anchor.diff:  # System user and group used to access mails. If you use multiple, userdb
   # can override these by returning uid or gid fields. You can use either numbers
   # or names. <doc/wiki/UserIds.txt>
  -#mail_uid =
  -#mail_gid =
  +<%= Dovecot::Conf.attribute(@conf, 'mail_uid') %>
  +<%= Dovecot::Conf.attribute(@conf, 'mail_gid') %>
   
   # Group to enable temporarily for privileged operations. Currently this is
   # used only with INBOX when either its initial creation or dotlocking fails.
   # Typically this is set to "mail" to give access to /var/mail.
  -#mail_privileged_group =
  +<%= Dovecot::Conf.attribute(@conf, 'mail_privileged_group') %>
   
   # Grant access to these supplementary groups for mail processes. Typically
   # these are used to set up access to shared mailboxes. Note that it may be
   # dangerous to set these if users can create symlinks (e.g. if "mail" group is
   # set here, ln -s /var/mail ~/mail/var could allow a user to delete others'
   # mailboxes, or ln -s /secret/shared/box ~/mail/mybox would allow reading it).
  -#mail_access_groups =
  +<%= Dovecot::Conf.attribute(@conf, 'mail_access_groups') %>
   
   # Allow full filesystem access to clients. There's no access checks other than
   # what the operating system does for the active UID/GID. It works with both
   # maildir and mboxes, allowing you to prefix mailboxes names with eg. /path/
   # or ~user/.
  -#mail_full_filesystem_access = no
  +<%= Dovecot::Conf.attribute(@conf, 'mail_full_filesystem_access', false) %>
   
   ##
   ## Mail processes
  
positive.code: #
  # <doc/wiki/MailLocation.txt>
  #
  #mail_location = 
  
  # If you need to set multiple mailbox locations or want to change default
  # namespace settings, you can do it by defining namespace sections.
  
negative.code: 
  # Don't use mmap() at all. This is required if you store indexes to shared
  # filesystems (NFS or clustered filesystem).
  <%= Dovecot::Conf.attribute(@conf, 'mmap_disable', false) %>
  
  # Rely on O_EXCL to work when creating dotlock files. NFS supports O_EXCL
  # since version 3, so this should be safe to use nowadays by default.
  <%= Dovecot::Conf.attribute(@conf, 'dotlock_use_excl', true) %>
  
  # When to use fsync() or fdatasync() calls:
  #   optimized (default): Whenever necessary to avoid losing important data
  #   always: Useful with e.g. NFS when write()s are delayed
  #   never: Never use it (best performance, but crashes can lose data)
  <%= Dovecot::Conf.attribute(@conf, 'mail_fsync', 'optimized') %>
  
  # Mail storage exists in NFS. Set this to yes to make Dovecot flush NFS caches
  # whenever needed. If you're using only a single mail server this isn't needed.
  <%= Dovecot::Conf.attribute(@conf, 'mail_nfs_storage', false) %>
  # Mail index files also exist in NFS. Setting this to yes requires
  # mmap_disable=yes and fsync_disable=no.
  <%= Dovecot::Conf.attribute(@conf, 'mail_nfs_index', false) %>
  
  # Locking method for index files. Alternatives are fcntl, flock and dotlock.
  # Dotlocking uses some tricks which may create more disk I/O than other locking
  # methods. NFS users: flock doesn't work, remember to change mmap_disable.
  <%= Dovecot::Conf.attribute(@conf, 'lock_method', 'fcntl') %>
  
  # Directory in which LDA/LMTP temporarily stores incoming mails >128 kB.
  <%= Dovecot::Conf.attribute(@conf, 'mail_temp_dir', '/tmp') %>
  
  # Valid UID range for users, defaults to 500 and above. This is mostly
  # to make sure that users can't log in as daemons or other system users.
  # Note that denying root logins is hardcoded to dovecot binary and can't
  # be done even if first_valid_uid is set to 0.
  <%= Dovecot::Conf.attribute(@conf, 'first_valid_uid', '500') %>
  <%= Dovecot::Conf.attribute(@conf, 'last_valid_uid', '0') %>
  
  # Valid GID range for users, defaults to non-root/wheel. Users having
  # non-valid GID as primary group ID aren't allowed to log in. If user
  # belongs to supplementary groups with non-valid GIDs, those groups are
  # not set.
  <%= Dovecot::Conf.attribute(@conf, 'first_valid_gid', '1') %>
  <%= Dovecot::Conf.attribute(@conf, 'last_valid_gid', '0') %>
  
  # Maximum allowed length for mail keyword name. It's only forced when trying
  # to create new keywords.
  <%= Dovecot::Conf.attribute(@conf, 'mail_max_keyword_length', '50') %>
  
  # ':' separated list of directories under which chrooting is allowed for mail
  # processes (ie. /var/mail will allow chrooting to /var/mail/foo/bar too).
  