From b8d6f65ce3b8d10d346c9265b13ab9a7fd779620 Mon Sep 17 00:00:00 2001
From: Zhang Huangbin <Zhang Huangbin@localhost>
Date: Wed, 14 Jan 2015 17:25:16 +0800
Subject: [PATCH] Finished: integrations/0-sogo-centos-6-mysql.md. Mention
 Fail2ban in faq/file.locations.md.

---
 faq/file.locations.md                 |   6 +
 html/file.locations.html              |   5 +
 html/sogo-centos-6-mysql.html         | 176 ++++++++++++++++++--------
 integrations/0-sogo-centos-6-mysql.md | 170 ++++++++++++++++++-------
 4 files changed, 253 insertions(+), 104 deletions(-)
diff --git a/faq/file.locations.md b/faq/file.locations.md
index 0bd589da..6cbb5156 100644
--- a/faq/file.locations.md
+++ b/faq/file.locations.md
@@ -116,6 +116,12 @@ Additional config files:
 
 Amavisd is configured to log to [Postfix log file](#postfix) by iRedMail.
 
+## Fail2ban
+
+Main config file is `/etc/fail2ban/jail.local`. All custom settings should be
+placed in `jail.local`, and don't touch `jail.conf`, so that upgrading
+Fail2ban binary package won't override your custom settings.
+
 ## Roundcube webmail
 
 Roundcube webmail is installed under below directory by default:
diff --git a/html/file.locations.html b/html/file.locations.html
index 841091f7..4e5d7e95 100644
--- a/html/file.locations.html
+++ b/html/file.locations.html
@@ -31,6 +31,7 @@
 <li><a href="#log-files_2">Log files</a></li>
 </ul>
 </li>
+<li><a href="#fail2ban">Fail2ban</a></li>
 <li><a href="#roundcube-webmail">Roundcube webmail</a></li>
 <li><a href="#iredapd">iRedAPD</a></li>
 <li><a href="#iredadmin">iRedAdmin</a></li>
@@ -158,6 +159,10 @@ on Debian/Ubuntu.</p>
 </ul>
 <h3 id="log-files_2">Log files</h3>
 <p>Amavisd is configured to log to <a href="#postfix">Postfix log file</a> by iRedMail.</p>
+<h2 id="fail2ban">Fail2ban</h2>
+<p>Main config file is <code>/etc/fail2ban/jail.local</code>. All custom settings should be
+placed in <code>jail.local</code>, and don't touch <code>jail.conf</code>, so that upgrading
+Fail2ban binary package won't override your custom settings.</p>
 <h2 id="roundcube-webmail">Roundcube webmail</h2>
 <p>Roundcube webmail is installed under below directory by default:</p>
 <ul>
diff --git a/html/sogo-centos-6-mysql.html b/html/sogo-centos-6-mysql.html
index b528ec67..716f693d 100644
--- a/html/sogo-centos-6-mysql.html
+++ b/html/sogo-centos-6-mysql.html
@@ -1,7 +1,7 @@
 <html>
     <head>
         <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-        <title>SOGo: install SOGo on CentOS 6 with iRedMail (MySQL backend)</title>
+        <title>Install SOGo groupware on CentOS 6 with iRedMail (MySQL backend)</title>
         <link href="./css/markdown.css" rel="stylesheet"></head>
     </head>
     <body>
@@ -10,13 +10,13 @@
         <a href="http://www.iredmail.org" target="_blank">iRedMail web site</a>
     
