0fb43f4916
[Docker API] Create pipe to pass Rspamd UI worker password [Dovecot] Pull Spamassassin ruleset to be read by Rspamd (MANY THANKS to Peer Heinlein!) [Dovecot] Garbage collector for deleted maildirs (set keep time via MAILDIR_GC_TIME which defaults to 1440 minutes) [Web] Flush memcached after mailbox item changes, fixes #1808 [Web] Fix duplicate IDs, fixes #1792 [Compose] Use SQL sockets [PHP-FPM] Update APCu and Redis libs [Dovecot] Encrypt maildir with global key pair in crypt-vol-1 (BACKUP!), also fixes #1791 [Web] Fix deletion of spam aliases [Helper] Add "crypt" to backup script [Helper] Override file for external SQL socket (not supported!) [Compose] New images for Rspamd, PHP-FPM, SOGo, Dovecot, Docker API, Watchdog, ACME, Postfix
261 lines
7.3 KiB
Bash
Executable File
261 lines
7.3 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
trap "postfix stop" EXIT
|
|
|
|
[[ ! -d /opt/postfix/conf/sql/ ]] && mkdir -p /opt/postfix/conf/sql/
|
|
|
|
cat <<EOF > /etc/aliases
|
|
null: /dev/null
|
|
ham: "|/usr/local/bin/rspamd-pipe-ham"
|
|
spam: "|/usr/local/bin/rspamd-pipe-spam"
|
|
EOF
|
|
newaliases;
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_relay_recipient_maps.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT DISTINCT
|
|
CASE WHEN '%d' IN (
|
|
SELECT domain FROM domain
|
|
WHERE relay_all_recipients=1
|
|
AND domain='%d'
|
|
AND backupmx=1
|
|
)
|
|
THEN '%s' ELSE (
|
|
SELECT goto FROM alias WHERE address='%s' AND active='1'
|
|
)
|
|
END AS result;
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_tls_enforce_in_policy.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT IF(EXISTS(
|
|
SELECT 'TLS_ACTIVE' FROM alias
|
|
LEFT OUTER JOIN mailbox ON mailbox.username = alias.goto
|
|
WHERE (address='%s'
|
|
OR address IN (
|
|
SELECT CONCAT('%u', '@', target_domain) FROM alias_domain
|
|
WHERE alias_domain='%d'
|
|
)
|
|
) AND json_extract(attributes, '$.tls_enforce_in') LIKE '%%1%%' AND mailbox.active = '1'
|
|
), 'reject_plaintext_session', NULL) AS 'tls_enforce_in';
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_sender_dependent_default_transport_maps.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT GROUP_CONCAT(transport SEPARATOR '') AS transport_maps
|
|
FROM (
|
|
SELECT IF(EXISTS(SELECT 'smtp_type' FROM alias
|
|
LEFT OUTER JOIN mailbox ON mailbox.username = alias.goto
|
|
WHERE (address = '%s'
|
|
OR address IN (
|
|
SELECT CONCAT('%u', '@', target_domain) FROM alias_domain
|
|
WHERE alias_domain = '%d'
|
|
)
|
|
)
|
|
AND json_extract(attributes, '$.tls_enforce_out') LIKE '%%1%%'
|
|
AND mailbox.active = '1'
|
|
), 'smtp_enforced_tls:', 'smtp:') AS 'transport'
|
|
UNION ALL
|
|
SELECT hostname AS transport FROM relayhosts
|
|
LEFT OUTER JOIN domain ON domain.relayhost = relayhosts.id
|
|
WHERE relayhosts.active = '1'
|
|
AND domain = '%d'
|
|
OR domain IN (
|
|
SELECT target_domain FROM alias_domain
|
|
WHERE alias_domain = '%d'
|
|
)
|
|
)
|
|
AS transport_view;
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_sasl_passwd_maps.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT CONCAT_WS(':', username, password) AS auth_data FROM relayhosts
|
|
WHERE id IN (
|
|
SELECT relayhost FROM domain
|
|
WHERE CONCAT('@', domain) = '%s'
|
|
OR '%s' IN (
|
|
SELECT CONCAT('@', alias_domain) FROM alias_domain
|
|
)
|
|
)
|
|
AND username != '';
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_alias_domain_catchall_maps.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT goto FROM alias, alias_domain
|
|
WHERE alias_domain.alias_domain = '%d'
|
|
AND alias.address = CONCAT('@', alias_domain.target_domain)
|
|
AND alias.active = 1 AND alias_domain.active='1'
