I have just upgraded my Debian Buster (Dovecot 2.3.4, I think it was) to
Bullseye (Dovecot 2.3.13).
The Dovecot server works fine, which of course is the really important
thing.
But I have a cron job that cleans up all old mail from the mailbox that
I use for my mobile phone by running "doveadm expunge" every night.
That worked fine in 2.3.4, but now it fails:
jdmobile@nuser:~$ doveadm expunge mailbox '*' before 25d
doveconf: Fatal: Error in configuration file
/etc/dovecot/conf.d/10-ssl.conf line 23: ssl_cert: Can't open file
/etc/letsencrypt/live/nuser.dybdal.dk/fullchain.pem: Permission denied
Of course, doveadm cannot access the TLS key when running as a normal
user. But why should it try to access that key at all when I have just
asked it to clean up my own files in my own Maildir? Is there a way to
make it not try to access that key and do its job anyway? Or another
way to delete old mail?
(I could give it a "-u jdmobile" option and run it as root - but I
really like to run things like that as a non-privileged user, so I won't
make a stupid mistake that destroys the wrong mailbox.)
Thanks,
Jesper
--
Jesper Dybdal
https://www.dybdal.dk
