mirror of
https://github.com/bokysan/docker-postfix.git
synced 2025-11-10 01:30:43 +08:00
2797040faa
hosts's username and password, if your remote host requires authentication. NEW FEATURE: The possibility to execute third party scripts. This should make extending this image easier. REFACTORING: Dockerfile now starts with run.sh instead of suprevisor. This makes it much easier to see any errors that might creep into the code. Also note that the script now relies on POSIX-compliant commands only so the executor has been changed from /bin/bash to /bin/sh.
115 lines
3.8 KiB
Bash
115 lines
3.8 KiB
Bash
#!/bin/sh
|
|
|
|
echo "******************************"
|
|
echo "**** POSTFIX STARTING UP *****"
|
|
echo "******************************"
|
|
|
|
# Make and reown postfix folders
|
|
mkdir -p /var/spool/postfix/ && mkdir -p /var/spool/postfix/pid
|
|
chown root: /var/spool/postfix/
|
|
chown root: /var/spool/postfix/pid
|
|
|
|
# Disable SMTPUTF8, because libraries (ICU) are missing in alpine
|
|
postconf -e smtputf8_enable=no
|
|
|
|
# Update aliases database. It's not used, but postfix complains if the .db file is missing
|
|
postalias /etc/postfix/aliases
|
|
|
|
# Disable local mail delivery
|
|
postconf -e mydestination=
|
|
# Don't relay for any domains
|
|
postconf -e relay_domains=
|
|
|
|
# As this is a server-based service, allow any message size -- we hope the server knows
|
|
# what it is doing
|
|
postconf -e "message_size_limit=0"
|
|
|
|
# Reject invalid HELOs
|
|
postconf -e smtpd_delay_reject=yes
|
|
postconf -e smtpd_helo_required=yes
|
|
postconf -e "smtpd_helo_restrictions=permit_mynetworks,reject_invalid_helo_hostname,permit"
|
|
|
|
# Set up host name
|
|
if [ ! -z "$HOSTNAME" ]; then
|
|
postconf -e myhostname="$HOSTNAME"
|
|
else
|
|
postconf -# myhostname
|
|
fi
|
|
|
|
# Set up a relay host, if needed
|
|
if [ ! -z "$RELAYHOST" ]; then
|
|
echo -n "- Forwarding all emails to $RELAYHOST"
|
|
postconf -e relayhost=$RELAYHOST
|
|
|
|
if [ -n "$RELAYHOST_USERNAME" ] && [ -n "$RELAYHOST_PASSWORD" ]; then
|
|
echo " using username $RELAYHOST_USERNAME."
|
|
echo "$RELAYHOST $RELAYHOST_USERNAME:$RELAYHOST_PASSWORD" >> /etc/postfix/sasl_passwd
|
|
postmap hash:/etc/postfix/sasl_passwd
|
|
postconf -e "smtp_sasl_auth_enable=yes"
|
|
postconf -e "smtp_sasl_password_maps=hash:/etc/postfix/sasl_passwd"
|
|
postconf -e "smtp_sasl_security_options=noanonymous"
|
|
else
|
|
echo " without any authentication. Make sure your server is configured to accept emails coming from this IP."
|
|
fi
|
|
else
|
|
echo "- Will try to deliver emails directly to the final server. Make sure your DNS is setup properly!"
|
|
postconf -# relayhost
|
|
postconf -# smtp_sasl_auth_enable
|
|
postconf -# smtp_sasl_password_maps
|
|
postconf -# smtp_sasl_security_options
|
|
fi
|
|
|
|
# Set up my networks to list only networks in the local loopback range
|
|
#network_table=/etc/postfix/network_table
|
|
#touch $network_table
|
|
#echo "127.0.0.0/8 any_value" > $network_table
|
|
#echo "10.0.0.0/8 any_value" >> $network_table
|
|
#echo "172.16.0.0/12 any_value" >> $network_table
|
|
#echo "192.168.0.0/16 any_value" >> $network_table
|
|
## Ignore IPv6 for now
|
|
##echo "fd00::/8" >> $network_table
|
|
#postmap $network_table
|
|
#postconf -e mynetworks=hash:$network_table
|
|
|
|
if [ ! -z "$MYNETWORKS" ]; then
|
|
postconf -e mynetworks=$MYNETWORKS
|
|
else
|
|
postconf -e "mynetworks=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16"
|
|
fi
|
|
|
|
# Split with space
|
|
if [ ! -z "$ALLOWED_SENDER_DOMAINS" ]; then
|
|
echo -n "- Setting up allowed SENDER domains:"
|
|
allowed_senders=/etc/postfix/allowed_senders
|
|
rm -f $allowed_senders $allowed_senders.db > /dev/null
|
|
touch $allowed_senders
|
|
for i in $ALLOWED_SENDER_DOMAINS; do
|
|
echo -n " $i"
|
|
echo -e "$i\tOK" >> $allowed_senders
|
|
done
|
|
echo
|
|
postmap $allowed_senders
|
|
|
|
postconf -e "smtpd_restriction_classes=allowed_domains_only"
|
|
postconf -e "allowed_domains_only=permit_mynetworks, reject_non_fqdn_sender reject"
|
|
postconf -e "smtpd_recipient_restrictions=reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_unverified_recipient, check_sender_access hash:$allowed_senders, reject"
|
|
else
|
|
postconf -# "smtpd_restriction_classes"
|
|
postconf -e "smtpd_recipient_restrictions=reject_non_fqdn_recipient,reject_unknown_recipient_domain,reject_unverified_recipient"
|
|
fi
|
|
|
|
# Use 587 (submission)
|
|
sed -i -r -e 's/^#submission/submission/' /etc/postfix/master.cf
|
|
|
|
if [ -d /docker-init.db/ ]; then
|
|
echo "- Executing any found custom scripts..."
|
|
for f in /docker-init.db/*; do
|
|
case "$f" in
|
|
*.sh) chmod +x "$f"; echo -e"\trunning $f"; . "$f" ;;
|
|
*) echo "$0: ignoring $f" ;;
|
|
esac
|
|
done
|
|
fi
|
|
|
|
echo "- Staring rsyslog and postfix"
|
|
exec supervisord -c /etc/supervisord.conf
|