No OneTemporary
Actions

Size

29 KB

Referenced Files

None

订阅者

None

View Options

	diff --git a/data/Dockerfiles/clamd/Dockerfile b/data/Dockerfiles/clamd/Dockerfile
	index 86a89df4..eeeb5079 100644
	--- a/data/Dockerfiles/clamd/Dockerfile
	+++ b/data/Dockerfiles/clamd/Dockerfile
	@@ -1,46 +1,47 @@
	FROM alpine:3.6

	LABEL maintainer "André Peters <andre.peters@servercow.de>"

	# Add scripts
	COPY dl_files.sh bootstrap.sh ./

	# Installation
	-ENV CLAMAV 0.99.3
	+ENV CLAMAV 0.100.0

	RUN apk add --no-cache --virtual build-dependencies alpine-sdk ncurses-dev zlib-dev bzip2-dev pcre-dev linux-headers fts-dev libxml2-dev libressl-dev \
	&& apk add --no-cache curl bash tini libxml2 libbz2 pcre fts libressl \
	&& wget -O - https://www.clamav.net/downloads/production/clamav-${CLAMAV}.tar.gz \| tar xfvz - \
	&& cd clamav-${CLAMAV} \
	&& LIBS=-lfts ./configure \
	--prefix=/usr \
	--libdir=/usr/lib \
	--sysconfdir=/etc/clamav \
	--mandir=/usr/share/man \
	--infodir=/usr/share/info \
	--without-iconv \
	--disable-llvm \
	--with-user=clamav \
	--with-group=clamav \
	--with-dbdir=/var/lib/clamav \
	--enable-clamdtop \
	--enable-bigstack \
	--with-pcre \
	&& make -j4 \
	&& make install \
	&& make clean \
	&& cd .. && rm -rf clamav-${CLAMAV} \
	&& apk del build-dependencies \
	&& addgroup -S clamav \
	&& adduser -S -D -h /var/lib/clamav -s /sbin/nologin -G clamav -g clamav clamav \
	+ && adduser clamav tty \
	&& mkdir -p /run/clamav \
	&& chown clamav:clamav /run/clamav \
	- && chmod +x /dl_files.sh \
	- && set -ex; /bin/bash /dl_files.sh \
	- && chmod 750 /run/clamav
	+ && chmod +x /dl_files.sh \
	+ && set -ex; /bin/bash /dl_files.sh \
	+ && chmod 750 /run/clamav

	# Port provision
	EXPOSE 3310

	# AV daemon bootstrapping
	CMD ["/sbin/tini", "-g", "--", "/bootstrap.sh"]
	diff --git a/data/Dockerfiles/clamd/bootstrap.sh b/data/Dockerfiles/clamd/bootstrap.sh
	index c4c9e04c..949f8336 100755
	--- a/data/Dockerfiles/clamd/bootstrap.sh
	+++ b/data/Dockerfiles/clamd/bootstrap.sh
	@@ -1,35 +1,37 @@
	#!/bin/bash

	if [[ "${SKIP_CLAMD}" =~ ^([yY][eE][sS]\|[yY])+$ ]]; then
	echo "SKIP_CLAMD=y, skipping ClamAV..."
	sleep 365d
	exit 0
	fi

	# Create log pipes
	-mkdir /var/log/clamav
	+mkdir -p /var/log/clamav
	touch /var/log/clamav/clamd.log /var/log/clamav/freshclam.log
	-mkfifo -m 600 /tmp/logpipe_clamd
	-mkfifo -m 600 /tmp/logpipe_freshclam
	-chown -R clamav:clamav /var/log/clamav/ /tmp/logpipe_*
	-cat <> /tmp/logpipe_clamd 1>&2 &
	-cat <> /tmp/logpipe_freshclam 1>&2 &
	+chown -R clamav:clamav /var/log/clamav/

	# Prepare
	BACKGROUND_TASKS=()

	-freshclam -d &
	+(
	+while true; do
	+ sleep 1m
	+ freshclam
	+ sleep 1h
	+done
	+) &
	BACKGROUND_TASKS+=($!)

	clamd &
	BACKGROUND_TASKS+=($!)

	while true; do
	for bg_task in ${BACKGROUND_TASKS[*]}; do
	if ! kill -0 ${bg_task} 1>&2; then
	echo "Worker ${bg_task} died, stopping container waiting for respawn..."
	kill -TERM 1
	fi
	sleep 10
	done
	done
	diff --git a/data/Dockerfiles/dovecot/Dockerfile b/data/Dockerfiles/dovecot/Dockerfile
	index 8afb72d6..47bfc20a 100644
	--- a/data/Dockerfiles/dovecot/Dockerfile
	+++ b/data/Dockerfiles/dovecot/Dockerfile
	@@ -1,123 +1,122 @@
	FROM debian:stretch-slim
	LABEL maintainer "Andre Peters <andre.peters@servercow.de>"

