mirror of
https://github.com/zokradonh/kopano-docker
synced 2025-07-09 23:49:01 +00:00
Compare commits
7 Commits
master
...
webapp/3.4
Author | SHA1 | Date | |
---|---|---|---|
|
a183ac1f8d | ||
|
a656ddb8f5 | ||
|
a2511f4f44 | ||
|
0b686587c2 | ||
|
c44017b3e3 | ||
|
c08bdfc6a9 | ||
|
5523f4c984 |
3
.gitignore
vendored
3
.gitignore
vendored
@ -2,4 +2,5 @@
|
|||||||
**/.vscode
|
**/.vscode
|
||||||
*.yml
|
*.yml
|
||||||
docker-compose.yml
|
docker-compose.yml
|
||||||
certs/*
|
ssl/*
|
||||||
|
data/*
|
||||||
|
6
Makefile
6
Makefile
@ -32,6 +32,7 @@ tag:
|
|||||||
docker tag $(docker_repo)/kopano_$(component) $(docker_repo)/kopano_$(component):${$(component)_version}
|
docker tag $(docker_repo)/kopano_$(component) $(docker_repo)/kopano_$(component):${$(component)_version}
|
||||||
@echo 'create tag latest'
|
@echo 'create tag latest'
|
||||||
docker tag $(docker_repo)/kopano_$(component) $(docker_repo)/kopano_$(component):latest
|
docker tag $(docker_repo)/kopano_$(component) $(docker_repo)/kopano_$(component):latest
|
||||||
|
git commit -m 'ci: committing changes for $(component)' -- $(component) || true
|
||||||
git tag $(component)/${$(component)_version} || true
|
git tag $(component)/${$(component)_version} || true
|
||||||
|
|
||||||
tag-base:
|
tag-base:
|
||||||
@ -43,14 +44,11 @@ tag-core:
|
|||||||
tag-webapp:
|
tag-webapp:
|
||||||
component=webapp make tag
|
component=webapp make tag
|
||||||
|
|
||||||
git-commit:
|
|
||||||
git add -A && git commit -m "ci: commit changes before tagging"
|
|
||||||
|
|
||||||
# Docker publish
|
# Docker publish
|
||||||
repo-login:
|
repo-login:
|
||||||
docker login -u $(docker_login) -p $(docker_pwd)
|
docker login -u $(docker_login) -p $(docker_pwd)
|
||||||
|
|
||||||
publish: git-commit repo-login publish-base publish-core publish-webapp
|
publish: repo-login publish-base publish-core publish-webapp
|
||||||
git push
|
git push
|
||||||
git push origin --tags
|
git push origin --tags
|
||||||
|
|
||||||
|
@ -1,9 +1,111 @@
|
|||||||
version: '3'
|
version: "3"
|
||||||
|
|
||||||
services:
|
services:
|
||||||
|
web:
|
||||||
|
image: abiosoft/caddy:0.10.4
|
||||||
|
restart: always
|
||||||
|
privileged: true
|
||||||
|
links:
|
||||||
|
- kwebapp
|
||||||
|
#- kzpush
|
||||||
|
ports:
|
||||||
|
- "10080:80"
|
||||||
|
- "10443:443"
|
||||||
|
volumes:
|
||||||
|
- ./web/Caddyfile:/etc/Caddyfile
|
||||||
|
- ./data/web:/root/.caddy
|
||||||
|
|
||||||
|
mail:
|
||||||
|
image: tvial/docker-mailserver:latest
|
||||||
|
restart: always
|
||||||
|
hostname: mail
|
||||||
|
domainname: kopano.demo # change here
|
||||||
|
container_name: mail
|
||||||
|
ports:
|
||||||
|
- "25:25"
|
||||||
|
volumes:
|
||||||
|
- ./data/mail/data:/var/mail
|
||||||
|
- ./data/mail/state:/var/mail-state
|
||||||
|
- ./mail/config:/tmp/docker-mailserver/
|
||||||
|
- ./data/web/acme-v01.api.letsencrypt.org/sites/mail.kopano.demo:/tmp/ssl:ro
|
||||||
|
environment:
|
||||||
|
- TZ=Europe/Berlin
|
||||||
|
- ENABLE_SPAMASSASSIN=1
|
||||||
|
