iRedMail   //  Document Index

Fixes you need after upgrading Debian from 12 to 13 (trixie)

Postfix

• Make sure you do not have line check_policy_service inet:127.0.0.1:12340 in /etc/postfix/main.cf, because Dovecot is configured to not offer this service. Restart postfix after removed the line.

Nginx

• Open file /etc/nginx/sites-available/00-default-ssl.conf, remove http2 in listen directivies:

    listen 443 ssl http2;           # Remove `http2`
    listen [::]:443 ssl http2;      # Remove `http2`

• Add new line http2 on; right after last listen directive:

    http2 on;

• Restart nginx service:

systemctl restart nginx

php-fpm

Copy fpm pool config file, then restart php8.4-fpm service:

cp /etc/php/8.2/fpm/pool.d/www.conf /etc/php/8.4/fpm/pool.d/
systemctl restart php8.4-fpm

Dovecot

Debian 13 offers Dovecot 2.4, it's not backward-compatible with Dovecot 2.3. We generate sample Dovecot config files with iRedMail Enterprise Edition ("EE" for short), you just need to replace /etc/dovecot/dovecot.conf by the sample one and update few parameters.

For MariaDB backend

• Replace /etc/dovecot/dovecot.conf by this one.
• Open /etc/dovecot/dovecot.conf, find lines below, replace sample password of vmailadmin user by the real one (you can find it in old config file /etc/dovecot/dovecot-used-quota.conf or other files under /etc/dovecot/):

mysql 127.0.0.1 {
    port = 3306
    dbname = vmail
    user = vmailadmin
    password = AQjaT42HjU3sZfSHSC5h2og5iJEu22aT     # <- Replace this one
}

• Replace ssl cert and key files in parameters ssl_server_cert_file and ssl_server_key_file.
• Replace DH parameters file in parameter ssl_server_dh_file. To generate new parameters file, you can use command openssl dhparam 4096 > /etc/dovecot/dh.pem.

For PostgreSQL backend

• Replace /etc/dovecot/dovecot.conf by this one.
• Open /etc/dovecot/dovecot.conf, find lines below, replace sample password of vmailadmin user by the real one (you can find it in old config file /etc/dovecot/dovecot-used-quota.conf or other files under /etc/dovecot/):

pgsql 127.0.0.1 {
    # Maximum number of parallel connections. Default is 5.
    connection_limit = 20
    host = 127.0.0.1
    parameters {
        port = 5432
        dbname = vmail
        user = vmailadmin
        password = AQjaT42HjU3sZfSHSC5h2og5iJEu22aT     # <- Replace this one
    }
}

• Replace ssl cert and key files in parameters ssl_server_cert_file and ssl_server_key_file.
• Replace DH parameters file in parameter ssl_server_dh_file. To generate new parameters file, you can use command openssl dhparam 4096 > /etc/dovecot/dh.pem.

For OpenLDAP backend

• Replace /etc/dovecot/dovecot.conf by this one.
• Open /etc/dovecot/dovecot.conf, find lines below, replace sample password of iredadmin user by the real one (you can find it in old config file /etc/dovecot/dovecot-used-quota.conf or other files under /etc/dovecot/):

mysql 127.0.0.1 {
    port = 3306
    dbname = iredadmin
    user = iredadmin
    password = BowvEHisnXQtoTEewZ92oh35A4xzq7zb
}

• Replace LDAP related settings, especially ldap_base, ldap_auth_dn, ldap_auth_dn_password:

ldap_uris = ldap://127.0.0.1:389
ldap_version = 3
ldap_debug_level = 0
ldap_deref = never
ldap_base = o=domains,dc=iredmail,dc=org
ldap_scope = subtree
ldap_starttls = no
ldap_auth_dn = cn=vmail,dc=iredmail,dc=org
ldap_auth_dn_password = sxU9ufqDPOSLOo1j7sp2UPvEJif5ULyY

• Replace ssl cert and key files in parameters ssl_server_cert_file and ssl_server_key_file.
• Replace DH parameters file in parameter ssl_server_dh_file. To generate new parameters file, you can use command openssl dhparam 4096 > /etc/dovecot/dh.pem.

Re-upgrade iRedAPD, mlmmjadmin and iRedAdmin(-Pro)

If you already have latest iRedAPD, mlmmjadmin and iRedAdmin(-Pro) running, you still need to re-download them and upgrade after you upgraded Debian OS, because the Python environment changed after OS upgrade.

• Upgrade iRedAPD
• Upgrade mlmmjadmin
• Upgrade iRedAdmin(-Pro)

SOGo Groupware

SOGo team doesn't offer binary packages for Debian 13 (and CentOS Stream 10 too) yet, so if you're running SOGo on Debian 12, please wait for some more time and leave a reply in SOGo bug tracker to let them know you need it.