         // <a href="./index.html">Document Index</a>
-    </div><h1 id="sogo-install-sogo-on-centos-6-with-iredmail-mysql-backend">SOGo: install SOGo on CentOS 6 with iRedMail (MySQL backend)</h1>
+    </div><h1 id="install-sogo-groupware-on-centos-6-with-iredmail-mysql-backend">Install SOGo groupware on CentOS 6 with iRedMail (MySQL backend)</h1>
 <div class="toc">
 <ul>
-<li><a href="#sogo-install-sogo-on-centos-6-with-iredmail-mysql-backend">SOGo: install SOGo on CentOS 6 with iRedMail (MySQL backend)</a><ul>
+<li><a href="#install-sogo-groupware-on-centos-6-with-iredmail-mysql-backend">Install SOGo groupware on CentOS 6 with iRedMail (MySQL backend)</a><ul>
 <li><a href="#requirements">Requirements</a></li>
 <li><a href="#install-sogo">Install SOGo</a></li>
-<li><a href="#create-sql-database-to-store-sogo-data">Create SQL database to store SOGo data</a></li>
+<li><a href="#create-required-sql-database">Create required SQL database</a></li>
 <li><a href="#configure-sogo">Configure SOGo</a></li>
 <li><a href="#enable-activesync-support">Enable ActiveSync support</a><ul>
 <li><a href="#apache-web-server">Apache web server</a></li>
@@ -24,12 +24,8 @@
 </ul>
 </li>
 <li><a href="#start-sogo-and-dependent-services">Start SOGo and dependent services</a></li>
-<li><a href="#access-sogo">Access SOGo</a></li>
-<li><a href="#how-to-configure-client-applications">How to configure client applications</a><ul>
-<li><a href="#apple-devices">Apple Devices</a></li>
-</ul>
-</li>
-<li><a href="#todo">TODO</a></li>
+<li><a href="#access-sogo-from-web-browser">Access SOGo from web browser</a></li>
+<li><a href="#configure-your-mail-clients-or-mobile-devices-to-use-caldavcarddav-services">Configure your mail clients or mobile devices to use CalDav/CardDAV services</a></li>
 <li><a href="#references">References</a></li>
 </ul>
 </li>
@@ -61,10 +57,25 @@ gpgcheck=0
 <ul>
 <li>Install SOGo and dependences:</li>
 </ul>
-<pre><code># yum install sogo sope49-gdl1-mysql sogo-activesync libwbxml
+<pre><code># yum install sogo sope49-gdl1-mysql sogo-activesync sogo-ealarms-notify sogo-tool
 </code></pre>
 
-<h2 id="create-sql-database-to-store-sogo-data">Create SQL database to store SOGo data</h2>
+<ul>
+<li>Append an alias entry in Postfix config file <code>/etc/postfix/aliases</code>, so that
+  notifications of cron jobs will be sent to mail server administrator.</li>
+</ul>
+<pre><code># Part of file: /etc/postfix/aliases
+
+sogo: root
+</code></pre>
+
+<p>Execute command to update alias db:</p>
+<pre><code># postalias /etc/postfix/aliases
+</code></pre>
+
+<h2 id="create-required-sql-database">Create required SQL database</h2>
+<p>SOGo will store some data (e.g. user preferences, sieve rules) in SQL database,
+so we need to create a database for it.</p>
 <pre><code>$ mysql -u root -p
 
 mysql&gt; CREATE DATABASE sogo CHARSET='UTF8';
@@ -72,29 +83,73 @@ mysql&gt; GRANT ALL ON sogo.* TO sogo@localhost IDENTIFIED BY 'password';
 
 mysql&gt; GRANT SELECT ON vmail.mailbox TO sogo@localhost;
 
-mysql&gt; CREATE VIEW sogo.users (c_uid, c_name, c_password, c_cn, mail, home) AS SELECT username, username, password, name, username, maildir FROM vmail.mailbox;
+mysql&gt; CREATE VIEW sogo.users (c_uid, c_name, c_password, c_cn, mail, home) AS SELECT username, username, password, name, username, CONCAT(storagebasedirectory, '/', storagenode, '/', maildir) FROM vmail.mailbox WHERE active=1;
 </code></pre>
 
+<p>Note: SOGo will create required SQL tables automatically, we don't need to
+create them manually.</p>
 <h2 id="configure-sogo">Configure SOGo</h2>
-<p>Default SOGo config file is <code>/etc/sogo/sogo.conf</code>:</p>
+<p>Default SOGo config file is <code>/etc/sogo/sogo.conf</code>. We have a sample config file
+for you, just replace MySQL username/password in this file, then it's done.</p>
+<p>With below config file, SOGo will listen on address <code>127.0.0.1</code>, port <code>20000</code>.</p>
 <pre><code>{
+    // Official SOGo documents:
+    //  - http://www.sogo.nu/english/support/documentation.html
+    //  - http://wiki.sogo.nu
+    //
+    // Mailing list:
+    //  - http://www.sogo.nu/english/support/community.html
+
+    // Enable verbose logging. Reference:
+    // http://www.sogo.nu/nc/support/faq/article/how-to-enable-more-verbose-logging-in-sogo.html
+    //ImapDebugEnabled = YES;
+    //LDAPDebugEnabled = YES;
+    //MySQL4DebugEnabled = YES;
+    //PGDebugEnabled = YES;
+
+    // Daemon address and port
     WOPort = 127.0.0.1:20000;
 