	ARG DEBIAN_FRONTEND=noninteractive
	ENV LC_ALL C
	-ENV DOVECOT_VERSION 2.2.33.2
	-ENV PIGEONHOLE_VERSION 0.4.21
	+ENV DOVECOT_VERSION 2.3.1
	+ENV PIGEONHOLE_VERSION 0.5.1

	RUN apt-get update && apt-get -y --no-install-recommends install \
	automake \
	autotools-dev \
	build-essential \
	ca-certificates \
	cpanminus \
	curl \
	default-libmysqlclient-dev \
	libjson-webtoken-perl \
	libcgi-pm-perl \
	libcrypt-openssl-rsa-perl \
	libdata-uniqid-perl \
	libhtml-parser-perl \
	libmail-imapclient-perl \
	libparse-recdescent-perl \
	libsys-meminfo-perl \
	libtest-mockobject-perl \
	libwww-perl \
	libauthen-ntlm-perl \
	libbz2-dev \
	libcrypt-ssleay-perl \
	+ libcurl4-openssl-dev \
	libdbd-mysql-perl \
	libdbi-perl \
	libdigest-hmac-perl \
	+ libexpat1-dev \
	libfile-copy-recursive-perl \
	libio-compress-perl \
	libio-socket-inet6-perl \
	libio-socket-ssl-perl \
	libio-tee-perl \
	libipc-run-perl \
	liblockfile-simple-perl \
	liblz-dev \
	liblz4-dev \
	liblzma-dev \
	libmodule-scandeps-perl \
	libnet-ssleay-perl \
	libpam-dev \
	libpar-packer-perl \
	libreadonly-perl \
	libssl-dev \
	libterm-readkey-perl \
	libtest-pod-perl \
	libtest-simple-perl \
	libunicode-string-perl \
	libproc-processtable-perl \
	liburi-perl \
	lzma-dev \
	make \
	procps \
	supervisor \
	cron \
	syslog-ng \
	syslog-ng-core \
	syslog-ng-mod-redis \
	&& rm -rf /var/lib/apt/lists/*


	-RUN curl https://www.dovecot.org/releases/2.2/dovecot-$DOVECOT_VERSION.tar.gz \| tar xvz \
	+RUN curl https://www.dovecot.org/releases/2.3/dovecot-$DOVECOT_VERSION.tar.gz \| tar xvz \
	&& cd dovecot-$DOVECOT_VERSION \
	- && curl -o src/lib-auth/auth-client-request.c https://mailcow.email/dovecot-patch1/auth-client-request.c \
	- && curl -o src/lib-auth/auth-server-connection.c https://mailcow.email/dovecot-patch1/auth-server-connection.c \
	- && curl -o src/lib-auth/auth-server-connection.h https://mailcow.email/dovecot-patch1/auth-server-connection.h \
	- && ./configure --with-mysql --with-lzma --with-lz4 --with-ssl=openssl --with-notify=inotify --with-storages=mdbox,sdbox,maildir,mbox,imapc,pop3c --with-bzlib --with-zlib \
	+ && ./configure --with-solr --with-mysql --with-lzma --with-lz4 --with-ssl=openssl --with-notify=inotify --with-storages=mdbox,sdbox,maildir,mbox,imapc,pop3c --with-bzlib --with-zlib \
	&& make -j3 \
	&& make install \
	&& make clean \
	&& cd .. && rm -rf dovecot-$DOVECOT_VERSION \
	- && curl https://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-$PIGEONHOLE_VERSION.tar.gz \| tar xvz \
	- && cd dovecot-2.2-pigeonhole-$PIGEONHOLE_VERSION \
	+ && curl https://pigeonhole.dovecot.org/releases/2.3/dovecot-2.3-pigeonhole-$PIGEONHOLE_VERSION.tar.gz \| tar xvz \
	+ && cd dovecot-2.3-pigeonhole-$PIGEONHOLE_VERSION \
	&& ./configure \
	&& make -j3 \
	&& make install \
	&& make clean \
	&& cd .. \
	- && rm -rf dovecot-2.2-pigeonhole-$PIGEONHOLE_VERSION
	+ && rm -rf dovecot-2.3-pigeonhole-$PIGEONHOLE_VERSION

	RUN cpanm Data::Uniqid Mail::IMAPClient String::Util
	RUN echo '* * * * * root /usr/local/bin/imapsync_cron.pl' > /etc/cron.d/imapsync
	RUN echo '30 3 * * * vmail /usr/local/bin/doveadm quota recalc -A' > /etc/cron.d/dovecot-sync

	COPY syslog-ng.conf /etc/syslog-ng/syslog-ng.conf
	COPY imapsync /usr/local/bin/imapsync
	COPY postlogin.sh /usr/local/bin/postlogin.sh
	COPY imapsync_cron.pl /usr/local/bin/imapsync_cron.pl
	COPY report-spam.sieve /usr/local/lib/dovecot/sieve/report-spam.sieve
	COPY report-ham.sieve /usr/local/lib/dovecot/sieve/report-ham.sieve
	COPY rspamd-pipe-ham /usr/local/lib/dovecot/sieve/rspamd-pipe-ham
	COPY rspamd-pipe-spam /usr/local/lib/dovecot/sieve/rspamd-pipe-spam
	COPY docker-entrypoint.sh /
	COPY supervisord.conf /etc/supervisor/supervisord.conf

	RUN chmod +x /usr/local/lib/dovecot/sieve/rspamd-pipe-ham \
	/usr/local/lib/dovecot/sieve/rspamd-pipe-spam \
	/usr/local/bin/imapsync_cron.pl \
	/usr/local/bin/postlogin.sh \
	/usr/local/bin/imapsync

	RUN groupadd -g 5000 vmail \
	&& groupadd -g 401 dovecot \
	&& groupadd -g 402 dovenull \
	&& useradd -g vmail -u 5000 vmail -d /var/vmail \
	&& useradd -c "Dovecot unprivileged user" -d /dev/null -u 401 -g dovecot -s /bin/false dovecot \
	&& useradd -c "Dovecot login user" -d /dev/null -u 402 -g dovenull -s /bin/false dovenull

	RUN touch /etc/default/locale
	RUN apt-get purge -y build-essential automake autotools-dev \
	&& apt-get autoremove --purge -y

	ENTRYPOINT ["/docker-entrypoint.sh"]
	CMD exec /usr/bin/supervisord -c /etc/supervisor/supervisord.conf

	RUN rm -rf \
	/tmp/* \
	/var/tmp/*

	diff --git a/data/conf/clamav/clamd.conf b/data/conf/clamav/clamd.conf
	index 362ae5a5..07b0617c 100644
	--- a/data/conf/clamav/clamd.conf
	+++ b/data/conf/clamav/clamd.conf
	@@ -1,47 +1,47 @@
	-LogFile /tmp/logpipe_clamd
	+LogFile /dev/console
	LogTime yes
	LogClean yes
	ExtendedDetectionInfo yes
	PidFile /run/clamav/clamd.pid
	OfficialDatabaseOnly no
	LocalSocket /run/clamav/clamd.sock
	TCPSocket 3310
	StreamMaxLength 25M
	MaxThreads 10
	ReadTimeout 10
	CommandReadTimeout 3
	SendBufTimeout 200
	MaxQueue 80
	IdleTimeout 20
	SelfCheck 3600
	User clamav
	AllowSupplementaryGroups yes
	Foreground yes
	DetectPUA yes
	# See https://github.com/vrtadmin/clamav-faq/blob/master/faq/faq-pua.md
	#ExcludePUA NetTool
	#ExcludePUA PWTool
	#IncludePUA Spy
	#IncludePUA Scanner
	#IncludePUA RAT
	AlgorithmicDetection yes
	ScanOLE2 yes
	OLE2BlockMacros yes
	ScanPDF yes
	ScanSWF yes
	ScanXMLDOCS yes
	ScanHWP3 yes
	ScanMail yes
	PhishingSignatures no
	PhishingScanURLs no
	HeuristicScanPrecedence yes
	ScanHTML yes
	ScanArchive yes
	MaxScanSize 50M
	MaxFileSize 25M
	MaxRecursion 5
	MaxFiles 200
	ScanOnAccess no
	Bytecode yes
	BytecodeSecurity TrustSigned
	BytecodeTimeout 1000
	diff --git a/data/conf/clamav/freshclam.conf b/data/conf/clamav/freshclam.conf
	index 382befbc..f4fff582 100644
	--- a/data/conf/clamav/freshclam.conf
	+++ b/data/conf/clamav/freshclam.conf
	@@ -1,17 +1,17 @@
	-UpdateLogFile /tmp/logpipe_freshclam
	+UpdateLogFile /var/log/clamav/freshclam.log
	LogTime yes
	PidFile /run/clamav/freshclam.pid
	DatabaseOwner clamav
	AllowSupplementaryGroups yes
	DNSDatabaseInfo current.cvd.clamav.net
	DatabaseMirror database.clamav.net
	MaxAttempts 4
	ScriptedUpdates yes
	Checks 6
	NotifyClamd /etc/clamav/clamd.conf
	Foreground yes
	ConnectTimeout 20
	ReceiveTimeout 20
	TestDatabases yes
	Bytecode yes

	diff --git a/data/conf/dovecot/dovecot.conf b/data/conf/dovecot/dovecot.conf
	index 533433af..740e6d02 100644
	--- a/data/conf/dovecot/dovecot.conf
	+++ b/data/conf/dovecot/dovecot.conf
	@@ -1,304 +1,304 @@
	# --------------------------------------------------------------------------
	# Please create a file "extra.conf" for persistent overrides to dovecot.conf
	# --------------------------------------------------------------------------
	auth_mechanisms = plain login
	#mail_debug = yes
	#auth_debug = yes
	log_path = syslog
	disable_plaintext_auth = yes
	# Uncomment on NFS share
	#mmap_disable = yes
	#mail_fsync = always
	#mail_nfs_index = yes
	#mail_nfs_storage = yes
	login_log_format_elements = "user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k"
	mail_home = /var/vmail/%d/%n
	mail_location = maildir:~/
	mail_plugins = quota acl zlib listescape #mail_crypt

	# Dovecot 2.2
	-ssl_protocols = !SSLv3
	+#ssl_protocols = !SSLv3
	# Dovecot 2.3
	-#ssl_min_protocol = TLSv1
	+ssl_min_protocol = TLSv1

	ssl_prefer_server_ciphers = yes
	ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA

	# Default in Dovecot 2.3
	ssl_options = no_compression

	# New in Dovecot 2.3
	-#ssl_dh=</etc/ssl/mail/dhparams.pem
	+ssl_dh=</etc/ssl/mail/dhparams.pem
	# Dovecot 2.2
	-ssl_dh_parameters_length = 2048
	+#ssl_dh_parameters_length = 2048
	log_timestamp = "%Y-%m-%d %H:%M:%S "
	recipient_delimiter = +
	auth_master_user_separator = *
	mail_shared_explicit_inbox = yes
	mail_prefetch_count = 30
	passdb {
	driver = passwd-file
	args = /usr/local/etc/dovecot/dovecot-master.passwd
	master = yes
	pass = yes
	}
	passdb {
	args = /usr/local/etc/dovecot/sql/dovecot-dict-sql-passdb.conf
	driver = sql
	}
	# Set doveadm_password=your-secret-password in data/conf/dovecot/extra.conf (create if missing)
	service doveadm {
	inet_listener {
	port = 12345
	}
	}
	namespace inbox {
	inbox = yes
	location =
	separator = /
	mailbox "Trash" {
	auto = subscribe
	special_use = \Trash
	}
	mailbox "Deleted Messages" {
	special_use = \Trash
	}
	mailbox "Deleted Items" {
	special_use = \Trash
	}
	mailbox "Rubbish" {
	special_use = \Trash
	}
	mailbox "Gelöschte Objekte" {
	special_use = \Trash
	}
	mailbox "Papierkorb" {
	special_use = \Trash
	}
	mailbox "Itens Excluidos" {
	special_use = \Trash
	}
	mailbox "Itens Excluídos" {
	special_use = \Trash
	}
	mailbox "Lixeira" {
	special_use = \Trash
	}
	mailbox "Prullenbak" {
	special_use = \Trash
	}
	mailbox "Verwijderde items" {
	special_use = \Trash
	}
	mailbox "Archive" {
	auto = subscribe
	special_use = \Archive
	}
	mailbox "Archiv" {
	special_use = \Archive
	}
	mailbox "Archives" {
	special_use = \Archive
	}
	mailbox "Arquivo" {
	special_use = \Archive
	}
	mailbox "Arquivos" {
	special_use = \Archive
	}
	mailbox "Archief" {
	special_use = \Archive
	}
	mailbox "Sent" {
	auto = subscribe
	special_use = \Sent
	}
	mailbox "Sent Messages" {
	special_use = \Sent
	}
	mailbox "Sent Items" {
	special_use = \Sent
	}
	mailbox "Gesendet" {
	special_use = \Sent
	}
	mailbox "Gesendete Objekte" {
	special_use = \Sent
	}
	mailbox "Itens Enviados" {
	special_use = \Sent
	}
	mailbox "Enviados" {
	special_use = \Sent
	}
	mailbox "Verzonden items" {
	special_use = \Sent
	}
	mailbox "Verzonden" {
	special_use = \Sent
	}
	mailbox "Drafts" {
	auto = subscribe
	special_use = \Drafts
	}
	mailbox "Entwürfe" {
	special_use = \Drafts
	}
	mailbox "Rascunhos" {
	special_use = \Drafts
	}
	mailbox "Concepten" {
	special_use = \Drafts
	}
	mailbox "Junk" {
	auto = subscribe
	special_use = \Junk
	}
	mailbox "Junk-E-Mail" {
	special_use = \Junk
	}
	mailbox "Junk E-Mail" {
	special_use = \Junk
	}
	mailbox "Spam" {
	special_use = \Junk
	}
	mailbox "Lixo Eletrônico" {
