mail done

This commit is contained in:
bee
2026-05-25 11:09:11 +02:00
parent 366a8cc197
commit 9729b28681
10 changed files with 123 additions and 71 deletions
+2 -5
View File
@@ -1,12 +1,11 @@
services: # https://docker-mailserver.github.io/docker-mailserver/latest/
mailserver:
image: ghcr.io/docker-mailserver/docker-mailserver:latest
image: ghcr.io/docker-mailserver/docker-mailserver:15.1.0
container_name: mailserver
hostname: mail.secretbee.buzz
env_file: mailserver.env
ports:
- "25:25"
- "143:143"
- "465:465"
- "587:587"
- "993:993"
@@ -16,8 +15,6 @@ services: # https://docker-mailserver.github.io/docker-mailserver/latest/
- /opt/beeserver/mail/mail-logs/:/var/log/mail/
- /opt/beeserver/mail/config/:/tmp/docker-mailserver/
- /etc/localtime:/etc/localtime:ro
- /etc/letsencrypt:/etc/letsencrypt
- /etc/letsencrypt:/etc/letsencrypt:ro
restart: always
stop_grace_period: 1m
cap_add:
- NET_ADMIN
+23 -2
View File
@@ -10,6 +10,27 @@
3165616638653634310a666238656466306433346235396537386539366436333032373866333731
64323037613336613538613866343738613236323739333339313133386263323037313837636131
6533666231663438336566386130366536623565383837623164
relay_user: !vault |
$ANSIBLE_VAULT;1.1;AES256
66636637636636363133366335653835343130616134356330386531653537346138326432336662
3231636236393635646465626538643736326432633866620a633166346632613132323530373631
38333935373565616633363530616533656536313461363935623966336265613264373439613461
3133383935656337370a653461363636616537343836383935356432303532363861383863363639
31316537333565623530333332353435353437313466353935636139653762643930
relay_password_smtp2go: !vault |
$ANSIBLE_VAULT;1.1;AES256
30353034303936383336616430373037316663333039326337633838336532326462643039323930
3865396234396464363032346335663961323462643232310a363163353231303763323032646637
61346265343333303735623635633638393265336530656539623063346338646636643661333962
3961643332623365660a336130313864326463623365333435383533623837623831326234323466
39303363393736616230343331623734636364313039356137643864383833616664
relay_user_smtp2go: !vault |
$ANSIBLE_VAULT;1.1;AES256
33313138356235346465333737303766626463636438316366353262356430316636636462613066
3166353663663163306536363536366462633365616161650a613061306630356533343033366333
31643364646665653330326435666366313763633135323063373736666337316130316233396235
3834313832393237650a636138363436376631323338303232356137353063616561313039313130
3236
tasks:
- name: Install podman
@@ -32,7 +53,7 @@
ansible.builtin.file:
path: "{{ item }}"
state: directory
mode: '0755'
mode: '0750'
loop:
- /opt/beeserver/mail
@@ -53,7 +74,7 @@
ansible.builtin.template:
src: mailserver.env.j2
dest: /opt/beeserver/mail/mailserver.env
mode: '0644'
mode: '0600'
- name: Compose up
changed_when: true
+14 -11
View File
@@ -44,7 +44,7 @@ ACCOUNT_PROVISIONER=
# empty => postmaster@domain.com
# => Specify the postmaster address
POSTMASTER_ADDRESS=
POSTMASTER_ADDRESS=postmaster@secretbee.buzz
# Check for updates on container start and then once a day
# If an update is available, a mail is sent to POSTMASTER_ADDRESS
@@ -92,7 +92,7 @@ TLS_LEVEL=
#
# **0** => (not recommended) Mail address spoofing allowed. Any logged in user may create email messages with a forged sender address (see also https://en.wikipedia.org/wiki/Email_spoofing).
# 1 => Mail spoofing denied. Each user may only send with their own or their alias addresses. Addresses with extension delimiters(http://www.postfix.org/postconf.5.html#recipient_delimiter) are not able to send messages.
SPOOF_PROTECTION=
SPOOF_PROTECTION=1
# Enables the Sender Rewriting Scheme. SRS is needed if your mail server acts as forwarder. See [postsrsd](https://github.com/roehling/postsrsd/blob/main/README.rst) for further explanation.
# - **0** => Disabled
@@ -195,7 +195,7 @@ RSPAMD_NEURAL=0
# Amavis content filter (used for ClamAV & SpamAssassin)
# 0 => Disabled
# 1 => Enabled
ENABLE_AMAVIS=1
ENABLE_AMAVIS=0
# -1/-2/-3 => Only show errors
# **0** => Show warnings
@@ -207,13 +207,13 @@ AMAVIS_LOGLEVEL=0
# Note: Emails will be rejected, if they don't pass the block list checks!
# **0** => DNS block lists are disabled
# 1 => DNS block lists are enabled
ENABLE_DNSBL=0
ENABLE_DNSBL=1
# If you enable Fail2Ban, don't forget to add the following lines to your `compose.yaml`:
# cap_add:
# - NET_ADMIN
# Otherwise, `nftables` won't be able to ban IPs.
ENABLE_FAIL2BAN=1
ENABLE_FAIL2BAN=0
# Fail2Ban blocktype
# drop => drop packet (send NO reply)
@@ -267,7 +267,7 @@ POSTFIX_DAGENT=
# Set the mailbox size limit for all users. If set to zero, the size will be unlimited (default). Size is in bytes.
#
# empty => 0
POSTFIX_MAILBOX_SIZE_LIMIT=
POSTFIX_MAILBOX_SIZE_LIMIT=10737418240
# See https://docker-mailserver.github.io/docker-mailserver/latest/config/account-management/overview/#quotas
# 0 => Dovecot quota is disabled
@@ -630,7 +630,8 @@ SRS_SECRET=
#
# Set a default host to relay all mail through (optionally include a port)
# Example: [mail.example.com]:587
DEFAULT_RELAY_HOST=[email-smtp.eu-north-1.amazonaws.com]:587
#DEFAULT_RELAY_HOST=[email-smtp.eu-north-1.amazonaws.com]:587
DEFAULT_RELAY_HOST=[mail-eu.smtp2go.com]:2525
# -----------------------------------------------
# --- Multi-Domain Relay Section ----------------
@@ -641,11 +642,13 @@ DEFAULT_RELAY_HOST=[email-smtp.eu-north-1.amazonaws.com]:587
#
# Set a default host to relay mail through
# Example: mail.example.com
RELAY_HOST=email-smtp.eu-north-1.amazonaws.com
#RELAY_HOST=email-smtp.eu-north-1.amazonaws.com
RELAY_HOST=
# empty => 25
# default port to relay mail
RELAY_PORT=587
#RELAY_PORT=587
RELAY_PORT=
# -----------------------------------------------
# --- Relay Host Credentials Section ------------
@@ -654,7 +657,7 @@ RELAY_PORT=587
# Configure a relay user and password to use with RELAY_HOST / DEFAULT_RELAY_HOST
# empty => no default
RELAY_USER=AKIAWBJK5JQUGAW3SR4N
RELAY_USER={{ relay_user_smtp2go }}
# empty => no default
RELAY_PASSWORD={{ relay_password }}
RELAY_PASSWORD={{ relay_password_smtp2go }}