- ENABLE_CLAMAV=1
|
||||||
|
- ENABLE_FAIL2BAN=1
|
||||||
|
- ENABLE_POSTGREY=1
|
||||||
|
- ONE_DIR=1
|
||||||
|
- DMS_DEBUG=0
|
||||||
|
- SSL_TYPE=manual
|
||||||
|
- SSL_CERT_PATH=/tmp/ssl/mail.kopano.demo.crt
|
||||||
|
- SSL_KEY_PATH=/tmp/ssl/mail.kopano.demo.key
|
||||||
|
- ENABLE_LDAP=1
|
||||||
|
- LDAP_SERVER_HOST=ldaps://ldapserver:ldapport #change here
|
||||||
|
- LDAP_SEARCH_BASE=OU=MyUsers,DC=domain,DC=tld #change here
|
||||||
|
- LDAP_BIND_DN=cn=SOME_STANDARD_USER,OU=MyUsers,DC=domain,DC=tld #change here
|
||||||
|
- LDAP_BIND_PW=PASSWORD_OF_SOME_STANDARD_USER #change here
|
||||||
|
- LDAP_QUERY_FILTER_USER=(&(objectClass=user)(|(mail=%s)(otherMailbox=%s)))
|
||||||
|
- LDAP_QUERY_FILTER_GROUP=(&(objectclass=group)(mail=%s))
|
||||||
|
- LDAP_QUERY_FILTER_ALIAS=(&(objectClass=user)(otherMailbox=%s))
|
||||||
|
- LDAP_QUERY_FILTER_DOMAIN=(&(|(mail=*@%s)(otherMailbox=*@%s)(mailGroupMember=*@%s))(kopanoAccount=1)(|(objectClass=user)(objectclass=group)))
|
||||||
|
- ENABLE_SASLAUTHD=1
|
||||||
|
- SASLAUTHD_LDAP_SERVER=ldaps://ldapserver:ldapport #change here
|
||||||
|
- SASLAUTHD_LDAP_BIND_DN=cn=SOME_STANDARD_USER,OU=MyUsers,DC=domain,DC=tld #change here
|
||||||
|
- SASLAUTHD_LDAP_PASSWORD=PASSWORD_OF_SOME_STANDARD_USER #change here
|
||||||
|
- SASLAUTHD_LDAP_SEARCH_BASE=OU=MyUsers,DC=domain,DC=tld #change here
|
||||||
|
- SASLAUTHD_LDAP_FILTER=(&(sAMAccountName=%U)(objectClass=person))
|
||||||
|
- SASLAUTHD_MECHANISMS=ldap
|
||||||
|
- POSTMASTER_ADDRESS=postmaster@domain.tld #change here
|
||||||
|
- SMTP_ONLY=1
|
||||||
|
- PERMIT_DOCKER=network
|
||||||
|
- ENABLE_POSTFIX_VIRTUAL_TRANSPORT=1
|
||||||
|
- POSTFIX_DAGENT=lmtp:kdagent:2003
|
||||||
|
- REPORT_RECIPIENT=1
|
||||||
|
networks:
|
||||||
|
- kopanonet
|
||||||
|
cap_add:
|
||||||
|
- NET_ADMIN
|
||||||
|
- SYS_PTRACE
|
||||||
|
|
||||||
|
# TODO find good example ldap container
|
||||||
|
db:
|
||||||
|
image: mariadb:10.3.10-bionic
|
||||||
|
restart: always
|
||||||
|
container_name: kopano_db
|
||||||
|
volumes:
|
||||||
|
- ./data/mysql/:/var/lib/mysql
|
||||||
|
environment:
|
||||||
|
- MYSQL_ROOT_PASSWORD=YOUR_MYSQL_ROOT_PASSWORD #change here
|
||||||
|
- MYSQL_PASSWORD=YOUR_PASSWORD #change here
|
||||||
|
- MYSQL_DATABASE=kopano
|
||||||
|
- MYSQL_USER=kopano
|
||||||
|
networks:
|
||||||
|
- kopanonet
|
||||||
|
|
||||||
|
kwebapp:
|
||||||
|
image: zokradonh/kopano_webapp:latest
|
||||||
|
hostname: kwebapp
|
||||||
|
container_name: kopano_webapp
|
||||||
|
links:
|
||||||
|
- kserver
|
||||||
|
volumes:
|
||||||
|
- ./data/z-push-states/:/var/lib/z-push/
|
||||||
|
- ./ssl/:/kopano/ssl
|
||||||
|
- ./data/socket/:/run/kopano
|
||||||
|
environment:
|
||||||
|
- TZ=Europe/Berlin
|
||||||
|
networks:
|
||||||
|
- web
|
||||||
|
- kopanonet
|
||||||
|
|
||||||
|
kssl:
|
||||||
|
image: zokradonh/kopano_ssl
|
||||||
|
container_name: kopano_ssl
|
||||||
|
volumes:
|
||||||
|
- ./ssl/:/kopano/ssl
|
||||||
|
|
||||||
kserver:
|
kserver:
|
||||||
image: zokradonh/kopano_core:${CORE_VERSION}
