API tools faq
paste
Advertisement
Guest User

docker-compose.yml

a guest
Oct 3rd, 2022
129
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
YAML 23.13 KB | None | 0 0
raw download clone embed print report
  1. version: '2.1'
  2. services:
  4.     unbound-mailcow:
  5.       image: mailcow/unbound:1.16
  6.       environment:
  7.        - TZ=${TZ}
  8.       volumes:
  9.        - ./data/hooks/unbound:/hooks:Z
  10.         - ./data/conf/unbound/unbound.conf:/etc/unbound/unbound.conf:ro,Z
  11.       restart: always
  12.       tty: true
  13.       networks:
  14.         mailcow-network:
  15.           ipv4_address: ${IPV4_NETWORK:-172.22.1}.254
  16.           aliases:
  17.            - unbound
  18.  
  19.     mysql-mailcow:
  20.       image: mariadb:10.5
  21.       depends_on:
  22.        - unbound-mailcow
  23.       stop_grace_period: 45s
  24.       volumes:
  25.        - ./data/mysql/data/:/var/lib/mysql/:Z
  26.         - ./data/mysql/sock/:/var/run/mysqld/:z
  27.         - ./data/conf/mysql/:/etc/mysql/conf.d/:ro,Z
  28.       environment:
  29.        - TZ=${TZ}
  30.         - MYSQL_ROOT_PASSWORD=${DBROOT}
  31.         - MYSQL_DATABASE=${DBNAME}
  32.         - MYSQL_USER=${DBUSER}
  33.         - MYSQL_PASSWORD=${DBPASS}
  34.         - MYSQL_INITDB_SKIP_TZINFO=1
  35.       restart: always
  36.       ports:
  37.        - "${SQL_PORT:-127.0.0.1:13306}:3306"
  38.       networks:
  39.         mailcow-network:
  40.           aliases:
  41.            - mysql
  42.  
  43.     redis-mailcow:
  44.       image: redis:6-alpine
  45.       volumes:
  46.        - ./data/redis/:/data/:Z
  47.       restart: always
  48.       ports:
  49.        - "${REDIS_PORT:-127.0.0.1:7654}:6379"
  50.       environment:
  51.        - TZ=${TZ}
  52.       sysctls:
  53.        - net.core.somaxconn=4096
  54.       networks:
  55.         mailcow-network:
  56.           ipv4_address: ${IPV4_NETWORK:-172.22.1}.249
  57.           aliases:
  58.            - redis
  59.  
  60.     clamd-mailcow:
  61.       image: mailcow/clamd:1.54
  62.       restart: always
  63.       depends_on:
  64.        - unbound-mailcow
  65.       dns:
  66.        - ${IPV4_NETWORK:-172.22.1}.254
  67.       environment:
  68.        - TZ=${TZ}
  69.         - SKIP_CLAMD=${SKIP_CLAMD:-n}
  70.       volumes:
  71.        - ./data/conf/clamav/:/etc/clamav/:Z
  72.         - ./data/calmav/:/var/lib/clamav/:Z
  73.       networks:
  74.         mailcow-network:
  75.           aliases:
  76.            - clamd
  77.  
  78.     rspamd-mailcow:
  79.       image: mailcow/rspamd:1.90
  80.       stop_grace_period: 30s
  81.       depends_on:
  82.        - dovecot-mailcow
  83.       environment:
  84.        - TZ=${TZ}
  85.         - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  86.         - IPV6_NETWORK=${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
  87.         - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  88.         - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  89.       volumes:
  90.        - ./data/hooks/rspamd:/hooks:Z
  91.         - ./data/conf/rspamd/custom/:/etc/rspamd/custom:z
  92.         - ./data/conf/rspamd/override.d/:/etc/rspamd/override.d:Z
  93.         - ./data/conf/rspamd/local.d/:/etc/rspamd/local.d:Z
  94.         - ./data/conf/rspamd/plugins.d/:/etc/rspamd/plugins.d:Z
  95.         - ./data/conf/rspamd/lua/:/etc/rspamd/lua/:ro,Z
  96.         - ./data/conf/rspamd/rspamd.conf.local:/etc/rspamd/rspamd.conf.local:Z
  97.         - ./data/conf/rspamd/rspamd.conf.override:/etc/rspamd/rspamd.conf.override:Z
  98.         - ./data/rspamd/:/var/lib/rspamd/:z
  99.       restart: always
  100.       hostname: rspamd
  101.       dns:
  102.        - ${IPV4_NETWORK:-172.22.1}.254
  103.       networks:
  104.         mailcow-network:
  105.           aliases:
  106.            - rspamd
  107.  
