witten
/
provisioning
1
1
Fork 0
Code Issues 7 Pull Requests 0 Releases 0 Activity
Browse Source

Basic Mailu mail server configuration.

master
Dan Helfman 3 years ago
parent
b2cc063ab1
commit
5b966789f7
7 changed files with 250 additions and 42 deletions
Split View
Diff Options
Show Stats Download Patch File Download Diff File
  1. +1
    -0
      .gitignore
  2. +41
    -38
      group_vars/vault.yml
  3. +3
    -0
      roles/mail_server_docker/meta/main.yml
  4. +76
    -0
      roles/mail_server_docker/tasks/main.yml
  5. +115
    -0
      roles/mail_server_docker/templates/configuration.j2
  6. +4
    -0
      roles/web_server/tasks/main.yml
  7. +10
    -4
      site.yml

+ 1
- 0
.gitignore View File

@ -0,0 +1 @@
site.retry

+ 41
- 38
group_vars/vault.yml View File

@ -1,39 +1,42 @@
$ANSIBLE_VAULT;1.1;AES256
38386533303731643564366434373066323562643961323036663431666263356134376261366236
3235353765353862623962353834356330633432376139610a636263313364313139303930346136
36316630326435623564356364333532303136333031303833396331363438623031393730313036
3037666466366434390a336231626561363166633032313339623839353266323538646166323137
32363734373062383161366364616239316539643031653332363366303532656465646136396239
61323736313532643036393539363466386164313138623434653634373563636332306131306561
36363936613162313663353234356335646131306236666239316533613833353163623861386663
65316161313961653235653564633933383366356231373535623362613134356262333565666331
30313531663032613832643661303236643866323137373364313639613435336636356330653235
34666165393637356463616462343634346436633635633239393830656361326232613265356565
61303335646335353265313637653932383133343961373232613432663536633639323861396135
63663930663537666165313731656265383632613065343362313662663563396433316634626134
37306465633938636364396566373631326563396535366435323338653937613535363536643330
30326533363431383830313435323632613762343936323938366236326665373532393636323438
39396531656336343264663835653732623830306435646461316538336332343234376138633537
31393362376130663832316132643338343636336461656665653039393730346532613239616430
65303333623338636334656330396633356333616566383031373762626165366139373030656564
35343061386265346464303237646530663438306531333834313466343933363363336564316261
39613839366365376161616162636538333865623761306231366232666665336534613636303430
33613361633637666136306563396538323761323333643764623466616163643135636238613566
38666335366165316133313331623436366564316532393961313035356464616166363164356138
38643762303138343264303664646538336661316439666662616232333738396531306165633166
37376663383365396536303634393334373837353135386231303265636563346465396533326139
34343465616663323935373861343461383630663230386164343337303932623134383361316561
31613132313364663637656133393465666239666362663965623233366165393839343938376539
31303330346365666339383334323937373231643861633637333638353630656566663334393936
32313737636266323233313635396430326330393466343437313031306562656165616439333130
35376636306133633030663137393364396636663338313630653366616237643061393166616330
37646530363164616137363032323634393732326365646361313639653236383164373831326361
37383038666365653562386531346134393638373165323563363464353834613066623837633061
63356630313838323031646435333062396138613661643837613162653931626264653139656235
30353830303838623837646131383138353333626264313262383366336532323934343539306231
36623834623139386233653038623366613330386163626539376431613864656461323364373935
33303839613462386433343163643461626535336461303765616536626539393239383634386532
39633362653166393761623935613239306133346635623330393734656436376535333538366663
66333132633965626434363033336432363034353438643439313362613339613134626134333236
34363662386265303962316266613533373666613737663532356536383930636632323038393631
6465393563633134363863333532343162303036663339326566
30343263353163636636376538376330383038353737313137346436373536356539303237343532
6137346636383666656161663166333532393931363535380a616131393636643336363061623736
30303030653033653438316334313032386636653033343830313132613430326566636439366537
6334363330363965310a623734666137373164316532333739633461366562303134373831353931
63396432653461376136633530316663363763613466313563303334303465613734366537636231
38633165613864363862616233323462316665386263376537636164316132356335303963306664
65353230636139343638343633643763366131373536623939663532613631323137663865346465
31613633333335663732303762383530373931656661306239313863316565366566343838616533
62633936336531613039323231663933373863353035393461396463636330346237666136636331
62643030376137656261356661316530343965646430313764323334623431303737663338326335
37626134633163336234636337386463396238306639333166323338643732653338313662373431
62323261663938396661656566353735663137636565383865613439656138633433623930383265
39653133373534386364393034666637306466313865306637643063393130333837336566653266
32333839313365373064373133336334393431623033636633306165396263656663376635366132
33386134353365323434343231643032636536303832383738636466316663326536303430313630
61613834306662366236326432333961633233663762616631363330333638363965643963333235
63346134363334323139323031383030633939646537643562633066656162626131653764303632
31316164346662623462663966656636376130633066313763613861613630383564613738363330
35393839643235383038323737303338383939613734656436656664323235653661623832326661
62376564363131393233623464343636323065643138333638623531666663613633346336626237
39313134326165616231656533346536343037393462373336323733666165623962666136643963
36313434356266396163343164333966633930633665333166623562366535663439336563663137
39343236326165666539633739326432393163346633326433396161346262623132336530393666
64623464653363343261306635646561373766653263663033326661363136613162333833356534
62323065366433326364653735366532626337303838313338663363356461373530363831343464
64333536313031653939356639313666333261336163336362633263383662326434363534383733
63396338303938376633623137346630656131653130373637376464343835663837666165643934
64306134666338393335616332326337363933316433333034613161636433613133353830376636
36303536306163336637633733356662303263633636646232626536653162396462306434653836
36643363623866313137363033396531373436303330633133633738653864633063323132313066
39343933626464623564363661323939643732663266323235376438393966656533383339656535
30643432663764653662303831373962653436306666656461386565346534366566306363373531
39633963326564386534353338336239326336383031393830373534396362336364386464666532
38616464306137356438306232333031306263333363373638656132353534626631313138373930
30356238656234663261323363366664386631656266653132323035656134356436313965613837
30616238636461636237326639613736316339626237386333653738393530613330386137633530
38613462613831366133613262366466303736336435366438373136363062383637326331666161
65353265643365383931356164336564303838326464353765636265306563353965343432303733
37333536316562636366393034353164326633333831623533393730376532303930613030613262
62303238303766663135666363653834313435636234613738616238336238653233363031633331
6266