|
image: zokradonh/kopano_core:latest
|
||||||
hostname: kserver
|
hostname: kserver
|
||||||
container_name: kopano_server
|
container_name: kopano_server
|
||||||
links:
|
links:
|
||||||
@ -36,207 +138,10 @@ services:
|
|||||||
networks:
|
networks:
|
||||||
- kopanonet
|
- kopanonet
|
||||||
volumes:
|
volumes:
|
||||||
- data:/kopano/data
|
- ./data/kopano/:/kopano/data
|
||||||
- sslcerts:/kopano/ssl
|
- ./ssl/:/kopano/ssl
|
||||||
|
|
||||||
kdagent:
|
|
||||||
image: zokradonh/kopano_core:${CORE_VERSION}
|
|
||||||
container_name: kopano_dagent
|
|
||||||
links:
|
|
||||||
- kserver
|
|
||||||
volumes:
|
|
||||||
- sslcerts:/kopano/ssl
|
|
||||||
environment:
|
|
||||||
- SERVICE_TO_START=dagent
|
|
||||||
- TZ=Europe/Berlin
|
|
||||||
- KCCONF_DAGENT_LOG_LEVEL=6
|
|
||||||
- KCCONF_DAGENT_SERVER_SOCKET=https://kserver:237/
|
|
||||||
- KCCONF_DAGENT_SSLKEY_FILE=/kopano/ssl/kdagent.pem
|
|
||||||
networks:
|
|
||||||
- kopanonet
|
|
||||||
|
|
||||||
kgateway:
|
|
||||||
image: zokradonh/kopano_core:${CORE_VERSION}
|
|
||||||
container_name: kopano_gateway
|
|
||||||
links:
|
|
||||||
- kserver
|
|
||||||
volumes:
|
|
||||||
- ./gatewaycerts/:/kopano/certs/
|
|
||||||
environment:
|
|
||||||
- SERVICE_TO_START=gateway
|
|
||||||
- TZ=Europe/Berlin
|
|
||||||
- KCCONF_GATEWAY_SERVER_SOCKET=http://kserver:236/
|
|
||||||
- KCCONF_GATEWAY_SSL_PRIVATE_KEY_FILE=/kopano/certs/yourcert.key # change here
|
|
||||||
- KCCONF_GATEWAY_SSL_CERTIFICATE_FILE=/kopano/certs/yourcert.pem # change here
|
|
||||||
networks:
|
|
||||||
- kopanonet
|
|
||||||
|
|
||||||
kical:
|
|
||||||
image: zokradonh/kopano_core:${CORE_VERSION}
|
|
||||||
container_name: kopano_ical
|
|
||||||
links:
|
|
||||||
- kserver
|
|
||||||
environment:
|
|
||||||
- SERVICE_TO_START=ical
|
|
||||||
- TZ=Europe/Berlin
|
|
||||||
- KCCONF_ICAL_SERVER_SOCKET=http://kserver:236/
|
|
||||||
networks:
|
|
||||||
- kopanonet
|
|
||||||
|
|
||||||
kmonitor:
|
|
||||||
image: zokradonh/kopano_core:${CORE_VERSION}
|
|
||||||
container_name: kopano_monitor
|
|
||||||
links:
|
|
||||||
- kserver
|
|
||||||
volumes:
|
|
||||||
- sslcerts:/kopano/ssl
|
|
||||||
environment:
|
|
||||||
- SERVICE_TO_START=monitor
|
|
||||||
- TZ=Europe/Berlin
|
|
||||||
- KCCONF_MONITOR_SERVER_SOCKET=https://kserver:237/
|
|
||||||
- KCCONF_MONITOR_SSLKEY_FILE=/kopano/ssl/kmonitor.pem
|
|
||||||
networks:
|
|
||||||
- kopanonet
|
|
||||||
|
|
||||||
ksearch:
|
|
||||||
image: zokradonh/kopano_core:${CORE_VERSION}
|
|
||||||
container_name: kopano_search
|
|
||||||
links:
|
|
||||||
- kserver
|
|
||||||
volumes:
|
|
||||||
- sslcerts:/kopano/ssl
|
|
||||||
environment:
|
|
||||||
- SERVICE_TO_START=search
|
|
||||||
- TZ=Europe/Berlin
|
|
||||||
- KCCONF_SEARCH_SERVER_BIND_NAME=http://ksearch:2380
|
|
||||||
- KCCONF_SEARCH_SERVER_SOCKET=https://kserver:237/
|
|
||||||
- KCCONF_SEARCH_SSLKEY_FILE=/kopano/ssl/ksearch.pem
|
|
||||||
networks:
|
|
||||||
- kopanonet
|
|
||||||
|
|
||||||
kspooler:
|
|
||||||
