<#Font> The Cyrus configuration will generate the appropriate Cyrus master configuration files on export, /etc/cyrus.conf and /etc/imapd.conf.
Options contained in this form mostly map 1:1 to the matching settings in the mentioned files.

Note: Beware! You should not consume too much glue prior saving any of the options, it may well break your mail setup!

<#Font> This section is for configuring the SASL subsystem of Cyrus. SASL is primarily used for implementing the authentication of Cyrus users.
Changing options may result in your users not being able to login, you should not experience data loss though.

  allowplaintext       = YES;
  sasl_mech_list       = ( PLAIN );
  sasl_minimum_layer   = 0;
  sasl_maximum_layer   = 256;
  loginrealms          = ();
  sasl_pwcheck_method  = auxprop;
  sasl_auxprop_plugin  = sasldb;
  sasl_auto_transition = NO;
            

<#Font> This section is for configuring the TLS subsystem of Cyrus.

  tls_ca_file          = /var/imap/server.pem;
  tls_ca_path          = /etc/ssl/certs;
  tls_cert_file        = /var/imap/server.pem;
  tls_imap_cert_file   = /etc/ssl/certs/cyrus-imap.pem;
  tls_imap_key_file    = /etc/ssl/private/cyrus-imap.key;
  tls_key_file         = /var/imap/server.pem;
  tls_lmtp_cert_file   = /etc/ssl/certs/cyrus-lmtp.pem;
  tls_lmtp_key_file    = /etc/ssl/private/cyrus-lmtp.key;
  tls_pop3_cert_file   = /etc/ssl/certs/cyrus-pop3.pem;
  tls_pop3_key_file    = /etc/ssl/private/cyrus-pop3.key;
  tls_session_timeout  = 1440;
  tls_sieve_cert_file  = /etc/ssl/certs/cyrus-sieve.pem;
  tls_sieve_key_file   = /etc/ssl/private/cyrus-sieve.key;
  tls_cipher_list      = (
    TLSv1, SSLv3, SSLv2, !NULL, !EXPORT, !DES, !LOW, @STRENGTH
  );
  tls_require_cert       = NO;
  tls_imap_require_cert  = NO;
  tls_pop3_require_cert  = NO;
  tls_lmtp_require_cert  = NO;
  tls_sieve_require_cert = NO;

<#Font> Use this section to configure the location of the Cyrus related Unix command line binaries.
Note: Beware! There should be no reason to tweak those options and it might seriously break your system in case you specify incorrect locations!

  sendmail             = /usr/sbin/sendmail;