  108.     php-fpm-mailcow:
  109.       image: mailcow/phpfpm:1.79
  110.       command: "php-fpm -d date.timezone=${TZ} -d expose_php=0"
  111.       depends_on:
  112.        - redis-mailcow
  113.       volumes:
  114.        - ./data/hooks/phpfpm:/hooks:Z
  115.         - ./data/web:/web:z
  116.         - ./data/conf/rspamd/dynmaps:/dynmaps:ro,z
  117.         - ./data/conf/rspamd/custom/:/rspamd_custom_maps:z
  118.         - ./data/rspamd/:/var//lib/rspamd/:z
  119.         - ./data/mysql/sock/:/var/run/mysqld/:z
  120.         - ./data/conf/sogo/:/etc/sogo/:z
  121.         - ./data/conf/rspamd/meta_exporter:/meta_exporter:ro,z
  122.         - ./data/conf/phpfpm/sogo-sso/:/etc/sogo-sso/:z
  123.         - ./data/conf/phpfpm/php-fpm.d/pools.conf:/usr/local/etc/php-fpm.d/z-pools.conf:Z
  124.         - ./data/conf/phpfpm/php-conf.d/opcache-recommended.ini:/usr/local/etc/php/conf.d/opcache-recommended.ini:Z
  125.         - ./data/conf/phpfpm/php-conf.d/upload.ini:/usr/local/etc/php/conf.d/upload.ini:Z
  126.         - ./data/conf/phpfpm/php-conf.d/other.ini:/usr/local/etc/php/conf.d/zzz-other.ini:Z
  127.         - ./data/conf/dovecot/global_sieve_before:/global_sieve/before:z
  128.         - ./data/conf/dovecot/global_sieve_after:/global_sieve/after:z
  129.         - ./data/assets/templates:/tpls:z
  130.         - ./data/conf/nginx/:/etc/nginx/conf.d/:z
  131.       dns:
  132.        - ${IPV4_NETWORK:-172.22.1}.254
  133.       environment:
  134.        - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  135.         - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  136.         - LOG_LINES=${LOG_LINES:-9999}
  137.         - TZ=${TZ}
  138.         - DBNAME=${DBNAME}
  139.         - DBUSER=${DBUSER}
  140.         - DBPASS=${DBPASS}
  141.         - MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
  142.         - MAILCOW_PASS_SCHEME=${MAILCOW_PASS_SCHEME:-BLF-CRYPT}
  143.         - IMAP_PORT=${IMAP_PORT:-143}
  144.         - IMAPS_PORT=${IMAPS_PORT:-993}
  145.         - POP_PORT=${POP_PORT:-110}
  146.         - POPS_PORT=${POPS_PORT:-995}
  147.         - SIEVE_PORT=${SIEVE_PORT:-4190}
  148.         - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  149.         - IPV6_NETWORK=${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
  150.         - SUBMISSION_PORT=${SUBMISSION_PORT:-587}
  151.         - SMTPS_PORT=${SMTPS_PORT:-465}
  152.         - SMTP_PORT=${SMTP_PORT:-25}
  153.         - API_KEY=${API_KEY:-invalid}
  154.         - API_KEY_READ_ONLY=${API_KEY_READ_ONLY:-invalid}
  155.         - API_ALLOW_FROM=${API_ALLOW_FROM:-invalid}
  156.         - COMPOSE_PROJECT_NAME=${COMPOSE_PROJECT_NAME:-mailcow-dockerized}
  157.         - SKIP_SOLR=${SKIP_SOLR:-y}
  158.         - SKIP_CLAMD=${SKIP_CLAMD:-n}
  159.         - SKIP_SOGO=${SKIP_SOGO:-n}
  160.         - ALLOW_ADMIN_EMAIL_LOGIN=${ALLOW_ADMIN_EMAIL_LOGIN:-n}
  161.         - MASTER=${MASTER:-y}
  162.         - DEV_MODE=${DEV_MODE:-n}
  163.         - WEBAUTHN_ONLY_TRUSTED_VENDORS=${WEBAUTHN_ONLY_TRUSTED_VENDORS:-n}
  164.       restart: always
  165.       networks:
  166.         mailcow-network:
  167.           aliases:
  168.            - phpfpm
  169.  