image: zokradonh/kopano_core:${CORE_VERSION}
|
|
||||||
container_name: kopano_spooler
|
|
||||||
links:
|
|
||||||
- kserver
|
|
||||||
volumes:
|
|
||||||
- sslcerts:/kopano/ssl
|
|
||||||
environment:
|
|
||||||
- SERVICE_TO_START=spooler
|
|
||||||
- TZ=Europe/Berlin
|
|
||||||
- KCCONF_SPOOLER_SERVER_SOCKET=https://kserver:237/
|
|
||||||
- KCCONF_SPOOLER_LOG_LEVEL=4
|
|
||||||
- KCCONF_SPOOLER_SMTP_SERVER=kmta
|
|
||||||
- KCCONF_SPOOLER_SSLKEY_FILE=/kopano/ssl/kspooler.pem
|
|
||||||
networks:
|
|
||||||
- kopanonet
|
|
||||||
|
|
||||||
kwebapp:
|
|
||||||
image: zokradonh/kopano_webapp:${WEBAPP_VERSION}
|
|
||||||
hostname: kwebapp
|
|
||||||
container_name: kopano_webapp
|
|
||||||
links:
|
|
||||||
- kserver
|
|
||||||
#ports:
|
|
||||||
# - "8236:80"
|
|
||||||
# - "8237:443"
|
|
||||||
volumes:
|
|
||||||
- syncstates:/var/lib/z-push/
|
|
||||||
- sslcerts:/kopano/ssl
|
|
||||||
environment:
|
|
||||||
- TZ=Europe/Berlin
|
|
||||||
- KCCONF_SERVERHOSTNAME=kserver
|
|
||||||
- KCCONF_SERVERPORT=237
|
|
||||||
networks:
|
|
||||||
- web
|
|
||||||
- kopanonet
|
|
||||||
|
|
||||||
kssl:
|
|
||||||
image: zokradonh/kopano_ssl
|
|
||||||
container_name: kopano_ssl
|
|
||||||
volumes:
|
|
||||||
- sslcerts:/kopano/ssl
|
|
||||||
|
|
||||||
kmta:
|
|
||||||
image: tvial/docker-mailserver:latest
|
|
||||||
hostname: myhost #change here
|
|
||||||
domainname: domain.tld #change here
|
|
||||||
#dns: 127.0.0.1
|
|
||||||
container_name: kopano_mta
|
|
||||||
#links:
|
|
||||||
# - adtunnel
|
|
||||||
ports:
|
|
||||||
- "25:25"
|
|
||||||
# - "143:143"
|
|
||||||
# - "587:587"
|
|
||||||
# - "993:993"
|
|
||||||
volumes:
|
|
||||||
- tmpmaildata:/var/mail
|
|
||||||
- tmpmailstate:/var/mail-state
|
|
||||||
- ./mtaconfig/:/tmp/docker-mailserver/ # create this dir
|
|
||||||
environment:
|
|
||||||
- TZ=Europe/Berlin
|
|
||||||
- ENABLE_SPAMASSASSIN=1
|
|
||||||
- ENABLE_CLAMAV=1
|
|
||||||
- ENABLE_FAIL2BAN=1
|
|
||||||
- ENABLE_POSTGREY=1
|
|
||||||
- TLS_LEVEL=intermediate
|
|
||||||
- POSTGREY_DELAY=10
|
|
||||||
- ONE_DIR=1
|
|
||||||
- DMS_DEBUG=0
|
|
||||||
- ENABLE_LDAP=1
|
|
||||||
- LDAP_SERVER_HOST=ldaps://ldapserver:ldapport #change here
|
|
||||||
- LDAP_SEARCH_BASE=OU=MyUsers,DC=domain,DC=tld #change here
|
|
||||||
- LDAP_BIND_DN=cn=SOME_STANDARD_USER,OU=MyUsers,DC=domain,DC=tld #change here
|
|
||||||
- LDAP_BIND_PW=PASSWORD_OF_SOME_STANDARD_USER #change here
|
|
||||||
- LDAP_QUERY_FILTER_USER=(&(objectClass=user)(|(mail=%s)(otherMailbox=%s)))
|
|
||||||
- LDAP_QUERY_FILTER_GROUP=(&(objectclass=group)(mail=%s))
|
|
||||||
- LDAP_QUERY_FILTER_ALIAS=(&(objectClass=user)(otherMailbox=%s))
|
|
||||||
- LDAP_QUERY_FILTER_DOMAIN=(&(|(mail=*@%s)(otherMailbox=*@%s)(mailGroupMember=*@%s))(kopanoAccount=1)(|(objectClass=user)(objectclass=group)))
|
|
||||||
- ENABLE_SASLAUTHD=1
|
|
||||||
- SASLAUTHD_LDAP_SERVER=ldaps://ldapserver:ldapport #change here
|
|
||||||
- SASLAUTHD_LDAP_BIND_DN=cn=SOME_STANDARD_USER,OU=MyUsers,DC=domain,DC=tld #change here
|
|
||||||
