No OneTemporary
Actions

Size

29 KB

Referenced Files

None

订阅者

None

View Options

	diff --git a/data/Dockerfiles/postfix/postfix.sh b/data/Dockerfiles/postfix/postfix.sh
	index d89d1150..99be3666 100755
	--- a/data/Dockerfiles/postfix/postfix.sh
	+++ b/data/Dockerfiles/postfix/postfix.sh
	@@ -1,364 +1,364 @@
	#!/bin/bash

	trap "postfix stop" EXIT

	[[ ! -d /opt/postfix/conf/sql/ ]] && mkdir -p /opt/postfix/conf/sql/

	# Wait for MySQL to warm-up
	while ! mysqladmin status --socket=/var/run/mysqld/mysqld.sock -u${DBUSER} -p${DBPASS} --silent; do
	echo "Waiting for database to come up..."
	sleep 2
	done

	while ! dig dns9.quad9.net @unbound +short >/dev/null; do
	echo "Waiting for DNS..."
	sleep 2
	done

	cat <<EOF > /etc/aliases
	# Autogenerated by mailcow
	null: /dev/null
	watchdog: /dev/null
	ham: "\|/usr/local/bin/rspamd-pipe-ham"
	spam: "\|/usr/local/bin/rspamd-pipe-spam"
	EOF
	newaliases;

	# create sni configuration
	echo -n "" > /opt/postfix/conf/sni.map;
	for cert_dir in /etc/ssl/mail/*/ ; do
	if [[ ! -f ${cert_dir}domains ]] \|\| [[ ! -f ${cert_dir}cert.pem ]] \|\| [[ ! -f ${cert_dir}key.pem ]]; then
	continue;
	fi
	IFS=" " read -r -a domains <<< "$(cat "${cert_dir}domains")"
	for domain in "${domains[@]}"; do
	echo -n "${domain} ${cert_dir}key.pem ${cert_dir}cert.pem" >> /opt/postfix/conf/sni.map;
	echo "" >> /opt/postfix/conf/sni.map;
	done
	done
	postmap -F hash:/opt/postfix/conf/sni.map;

	cat <<EOF > /opt/postfix/conf/sql/mysql_relay_ne.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT IF(EXISTS(SELECT address, domain FROM alias
	WHERE address = '%s'
	AND domain IN (
	SELECT domain FROM domain
	WHERE backupmx = '1'
	AND relay_all_recipients = '1'
	AND relay_unknown_only = '1')