+ 3
- 0
roles/mail_server_docker/meta/main.yml View File

@ -0,0 +1,3 @@
dependencies:
- role: docker_compose
- role: web_server

+ 76
- 0
roles/mail_server_docker/tasks/main.yml View File

@ -0,0 +1,76 @@
- name: create configuration file directoroy
file: path=/etc/mailu state=directory
tags:
- mail_server_docker
- name: write configuration file
template:
src: configuration.j2
dest: /etc/mailu/config
mode: 0600
tags:
- mail_server_docker
- name: run mail server containers
docker_service:
project_name: mail_server
pull: yes
definition:
version: '3'
services:
redis:
image: redis:alpine
restart: always
volumes:
- "/var/lib/mailu/redis:/data"
imap:
image: mailu/dovecot:{{ mail_server_mailu_version }}
restart: always
env_file: /etc/mailu/config
volumes:
- "/var/lib/mailu/data:/data"
- "/var/lib/mailu/mail:/mail"
- "/var/lib/mailu/overrides:/overrides"
smtp:
image: mailu/postfix:{{ mail_server_mailu_version }}
restart: always
env_file: /etc/mailu/config
volumes:
- "/var/lib/mailu/data:/data"
- "/var/lib/mailu/overrides:/overrides"
antispam:
image: mailu/rspamd:{{ mail_server_mailu_version }}
restart: always
env_file: /etc/mailu/config
volumes:
- "/var/lib/mailu/filter:/var/lib/rspamd"
- "/var/lib/mailu/dkim:/dkim"
- "/var/lib/mailu/overrides/rspamd:/etc/rspamd/override.d"
admin:
image: mailu/admin:{{ mail_server_mailu_version }}
restart: always
env_file: /etc/mailu/config
environment:
VIRTUAL_HOST: "{{ mail_server_hostname }}"
LETSENCRYPT_HOST: "{{ mail_server_hostname }}"
LETSENCRYPT_EMAIL: "{{ admin_email }}"
volumes:
- "/var/lib/mailu/data:/data"
- "/var/lib/mailu/dkim:/dkim"
- /var/run/docker.sock:/var/run/docker.sock:ro
expose:
- "80"
depends_on:
- redis
fetchmail:
image: mailu/fetchmail:{{ mail_server_mailu_version }}
restart: always
env_file: /etc/mailu/config
volumes:
- "/var/lib/mailu/data:/data"
networks:
default:
external:
name: shared
tags:
- mail_server_docker