- SASLAUTHD_LDAP_PASSWORD=PASSWORD_OF_SOME_STANDARD_USER #change here
|
|
||||||
- SASLAUTHD_LDAP_SEARCH_BASE=OU=MyUsers,DC=domain,DC=tld #change here
|
|
||||||
- SASLAUTHD_LDAP_FILTER=(&(sAMAccountName=%U)(objectClass=person))
|
|
||||||
- SASLAUTHD_MECHANISMS=ldap
|
|
||||||
- POSTMASTER_ADDRESS=postmaster@domain.tld #change here
|
|
||||||
- SMTP_ONLY=1
|
|
||||||
- PERMIT_DOCKER=network
|
|
||||||
- ENABLE_POSTFIX_VIRTUAL_TRANSPORT=1
|
|
||||||
- POSTFIX_DAGENT=lmtp:kdagent:2003
|
|
||||||
- REPORT_RECIPIENT=1
|
|
||||||
networks:
|
|
||||||
- kopanonet
|
|
||||||
cap_add:
|
|
||||||
- NET_ADMIN
|
|
||||||
- SYS_PTRACE
|
|
||||||
|
|
||||||
db:
|
|
||||||
image: mariadb
|
|
||||||
restart: always
|
|
||||||
container_name: kopano_db
|
|
||||||
volumes:
|
|
||||||
- db:/var/lib/mysql
|
|
||||||
environment:
|
|
||||||
- MYSQL_ROOT_PASSWORD=YOUR_MYSQL_ROOT_PASSWORD #change here
|
|
||||||
- MYSQL_PASSWORD=YOUR_PASSWORD #change here
|
|
||||||
- MYSQL_DATABASE=kopano
|
|
||||||
- MYSQL_USER=kopano
|
|
||||||
networks:
|
|
||||||
- kopanonet
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
db:
|
|
||||||
data:
|
|
||||||
syncstates:
|
|
||||||
sslcerts:
|
|
||||||
tmpmaildata:
|
|
||||||
tmpmailstate:
|
|
||||||
|
|
||||||
networks:
|
networks:
|
||||||
web: # this requires an external docker container that is a http reverse proxy (e.g. haproxy)
|
web:
|
||||||
external:
|
|
||||||
name: haproxy_webrproxynet
|
|
||||||
kopanonet:
|
kopanonet:
|
||||||
driver: bridge
|
driver: bridge
|
||||||
|
298
docker-compose.yml-wip
Normal file
298
docker-compose.yml-wip
Normal file
@ -0,0 +1,298 @@
|
|||||||
|
version: '3'
|
||||||
|
|
||||||
|
services:
|
||||||
|
|
||||||
|
kserver:
|
||||||
|
image: zokradonh/kopano_core:${CORE_VERSION}
|
||||||
|
hostname: kserver
|
||||||
|
container_name: kopano_server
|
||||||
|
links:
|
||||||
|
- db
|
||||||
|
depends_on:
|
||||||
|
- "kssl"
|
||||||
|
environment:
|
||||||
|
- SERVICE_TO_START=server
|
||||||
|
- TZ=Europe/Berlin
|
||||||
|
- KCCONF_SERVER_COREDUMP_ENABLED=no
|
||||||
|
- KCCONF_SERVER_LOG_LEVEL=4
|
||||||
|
- KCCONF_SERVER_MYSQL_HOST=db
|
||||||
|
- KCCONF_SERVER_MYSQL_PORT=3306
|
||||||
|
- KCCONF_SERVER_MYSQL_DATABASE=kopano
|
||||||
|
- KCCONF_SERVER_MYSQL_USER=root
|
||||||
|
- KCCONF_SERVER_MYSQL_PASSWORD=YOUR_MYSQL_ROOT_PASSWORD #change here
|
||||||
|
- KCCONF_SERVER_SERVER_SSL_KEY_FILE=/kopano/ssl/kserver.pem
|
||||||
|
- KCCONF_SERVER_SERVER_SSL_CA_FILE=/kopano/ssl/ca.pem
|
||||||
|
- KCCONF_SERVER_SSLKEYS_PATH=/kopano/ssl/clients
|
||||||
|
- KCCONF_SERVER_PROXY_HEADER=* # delete line if webapp is not behind reverse proxy
|
||||||
|
- KCCONF_SERVER_SYSTEM_EMAIL_ADDRESS=hostmaster@domain.tld #change here
|
||||||
|
- KCCONF_SERVER_DISABLED_FEATURES=pop3
|
||||||
|
- KCCONF_SERVER_SEARCH_SOCKET=http://ksearch:2380/
|
||||||
|
- KCCONF_LDAP_LDAP_URI=ldaps://ldapserver:ldapport #change here
|
||||||
|
- KCCONF_LDAP_LDAP_BIND_USER=cn=SOME_STANDARD_USER,OU=MyUsers,DC=domain,DC=tld #change here
|
||||||
|