	special_use = \Junk
	}
	mailbox "Ongewenste e-mail" {
	special_use = \Junk
	}
	prefix =
	}
	namespace {
	type = shared
	separator = /
	prefix = Shared/%%u/
	location = maildir:%%h/:INDEX=~/Shared/%%u:INDEXPVT=~/Shared/%%u
	subscriptions = no
	list = children
	}
	protocols = imap sieve lmtp pop3
	service dict {
	unix_listener dict {
	mode = 0660
	user = vmail
	group = vmail
	}
	}
	service log {
	user = dovenull
	}
	service auth {
	inet_listener auth-inet {
	port = 10001
	}
	unix_listener auth-master {
	mode = 0600
	user = vmail
	}
	unix_listener auth-userdb {
	mode = 0600
	user = vmail
	}
	}
	service managesieve-login {
	inet_listener sieve {
	port = 4190
	}
	service_count = 1
	process_min_avail = 2
	vsz_limit = 64M
	}
	service imap-login {
	service_count = 1
	vsz_limit = 64M
	user = dovenull
	}
	service pop3-login {
	service_count = 1
	}
	service imap {
	executable = imap imap-postlogin
	user = dovenull
	}
	service managesieve {
	process_limit = 256
	}
	service lmtp {
	inet_listener lmtp-inet {
	port = 24
	}
	user = vmail
	}
	listen = *,[::]
	ssl_cert = </etc/ssl/mail/cert.pem
	ssl_key = </etc/ssl/mail/key.pem
	userdb {
	args = /usr/local/etc/dovecot/sql/dovecot-dict-sql-passdb.conf
	driver = sql
	}
	protocol imap {
	imap_metadata = yes
	mail_plugins = quota imap_quota imap_acl acl zlib imap_zlib imap_sieve listescape #mail_crypt
	}
	mail_attribute_dict = file:%h/dovecot-attributes
	protocol lmtp {
	mail_plugins = quota sieve acl zlib listescape #mail_crypt
	auth_socket_path = /usr/local/var/run/dovecot/auth-master
	}
	protocol sieve {
	managesieve_logout_format = bytes=%i/%o
	}
	plugin {
	acl_anyone = allow
	acl_shared_dict = file:/var/vmail/shared-mailboxes.db
	acl = vfile
	quota = dict:Userquota::proxy::sqlquota
	quota_rule2 = Trash:storage=+100%%
	sieve = /var/vmail/sieve/%u.sieve
	sieve_plugins = sieve_imapsieve sieve_extprograms
	# From elsewhere to Spam folder
	imapsieve_mailbox1_name = Junk
	imapsieve_mailbox1_causes = COPY
	imapsieve_mailbox1_before = file:/usr/local/lib/dovecot/sieve/report-spam.sieve
	# END
	# From Spam folder to elsewhere
	imapsieve_mailbox2_name = *
	imapsieve_mailbox2_from = Junk
	imapsieve_mailbox2_causes = COPY
	imapsieve_mailbox2_before = file:/usr/local/lib/dovecot/sieve/report-ham.sieve
	# END
	sieve_pipe_bin_dir = /usr/local/lib/dovecot/sieve
	sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute
	sieve_max_script_size = 1M
	sieve_max_redirects = 30
	sieve_quota_max_scripts = 0
	sieve_quota_max_storage = 0
	listescape_char = "\\"
	sieve_before = dict:proxy::sieve_before;name=active;bindir=/var/vmail/sieve_before_bindir
	sieve_after = dict:proxy::sieve_after;name=active;bindir=/var/vmail/sieve_after_bindir
	sieve_after2 = /var/vmail/sieve/global.sieve
	#mail_crypt_global_private_key = </mail_crypt/ecprivkey.pem
	#mail_crypt_global_public_key = </mail_crypt/ecpubkey.pem
	#mail_crypt_save_version = 2
	# Enable compression while saving, lz4 Dovecot v2.2.11+
	zlib_save = lz4
	}
	dict {
	sqlquota = mysql:/usr/local/etc/dovecot/sql/dovecot-dict-sql-quota.conf
	sieve_after = mysql:/usr/local/etc/dovecot/sql/dovecot-dict-sql-sieve_after.conf
	sieve_before = mysql:/usr/local/etc/dovecot/sql/dovecot-dict-sql-sieve_before.conf
	}
	remote 127.0.0.1 {
	disable_plaintext_auth = no
	}
	submission_host = postfix:588
	mail_max_userip_connections = 500
	service imap-postlogin {
	executable = script-login /usr/local/bin/postlogin.sh
	unix_listener imap-postlogin {
	}
	}
	!include_try /usr/local/etc/dovecot/extra.conf
	diff --git a/docker-compose.yml b/docker-compose.yml
	index 9a1de58b..106b539e 100644
	--- a/docker-compose.yml
	+++ b/docker-compose.yml
	@@ -1,413 +1,414 @@
	version: '2.1'
	services:

	unbound-mailcow:
	image: mailcow/unbound:1.1
	build: ./data/Dockerfiles/unbound
	command: /usr/sbin/unbound
	environment:
	- TZ=${TZ}
	volumes:
	- ./data/conf/unbound/unbound.conf:/etc/unbound/unbound.conf:ro
	restart: always
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	networks:
	mailcow-network:
	ipv4_address: ${IPV4_NETWORK:-172.22.1}.254
	aliases:
	- unbound

	mysql-mailcow:
	image: mariadb:10.2
	volumes:
	- mysql-vol-1:/var/lib/mysql/
	- ./data/conf/mysql/:/etc/mysql/conf.d/:ro
	environment:
	- TZ=${TZ}
	- MYSQL_ROOT_PASSWORD=${DBROOT}
	- MYSQL_DATABASE=${DBNAME}
	- MYSQL_USER=${DBUSER}
	- MYSQL_PASSWORD=${DBPASS}
	restart: always
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	ports:
	- "${SQL_PORT:-127.0.0.1:13306}:3306"
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	networks:
	mailcow-network:
	aliases:
	- mysql

	redis-mailcow:
	image: redis:alpine
	volumes:
	- redis-vol-1:/data/
	restart: always
	environment:
	- TZ=${TZ}
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	networks:
	mailcow-network:
	ipv4_address: ${IPV4_NETWORK:-172.22.1}.249
	aliases:
	- redis

	clamd-mailcow:
	- image: mailcow/clamd:1.9
	+ image: mailcow/clamd:1.10
	build: ./data/Dockerfiles/clamd
	restart: always
	+ tty: true
	environment:
	- TZ=${TZ}
	- SKIP_CLAMD=${SKIP_CLAMD:-n}
	volumes:
	- ./data/conf/clamav/:/etc/clamav/
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	networks:
	mailcow-network:
	aliases:
	- clamd

	rspamd-mailcow:
	image: mailcow/rspamd:1.17
	build: ./data/Dockerfiles/rspamd
	stop_grace_period: 30s
	depends_on:
	- nginx-mailcow
	environment:
	- TZ=${TZ}
	volumes:
	- ./data/conf/rspamd/custom/:/etc/rspamd/custom:ro
	- ./data/conf/rspamd/override.d/:/etc/rspamd/override.d:rw
	- ./data/conf/rspamd/local.d/:/etc/rspamd/local.d:ro
	- ./data/conf/rspamd/lua/:/etc/rspamd/lua/:ro
	- rspamd-sock:/rspamd-sock
	- rspamd-vol-1:/var/lib/rspamd
	restart: always
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	hostname: rspamd
	networks:
	mailcow-network:
	aliases:
	- rspamd

	php-fpm-mailcow:
	image: mailcow/phpfpm:1.12
	build: ./data/Dockerfiles/phpfpm
	command: "php-fpm -d date.timezone=${TZ} -d expose_php=0"
	depends_on:
	- redis-mailcow
	volumes:
	- ./data/web:/web:rw
	- ./data/conf/rspamd/dynmaps:/dynmaps:ro
	- rspamd-sock:/rspamd-sock
	- ./data/conf/rspamd/meta_exporter:/meta_exporter:ro
	- ./data/conf/phpfpm/php-fpm.d/www.conf:/usr/local/etc/php-fpm.d/www.conf
	- ./data/conf/phpfpm/php-fpm.d/system.conf:/usr/local/etc/php-fpm.d/system.conf
	- ./data/conf/phpfpm/php-conf.d/opcache-recommended.ini:/usr/local/etc/php/conf.d/opcache-recommended.ini
	- ./data/conf/phpfpm/php-conf.d/upload.ini:/usr/local/etc/php/conf.d/upload.ini
	environment:
	- LOG_LINES=${LOG_LINES:-9999}
	- TZ=${TZ}
	- DBNAME=${DBNAME}
	- DBUSER=${DBUSER}
	- DBPASS=${DBPASS}
	- MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
	- IMAP_PORT=${IMAP_PORT:-143}
	- IMAPS_PORT=${IMAPS_PORT:-993}
	- POP_PORT=${POP_PORT:-110}
	- POPS_PORT=${POPS_PORT:-995}
	- SIEVE_PORT=${SIEVE_PORT:-4190}
	- SUBMISSION_PORT=${SUBMISSION_PORT:-587}
	- SMTPS_PORT=${SMTPS_PORT:-465}
	- SMTP_PORT=${SMTP_PORT:-25}
	restart: always
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	networks:
	mailcow-network:
	aliases:
	- phpfpm

