smtprelay: add smtps listener
This commit is contained in:
parent
5d1e1f0546
commit
25531ec8dc
3 changed files with 17 additions and 11 deletions
|
|
@ -1,13 +1,17 @@
|
||||||
FROM alpine
|
FROM alpine
|
||||||
RUN apk --update --no-cache add shadow opensmtpd opensmtpd-filter-dkimsign && \
|
RUN set -eux; \
|
||||||
install -dm 711 /var/spool/smtpd && \
|
apk --update --no-cache add shadow opensmtpd opensmtpd-filter-dkimsign; \
|
||||||
groupmod -g 601 smtpd && \
|
install -dm 711 /var/spool/smtpd; \
|
||||||
groupmod -g 602 smtpq && \
|
groupmod -g 601 smtpd; \
|
||||||
groupmod -g 603 dkimsign && \
|
groupmod -g 602 smtpq; \
|
||||||
usermod -u 601 -g smtpd smtpd && \
|
groupmod -g 603 dkimsign; \
|
||||||
usermod -u 602 -g smtpq smtpq && \
|
usermod -u 601 -g smtpd smtpd; \
|
||||||
usermod -u 603 -g dkimsign dkimsign && \
|
usermod -u 602 -g smtpq smtpq; \
|
||||||
chgrp smtpq /usr/sbin/smtpctl && \
|
usermod -u 603 -g dkimsign dkimsign; \
|
||||||
chmod g+s /usr/sbin/smtpctl && \
|
chgrp smtpq /usr/sbin/smtpctl; \
|
||||||
|
chmod g+s /usr/sbin/smtpctl; \
|
||||||
apk del shadow
|
apk del shadow
|
||||||
ENTRYPOINT ["smtpd", "-d"]
|
EXPOSE 25
|
||||||
|
EXPOSE 465
|
||||||
|
EXPOSE 587
|
||||||
|
CMD ["smtpd", "-d"]
|
||||||
|
|
|
||||||
|
|
@ -10,4 +10,5 @@ services:
|
||||||
- ./opensmtpd:/etc/smtpd:ro
|
- ./opensmtpd:/etc/smtpd:ro
|
||||||
- spool:/var/spool/smtpd
|
- spool:/var/spool/smtpd
|
||||||
ports:
|
ports:
|
||||||
|
- 465:465
|
||||||
- 587:587
|
- 587:587
|
||||||
|
|
|
||||||
|
|
@ -5,6 +5,7 @@ table creds file:/etc/smtpd/creds
|
||||||
|
|
||||||
filter "dkimsign" proc-exec "filter-dkimsign -d abzw.de -d codehal.de -s lok01 -k /etc/smtpd/dkim_rsa4096.key" user dkimsign group dkimsign
|
filter "dkimsign" proc-exec "filter-dkimsign -d abzw.de -d codehal.de -s lok01 -k /etc/smtpd/dkim_rsa4096.key" user dkimsign group dkimsign
|
||||||
|
|
||||||
|
listen on eth0 port 465 smtps pki smtprelay.abzw.de auth <creds>
|
||||||
listen on eth0 port 587 tls-require pki smtprelay.abzw.de auth <creds>
|
listen on eth0 port 587 tls-require pki smtprelay.abzw.de auth <creds>
|
||||||
listen on 127.0.0.1 port 10027 tag DKIM_SIGNED filter "dkimsign"
|
listen on 127.0.0.1 port 10027 tag DKIM_SIGNED filter "dkimsign"
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue