Dovecot status shows not running on the dashboard in Debian 12

Stegan · December 18, 2025, 10:31am

SYSTEM INFORMATION
OS type and version	Debian Linux 12
Webmin version	2.610
Usermin version	2.510
Virtualmin version	7.50.2 GPL
Theme version	26.20
Nginx version	1.22.1
Package updates	All installed packages are up to date

@Ilia this is also a problem for existing VS?
on a Grade A system

it refuses to restart (even following a reboot) I dare not touch all the other VMs that are now calling for a reboot

Ilia · December 18, 2025, 12:33pm

Hello,

This is a different issue. Start by checking the actual Dovecot status in the “Bootup and Shutdown” module.

Stegan · December 18, 2025, 12:53pm

Ilia · December 18, 2025, 1:30pm

Do you know how to check the service status using the systemctl command?

Stegan · December 21, 2025, 3:17pm

i think so but not sure that gets me anywhere nearer - sorry for the delay in replying but been fighting fires on another VM

Stegan · December 21, 2025, 4:09pm

I have looked into dovecot.conf and frankly it looks a bit of a mess - it has never been edited at this end - I do not understand why the brackets do not match up for each local_name

I have edited it here to keep the domains anonymous:

## Dovecot configuration file

# If you're in a hurry, see http://wiki2.dovecot.org/QuickConfiguration

# "doveconf -n" command gives a clean output of the changed settings. Use it
# instead of copy&pasting files when posting to the Dovecot mailing list.

# '#' character and everything after it is treated as comments. Extra spaces
# and tabs are ignored. If you want to use either of these explicitly, put the
# value inside quotes, eg.: key = "# char and trailing whitespace  "

# Most (but not all) settings can be overridden by different protocols and/or
# source/destination IPs by placing the settings inside sections, for example:
# protocol imap { }, local 127.0.0.1 { }, remote 10.0.0.0/8 { }

# Default values are shown for each setting, it's not required to uncomment
# those. These are exceptions to this though: No sections (e.g. namespace {})
# or plugin settings are added by default, they're listed only as examples.
# Paths are also just examples with the real defaults being based on configure
# options. The paths listed here are for configure --prefix=/usr
# --sysconfdir=/etc --localstatedir=/var

# Enable installed protocols
!include_try /usr/share/dovecot/protocols.d/*.protocol

# A comma separated list of IPs or hosts where to listen in for connections. 
# "*" listens in all IPv4 interfaces, "::" listens in all IPv6 interfaces.
# If you want to specify non-default ports or anything more complex,
# edit conf.d/master.conf.
#listen = *, ::

# Base directory where to store runtime data.
#base_dir = /var/run/dovecot/

# Name of this instance. In multi-instance setup doveadm and other commands
# can use -i <instance_name> to select which instance is used (an alternative
# to -c <config_path>). The instance name is also added to Dovecot processes
# in ps output.
#instance_name = dovecot

# Greeting message for clients.
#login_greeting = Dovecot ready.

# Space separated list of trusted network ranges. Connections from these
# IPs are allowed to override their IP addresses and ports (for logging and
# for authentication checks). disable_plaintext_auth is also ignored for
# these networks. Typically you'd specify your IMAP proxy servers here.
#login_trusted_networks =

# Space separated list of login access check sockets (e.g. tcpwrap)
#login_access_sockets = 

# With proxy_maybe=yes if proxy destination matches any of these IPs, don't do
# proxying. This isn't necessary normally, but may be useful if the destination
# IP is e.g. a load balancer's IP.
#auth_proxy_self =

# Show more verbose process titles (in ps). Currently shows user name and
# IP address. Useful for seeing who are actually using the IMAP processes
# (eg. shared mailboxes or if same uid is used for multiple accounts).
#verbose_proctitle = no

# Should all processes be killed when Dovecot master process shuts down.
# Setting this to "no" means that Dovecot can be upgraded without
# forcing existing client connections to close (although that could also be
# a problem if the upgrade is e.g. because of a security fix).
#shutdown_clients = yes

# If non-zero, run mail commands via this many connections to doveadm server,
# instead of running them directly in the same process.
#doveadm_worker_count = 0
# UNIX socket or host:port used for connecting to doveadm server
#doveadm_socket_path = doveadm-server

# Space separated list of environment variables that are preserved on Dovecot
# startup and passed down to all of its child processes. You can also give
# key=value pairs to always set specific settings.
#import_environment = TZ

##
## Dictionary server settings
##

# Dictionary can be used to store key=value lists. This is used by several
# plugins. The dictionary can be accessed either directly or though a
# dictionary server. The following dict block maps dictionary names to URIs
# when the server is used. These can then be referenced using URIs in format
# "proxy::<name>".