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_alias_domain_maps.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT username FROM mailbox, alias_domain
|
|
WHERE alias_domain.alias_domain = '%d'
|
|
AND mailbox.username = CONCAT('%u', '@', alias_domain.target_domain)
|
|
AND mailbox.active = '1'
|
|
AND alias_domain.active='1'
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_alias_maps.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT goto FROM alias
|
|
WHERE address='%s'
|
|
AND active='1';
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_recipient_bcc_maps.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT bcc_dest FROM bcc_maps
|
|
WHERE local_dest='%s'
|
|
AND type='rcpt'
|
|
AND active='1';
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_sender_bcc_maps.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT bcc_dest FROM bcc_maps
|
|
WHERE local_dest='%s'
|
|
AND type='sender'
|
|
AND active='1';
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_recipient_canonical_maps.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT new_dest FROM recipient_maps
|
|
WHERE old_dest='%s'
|
|
AND active='1';
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_domains_maps.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT alias_domain from alias_domain WHERE alias_domain='%s' AND active='1'
|
|
UNION
|
|
SELECT domain FROM domain
|
|
WHERE domain='%s'
|
|
AND active = '1'
|
|
AND backupmx = '0'
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_mailbox_maps.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT maildir FROM mailbox WHERE username='%s' AND active = '1'
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_relay_domain_maps.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT domain FROM domain WHERE domain='%s' AND backupmx = '1' AND active = '1'
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_sender_acl.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
# First select queries domain and alias_domain to determine if domains are active.
|
|
query = SELECT goto FROM alias
|
|
WHERE address='%s'
|
|
AND active='1'
|
|
AND (domain IN
|
|
(SELECT domain FROM domain
|
|
WHERE domain='%d'
|
|
AND active='1')
|
|
OR domain in (
|
|
SELECT alias_domain FROM alias_domain
|
|
WHERE alias_domain='%d'
|
|
AND active='1'
|
|
)
|
|
)
|
|
UNION
|
|
SELECT logged_in_as FROM sender_acl
|
|
WHERE send_as='@%d'
|
|
OR send_as='%s'
|
|
OR send_as='*'
|
|
OR send_as IN (
|
|
SELECT CONCAT('@',target_domain) FROM alias_domain
|
|
WHERE alias_domain = '%d')
|
|
OR send_as IN (
|
|
SELECT CONCAT('%u','@',target_domain) FROM alias_domain
|
|
WHERE alias_domain = '%d')
|
|
AND logged_in_as NOT IN (
|
|
SELECT goto FROM alias
|
|
WHERE address='%s')
|
|
UNION
|
|
SELECT username FROM mailbox, alias_domain
|
|
WHERE alias_domain.alias_domain = '%d'
|
|
AND mailbox.username = CONCAT('%u','@',alias_domain.target_domain)
|
|
AND mailbox.active ='1'
|
|
AND alias_domain.active='1'
|
|
EOF
|
|
|
|
cat <<EOF > /opt/postfix/conf/sql/mysql_virtual_spamalias_maps.cf
|
|
user = ${DBUSER}
|
|
password = ${DBPASS}
|
|
hosts = unix:/var/run/mysqld/mysqld.sock
|
|
dbname = ${DBNAME}
|
|
query = SELECT goto FROM spamalias
|
|
WHERE address='%s'
|
|
AND validity >= UNIX_TIMESTAMP()
|
|
EOF
|
|
|
|
# Reset GPG key permissions
|
|
mkdir -p /var/lib/zeyple/keys
|
|
chmod 700 /var/lib/zeyple/keys
|
|
chown -R 600:600 /var/lib/zeyple/keys
|
|
|
|
# Fix Postfix permissions
|
|
chgrp -R postdrop /var/spool/postfix/public
|
|
chgrp -R postdrop /var/spool/postfix/maildrop
|
|
postfix set-permissions
|
|
|
|
# Check Postfix configuration
|
|
postconf -c /opt/postfix/conf
|
|
|
|
if [[ $? != 0 ]]; then
|
|
echo "Postfix configuration error, refusing to start."
|
|
exit 1
|
|
else
|
|
postfix -c /opt/postfix/conf start
|
|
sleep 126144000
|
|
fi
|