- KCCONF_LDAP_LDAP_BIND_PASSWD=PASSWORD_OF_STANDARD_USER #change here
|
||||||
|
- KCCONF_LDAP_LDAP_SEARCH_BASE=OU=MyUsers,dc=domain,dc=tld #change here
|
||||||
|
- KCCOMMENT_LDAP_1=!include /usr/share/kopano/ldap.openldap.cfg #delete if you want openldap
|
||||||
|
- KCUNCOMMENT_LDAP_1=!include /usr/share/kopano/ldap.active-directory.cfg #delete if you want openldap
|
||||||
|
networks:
|
||||||
|
- kopanonet
|
||||||
|
volumes:
|
||||||
|
- data:/kopano/data
|
||||||
|
- sslcerts:/kopano/ssl
|
||||||
|
|
||||||
|
kdagent:
|
||||||
|
image: zokradonh/kopano_core:${CORE_VERSION}
|
||||||
|
container_name: kopano_dagent
|
||||||
|
links:
|
||||||
|
- kserver
|
||||||
|
volumes:
|
||||||
|
- sslcerts:/kopano/ssl
|
||||||
|
environment:
|
||||||
|
- SERVICE_TO_START=dagent
|
||||||
|
- TZ=Europe/Berlin
|
||||||
|
- KCCONF_DAGENT_LOG_LEVEL=6
|
||||||
|
- KCCONF_DAGENT_SERVER_SOCKET=https://kserver:237/
|
||||||
|
- KCCONF_DAGENT_SSLKEY_FILE=/kopano/ssl/kdagent.pem
|
||||||
|
networks:
|
||||||
|
- kopanonet
|
||||||
|
|
||||||
|
kgateway:
|
||||||
|
image: zokradonh/kopano_core:${CORE_VERSION}
|
||||||
|
container_name: kopano_gateway
|
||||||
|
links:
|
||||||
|
- kserver
|
||||||
|
volumes:
|
||||||
|
- ./gatewaycerts/:/kopano/certs/
|
||||||
|
environment:
|
||||||
|
- SERVICE_TO_START=gateway
|
||||||
|
- TZ=Europe/Berlin
|
||||||
|
- KCCONF_GATEWAY_SERVER_SOCKET=http://kserver:236/
|
||||||
|
- KCCONF_GATEWAY_SSL_PRIVATE_KEY_FILE=/kopano/certs/yourcert.key # change here
|
||||||
|
- KCCONF_GATEWAY_SSL_CERTIFICATE_FILE=/kopano/certs/yourcert.pem # change here
|
||||||
|
networks:
|
||||||
|
- kopanonet
|
||||||
|
|
||||||
|
kical:
|
||||||
|
image: zokradonh/kopano_core:${CORE_VERSION}
|
||||||
|
container_name: kopano_ical
|
||||||
|
links:
|
||||||
|
- kserver
|
||||||
|
environment:
|
||||||
|
- SERVICE_TO_START=ical
|
||||||
|
- TZ=Europe/Berlin
|
||||||
|
- KCCONF_ICAL_SERVER_SOCKET=http://kserver:236/
|
||||||
|
networks:
|
||||||
|
- kopanonet
|
||||||
|
|
||||||
|
kmonitor:
|
||||||
|
image: zokradonh/kopano_core:${CORE_VERSION}
|
||||||
|
container_name: kopano_monitor
|
||||||
|
links:
|
||||||
|
- kserver
|
||||||
|
volumes:
|
||||||
|
- sslcerts:/kopano/ssl
|
||||||
|
environment:
|
||||||
|
- SERVICE_TO_START=monitor
|
||||||
|
- TZ=Europe/Berlin
|
||||||
|
- KCCONF_MONITOR_SERVER_SOCKET=https://kserver:237/
|
||||||
|
- KCCONF_MONITOR_SSLKEY_FILE=/kopano/ssl/kmonitor.pem
|
||||||
|
networks:
|
||||||
|
- kopanonet
|
||||||
|
|
||||||
|
ksearch:
|
||||||
|
image: zokradonh/kopano_core:${CORE_VERSION}
|
||||||
|
container_name: kopano_search
|
||||||
|
links:
|
||||||
|
- kserver
|
||||||
|
volumes:
|
||||||
|
- sslcerts:/kopano/ssl
|
||||||
|
environment:
|
||||||
|
- SERVICE_TO_START=search
|
||||||
|
- TZ=Europe/Berlin
|
||||||
|
- KCCONF_SEARCH_SERVER_BIND_NAME=http://ksearch:2380
|
||||||
|
- KCCONF_SEARCH_SERVER_SOCKET=https://kserver:237/
|
||||||
|
- KCCONF_SEARCH_SSLKEY_FILE=/kopano/ssl/ksearch.pem
|
||||||
|
networks:
|
||||||
|
- kopanonet
|
||||||
|
|
||||||
|
kspooler:
|
||||||