-    SOGoProfileURL = &quot;mysql://sogo:password@localhost:3306/sogo/user_profiles&quot;;
-    OCSFolderInfoURL = &quot;mysql://sogo:password@localhost:3306/sogo/folders&quot;;
-    OCSSessionsFolderURL = &quot;mysql://sogo:password@localhost:3306/sogo/sessions&quot;;
+    // PID file
+    //WOPidFile = /var/log/sogo/sogo.log;
+
+    // IMAP connection pool.
+    // Your performance will slightly increase, as you won't open a new
+    // connection for every access to your IMAP server.
+    // But you will get a lot of simultaneous open connections to your IMAP
+    // server, so make sure he can handle them.
+    // For debugging it is reasonable to turn pooling off.
+    //NGImap4DisableIMAP4Pooling = NO;
+
+    SOGoProfileURL = &quot;mysql://sogo:password@127.0.0.1:3306/sogo/sogo_user_profile&quot;;
+    OCSFolderInfoURL = &quot;mysql://sogo:password@127.0.0.1:3306/sogo/sogo_folder_info&quot;;
+    OCSSessionsFolderURL = &quot;mysql://sogo:password@127.0.0.1:3306/sogo/sogo_sessions_folder&quot;;
+
+    // Default language in the web interface
+    SOGoLanguage = English;
+
+    // Specify which module to show after login: Calendar, Mail, Contacts.
+    SOGoLoginModule = Mail;
+
+    // Must login with full email address
+    SOGoForceExternalLoginWithEmail = YES;
+
+    // Allow user to change full name and email address.
+    SOGoMailCustomFromEnabled = YES;
 
     // Enable email-based alarms on events and tasks.
     SOGoEnableEMailAlarms = YES;
-    OCSEMailAlarmsFolderURL = &quot;mysql://sogo:password@localhost:3306/sogo/alarms&quot;;
+    OCSEMailAlarmsFolderURL = &quot;mysql://sogo:password@127.0.0.1:3306/sogo/sogo_alarms_folder&quot;;
 
-    // Use TLS
+    // IMAP server
     //SOGoIMAPServer = &quot;imaps://127.0.0.1:143/?tls=YES&quot;;
     // Local connection is considered as secure by Dovecot.
     SOGoIMAPServer = &quot;imap://127.0.0.1:143/&quot;;
 
+    // SMTP server
     SOGoMailingMechanism = smtp;
     SOGoSMTPServer = 127.0.0.1;
+    //SOGoSMTPAuthenticationType = PLAIN;
 
     // Enable managesieve service
     //
@@ -102,45 +157,50 @@ mysql&gt; CREATE VIEW sogo.users (c_uid, c_name, c_password, c_cn, mail, home) A
     //          webmail, don't use sieve service in both webmails, otherwise
     //          it will be messy.
     //
-    //SOGoSieveServer = sieve://PH_MANAGESIEVE_BIND_HOST:PH_MANAGESIEVE_PORT;
+    //SOGoSieveServer = sieve://127.0.0.1:4190;
     //SOGoSieveScriptsEnabled = YES;
     //SOGoVacationEnabled = YES;
     //SOGoForwardEnabled = YES;
 
+    // Memcached
     SOGoMemcachedHost = 127.0.0.1;
 
-    SOGoTimeZone = &quot;Europe/Berlin&quot;;
+    SOGoTimeZone = &quot;America/New_York&quot;;
+
     SOGoFirstDayOfWeek = 1;
-    SOGoMailMessageCheck = every_5_minutes;
-    SOGoForceExternalLoginWithEmail = YES;
+
+    SOGoRefreshViewCheck = every_5_minutes;
+    SOGoMailReplyPlacement = below;
+
     SOGoAppointmentSendEMailNotifications = YES;
     SOGoFoldersSendEMailNotifications = YES;
     SOGoACLsSendEMailNotifications = YES;
 
+    // PostgreSQL cannot update view
     SOGoPasswordChangeEnabled = YES;
 