	sogo-mailcow:
	image: mailcow/sogo:1.20
	build: ./data/Dockerfiles/sogo
	environment:
	- DBNAME=${DBNAME}
	- DBUSER=${DBUSER}
	- DBPASS=${DBPASS}
	- TZ=${TZ}
	- LOG_LINES=${LOG_LINES:-9999}
	- MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
	volumes:
	- ./data/conf/sogo/:/etc/sogo/
	restart: always
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	networks:
	mailcow-network:
	ipv4_address: ${IPV4_NETWORK:-172.22.1}.248
	aliases:
	- sogo

	dovecot-mailcow:
	- image: mailcow/dovecot:1.24
	+ image: mailcow/dovecot:1.25
	build: ./data/Dockerfiles/dovecot
	cap_add:
	- NET_BIND_SERVICE
	volumes:
	- ./data/conf/dovecot:/usr/local/etc/dovecot
	- ./data/assets/ssl:/etc/ssl/mail/:ro
	- ./data/conf/sogo/:/etc/sogo/
	- vmail-vol-1:/var/vmail
	- crypt-vol-1:/mail_crypt/
	- rspamd-sock:/rspamd-sock
	environment:
	- LOG_LINES=${LOG_LINES:-9999}
	- DBNAME=${DBNAME}
	- DBUSER=${DBUSER}
	- DBPASS=${DBPASS}
	- TZ=${TZ}
	ports:
	- "${DOVEADM_PORT:-127.0.0.1:19991}:12345"
	- "${IMAP_PORT:-143}:143"
	- "${IMAPS_PORT:-993}:993"
	- "${POP_PORT:-110}:110"
	- "${POPS_PORT:-995}:995"
	- "${SIEVE_PORT:-4190}:4190"
	restart: always
	ulimits:
	nproc: 65535
	nofile:
	soft: 20000
	hard: 40000
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	hostname: ${MAILCOW_HOSTNAME}
	networks:
	mailcow-network:
	aliases:
	- dovecot

	postfix-mailcow:
	image: mailcow/postfix:1.14
	build: ./data/Dockerfiles/postfix
	volumes:
	- ./data/conf/postfix:/opt/postfix/conf
	- ./data/assets/ssl:/etc/ssl/mail/:ro
	- postfix-vol-1:/var/spool/postfix
	- crypt-vol-1:/var/lib/zeyple
	environment:
	- LOG_LINES=${LOG_LINES:-9999}
	- TZ=${TZ}
	- DBNAME=${DBNAME}
	- DBUSER=${DBUSER}
	- DBPASS=${DBPASS}
	cap_add:
	- NET_BIND_SERVICE
	ports:
	- "${SMTP_PORT:-25}:25"
	- "${SMTPS_PORT:-465}:465"
	- "${SUBMISSION_PORT:-587}:587"
	restart: always
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	hostname: ${MAILCOW_HOSTNAME}
	networks:
	mailcow-network:
	aliases:
	- postfix

	memcached-mailcow:
	image: memcached:alpine
	restart: always
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	networks:
	mailcow-network:
	aliases:
	- memcached

	nginx-mailcow:
	depends_on:
	- sogo-mailcow
	- php-fpm-mailcow
	- redis-mailcow
	image: nginx:mainline-alpine
	command: /bin/sh -c "envsubst < /etc/nginx/conf.d/templates/listen_plain.template > /etc/nginx/conf.d/listen_plain.active &&
	envsubst < /etc/nginx/conf.d/templates/listen_ssl.template > /etc/nginx/conf.d/listen_ssl.active &&
	envsubst < /etc/nginx/conf.d/templates/server_name.template > /etc/nginx/conf.d/server_name.active &&
	envsubst < /etc/nginx/conf.d/templates/sogo.template > /etc/nginx/conf.d/sogo.active &&
	envsubst < /etc/nginx/conf.d/templates/sogo_eas.template > /etc/nginx/conf.d/sogo_eas.active &&
	nginx -qt &&
	until ping phpfpm -c1 > /dev/null; do sleep 1; done &&
	until ping sogo -c1 > /dev/null; do sleep 1; done &&
	until ping redis -c1 > /dev/null; do sleep 1; done &&
	until ping rspamd -c1 > /dev/null; do sleep 1; done &&
	exec nginx -g 'daemon off;'"
	environment:
	- HTTPS_PORT=${HTTPS_PORT:-443}
	- HTTP_PORT=${HTTP_PORT:-80}
	- MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
	- IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
	volumes:
	- ./data/web:/web:ro
	- ./data/conf/rspamd/dynmaps:/dynmaps:ro
	- ./data/assets/ssl/:/etc/ssl/mail/:ro
	- ./data/conf/nginx/:/etc/nginx/conf.d/:rw
	- ./data/conf/rspamd/meta_exporter:/meta_exporter:ro
	ports:
	- "${HTTPS_BIND:-0.0.0.0}:${HTTPS_PORT:-443}:${HTTPS_PORT:-443}"
	- "${HTTP_BIND:-0.0.0.0}:${HTTP_PORT:-80}:${HTTP_PORT:-80}"
	restart: always
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	networks:
	mailcow-network:
	aliases:
	- nginx