|
image: zokradonh/kopano_core:${CORE_VERSION}
|
||||||
|
container_name: kopano_spooler
|
||||||
|
links:
|
||||||
|
- kserver
|
||||||
|
volumes:
|
||||||
|
- sslcerts:/kopano/ssl
|
||||||
|
environment:
|
||||||
|
- SERVICE_TO_START=spooler
|
||||||
|
- TZ=Europe/Berlin
|
||||||
|
- KCCONF_SPOOLER_SERVER_SOCKET=https://kserver:237/
|
||||||
|
- KCCONF_SPOOLER_LOG_LEVEL=4
|
||||||
|
- KCCONF_SPOOLER_SMTP_SERVER=kmta
|
||||||
|
- KCCONF_SPOOLER_SSLKEY_FILE=/kopano/ssl/kspooler.pem
|
||||||
|
networks:
|
||||||
|
- kopanonet
|
||||||
|
|
||||||
|
kwebapp:
|
||||||
|
image: zokradonh/kopano_webapp:${WEBAPP_VERSION}
|
||||||
|
hostname: kwebapp
|
||||||
|
container_name: kopano_webapp
|
||||||
|
links:
|
||||||
|
- kserver
|
||||||
|
#ports:
|
||||||
|
# - "8236:80"
|
||||||
|
# - "8237:443"
|
||||||
|
volumes:
|
||||||
|
- syncstates:/var/lib/z-push/
|
||||||
|
- sslcerts:/kopano/ssl
|
||||||
|
environment:
|
||||||
|
- TZ=Europe/Berlin
|
||||||
|
- KCCONF_SERVERHOSTNAME=kserver
|
||||||
|
- KCCONF_SERVERPORT=237
|
||||||
|
networks:
|
||||||
|
- web
|
||||||
|
- kopanonet
|
||||||
|
|
||||||
|
kssl:
|
||||||
|
image: zokradonh/kopano_ssl
|
||||||
|
container_name: kopano_ssl
|
||||||
|
volumes:
|
||||||
|
- sslcerts:/kopano/ssl
|
||||||
|
|
||||||
|
kmta:
|
||||||
|
image: tvial/docker-mailserver:latest
|
||||||
|
hostname: myhost #change here
|
||||||
|
domainname: domain.tld #change here
|
||||||
|
#dns: 127.0.0.1
|
||||||
|
container_name: kopano_mta
|
||||||
|
#links:
|
||||||
|
# - adtunnel
|
||||||
|
ports:
|
||||||
|
- "25:25"
|
||||||
|
# - "143:143"
|
||||||
|
# - "587:587"
|
||||||
|
# - "993:993"
|
||||||
|
volumes:
|
||||||
|
- tmpmaildata:/var/mail
|
||||||
|
- tmpmailstate:/var/mail-state
|
||||||
|
- ./mtaconfig/:/tmp/docker-mailserver/ # create this dir
|
||||||
|
environment:
|
||||||
|
- TZ=Europe/Berlin
|
||||||
|
- ENABLE_SPAMASSASSIN=1
|
||||||
|
- ENABLE_CLAMAV=1
|
||||||
|
- ENABLE_FAIL2BAN=1
|
||||||
|
- ENABLE_POSTGREY=1
|
||||||
|
- TLS_LEVEL=intermediate
|
||||||
|
- POSTGREY_DELAY=10
|
||||||
|
- ONE_DIR=1
|
||||||
|
- DMS_DEBUG=0
|
||||||
|
- ENABLE_LDAP=1
|
||||||
|
- LDAP_SERVER_HOST=ldaps://ldapserver:ldapport #change here
|
||||||
|
- LDAP_SEARCH_BASE=OU=MyUsers,DC=domain,DC=tld #change here
|
||||||
|
- LDAP_BIND_DN=cn=SOME_STANDARD_USER,OU=MyUsers,DC=domain,DC=tld #change here
|
||||||
|
- LDAP_BIND_PW=PASSWORD_OF_SOME_STANDARD_USER #change here
|
||||||
|
- LDAP_QUERY_FILTER_USER=(&(objectClass=user)(|(mail=%s)(otherMailbox=%s)))
|
||||||
|
- LDAP_QUERY_FILTER_GROUP=(&(objectclass=group)(mail=%s))
|
||||||
|
- LDAP_QUERY_FILTER_ALIAS=(&(objectClass=user)(otherMailbox=%s))
|
||||||
|
- LDAP_QUERY_FILTER_DOMAIN=(&(|(mail=*@%s)(otherMailbox=*@%s)(mailGroupMember=*@%s))(kopanoAccount=1)(|(objectClass=user)(objectclass=group)))
|
||||||
|
- ENABLE_SASLAUTHD=1
|
||||||
|
- SASLAUTHD_LDAP_SERVER=ldaps://ldapserver:ldapport #change here
|
||||||
|
- SASLAUTHD_LDAP_BIND_DN=cn=SOME_STANDARD_USER,OU=MyUsers,DC=domain,DC=tld #change here
|
||||||