dict {
  #quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext
}

# Most of the actual configuration gets included below. The filenames are
# first sorted by their ASCII value and parsed in that order. The 00-prefixes
# in filenames are intended to make it easier to understand the ordering.
!include conf.d/*.conf

# A config file can also tried to be included without giving an error if
# it's not found:
!include_try local.conf
protocols = imap pop3
local_name domain1.com {
  ssl_cert = </etc/ssl/virtualmin/175794930370928/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/175794930370928/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/175794930370928/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175794930370928/ssl.key
  ssl_key = </etc/ssl/virtualmin/175794930370928/ssl.key
  ssl_cert = </etc/ssl/virtualmin/175794930370928/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175794930370928/ssl.key
}
  ssl_key = </etc/ssl/virtualmin/175794930370928/ssl.key
  ssl_cert = </etc/ssl/virtualmin/175794930370928/ssl.combined
local_name *.domain1.com {
  ssl_key = </etc/ssl/virtualmin/175794930370928/ssl.key
  ssl_cert = </etc/ssl/virtualmin/175794930370928/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175794930370928/ssl.key
}
local_name domain4.me.uk {
  ssl_cert = </etc/ssl/virtualmin/175794966472791/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/175794966472791/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/175794966472791/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175794966472791/ssl.key
  ssl_key = </etc/ssl/virtualmin/175794966472791/ssl.key
  ssl_cert = </etc/ssl/virtualmin/175794966472791/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175794966472791/ssl.key
}
  ssl_key = </etc/ssl/virtualmin/175794966472791/ssl.key
  ssl_cert = </etc/ssl/virtualmin/175794966472791/ssl.combined
local_name *.domain4.me.uk {
  ssl_key = </etc/ssl/virtualmin/175794966472791/ssl.key
  ssl_cert = </etc/ssl/virtualmin/175794966472791/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175794966472791/ssl.key
}
local_name domain1.cloud {
  ssl_cert = </etc/ssl/virtualmin/175795032175150/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/175795032175150/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/175795032175150/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175795032175150/ssl.key
  ssl_key = </etc/ssl/virtualmin/175795032175150/ssl.key
  ssl_cert = </etc/ssl/virtualmin/175795032175150/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175795032175150/ssl.key
}
  ssl_key = </etc/ssl/virtualmin/175795032175150/ssl.key
  ssl_cert = </etc/ssl/virtualmin/175795032175150/ssl.combined
local_name *.domain1.cloud {
  ssl_key = </etc/ssl/virtualmin/175795032175150/ssl.key
  ssl_cert = </etc/ssl/virtualmin/175795032175150/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175795032175150/ssl.key
}
local_name domain1.zip {
  ssl_cert = </etc/ssl/virtualmin/175795032175150/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/175795032175150/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175795032175150/ssl.key
  ssl_key = </etc/ssl/virtualmin/175795032175150/ssl.key
}
  ssl_cert = </etc/ssl/virtualmin/175795032175150/ssl.combined
local_name *.domain1.zip {
  ssl_key = </etc/ssl/virtualmin/175795032175150/ssl.key
  ssl_cert = </etc/ssl/virtualmin/175795032175150/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175795043476725/ssl.key
}
local_name domain1.net {
  ssl_cert = </etc/ssl/virtualmin/175795054378102/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/175795054378102/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/175795054378102/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175795054378102/ssl.key
  ssl_key = </etc/ssl/virtualmin/175795054378102/ssl.key
  ssl_cert = </etc/ssl/virtualmin/175795054378102/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175795054378102/ssl.key
}
  ssl_key = </etc/ssl/virtualmin/175795054378102/ssl.key
  ssl_cert = </etc/ssl/virtualmin/175795054378102/ssl.combined
local_name *.domain1.net {
  ssl_key = </etc/ssl/virtualmin/175795054378102/ssl.key
  ssl_cert = </etc/ssl/virtualmin/175795054378102/ssl.combined
  ssl_key = </etc/ssl/virtualmin/175795054378102/ssl.key
}
  ssl_key = </etc/ssl/virtualmin/1758095965786769/ssl.key
  ssl_cert = </etc/ssl/virtualmin/1758095965786769/ssl.combined
  ssl_key = </etc/ssl/virtualmin/17583599291038896/ssl.key
  ssl_cert = </etc/ssl/virtualmin/17583599291038896/ssl.combined
local_name domain3.com {