  170.     sogo-mailcow:
  171.       image: mailcow/sogo:1.111
  172.       environment:
  173.        - DBNAME=${DBNAME}
  174.         - DBUSER=${DBUSER}
  175.         - DBPASS=${DBPASS}
  176.         - TZ=${TZ}
  177.         - LOG_LINES=${LOG_LINES:-9999}
  178.         - MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
  179.         - MAILCOW_PASS_SCHEME=${MAILCOW_PASS_SCHEME:-BLF-CRYPT}
  180.         - ACL_ANYONE=${ACL_ANYONE:-disallow}
  181.         - ALLOW_ADMIN_EMAIL_LOGIN=${ALLOW_ADMIN_EMAIL_LOGIN:-n}
  182.         - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  183.         - SOGO_EXPIRE_SESSION=${SOGO_EXPIRE_SESSION:-480}
  184.         - SKIP_SOGO=${SKIP_SOGO:-n}
  185.         - MASTER=${MASTER:-y}
  186.         - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  187.         - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  188.       dns:
  189.        - ${IPV4_NETWORK:-172.22.1}.254
  190.       volumes:
  191.        - ./data/hooks/sogo:/hooks:Z
  192.         - ./data/conf/sogo/:/etc/sogo/:z
  193.         - ./data/web/inc/init_db.inc.php:/init_db.inc.php:Z
  194.         - ./data/conf/sogo/custom-favicon.ico:/usr/lib/GNUstep/SOGo/WebServerResources/img/sogo.ico:z
  195.         - ./data/conf/sogo/custom-theme.js:/usr/lib/GNUstep/SOGo/WebServerResources/js/theme.js:z
  196.         - ./data/conf/sogo//custom-sogo.js:/usr/lib/GNUstep/SOGo/WebServerResources/js/custom-sogo.js:z
  197.         - ./data/mysql/sock/:/var/run/mysqld/:z
  198.         - ./data/sogo/web/:/sogo_web/:z
  199.         - ./data/sogo/backup:/sogo_backup:Z
  200.       labels:
  201.         ofelia.enabled: "true"
  202.         ofelia.job-exec.sogo_sessions.schedule: "@every 1m"
  203.         ofelia.job-exec.sogo_sessions.command: "/bin/bash -c \"[[ $${MASTER} == y ]] && /usr/local/bin/gosu sogo /usr/sbin/sogo-tool expire-sessions $${SOGO_EXPIRE_SESSION} || exit 0\""
  204.         ofelia.job-exec.sogo_ealarms.schedule: "@every 1m"
  205.         ofelia.job-exec.sogo_ealarms.command: "/bin/bash -c \"[[ $${MASTER} == y ]] && /usr/local/bin/gosu sogo /usr/sbin/sogo-ealarms-notify -p /etc/sogo/sieve.creds || exit 0\""
  206.         ofelia.job-exec.sogo_eautoreply.schedule: "@every 5m"
  207.         ofelia.job-exec.sogo_eautoreply.command: "/bin/bash -c \"[[ $${MASTER} == y ]] && /usr/local/bin/gosu sogo /usr/sbin/sogo-tool update-autoreply -p /etc/sogo/sieve.creds || exit 0\""
  208.         ofelia.job-exec.sogo_backup.schedule: "@every 24h"
  209.         ofelia.job-exec.sogo_backup.command: "/bin/bash -c \"[[ $${MASTER} == y ]] && /usr/local/bin/gosu sogo /usr/sbin/sogo-tool backup /sogo_backup ALL || exit 0\""
  210.       restart: always
  211.       networks:
  212.         mailcow-network:
  213.           ipv4_address: ${IPV4_NETWORK:-172.22.1}.248
  214.           aliases:
  215.            - sogo
  216.  
  217.     dovecot-mailcow:
  218.       image: mailcow/dovecot:1.20
  219.       depends_on:
  220.        - mysql-mailcow
  221.       dns:
  222.        - ${IPV4_NETWORK:-172.22.1}.254
  223.       cap_add:
  224.        - NET_BIND_SERVICE
  225.       volumes:
  226.        - ./data/hooks/dovecot:/hooks:Z
  227.         - ./data/conf/dovecot:/etc/dovecot:z
  228.         - ./data/assets/ssl:/etc/ssl/mail/:ro,z
  229.         - ./data/conf/sogo/:/etc/sogo/:z
  230.         - ./data/conf/phpfpm/sogo-sso/:/etc/phpfpm/:z
  231.         - ./data/vmail/:/var/vmail/:Z
  232.         - ./data/vmail_index/:/var/vmail_index:Z
  233.         - ./data/crypt/:/mail_crypt/:z
  234.         - ./data/conf/rspamd/custom/:/etc/rspamd/custom:z
  235.         - ./data/assets/templates:/templates:z
  236.         - ./data/rspamd/:/var//lib/rspamd/:z
  237.         - ./data/mysql/sock/:/var/run/mysqld/:z
  238.       environment:
  239.        - DOVECOT_MASTER_USER=${DOVECOT_MASTER_USER:-}
  240.         - DOVECOT_MASTER_PASS=${DOVECOT_MASTER_PASS:-}
  241.         - LOG_LINES=${LOG_LINES:-9999}
  242.         - DBNAME=${DBNAME}