-    // User authentication
-    SOGoUserSources =
-    (
+    // Authentication using SQL
+    SOGoUserSources = (
         {
             type = sql;
-            id = directory;
+            id = vmail_mailbox;
             viewURL = &quot;mysql://sogo:password@127.0.0.1:3306/sogo/users&quot;;
-
             canAuthenticate = YES;
-            userPasswordAlgorithm = md5;
+
+            // Default algorithm used when changing passwords.
+            userPasswordAlgorithm = ssha;
             prependPasswordScheme = YES;
 
-            // SOGo can use SQL database as address book, but it's able to
-            // query ALL mail accounts. Enable it on your own.
-            isAddressBook = NO;
+            // Use vmail.mailbox as global address book.
+            // WARNING: This will search all user accounts, not just accounts
+            // under same domain as login user.
+            //isAddressBook = YES;
+            //displayName = &quot;Global Address Book&quot;;
         }
     );
 }
 </code></pre>
 
-<p><strong>NOTE</strong>: SOGo will create required SQL tables automatically (<code>user_profiles</code>,
-<code>folder</code>, <code>sessions</code>, ...),  we don't need to create them manually.</p>
 <h2 id="enable-activesync-support">Enable ActiveSync support</h2>
 <h3 id="apache-web-server">Apache web server</h3>
 <p>SOGo installs config file <code>/etc/httpd/conf.d/SOGo.conf</code> by default, please
@@ -157,16 +217,24 @@ open it and find below lines:</p>
 </code></pre>
 
 <h3 id="nginx-web-server">Nginx web server</h3>
-<p>If you're running Nginx web server, please open file
-<code>/etc/nginx/conf.d/default.conf</code>, add some lines in <code>server {}</code> block which
-is configured for HTTPS:</p>
+<p>If you're running Nginx web server configured by iRedMail, please open file
+<code>/etc/nginx/conf.d/default.conf</code>, add some lines in <code>server {}</code> configured for
+HTTPS:</p>
 <pre><code>server {
     listen 443;
     ...
 
     # Add below lines for SOGo
-
     # SOGo
+    location ~ ^/sogo { rewrite ^ https://$host/SOGo; }
+    location ~ ^/SOGO { rewrite ^ https://$host/SOGo; }
+
+    # For IOS 7
+    location = /principals/ {
+        rewrite ^ https://$server_name/SOGo/dav;
+        allow all;
+    }
+
     location ^~ /SOGo {
         proxy_pass http://127.0.0.1:20000;
         #proxy_redirect http://127.0.0.1:20000/SOGo/ /SOGo;
@@ -191,37 +259,35 @@ is configured for HTTPS:</p>
     }
 
     location /SOGo.woa/WebServerResources/ {
-        alias /usr/lib/GNUstep/SOGo/WebServerResources/;
+        alias /usr/lib64/GNUstep/SOGo/WebServerResources/;
     }
     location /SOGo/WebServerResources/ {
-        alias /usr/lib/GNUstep/SOGo/WebServerResources/;
+        alias /usr/lib64/GNUstep/SOGo/WebServerResources/;
     }
     location ^/SOGo/so/ControlPanel/Products/([^/]*)/Resources/(.*)$ {
-        alias /usr/lib/GNUstep/SOGo/$1.SOGo/Resources/$2;
+        alias /usr/lib64/GNUstep/SOGo/$1.SOGo/Resources/$2;
     }
 }
 </code></pre>
 
-<p><strong>Important note</strong>: You should replace directory <code>/usr/lib/GNUstep/SOGo</code> the
+<p><strong>Important note</strong>: You must replace path <code>/usr/lib/GNUstep/SOGo</code> with
 the real directory which contains SOGo files:</p>
 <ul>
-<li>on RHEL/CentOS: it's <code>/usr/lib/GNUstep/SOGo</code> on x86 platform,
-  <code>/usr/lib64/GNUstep/SOGo</code> on x86_64 platform.</li>
-<li>on Debian/Ubuntu, it's <code>/usr/lib/GNUstep/SOGo</code>.</li>
-<li>on OpenBSD, it's `/</li>
+<li>on i386 platform, it's <code>/usr/lib/GNUstep/SOGo</code>.</li>
+<li>on x86_64, it's <code>/usr/lib64/GNUstep/SOGo</code>.</li>
 </ul>
 <h2 id="start-sogo-and-dependent-services">Start SOGo and dependent services</h2>
-<pre><code>service sogod start
-service httpd restart
-service memcached start
+<pre><code># service sogod restart
+# service httpd restart     # &lt;- restart 'nginx' service if you're running Nginx
+# service memcached restart
 </code></pre>
 