+ 115
- 0
roles/mail_server_docker/templates/configuration.j2 View File

@ -0,0 +1,115 @@
# Mailu main configuration file
#
# Most configuration variables can be modified through the Web interface,
# these few settings must however be configured before starting the mail
# server and require a restart upon change.
###################################
# Common configuration variables
###################################
# Set this to the path where Mailu data and configuration is stored
ROOT=/var/lib/mailu
# Mailu version to run (1.0, 1.1, etc. or master)
VERSION={{ mail_server_mailu_version }}
# Set to a randomly generated 16 bytes string
SECRET_KEY={{ mail_server_secret_key }}
# Address where listening ports should bind
BIND_ADDRESS4=127.0.0.1
BIND_ADDRESS6=::1
# Main mail domain
DOMAIN={{ mail_server_hostname }}
# Hostnames for this server, separated with comas
HOSTNAMES={{ mail_server_public_hostnames | join(',') }}
# Postmaster local part (will append the main mail domain)
POSTMASTER=admin
# Choose how secure connections will behave (value: letsencrypt, cert, notls, mail)
TLS_FLAVOR=letencrypt
# Authentication rate limit (per source IP address)
AUTH_RATELIMIT=10/minute;1000/hour
# Opt-out of statistics, replace with "True" to opt out
DISABLE_STATISTICS=True
###################################
# Optional features
###################################
# Expose the admin interface (value: true, false)
ADMIN=true
# Choose which webmail to run if any (values: roundcube, rainloop, none)
WEBMAIL=none
# Dav server implementation (value: radicale, none)
WEBDAV=none
# Antivirus solution (value: clamav, none)
ANTIVIRUS=none
###################################
# Mail settings
###################################
# Message size limit in bytes
# Default: accept messages up to 50MB
MESSAGE_SIZE_LIMIT=50000000
# Networks granted relay permissions, make sure that you include your Docker
# internal network (default to 172.17.0.0/16)
RELAYNETS=172.16.0.0/12
# Will relay all outgoing mails if configured
RELAYHOST=
# Fetchmail delay
FETCHMAIL_DELAY=600
# Recipient delimiter, character used to delimiter localpart from custom address part
# e.g. localpart+custom@domain;tld
RECIPIENT_DELIMITER=-
# DMARC rua and ruf email
DMARC_RUA=admin
DMARC_RUF=admin
# Weclome email, enable and set a topic and body if you wish to send welcome
# emails to all users.
WELCOME=false
WELCOME_SUBJECT=Welcome to your new email account
WELCOME_BODY=Welcome to your new email account. If you can read this, then it is configured properly!
###################################
# Web settings
###################################
# Path to the admin interface if enabled
WEB_ADMIN=/admin
# Path to the webmail if enabled
WEB_WEBMAIL=/webmail
# Website name
SITENAME=Mail
# Linked Website URL
WEBSITE=https://{{ mail_server_hostname }}
###################################
# Advanced settings
###################################
# Docker-compose project name, this will prepended to containers names.
COMPOSE_PROJECT_NAME=mail_server
# Default password scheme used for newly created accounts and changed passwords
# (value: SHA512-CRYPT, SHA256-CRYPT, MD5-CRYPT, CRYPT)
PASSWORD_SCHEME=SHA512-CRYPT

+ 4
- 0
roles/web_server/tasks/main.yml View File

@ -35,6 +35,10 @@
- /etc/nginx/vhost.d:/etc/nginx/vhost.d
- /etc/nginx/htpasswd:/etc/nginx/htpasswd:ro
- /usr/share/nginx/html:/usr/share/nginx/html
networks:
default:
aliases:
- front # For mailu.
nginx-docker-gen:
image: jwilder/docker-gen
restart: always


+ 10
- 4
site.yml View File

@ -40,6 +40,8 @@
- hosts: apps.torsion.org
vars_files:
- group_vars/vault.yml
vars:
admin_email: webmaster@torsion.org
roles:
- common
- role: backup_docker
@ -48,18 +50,22 @@
backup_ssh_key_file: apps-root
backup_known_hosts_key_file: rsync-net
backup_encryption_passphrase: "{{ backup_encryption_passphrase_apps }}"
- role: mail_server_docker
mail_server_hostname: mail2.torsion.org
mail_server_secret_key: "{{ mail_server_secret_key_apps }}"
mail_server_public_hostnames:
- torsion.org
- luminotes.com
- coderific.com
mail_server_mailu_version: 1.5.1
- role: calendar_server
calendar_server_hostname: calendar.torsion.org
admin_email: webmaster@torsion.org
- role: mediagoblin
mediagoblin_from_email: media@torsion.org
mediagoblin_hostname: media.torsion.org
mediagoblin_email_host: mail.torsion.org
mediagoblin_email_port: 465
admin_email: webmaster@torsion.org
- role: gitea
gitea_hostname: projects.torsion.org
admin_email: webmaster@torsion.org
- role: container_dashboard
container_dashboard_hostname: apps.torsion.org
admin_email: webmaster@torsion.org

Write Preview
Loading…
Cancel
Save