},
"1": {
"duration": 1800000
},
"2": {
"duration": 3600000
},
"3": {
"duration": 7200000
}
}
}
},
"schedule-report": {
"name": "report",
"description": "DMARC and TLS report delivery schedule",
"expiry": {
"@type": "Attempts",
"maxAttempts": 8
},
"notify": {
"@type": "Default"
},
"queueId": "#queue-report",
"retry": {
"@type": "Custom",
"intervals": {
"0": {
"duration": 1800000
},
"1": {
"duration": 3600000
},
"2": {
"duration": 7200000
}
}
}
}
}
},
{
"@type": "update",
"object": "Coordinator",
"value": {
"@type": "Default"
}
},
{
"@type": "update",
"object": "Email",
"value": {
"compressionAlgorithm": "lz4",
"defaultFolders": {},
"encryptAtRest": true,
"encryptOnAppend": true,
"maxAttachmentSize": 50000000,
"maxIdentities": 20,
"maxMailboxDepth": 10,
"maxMailboxNameLength": 255,
"maxMailboxes": 250,
"maxMaskedAddresses": 5,
"maxMessageSize": 75000000,
"maxMessages": null,
"maxPublicKeys": 5,
"maxSubmissions": 500
}
},
{
"@type": "update",
"object": "Http",
"value": {
"allowedEndpoints": {
"match": {
"0": {
"if": "listener == \"user-http\" && starts_with(path, \"/api\") && path != \"/api/schema\" && !starts_with(path, \"/api/schema/\") && path != \"/api/account\" && !starts_with(path, \"/api/discover/\")",
"then": "403"
}
},
"else": "200"
},
"enableHsts": false,
"rateLimitAnonymous": {
"count": 100,
"period": 60000
},
"rateLimitAuthenticated": {
"count": 1000,
"period": 60000
},
"responseHeaders": {},
"usePermissiveCors": false,
"clientIpSource": "xForwardedFor"
}
},
{
"@type": "update",
"object": "SystemSettings",
"value": {
"defaultDomainId": "#domain",
"defaultHostname": "mail.quorate.dev",
"mailExchangers": {
"0": {
"hostname": "mail.quorate.dev",
"priority": 10
}
},
"maxConnections": 128,
"providerInfo": {},
"proxyTrustedNetworks": {},
"services": {
"imap": {
"cleartext": false,
"hostname": "mail.quorate.dev"
},
"jmap": {
"cleartext": false,
"hostname": "mail.quorate.dev"
},
"smtp": {
"cleartext": false,
"hostname": "mail.quorate.dev"
}
}
}
},
{
"@type": "update",
"object": "MtaOutboundStrategy",
"value": {
"route": {
"match": {
"0": {
"if": "is_local_domain(rcpt_domain)",
"then": "'local'"
}
},
"else": "'oci-email-delivery'"
},
"schedule": {
"match": {
"0": {
"if": "is_local_domain(rcpt_domain)",
"then": "'local'"
},
"1": {
"if": "source == 'dsn'",
"then": "'dsn'"
},
"2": {
"if": "source == 'report'",
"then": "'report'"
}
},
"else": "'remote'"
},
"connection": {
"match": {},
"else": "'default'"
},
"tls": {
"match": {},
"else": "'oci-required'"
}
}
},
{
"@type": "reconcile",
"object": "Application",
"matchOn": [
"resourceUrl"
],
"value": {
"bundled-webui": {
"enable": false,
"description": "Built-in WebUI",
"resourceUrl": "https://github.com/stalwartlabs/webui/releases/latest/download/webui.zip",
"urlPrefix": {
"/admin": true
},
"autoUpdateInterval": 7776000000,
"unpackDirectory": null
}
}
},
{
"@type": "upsert",
"object": "Tracer",
"value": {
"stdout": {
"@type": "Stdout",
"buffered": false,
"ansi": false,
"multiline": false,
"enable": true,
"level": "info",
"lossy": false,
"events": {},
"eventsPolicy": "exclude"
}
}
}
]