docker-mailserver stack for produktor.io (#77)

.gitignore

@@ -0,0 +1,8 @@
+.env
+data/
+tls/
+setup.sh
+config/opendkim/keys/
+*.log
+postfix-accounts.cf
+dovecot-quotas.cf

compose.yaml

@@ -0,0 +1,33 @@
+services:
+  mailserver:
+    image: docker.io/mailserver/docker-mailserver:latest
+    container_name: mailserver
+    hostname: mail.produktor.io
+    ports:
+      - "25:25"
+      - "465:465"
+      - "587:587"
+      - "143:143"
+      - "993:993"
+    volumes:
+      - ./data/mail-data/:/var/mail/
+      - ./data/mail-state/:/var/mail-state/
+      - ./data/mail-logs/:/var/log/mail/
+      - ./config/:/tmp/docker-mailserver/
+      - ./tls/mail.key:/tmp/docker-mailserver/ssl/mail.produktor.io-key.pem:ro
+      - ./tls/mail.crt:/tmp/docker-mailserver/ssl/mail.produktor.io-cert.pem:ro
+      - ./tls/mail.crt:/tmp/docker-mailserver/ssl/demoCA/cacert.pem:ro
+      - /etc/localtime:/etc/localtime:ro
+    environment:
+      - ENABLE_SPAMASSASSIN=1
+      - ENABLE_CLAMAV=0
+      - ENABLE_FAIL2BAN=1
+      - ENABLE_POP3=0
+      - SSL_TYPE=self-signed
+      - PERMIT_DOCKER=none
+      - ONE_DIR=1
+      - SPOOF_PROTECTION=1
+    cap_add:
+      - NET_ADMIN
+      - SYS_PTRACE
+    restart: unless-stopped

maildata.env.example

@@ -0,0 +1,8 @@
+# Copy to .env and fill in real values. .env is gitignored — never commit it.
+# Mailbox passwords are also stored here for the operator; rotate via
+#   ./setup.sh email update <user@domain>
+MAIL_DOMAIN=produktor.io
+MAIL_HOSTNAME=mail.produktor.io
+INFO_PASSWORD=CHANGE_ME_STRONG_RANDOM
+ANDRIY_PASSWORD=CHANGE_ME_STRONG_RANDOM
+DKIM_SELECTOR=mail