  ssl_cert = </etc/ssl/virtualmin/17583746301134621/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/17583746301134621/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/17583746301134621/ssl.combined
  ssl_key = </etc/ssl/virtualmin/17583746301134621/ssl.key
  ssl_key = </etc/ssl/virtualmin/17583746301134621/ssl.key
  ssl_cert = </etc/ssl/virtualmin/17583746301134621/ssl.combined
  ssl_key = </etc/ssl/virtualmin/17583746301134621/ssl.key
}
  ssl_key = </etc/ssl/virtualmin/17583746301134621/ssl.key
  ssl_cert = </etc/ssl/virtualmin/17583746301134621/ssl.combined
local_name *.domain3.com {
  ssl_key = </etc/ssl/virtualmin/17583746301134621/ssl.key
  ssl_cert = </etc/ssl/virtualmin/17583746301134621/ssl.combined
  ssl_key = </etc/ssl/virtualmin/17583746301134621/ssl.key
}
local_name domain3.net {
  ssl_cert = </etc/ssl/virtualmin/17583746301134621/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/17583746301134621/ssl.combined
  ssl_key = </etc/ssl/virtualmin/17583746301134621/ssl.key
  ssl_key = </etc/ssl/virtualmin/17583746301134621/ssl.key
}
  ssl_cert = </etc/ssl/virtualmin/17583746301134621/ssl.combined
local_name *.domain3.net {
  ssl_key = </etc/ssl/virtualmin/17583746301134621/ssl.key
  ssl_cert = </etc/ssl/virtualmin/17583746301134621/ssl.combined
  ssl_key = </etc/ssl/virtualmin/17583752741140865/ssl.key
}
local_name domain2.com {
  ssl_cert = </etc/ssl/virtualmin/17585415762045681/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/17585415762045681/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/17585415762045681/ssl.combined
  ssl_key = </etc/ssl/virtualmin/17585415762045681/ssl.key
  ssl_key = </etc/ssl/virtualmin/17585415762045681/ssl.key
  ssl_cert = </etc/ssl/virtualmin/17585415762045681/ssl.combined
  ssl_key = </etc/ssl/virtualmin/17585415762045681/ssl.key
}
  ssl_key = </etc/ssl/virtualmin/17585415762045681/ssl.key
  ssl_cert = </etc/ssl/virtualmin/17585415762045681/ssl.combined
local_name *.domain2.com {
  ssl_key = </etc/ssl/virtualmin/17585415762045681/ssl.key
  ssl_cert = </etc/ssl/virtualmin/17585415762045681/ssl.combined
  ssl_key = </etc/ssl/virtualmin/17585415762045681/ssl.key
}
local_name domain2.net {
  ssl_cert = </etc/ssl/virtualmin/17585418882048893/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/17585418882048893/ssl.combined
  ssl_cert = </etc/ssl/virtualmin/17585418882048893/ssl.combined
  ssl_key = </etc/ssl/virtualmin/17585418882048893/ssl.key
  ssl_key = </etc/ssl/virtualmin/17585418882048893/ssl.key
  ssl_cert = </etc/ssl/virtualmin/17585418882048893/ssl.combined
  ssl_key = </etc/ssl/virtualmin/17585418882048893/ssl.key
}
  ssl_key = </etc/ssl/virtualmin/17585418882048893/ssl.key
  ssl_cert = </etc/ssl/virtualmin/17585418882048893/ssl.combined
local_name *.domain2.net {
  ssl_key = </etc/ssl/virtualmin/17585418882048893/ssl.key
  ssl_cert = </etc/ssl/virtualmin/17585418882048893/ssl.combined
  ssl_key = </etc/ssl/virtualmin/17585418882048893/ssl.key
}
local_name domain1.bond {
  ssl_cert = </etc/ssl/virtualmin/1758095965786769/ssl.combined
  ssl_key = </etc/ssl/virtualmin/1758095965786769/ssl.key
}
local_name *.domain1.bond {
  ssl_cert = </etc/ssl/virtualmin/1758095965786769/ssl.combined
  ssl_key = </etc/ssl/virtualmin/1758095965786769/ssl.key
}

Ilia · December 21, 2025, 8:22pm

Well, this is an old bug that was fixed a while ago. For now, you need to fix the Dovecot config manually.

The issue was fixed, and it won’t happen anymore if you’re using the latest 7.50.2+ version of Virtualmin.

Stegan · December 22, 2025, 9:17am

do not understand why as it is a pretty recent VM (certainly 2025)

I assume that by “manually” you mean for me to edit the dovecot.cnf and place brackets {} around each local_name group, save and restart dovecot.
..
or
..
perhaps an easier way would be to delete the dovecot.cnf restart and then renew each domain’s certificate.
?

Ilia · December 22, 2025, 11:28am

It’s the end of 2025, and this bug was fixed not too long ago.

Don’t delete the whole file, just remove all the local_name configs. Then click the “Copy SSL Certificate to Services” button on the “Manage Virtual Server ⇾ Setup SSL Certificate” page, and it will work—no need to re-request all certs.

Stegan · December 23, 2025, 9:25am

@Ilia thank you
it is all working again now - have a good holiday season

Ilia · December 23, 2025, 9:45am

Glad to hear that! Have a great holidays, too!

system · December 31, 2025, 9:45am

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.