	), 'lmtp:inet:dovecot:24', NULL) AS 'transport'
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_relay_recipient_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT DISTINCT
	CASE WHEN '%d' IN (
	SELECT domain FROM domain
	WHERE relay_all_recipients=1
	AND domain='%d'
	AND backupmx=1
	)
	THEN '%s' ELSE (
	SELECT goto FROM alias WHERE address='%s' AND active='1'
	)
	END AS result;
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_tls_policy_override_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT CONCAT(policy, ' ', parameters) AS tls_policy FROM tls_policy_override WHERE active = '1' AND dest = '%s'
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_tls_enforce_in_policy.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT IF(EXISTS(
	SELECT 'TLS_ACTIVE' FROM alias
	LEFT OUTER JOIN mailbox ON mailbox.username = alias.goto
	WHERE (address='%s'
	OR address IN (
	SELECT CONCAT('%u', '@', target_domain) FROM alias_domain
	WHERE alias_domain='%d'
	)
	) AND json_extract(attributes, '$.tls_enforce_in') LIKE '%%1%%' AND mailbox.active = '1'
	), 'reject_plaintext_session', NULL) AS 'tls_enforce_in';
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_sender_dependent_default_transport_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT GROUP_CONCAT(transport SEPARATOR '') AS transport_maps
	FROM (
	SELECT IF(EXISTS(SELECT 'smtp_type' FROM alias
	LEFT OUTER JOIN mailbox ON mailbox.username = alias.goto
	WHERE (address = '%s'
	OR address IN (
	SELECT CONCAT('%u', '@', target_domain) FROM alias_domain
	WHERE alias_domain = '%d'
	)
	)
	AND json_extract(attributes, '$.tls_enforce_out') LIKE '%%1%%'
	AND mailbox.active = '1'
	), 'smtp_enforced_tls:', 'smtp:') AS 'transport'
	UNION ALL
	SELECT hostname AS transport FROM relayhosts
	LEFT OUTER JOIN domain ON domain.relayhost = relayhosts.id
	WHERE relayhosts.active = '1'
	AND domain = '%d'
	OR domain IN (
	SELECT target_domain FROM alias_domain
	WHERE alias_domain = '%d'
	)
	)
	AS transport_view;
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_transport_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT CONCAT('smtp_via_transport_maps:', nexthop) AS transport FROM transports
	WHERE active = '1'
	AND destination = '%s';
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_resource_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT 'null@localhost' FROM mailbox
	WHERE kind REGEXP 'location\|thing\|group' AND username = '%s';
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_sasl_passwd_maps_sender_dependent.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT CONCAT_WS(':', username, password) AS auth_data FROM relayhosts
	WHERE id IN (
	SELECT relayhost FROM domain
	WHERE CONCAT('@', domain) = '%s'
	OR domain IN (
	SELECT target_domain FROM alias_domain WHERE CONCAT('@', alias_domain) = '%s'
	)
	)
	AND active = '1'
	AND username != '';
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_sasl_passwd_maps_transport_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT CONCAT_WS(':', username, password) AS auth_data FROM transports
	WHERE nexthop = '%s'
	AND active = '1'
	AND username != ''
	LIMIT 1;
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_alias_domain_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT username FROM mailbox, alias_domain
	WHERE alias_domain.alias_domain = '%d'
	AND mailbox.username = CONCAT('%u', '@', alias_domain.target_domain)
	- AND mailbox.active = '1'
	+ AND (mailbox.active = '1' OR mailbox.active = '2')
	AND alias_domain.active='1'
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_alias_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT goto FROM alias
	WHERE address='%s'
	AND active='1';
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_recipient_bcc_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT bcc_dest FROM bcc_maps
	WHERE local_dest='%s'
	AND type='rcpt'
	AND active='1';
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_sender_bcc_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT bcc_dest FROM bcc_maps
	WHERE local_dest='%s'
	AND type='sender'
	AND active='1';
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_recipient_canonical_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT new_dest FROM recipient_maps
	WHERE old_dest='%s'
	AND active='1';
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_domains_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT alias_domain from alias_domain WHERE alias_domain='%s' AND active='1'
	UNION
	SELECT domain FROM domain
	WHERE domain='%s'
	AND active = '1'
	AND backupmx = '0'
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_mailbox_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	-query = SELECT CONCAT(JSON_UNQUOTE(JSON_EXTRACT(attributes, '$.mailbox_format')), mailbox_path_prefix, '%d/%u/') FROM mailbox WHERE username='%s' AND active = '1'
	+query = SELECT CONCAT(JSON_UNQUOTE(JSON_EXTRACT(attributes, '$.mailbox_format')), mailbox_path_prefix, '%d/%u/') FROM mailbox WHERE username='%s' AND (active = '1' OR active = '2')
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_relay_domain_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT domain FROM domain WHERE domain='%s' AND backupmx = '1' AND active = '1'
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_sender_acl.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	# First select queries domain and alias_domain to determine if domains are active.
	query = SELECT goto FROM alias
	WHERE address='%s'
	AND active='1'
	AND (domain IN
	(SELECT domain FROM domain
	WHERE domain='%d'
	AND active='1')
	OR domain in (
	SELECT alias_domain FROM alias_domain
	WHERE alias_domain='%d'
	AND active='1'
	)
	)
	UNION
	SELECT logged_in_as FROM sender_acl
	WHERE send_as='@%d'
	OR send_as='%s'
	OR send_as='*'
	OR send_as IN (
	SELECT CONCAT('@',target_domain) FROM alias_domain
	WHERE alias_domain = '%d')
	OR send_as IN (
	SELECT CONCAT('%u','@',target_domain) FROM alias_domain
	WHERE alias_domain = '%d')
	AND logged_in_as NOT IN (
	SELECT goto FROM alias
	WHERE address='%s')
	UNION
	SELECT username FROM mailbox, alias_domain
	WHERE alias_domain.alias_domain = '%d'
	AND mailbox.username = CONCAT('%u','@',alias_domain.target_domain)
	- AND mailbox.active ='1'
	+ AND (mailbox.active = '1' OR mailbox.active ='2')
	AND alias_domain.active='1'
	EOF

	cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_spamalias_maps.cf
	# Autogenerated by mailcow
	user = ${DBUSER}
	password = ${DBPASS}
	hosts = unix:/var/run/mysqld/mysqld.sock
	dbname = ${DBNAME}
	query = SELECT goto FROM spamalias
	WHERE address='%s'
	AND validity >= UNIX_TIMESTAMP()
	EOF

	sed -i '/User overrides/q' /opt/postfix/conf/main.cf
	echo >> /opt/postfix/conf/main.cf
	if [ -f /opt/postfix/conf/extra.cf ]; then
	cat /opt/postfix/conf/extra.cf >> /opt/postfix/conf/main.cf
	fi

	if [ ! -f /opt/postfix/conf/custom_transport.pcre ]; then
	echo "Creating dummy custom_transport.pcre"
	touch /opt/postfix/conf/custom_transport.pcre
	fi

	if [[ ! -f /opt/postfix/conf/custom_postscreen_whitelist.cidr ]]; then
	echo "Creating dummy custom_postscreen_whitelist.cidr"
	echo '# Autogenerated by mailcow' > /opt/postfix/conf/custom_postscreen_whitelist.cidr
	fi

	# Fix Postfix permissions
	chown -R root:postfix /opt/postfix/conf/sql/ /opt/postfix/conf/custom_transport.pcre
	chmod 640 /opt/postfix/conf/sql/*.cf /opt/postfix/conf/custom_transport.pcre
	chgrp -R postdrop /var/spool/postfix/public
	chgrp -R postdrop /var/spool/postfix/maildrop
	postfix set-permissions

	# Check Postfix configuration
	postconf -c /opt/postfix/conf > /dev/null

	if [[ $? != 0 ]]; then
	echo "Postfix configuration error, refusing to start."
	exit 1
	else
	postfix -c /opt/postfix/conf start
	sleep 126144000
	fi
	diff --git a/docker-compose.yml b/docker-compose.yml
	index 144a4014..696fff5e 100644
	--- a/docker-compose.yml
	+++ b/docker-compose.yml
	@@ -1,558 +1,558 @@
	version: '2.1'
	services:

	unbound-mailcow:
	image: mailcow/unbound:1.10
	environment:
	- TZ=${TZ}
	volumes:
	- ./data/hooks/unbound:/hooks
	- ./data/conf/unbound/unbound.conf:/etc/unbound/unbound.conf:ro
	restart: always
	tty: true
	networks:
	mailcow-network:
	ipv4_address: ${IPV4_NETWORK:-172.22.1}.254
	aliases:
	- unbound

	mysql-mailcow:
	image: mariadb:10.3
	depends_on:
	- unbound-mailcow
	stop_grace_period: 45s
	volumes:
	- mysql-vol-1:/var/lib/mysql/
	- mysql-socket-vol-1:/var/run/mysqld/
	- ./data/conf/mysql/:/etc/mysql/conf.d/:ro
	environment:
	- TZ=${TZ}
	- MYSQL_ROOT_PASSWORD=${DBROOT}
	- MYSQL_DATABASE=${DBNAME}
	- MYSQL_USER=${DBUSER}
	- MYSQL_PASSWORD=${DBPASS}
	- MYSQL_INITDB_SKIP_TZINFO=1
	restart: always
	ports:
	- "${SQL_PORT:-127.0.0.1:13306}:3306"
	networks:
	mailcow-network:
	aliases:
	- mysql

	redis-mailcow:
	image: redis:5-alpine
	volumes:
	- redis-vol-1:/data/
	restart: always
	ports:
	- "${REDIS_PORT:-127.0.0.1:7654}:6379"
	environment:
	- TZ=${TZ}
	networks:
	mailcow-network:
	ipv4_address: ${IPV4_NETWORK:-172.22.1}.249
	aliases:
	- redis