-<h2 id="access-sogo">Access SOGo</h2>
-<p>Open your favourite web browser, access URL: <code>https://[your_server]/SOGo</code>.</p>
-<h2 id="how-to-configure-client-applications">How to configure client applications</h2>
-<h3 id="apple-devices">Apple Devices</h3>
-<p>URL for calendar service: <code>http://[host]/SOGo/dav/[full email address]/</code></p>
-<h2 id="todo">TODO</h2>
+<h2 id="access-sogo-from-web-browser">Access SOGo from web browser</h2>
+<p>Open your favourite web browser, access URL: <code>https://[your_server]/SOGo</code> (the
+word <code>SOGo</code> is case-sensitive), you can login with your email account credential.</p>
+<h2 id="configure-your-mail-clients-or-mobile-devices-to-use-caldavcarddav-services">Configure your mail clients or mobile devices to use CalDav/CardDAV services</h2>
+<p>Please check our documents <a href="./index.html#configure-mail-client-applications">here</a>
+to configure your mail clients or mobile devices.</p>
 <h2 id="references">References</h2><p style="text-align: center; color: grey;">Document published under a <a href="http://creativecommons.org/licenses/by-nd/3.0/us/" target="_blank">CC BY-ND 3.0</a> license. If you found something wrong, please do <a href="http://www.iredmail.org/contact.html">contact us</a> to fix it.<!-- Google Analytics -->
 <script type="text/javascript">
     var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
diff --git a/integrations/0-sogo-centos-6-mysql.md b/integrations/0-sogo-centos-6-mysql.md
index 1364ba4c..69bc168c 100644
--- a/integrations/0-sogo-centos-6-mysql.md
+++ b/integrations/0-sogo-centos-6-mysql.md
@@ -1,4 +1,4 @@
-# SOGo: install SOGo on CentOS 6 with iRedMail (MySQL backend)
+# Install SOGo groupware on CentOS 6 with iRedMail (MySQL backend)
 
 [TOC]
 
@@ -29,10 +29,28 @@ gpgcheck=0
 * Install SOGo and dependences:
 
 ```
-# yum install sogo sope49-gdl1-mysql sogo-activesync libwbxml
+# yum install sogo sope49-gdl1-mysql sogo-activesync sogo-ealarms-notify sogo-tool
 ```
 
-## Create SQL database to store SOGo data
+* Append an alias entry in Postfix config file `/etc/postfix/aliases`, so that
+  notifications of cron jobs will be sent to mail server administrator.
+
+```
+# Part of file: /etc/postfix/aliases
+
+sogo: root
+```
+
+Execute command to update alias db:
+
+```
+# postalias /etc/postfix/aliases
+```
+
+## Create required SQL database
+
+SOGo will store some data (e.g. user preferences, sieve rules) in SQL database,
+so we need to create a database for it.
 
 ```
 $ mysql -u root -p
@@ -42,32 +60,78 @@ mysql> GRANT ALL ON sogo.* TO sogo@localhost IDENTIFIED BY 'password';
 
 mysql> GRANT SELECT ON vmail.mailbox TO sogo@localhost;
 
-mysql> CREATE VIEW sogo.users (c_uid, c_name, c_password, c_cn, mail, home) AS SELECT username, username, password, name, username, maildir FROM vmail.mailbox;
+mysql> CREATE VIEW sogo.users (c_uid, c_name, c_password, c_cn, mail, home) AS SELECT username, username, password, name, username, CONCAT(storagebasedirectory, '/', storagenode, '/', maildir) FROM vmail.mailbox WHERE active=1;
 ```
 
+Note: SOGo will create required SQL tables automatically, we don't need to
+create them manually.
+
 ## Configure SOGo
 