|
- SASLAUTHD_LDAP_PASSWORD=PASSWORD_OF_SOME_STANDARD_USER #change here
|
||||||
|
- SASLAUTHD_LDAP_SEARCH_BASE=OU=MyUsers,DC=domain,DC=tld #change here
|
||||||
|
- SASLAUTHD_LDAP_FILTER=(&(sAMAccountName=%U)(objectClass=person))
|
||||||
|
- SASLAUTHD_MECHANISMS=ldap
|
||||||
|
- POSTMASTER_ADDRESS=postmaster@domain.tld #change here
|
||||||
|
- SMTP_ONLY=1
|
||||||
|
- PERMIT_DOCKER=network
|
||||||
|
- ENABLE_POSTFIX_VIRTUAL_TRANSPORT=1
|
||||||
|
- POSTFIX_DAGENT=lmtp:kdagent:2003
|
||||||
|
- REPORT_RECIPIENT=1
|
||||||
|
networks:
|
||||||
|
- kopanonet
|
||||||
|
cap_add:
|
||||||
|
- NET_ADMIN
|
||||||
|
- SYS_PTRACE
|
||||||
|
|
||||||
|
db:
|
||||||
|
image: mariadb
|
||||||
|
restart: always
|
||||||
|
container_name: kopano_db
|
||||||
|
volumes:
|
||||||
|
- db:/var/lib/mysql
|
||||||
|
environment:
|
||||||
|
- MYSQL_ROOT_PASSWORD=YOUR_MYSQL_ROOT_PASSWORD #change here
|
||||||
|
- MYSQL_PASSWORD=YOUR_PASSWORD #change here
|
||||||
|
- MYSQL_DATABASE=kopano
|
||||||
|
- MYSQL_USER=kopano
|
||||||
|
networks:
|
||||||
|
- kopanonet
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
db:
|
||||||
|
data:
|
||||||
|
syncstates:
|
||||||
|
sslcerts:
|
||||||
|
tmpmaildata:
|
||||||
|
tmpmailstate:
|
||||||
|
|
||||||
|
networks:
|
||||||
|
web:
|
||||||
|
external:
|
||||||
|
driver: default
|
||||||
|
kopanonet:
|
||||||
|
driver: bridge
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
version: "3"
|
||||||
|
|
||||||
|
services:
|
||||||
|
rainloop:
|
||||||
|
image: hardware/rainloop
|
||||||
|
links:
|
||||||
|
- mail
|
||||||
|
volumes:
|
||||||
|
- ./data/rainloop:/rainloop/data
|
||||||
|
|
||||||
|
mail:
|
||||||
|
image: tvial/docker-mailserver:latest
|
||||||
|
restart: always
|
||||||
|
hostname: mail
|
||||||
|
domainname: fancydomain.tld
|
||||||
|
container_name: mail
|
||||||
|
ports:
|
||||||
|
- "25:25"
|
||||||
|
- "143:143"
|
||||||
|
- "587:587"
|
||||||
|
- "993:993"
|
||||||
|
- "4190:4190"
|
||||||
|
volumes:
|
||||||
|
- ./data/mail/data:/var/mail
|
||||||
|
- ./data/mail/state:/var/mail-state
|
||||||
|
- ./mail/config:/tmp/docker-mailserver/
|
||||||
|
- ./data/entry/acme/acme-v01.api.letsencrypt.org/sites/mail.fancydomain.tld:/tmp/ssl:ro
|
||||||
|
environment:
|
||||||
|
- ENABLE_SPAMASSASSIN=1
|
||||||
|
- ENABLE_CLAMAV=1
|
||||||
|
- ENABLE_FAIL2BAN=1
|
||||||
|
- ENABLE_POSTGREY=1
|
||||||
|
- ONE_DIR=1
|
||||||
|
- DMS_DEBUG=0
|
||||||
|
- ENABLE_MANAGESIEVE=1
|
||||||
|
- SSL_TYPE=manual
|
||||||
|
- SSL_CERT_PATH=/tmp/ssl/mail.fancydomain.tld.crt
|
||||||
|
- SSL_KEY_PATH=/tmp/ssl/mail.fancydomain.tld.key
|
||||||
|
cap_add:
|
||||||
|
- NET_ADMIN
|
||||||
|
|
||||||
|
entry:
|
||||||
|
image: abiosoft/caddy:0.10.4
|
||||||
|
restart: always
|
||||||
|
privileged: true
|
||||||
|
links:
|
||||||
|
- rainloop
|
||||||
|
ports:
|
||||||
|
- "80:80"
|
||||||
|
- "443:443"
|
||||||
|
volumes:
|
||||||
|
- ./entry/Caddyfile:/etc/Caddyfile
|
||||||
|
- ./data/entry:/root/.caddy
|
Loading…
x
Reference in New Issue
Block a user