	clamd-mailcow:
	image: mailcow/clamd:1.35
	restart: always
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	environment:
	- TZ=${TZ}
	- SKIP_CLAMD=${SKIP_CLAMD:-n}
	volumes:
	- ./data/conf/clamav/:/etc/clamav/
	networks:
	mailcow-network:
	aliases:
	- clamd

	rspamd-mailcow:
	image: mailcow/rspamd:1.68
	stop_grace_period: 30s
	depends_on:
	- nginx-mailcow
	- dovecot-mailcow
	environment:
	- TZ=${TZ}
	- IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
	- IPV6_NETWORK=${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
	- REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
	- REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
	volumes:
	- ./data/hooks/rspamd:/hooks
	- ./data/conf/rspamd/custom/:/etc/rspamd/custom
	- ./data/conf/rspamd/override.d/:/etc/rspamd/override.d
	- ./data/conf/rspamd/local.d/:/etc/rspamd/local.d
	- ./data/conf/rspamd/plugins.d/:/etc/rspamd/plugins.d
	- ./data/conf/rspamd/lua/:/etc/rspamd/lua/:ro
	- ./data/conf/rspamd/rspamd.conf.local:/etc/rspamd/rspamd.conf.local
	- ./data/conf/rspamd/rspamd.conf.override:/etc/rspamd/rspamd.conf.override
	- rspamd-vol-1:/var/lib/rspamd
	restart: always
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	hostname: rspamd
	networks:
	mailcow-network:
	aliases:
	- rspamd

	php-fpm-mailcow:
	image: mailcow/phpfpm:1.60
	command: "php-fpm -d date.timezone=${TZ} -d expose_php=0"
	depends_on:
	- redis-mailcow
	volumes:
	- ./data/hooks/phpfpm:/hooks
	- ./data/web:/web:rw
	- ./data/conf/rspamd/dynmaps:/dynmaps:ro
	- ./data/conf/rspamd/custom/:/rspamd_custom_maps
	- rspamd-vol-1:/var/lib/rspamd
	- mysql-socket-vol-1:/var/run/mysqld/
	- ./data/conf/sogo/:/etc/sogo/
	- ./data/conf/rspamd/meta_exporter:/meta_exporter:ro
	- ./data/conf/phpfpm/sogo-sso/:/etc/sogo-sso/
	- ./data/conf/phpfpm/php-fpm.d/pools.conf:/usr/local/etc/php-fpm.d/z-pools.conf
	- ./data/conf/phpfpm/php-conf.d/opcache-recommended.ini:/usr/local/etc/php/conf.d/opcache-recommended.ini
	- ./data/conf/phpfpm/php-conf.d/upload.ini:/usr/local/etc/php/conf.d/upload.ini
	- ./data/conf/phpfpm/php-conf.d/other.ini:/usr/local/etc/php/conf.d/zzz-other.ini
	- ./data/conf/dovecot/global_sieve_before:/global_sieve/before
	- ./data/conf/dovecot/global_sieve_after:/global_sieve/after
	- ./data/assets/templates:/tpls
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	environment:
	- REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
	- REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
	- LOG_LINES=${LOG_LINES:-9999}
	- TZ=${TZ}
	- DBNAME=${DBNAME}
	- DBUSER=${DBUSER}
	- DBPASS=${DBPASS}
	- MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
	- IMAP_PORT=${IMAP_PORT:-143}
	- IMAPS_PORT=${IMAPS_PORT:-993}
	- POP_PORT=${POP_PORT:-110}
	- POPS_PORT=${POPS_PORT:-995}
	- SIEVE_PORT=${SIEVE_PORT:-4190}
	- SUBMISSION_PORT=${SUBMISSION_PORT:-587}
	- SMTPS_PORT=${SMTPS_PORT:-465}
	- SMTP_PORT=${SMTP_PORT:-25}
	- API_KEY=${API_KEY:-invalid}
	- API_KEY_READ_ONLY=${API_KEY_READ_ONLY:-invalid}
	- API_ALLOW_FROM=${API_ALLOW_FROM:-invalid}
	- COMPOSE_PROJECT_NAME=${COMPOSE_PROJECT_NAME:-mailcow-dockerized}
	- SKIP_SOLR=${SKIP_SOLR:-y}
	- SKIP_CLAMD=${SKIP_CLAMD:-n}
	- SKIP_SOGO=${SKIP_SOGO:-n}
	- ALLOW_ADMIN_EMAIL_LOGIN=${ALLOW_ADMIN_EMAIL_LOGIN:-n}
	- MASTER=${MASTER:-y}
	restart: always
	networks:
	mailcow-network:
	aliases:
	- phpfpm