-Default SOGo config file is `/etc/sogo/sogo.conf`:
+Default SOGo config file is `/etc/sogo/sogo.conf`. We have a sample config file
+for you, just replace MySQL username/password in this file, then it's done.
+
+With below config file, SOGo will listen on address `127.0.0.1`, port `20000`.
 
 ```
 {
+    // Official SOGo documents:
+    //  - http://www.sogo.nu/english/support/documentation.html
+    //  - http://wiki.sogo.nu
+    //
+    // Mailing list:
+    //  - http://www.sogo.nu/english/support/community.html
+
+    // Enable verbose logging. Reference:
+    // http://www.sogo.nu/nc/support/faq/article/how-to-enable-more-verbose-logging-in-sogo.html
+    //ImapDebugEnabled = YES;
+    //LDAPDebugEnabled = YES;
+    //MySQL4DebugEnabled = YES;
+    //PGDebugEnabled = YES;
+
+    // Daemon address and port
     WOPort = 127.0.0.1:20000;
 
-    SOGoProfileURL = "mysql://sogo:password@localhost:3306/sogo/user_profiles";
-    OCSFolderInfoURL = "mysql://sogo:password@localhost:3306/sogo/folders";
-    OCSSessionsFolderURL = "mysql://sogo:password@localhost:3306/sogo/sessions";
+    // PID file
+    //WOPidFile = /var/log/sogo/sogo.log;
+
+    // IMAP connection pool.
+    // Your performance will slightly increase, as you won't open a new
+    // connection for every access to your IMAP server.
+    // But you will get a lot of simultaneous open connections to your IMAP
+    // server, so make sure he can handle them.
+    // For debugging it is reasonable to turn pooling off.
+    //NGImap4DisableIMAP4Pooling = NO;
+
+    SOGoProfileURL = "mysql://sogo:password@127.0.0.1:3306/sogo/sogo_user_profile";
+    OCSFolderInfoURL = "mysql://sogo:password@127.0.0.1:3306/sogo/sogo_folder_info";
+    OCSSessionsFolderURL = "mysql://sogo:password@127.0.0.1:3306/sogo/sogo_sessions_folder";
+
+    // Default language in the web interface
+    SOGoLanguage = English;
+
+    // Specify which module to show after login: Calendar, Mail, Contacts.
+    SOGoLoginModule = Mail;
+
+    // Must login with full email address
+    SOGoForceExternalLoginWithEmail = YES;
+
+    // Allow user to change full name and email address.
+    SOGoMailCustomFromEnabled = YES;
 
     // Enable email-based alarms on events and tasks.
     SOGoEnableEMailAlarms = YES;
-    OCSEMailAlarmsFolderURL = "mysql://sogo:password@localhost:3306/sogo/alarms";
+    OCSEMailAlarmsFolderURL = "mysql://sogo:password@127.0.0.1:3306/sogo/sogo_alarms_folder";
 
-    // Use TLS
+    // IMAP server
     //SOGoIMAPServer = "imaps://127.0.0.1:143/?tls=YES";
     // Local connection is considered as secure by Dovecot.
     SOGoIMAPServer = "imap://127.0.0.1:143/";
 
+    // SMTP server
     SOGoMailingMechanism = smtp;
     SOGoSMTPServer = 127.0.0.1;
+    //SOGoSMTPAuthenticationType = PLAIN;
 
     // Enable managesieve service
     //
@@ -75,46 +139,50 @@ Default SOGo config file is `/etc/sogo/sogo.conf`:
     //          webmail, don't use sieve service in both webmails, otherwise
     //          it will be messy.
     //
-    //SOGoSieveServer = sieve://PH_MANAGESIEVE_BIND_HOST:PH_MANAGESIEVE_PORT;
+    //SOGoSieveServer = sieve://127.0.0.1:4190;
     //SOGoSieveScriptsEnabled = YES;
     //SOGoVacationEnabled = YES;
     //SOGoForwardEnabled = YES;
 
+    // Memcached
     SOGoMemcachedHost = 127.0.0.1;
 
-    SOGoTimeZone = "Europe/Berlin";
+    SOGoTimeZone = "America/New_York";
+
     SOGoFirstDayOfWeek = 1;
-    SOGoMailMessageCheck = every_5_minutes;
-    SOGoForceExternalLoginWithEmail = YES;
+
+    SOGoRefreshViewCheck = every_5_minutes;
+    SOGoMailReplyPlacement = below;
+
     SOGoAppointmentSendEMailNotifications = YES;
     SOGoFoldersSendEMailNotifications = YES;
     SOGoACLsSendEMailNotifications = YES;
 
+    // PostgreSQL cannot update view
     SOGoPasswordChangeEnabled = YES;
 
-    // User authentication
-    SOGoUserSources =
-    (
+    // Authentication using SQL
+    SOGoUserSources = (
         {
             type = sql;
-            id = directory;
+            id = vmail_mailbox;
             viewURL = "mysql://sogo:password@127.0.0.1:3306/sogo/users";
-
             canAuthenticate = YES;
-            userPasswordAlgorithm = md5;
+
+            // Default algorithm used when changing passwords.
+            userPasswordAlgorithm = ssha;
             prependPasswordScheme = YES;
 
-            // SOGo can use SQL database as address book, but it's able to
-            // query ALL mail accounts. Enable it on your own.
-            isAddressBook = NO;
+            // Use vmail.mailbox as global address book.
+            // WARNING: This will search all user accounts, not just accounts
+            // under same domain as login user.
+            //isAddressBook = YES;
+            //displayName = "Global Address Book";
         }
     );
 }
 ```
 
