first commit

compose.yml

@@ -0,0 +1,44 @@
+services:
+  mailserver:
+    image: ghcr.io/docker-mailserver/docker-mailserver:latest
+    container_name: mailserver
+    # Provide the FQDN of your mail server here (Your DNS MX record should point to this value)
+    hostname: mail.netig.net
+    networks:
+      - mailserver
+    env_file: .env
+    # More information about the mail-server ports:
+    # https://docker-mailserver.github.io/docker-mailserver/latest/config/security/understanding-the-ports/
+    ports:
+      - "25:25"    # SMTP  (explicit TLS => STARTTLS, Authentication is DISABLED => use port 465/587 instead)
+      - "143:143"  # IMAP4 (explicit TLS => STARTTLS)
+      - "465:465"  # ESMTP (implicit TLS)
+      - "587:587"  # ESMTP (explicit TLS => STARTTLS)
+      - "993:993"  # IMAP4 (implicit TLS)
+    volumes:
+      - ./volumes/mail-data/:/var/mail/
+      - ./volumes/mail-state/:/var/mail-state/
+      - ./volumes/mail-logs/:/var/log/mail/
+      - ./volumes/config/:/tmp/docker-mailserver/
+      - /etc/localtime:/etc/localtime:ro
+      # mail.netig.net certs
+      - ../caddy/volumes/data/caddy/certificates/acme-v02.api.letsencrypt.org-directory/mail.netig.net/mail.netig.net.crt:/etc/letsencrypt/live/mail.netig.net/fullchain.pem:ro
+      - ../caddy/volumes/data/caddy/certificates/acme-v02.api.letsencrypt.org-directory/mail.netig.net/mail.netig.net.key:/etc/letsencrypt/live/mail.netig.net/privkey.pem:ro
+     # mail.lachaussettedebrasparts.fr certs
+      - ../caddy/volumes/data/caddy/certificates/acme-v02.api.letsencrypt.org-directory/mail.lachaussettedebrasparts.fr/mail.lachaussettedebrasparts.fr.crt:/etc/letsencrypt/live/mail.lachaussettedebrasparts.fr/fullchain.pem:ro
+      - ../caddy/volumes/data/caddy/certificates/acme-v02.api.letsencrypt.org-directory/mail.lachaussettedebrasparts.fr/mail.lachaussettedebrasparts.fr.key:/etc/letsencrypt/live/mail.lachaussettedebrasparts.fr/privkey.pem:ro
+     # mail.lachaussettedelocquirec.fr certs
+      - ../caddy/volumes/data/caddy/certificates/acme-v02.api.letsencrypt.org-directory/mail.lachaussettedelocquirec.fr/mail.lachaussettedelocquirec.fr.crt:/etc/letsencrypt/live/mail.lachaussettedelocquirec.fr/fullchain.pem:ro
+      - ../caddy/volumes/data/caddy/certificates/acme-v02.api.letsencrypt.org-directory/mail.lachaussettedelocquirec.fr/mail.lachaussettedelocquirec.fr.key:/etc/letsencrypt/live/mail.lachaussettedelocquirec.fr/privkey.pem:ro
+    restart: always
+    stop_grace_period: 1m
+    # Uncomment if using `ENABLE_FAIL2BAN=1`:
+    # cap_add:
+    #   - NET_ADMIN
+    healthcheck:
+      test: "ss --listening --tcp | grep -P 'LISTEN.+:smtp' || exit 1"
+      timeout: 3s
+      retries: 0
+networks:
+  mailserver:
+    external: true