	sogo-mailcow:
	image: mailcow/sogo:1.74
	environment:
	- DBNAME=${DBNAME}
	- DBUSER=${DBUSER}
	- DBPASS=${DBPASS}
	- TZ=${TZ}
	- LOG_LINES=${LOG_LINES:-9999}
	- MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
	- ACL_ANYONE=${ACL_ANYONE:-disallow}
	- ALLOW_ADMIN_EMAIL_LOGIN=${ALLOW_ADMIN_EMAIL_LOGIN:-n}
	- IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
	- SOGO_EXPIRE_SESSION=${SOGO_EXPIRE_SESSION:-480}
	- SKIP_SOGO=${SKIP_SOGO:-n}
	- MASTER=${MASTER:-y}
	- REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
	- REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	volumes:
	- ./data/conf/sogo/:/etc/sogo/
	- ./data/web/inc/init_db.inc.php:/init_db.inc.php
	- ./data/conf/sogo/custom-sogo.js:/usr/lib/GNUstep/SOGo/WebServerResources/js/custom-sogo.js
	- mysql-socket-vol-1:/var/run/mysqld/
	- sogo-web-vol-1:/sogo_web
	- sogo-userdata-backup-vol-1:/sogo_backup
	restart: always
	networks:
	mailcow-network:
	ipv4_address: ${IPV4_NETWORK:-172.22.1}.248
	aliases:
	- sogo

	dovecot-mailcow:
	image: mailcow/dovecot:1.121
	depends_on:
	- mysql-mailcow
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	cap_add:
	- NET_BIND_SERVICE
	volumes:
	- ./data/hooks/dovecot:/hooks
	- ./data/conf/dovecot:/etc/dovecot
	- ./data/assets/ssl:/etc/ssl/mail/:ro
	- ./data/conf/sogo/:/etc/sogo/
	- ./data/conf/phpfpm/sogo-sso/:/etc/phpfpm/
	- vmail-vol-1:/var/vmail
	- vmail-attachments-vol-1:/var/attachments
	- crypt-vol-1:/mail_crypt/
	- ./data/conf/rspamd/custom/:/etc/rspamd/custom
	- ./data/assets/templates:/templates
	- rspamd-vol-1:/var/lib/rspamd
	- mysql-socket-vol-1:/var/run/mysqld/
	environment:
	- LOG_LINES=${LOG_LINES:-9999}
	- DBNAME=${DBNAME}
	- DBUSER=${DBUSER}
	- DBPASS=${DBPASS}
	- TZ=${TZ}
	- MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
	- IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
	- ALLOW_ADMIN_EMAIL_LOGIN=${ALLOW_ADMIN_EMAIL_LOGIN:-n}
	- MAILDIR_GC_TIME=${MAILDIR_GC_TIME:-1440}
	- ACL_ANYONE=${ACL_ANYONE:-disallow}
	- SKIP_SOLR=${SKIP_SOLR:-y}
	- MAILDIR_SUB=${MAILDIR_SUB:-}
	- MASTER=${MASTER:-y}
	- REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
	- REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
	ports:
	- "${DOVEADM_PORT:-127.0.0.1:19991}:12345"
	- "${IMAP_PORT:-143}:143"
	- "${IMAPS_PORT:-993}:993"
	- "${POP_PORT:-110}:110"
	- "${POPS_PORT:-995}:995"
	- "${SIEVE_PORT:-4190}:4190"
	restart: always
	tty: true
	ulimits:
	nproc: 65535
	nofile:
	soft: 20000
	hard: 40000
	hostname: ${MAILCOW_HOSTNAME}
	networks:
	mailcow-network:
	ipv4_address: ${IPV4_NETWORK:-172.22.1}.250
	aliases:
	- dovecot

	postfix-mailcow:
	- image: mailcow/postfix:1.48
	+ image: mailcow/postfix:1.49
	depends_on:
	- mysql-mailcow
	volumes:
	- ./data/hooks/postfix:/hooks
	- ./data/conf/postfix:/opt/postfix/conf
	- ./data/assets/ssl:/etc/ssl/mail/:ro
	- postfix-vol-1:/var/spool/postfix
	- crypt-vol-1:/var/lib/zeyple
	- rspamd-vol-1:/var/lib/rspamd
	- mysql-socket-vol-1:/var/run/mysqld/
	environment:
	- LOG_LINES=${LOG_LINES:-9999}
	- TZ=${TZ}
	- DBNAME=${DBNAME}
	- DBUSER=${DBUSER}
	- DBPASS=${DBPASS}
	- REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
	- REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
	cap_add:
	- NET_BIND_SERVICE
	ports:
	- "${SMTP_PORT:-25}:25"
	- "${SMTPS_PORT:-465}:465"
	- "${SUBMISSION_PORT:-587}:587"
	restart: always
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	hostname: ${MAILCOW_HOSTNAME}
	networks:
	mailcow-network:
	aliases:
	- postfix

	memcached-mailcow:
	image: memcached:alpine
	restart: always
	environment:
	- TZ=${TZ}
	networks:
	mailcow-network:
	aliases:
	- memcached

	nginx-mailcow:
	depends_on:
	- sogo-mailcow
	- php-fpm-mailcow
	- redis-mailcow
	image: nginx:mainline-alpine
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	command: /bin/sh -c "envsubst < /etc/nginx/conf.d/templates/listen_plain.template > /etc/nginx/conf.d/listen_plain.active &&
	envsubst < /etc/nginx/conf.d/templates/listen_ssl.template > /etc/nginx/conf.d/listen_ssl.active &&
	envsubst < /etc/nginx/conf.d/templates/server_name.template > /etc/nginx/conf.d/server_name.active &&
	envsubst < /etc/nginx/conf.d/templates/sogo.template > /etc/nginx/conf.d/sogo.active &&
	envsubst < /etc/nginx/conf.d/templates/sogo_eas.template > /etc/nginx/conf.d/sogo_eas.active &&
	. /etc/nginx/conf.d/templates/sogo.auth_request.template.sh > /etc/nginx/conf.d/sogo_proxy_auth.active &&
	. /etc/nginx/conf.d/templates/sites.template.sh > /etc/nginx/conf.d/sites.active &&
	nginx -qt &&
	until ping phpfpm -c1 > /dev/null; do sleep 1; done &&
	until ping sogo -c1 > /dev/null; do sleep 1; done &&
	until ping redis -c1 > /dev/null; do sleep 1; done &&
	until ping rspamd -c1 > /dev/null; do sleep 1; done &&
	exec nginx -g 'daemon off;'"
	environment:
	- HTTPS_PORT=${HTTPS_PORT:-443}
	- HTTP_PORT=${HTTP_PORT:-80}
	- MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
	- IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
	- TZ=${TZ}
	- ALLOW_ADMIN_EMAIL_LOGIN=${ALLOW_ADMIN_EMAIL_LOGIN:-n}
	volumes:
	- ./data/web:/web:ro
	- ./data/conf/rspamd/dynmaps:/dynmaps:ro
	- ./data/assets/ssl/:/etc/ssl/mail/:ro
	- ./data/conf/nginx/:/etc/nginx/conf.d/:rw
	- ./data/conf/rspamd/meta_exporter:/meta_exporter:ro
	- sogo-web-vol-1:/usr/lib/GNUstep/SOGo/
	ports:
	- "${HTTPS_BIND:-0.0.0.0}:${HTTPS_PORT:-443}:${HTTPS_PORT:-443}"
	- "${HTTP_BIND:-0.0.0.0}:${HTTP_PORT:-80}:${HTTP_PORT:-80}"
	restart: always
	networks:
	mailcow-network:
	aliases:
	- nginx

	acme-mailcow:
	depends_on:
	- nginx-mailcow
	image: mailcow/acme:1.70
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	environment:
	- LOG_LINES=${LOG_LINES:-9999}
	- ADDITIONAL_SAN=${ADDITIONAL_SAN}
	- MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
	- DBNAME=${DBNAME}
	- DBUSER=${DBUSER}
	- DBPASS=${DBPASS}
	- SKIP_LETS_ENCRYPT=${SKIP_LETS_ENCRYPT:-n}
	- ENABLE_SSL_SNI=${ENABLE_SSL_SNI:-n}
	- SKIP_IP_CHECK=${SKIP_IP_CHECK:-n}
	- SKIP_HTTP_VERIFICATION=${SKIP_HTTP_VERIFICATION:-n}
	- ONLY_MAILCOW_HOSTNAME=${ONLY_MAILCOW_HOSTNAME:-n}
	- LE_STAGING=${LE_STAGING:-n}
	- TZ=${TZ}
	- REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
	- REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
	- SNAT_TO_SOURCE=${SNAT_TO_SOURCE:-n}
	- SNAT6_TO_SOURCE=${SNAT6_TO_SOURCE:-n}
	volumes:
	- ./data/web/.well-known/acme-challenge:/var/www/acme:rw
	- ./data/assets/ssl:/var/lib/acme/:rw
	- ./data/assets/ssl-example:/var/lib/ssl-example/:ro
	- mysql-socket-vol-1:/var/run/mysqld/
	restart: always
	networks:
	mailcow-network:
	aliases:
	- acme

	netfilter-mailcow:
	image: mailcow/netfilter:1.34
	stop_grace_period: 30s
	depends_on:
	- dovecot-mailcow
	- postfix-mailcow
	- sogo-mailcow
	- php-fpm-mailcow
	- redis-mailcow
	restart: always
	privileged: true
	environment:
	- TZ=${TZ}
	- IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
	- IPV6_NETWORK=${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
	- SNAT_TO_SOURCE=${SNAT_TO_SOURCE:-n}
	- SNAT6_TO_SOURCE=${SNAT6_TO_SOURCE:-n}
	- REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
	- REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
	network_mode: "host"
	volumes:
	- /lib/modules:/lib/modules:ro

	watchdog-mailcow:
	image: mailcow/watchdog:1.75
	# Debug
	#command: /watchdog.sh
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	volumes:
	- rspamd-vol-1:/var/lib/rspamd
	- mysql-socket-vol-1:/var/run/mysqld/
	- ./data/assets/ssl:/etc/ssl/mail/:ro
	restart: always
	environment:
	- IPV6_NETWORK=${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
	- LOG_LINES=${LOG_LINES:-9999}
	- TZ=${TZ}
	- DBNAME=${DBNAME}
	- DBUSER=${DBUSER}
	- DBPASS=${DBPASS}
	- DBROOT=${DBROOT}
	- USE_WATCHDOG=${USE_WATCHDOG:-n}
	- WATCHDOG_NOTIFY_EMAIL=${WATCHDOG_NOTIFY_EMAIL}
	- WATCHDOG_NOTIFY_BAN=${WATCHDOG_NOTIFY_BAN:-y}
	- WATCHDOG_EXTERNAL_CHECKS=${WATCHDOG_EXTERNAL_CHECKS:-n}
	- WATCHDOG_MYSQL_REPLICATION_CHECKS=${WATCHDOG_MYSQL_REPLICATION_CHECKS:-n}
	- MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
	- IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
	- IP_BY_DOCKER_API=${IP_BY_DOCKER_API:-0}
	- CHECK_UNBOUND=${CHECK_UNBOUND:-1}
	- SKIP_CLAMD=${SKIP_CLAMD:-n}
	- SKIP_LETS_ENCRYPT=${SKIP_LETS_ENCRYPT:-n}
	- SKIP_SOGO=${SKIP_SOGO:-n}
	- HTTPS_PORT=${HTTPS_PORT:-443}
	- REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
	- REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
	- EXTERNAL_CHECKS_THRESHOLD=1
	- NGINX_THRESHOLD=5
	- UNBOUND_THRESHOLD=5
	- REDIS_THRESHOLD=5
	- MYSQL_THRESHOLD=5
	- MYSQL_REPLICATION_THRESHOLD=1
	- SOGO_THRESHOLD=3
	- POSTFIX_THRESHOLD=8
	- CLAMD_THRESHOLD=15
	- DOVECOT_THRESHOLD=12
	- DOVECOT_REPL_THRESHOLD=2
	- PHPFPM_THRESHOLD=5
	- RATELIMIT_THRESHOLD=1
	- FAIL2BAN_THRESHOLD=1
	- ACME_THRESHOLD=1
	- IPV6NAT_THRESHOLD=1
	- RSPAMD_THRESHOLD=5
	- OLEFY_THRESHOLD=5
	networks:
	mailcow-network:
	aliases:
	- watchdog