-__NOTE__: SOGo will create required SQL tables automatically (`user_profiles`,
-`folder`, `sessions`, ...),  we don't need to create them manually.
-
 ## Enable ActiveSync support
 
 ### Apache web server
@@ -138,9 +206,9 @@ ProxyPass /Microsoft-Server-ActiveSync \
 
 ### Nginx web server
 
-If you're running Nginx web server, please open file
-`/etc/nginx/conf.d/default.conf`, add some lines in `server {}` block which
-is configured for HTTPS:
+If you're running Nginx web server configured by iRedMail, please open file
+`/etc/nginx/conf.d/default.conf`, add some lines in `server {}` configured for
+HTTPS:
 
 ```
 server {
@@ -148,8 +216,16 @@ server {
     ...
 
     # Add below lines for SOGo
-
     # SOGo
+    location ~ ^/sogo { rewrite ^ https://$host/SOGo; }
+    location ~ ^/SOGO { rewrite ^ https://$host/SOGo; }
+
+    # For IOS 7
+    location = /principals/ {
+        rewrite ^ https://$server_name/SOGo/dav;
+        allow all;
+    }
+
     location ^~ /SOGo {
         proxy_pass http://127.0.0.1:20000;
         #proxy_redirect http://127.0.0.1:20000/SOGo/ /SOGo;
@@ -174,44 +250,40 @@ server {
     }
 
     location /SOGo.woa/WebServerResources/ {
-        alias /usr/lib/GNUstep/SOGo/WebServerResources/;
+        alias /usr/lib64/GNUstep/SOGo/WebServerResources/;
     }
     location /SOGo/WebServerResources/ {
-        alias /usr/lib/GNUstep/SOGo/WebServerResources/;
+        alias /usr/lib64/GNUstep/SOGo/WebServerResources/;
     }
     location ^/SOGo/so/ControlPanel/Products/([^/]*)/Resources/(.*)$ {
-        alias /usr/lib/GNUstep/SOGo/$1.SOGo/Resources/$2;
+        alias /usr/lib64/GNUstep/SOGo/$1.SOGo/Resources/$2;
     }
 }
 ```
 
-__Important note__: You should replace directory `/usr/lib/GNUstep/SOGo` the
+__Important note__: You must replace path `/usr/lib/GNUstep/SOGo` with
 the real directory which contains SOGo files:
 
-* on RHEL/CentOS: it's `/usr/lib/GNUstep/SOGo` on x86 platform,
-  `/usr/lib64/GNUstep/SOGo` on x86_64 platform.
-* on Debian/Ubuntu, it's `/usr/lib/GNUstep/SOGo`.
-* on OpenBSD, it's `/
+* on i386 platform, it's `/usr/lib/GNUstep/SOGo`.
+* on x86_64, it's `/usr/lib64/GNUstep/SOGo`.
 
 ## Start SOGo and dependent services
 
 ```
-service sogod start
-service httpd restart
-service memcached start
+# service sogod restart
+# service httpd restart     # <- restart 'nginx' service if you're running Nginx
+# service memcached restart
 ```
 
-## Access SOGo
+## Access SOGo from web browser
 
-Open your favourite web browser, access URL: `https://[your_server]/SOGo`.
+Open your favourite web browser, access URL: `https://[your_server]/SOGo` (the
+word `SOGo` is case-sensitive), you can login with your email account credential.
 
-## How to configure client applications
+## Configure your mail clients or mobile devices to use CalDav/CardDAV services
 
-### Apple Devices
-
-URL for calendar service: `http://[host]/SOGo/dav/[full email address]/`
-
-## TODO
+Please check our documents [here](./index.html#configure-mail-client-applications)
+to configure your mail clients or mobile devices.
 
 ## References
 