	acme-mailcow:
	depends_on:
	- nginx-mailcow
	- mysql-mailcow
	image: mailcow/acme:1.28
	build: ./data/Dockerfiles/acme
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	environment:
	- LOG_LINES=${LOG_LINES:-9999}
	- ADDITIONAL_SAN=${ADDITIONAL_SAN}
	- MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
	- DBNAME=${DBNAME}
	- DBUSER=${DBUSER}
	- DBPASS=${DBPASS}
	- SKIP_LETS_ENCRYPT=${SKIP_LETS_ENCRYPT:-n}
	- SKIP_IP_CHECK=${SKIP_IP_CHECK:-n}
	volumes:
	- ./data/web/.well-known/acme-challenge:/var/www/acme:rw
	- ./data/assets/ssl:/var/lib/acme/:rw
	- ./data/assets/ssl-example:/var/lib/ssl-example/:ro
	restart: always
	networks:
	mailcow-network:
	aliases:
	- acme

	netfilter-mailcow:
	image: mailcow/netfilter:1.12
	build: ./data/Dockerfiles/netfilter
	stop_grace_period: 30s
	depends_on:
	- dovecot-mailcow
	- postfix-mailcow
	- sogo-mailcow
	- php-fpm-mailcow
	- redis-mailcow
	restart: always
	privileged: true
	environment:
	- TZ=${TZ}
	- IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
	- SNAT_TO_SOURCE=${SNAT_TO_SOURCE:-n}
	network_mode: "host"
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	volumes:
	- /lib/modules:/lib/modules:ro

	watchdog-mailcow:
	image: mailcow/watchdog:1.14
	# Debug
	#command: /watchdog.sh
	build: ./data/Dockerfiles/watchdog
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	volumes:
	- rspamd-sock:/rspamd-sock
	restart: always
	environment:
	- LOG_LINES=${LOG_LINES:-9999}
	- TZ=${TZ}
	- DBNAME=${DBNAME}
	- DBUSER=${DBUSER}
	- DBPASS=${DBPASS}
	- USE_WATCHDOG=${USE_WATCHDOG:-n}
	- WATCHDOG_NOTIFY_EMAIL=${WATCHDOG_NOTIFY_EMAIL}
	- MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
	dns:
	- ${IPV4_NETWORK:-172.22.1}.254
	networks:
	mailcow-network:
	aliases:
	- watchdog

	dockerapi-mailcow:
	image: mailcow/dockerapi:1.11
	restart: always
	build: ./data/Dockerfiles/dockerapi
	sysctls:
	- net.ipv6.conf.all.disable_ipv6=${SYSCTL_IPV6_DISABLED:-0}
	oom_score_adj: -10
	environment:
	- TZ=${TZ}
	volumes:
	- /var/run/docker.sock:/var/run/docker.sock:ro
	- ./data/conf/rspamd/override.d/worker-controller-password.inc:/access.inc:rw
	networks:
	mailcow-network:
	aliases:
	- dockerapi

	ipv6nat:
	image: robbertkl/ipv6nat
	restart: always
	privileged: true
	network_mode: "host"
	volumes:
	- /var/run/docker.sock:/var/run/docker.sock:ro
	- /lib/modules:/lib/modules:ro

	networks:
	mailcow-network:
	driver: bridge
	enable_ipv6: true
	ipam:
	driver: default
	config:
	- subnet: ${IPV4_NETWORK:-172.22.1}.0/24
	- subnet: ${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}

	volumes:
	vmail-vol-1:
	mysql-vol-1:
	redis-vol-1:
	rspamd-vol-1:
	postfix-vol-1:
	crypt-vol-1:
	rspamd-sock:

File Metadata

Mime Type: text/x-diff
Expires: 9月 9 Tue, 5:45 AM (7 h, 32 m)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 5352
默认替代文本: (29 KB)

No OneTemporaryActions

View Options

File Metadata

Event Timeline

No OneTemporary
Actions