	dockerapi-mailcow:
	image: mailcow/dockerapi:1.36
	restart: always
	oom_kill_disable: true
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	environment:
	- DBROOT=${DBROOT}
	- TZ=${TZ}
	volumes:
	- /var/run/docker.sock:/var/run/docker.sock:ro
	networks:
	mailcow-network:
	aliases:
	- dockerapi

	solr-mailcow:
	image: mailcow/solr:1.7
	restart: always
	volumes:
	- solr-vol-1:/opt/solr/server/solr/dovecot-fts/data
	ports:
	- "${SOLR_PORT:-127.0.0.1:18983}:8983"
	environment:
	- TZ=${TZ}
	- SOLR_HEAP=${SOLR_HEAP:-1024}
	- SKIP_SOLR=${SKIP_SOLR:-y}
	networks:
	mailcow-network:
	aliases:
	- solr

	olefy-mailcow:
	image: mailcow/olefy:1.2
	restart: always
	environment:
	- TZ=${TZ}
	- OLEFY_BINDADDRESS=0.0.0.0
	- OLEFY_BINDPORT=10055
	- OLEFY_TMPDIR=/tmp
	- OLEFY_PYTHON_PATH=/usr/bin/python3
	- OLEFY_OLEVBA_PATH=/usr/bin/olevba3
	- OLEFY_LOGLVL=20
	- OLEFY_MINLENGTH=500
	- OLEFY_DEL_TMP=1
	networks:
	mailcow-network:
	aliases:
	- olefy

	ipv6nat-mailcow:
	depends_on:
	- unbound-mailcow
	- mysql-mailcow
	- redis-mailcow
	- clamd-mailcow
	- rspamd-mailcow
	- php-fpm-mailcow
	- sogo-mailcow
	- dovecot-mailcow
	- postfix-mailcow
	- memcached-mailcow
	- nginx-mailcow
	- acme-mailcow
	- netfilter-mailcow
	- watchdog-mailcow
	- dockerapi-mailcow
	- solr-mailcow
	environment:
	- TZ=${TZ}
	image: robbertkl/ipv6nat
	restart: always
	privileged: true
	network_mode: "host"
	volumes:
	- /var/run/docker.sock:/var/run/docker.sock:ro
	- /lib/modules:/lib/modules:ro

	networks:
	mailcow-network:
	driver: bridge
	driver_opts:
	com.docker.network.bridge.name: br-mailcow
	enable_ipv6: true
	ipam:
	driver: default
	config:
	- subnet: ${IPV4_NETWORK:-172.22.1}.0/24
	- subnet: ${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}

	volumes:
	# Storage for email files
	vmail-vol-1:
	# Storage for attachments (deduplicated)
	vmail-attachments-vol-1:
	mysql-vol-1:
	mysql-socket-vol-1:
	redis-vol-1:
	rspamd-vol-1:
	solr-vol-1:
	postfix-vol-1:
	crypt-vol-1:
	sogo-web-vol-1:
	sogo-userdata-backup-vol-1:

File Metadata

Mime Type: text/x-diff
Expires: 9月 9 Tue, 5:52 AM (11 h, 3 m)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 5406
默认替代文本: (29 KB)

No OneTemporaryActions

View Options

File Metadata

Event Timeline

No OneTemporary
Actions