  243.         - DBUSER=${DBUSER}
  244.         - DBPASS=${DBPASS}
  245.         - TZ=${TZ}
  246.         - MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
  247.         - MAILCOW_PASS_SCHEME=${MAILCOW_PASS_SCHEME:-BLF-CRYPT}
  248.         - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  249.         - ALLOW_ADMIN_EMAIL_LOGIN=${ALLOW_ADMIN_EMAIL_LOGIN:-n}
  250.         - MAILDIR_GC_TIME=${MAILDIR_GC_TIME:-7200}
  251.         - ACL_ANYONE=${ACL_ANYONE:-disallow}
  252.         - SKIP_SOLR=${SKIP_SOLR:-y}
  253.         - MAILDIR_SUB=${MAILDIR_SUB:-}
  254.         - MASTER=${MASTER:-y}
  255.         - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  256.         - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  257.         - COMPOSE_PROJECT_NAME=${COMPOSE_PROJECT_NAME:-mailcow-dockerized}
  258.       ports:
  259.        - "${DOVEADM_PORT:-127.0.0.1:19991}:12345"
  260.         - "${IMAP_PORT:-143}:143"
  261.         - "${IMAPS_PORT:-993}:993"
  262.         - "${POP_PORT:-110}:110"
  263.         - "${POPS_PORT:-995}:995"
  264.         - "${SIEVE_PORT:-4190}:4190"
  265.       restart: always
  266.       tty: true
  267.       labels:
  268.         ofelia.enabled: "true"
  269.         ofelia.job-exec.dovecot_imapsync_runner.schedule: "@every 1m"
  270.         ofelia.job-exec.dovecot_imapsync_runner.no-overlap: "true"
  271.         ofelia.job-exec.dovecot_imapsync_runner.command: "/bin/bash -c \"[[ $${MASTER} == y ]] && /usr/local/bin/gosu nobody /usr/local/bin/imapsync_runner.pl || exit 0\""
  272.         ofelia.job-exec.dovecot_trim_logs.schedule: "@every 1m"
  273.         ofelia.job-exec.dovecot_trim_logs.command: "/bin/bash -c \"[[ $${MASTER} == y ]] && /usr/local/bin/gosu vmail /usr/local/bin/trim_logs.sh || exit 0\""
  274.         ofelia.job-exec.dovecot_quarantine.schedule: "@every 20m"
  275.         ofelia.job-exec.dovecot_quarantine.command: "/bin/bash -c \"[[ $${MASTER} == y ]] && /usr/local/bin/gosu vmail /usr/local/bin/quarantine_notify.py || exit 0\""
  276.         ofelia.job-exec.dovecot_clean_q_aged.schedule: "@every 24h"
  277.         ofelia.job-exec.dovecot_clean_q_aged.command: "/bin/bash -c \"[[ $${MASTER} == y ]] && /usr/local/bin/gosu vmail /usr/local/bin/clean_q_aged.sh || exit 0\""
  278.         ofelia.job-exec.dovecot_maildir_gc.schedule: "@every 30m"
  279.         ofelia.job-exec.dovecot_maildir_gc.command: "/bin/bash -c \"source /source_env.sh ; /usr/local/bin/gosu vmail /usr/local/bin/maildir_gc.sh\""
  280.         ofelia.job-exec.dovecot_sarules.schedule: "@every 24h"
  281.         ofelia.job-exec.dovecot_sarules.command: "/bin/bash -c \"/usr/local/bin/sa-rules.sh\""
  282.         ofelia.job-exec.dovecot_fts.schedule: "@every 24h"
  283.         ofelia.job-exec.dovecot_fts.command: "/usr/bin/curl http://solr:8983/solr/dovecot-fts/update?optimize=true"
  284.         ofelia.job-exec.dovecot_repl_health.schedule: "@every 5m"
  285.         ofelia.job-exec.dovecot_repl_health.command: "/bin/bash -c \"/usr/local/bin/gosu vmail /usr/local/bin/repl_health.sh\""
  286.       ulimits:
  287.         nproc: 65535
  288.         nofile:
  289.           soft: 20000
  290.           hard: 40000
  291.       networks:
  292.         mailcow-network:
  293.           ipv4_address: ${IPV4_NETWORK:-172.22.1}.250
  294.           aliases:
  295.            - dovecot
  296.  
  297.     postfix-mailcow:
  298.       image: mailcow/postfix:1.68
  299.       depends_on:
  300.        - mysql-mailcow
  301.       volumes:
  302.        - ./data/hooks/postfix:/hooks:Z
  303.         - ./data/conf/postfix:/opt/postfix/conf:z
  304.         - ./data/assets/ssl:/etc/ssl/mail/:ro,z
  305.         - ./data/postfix/:/var/spool/postfix/:z
  306.         - ./data/crypt/:/var/lib/zeyple:z
  307.         - ./data/rspamd/:/var/lib/rspamd/:z
  308.         - ./data/mysql/sock/:/var/run/mysqld/:z
  309.       environment:
  310.        - LOG_LINES=${LOG_LINES:-9999}
  311.         - TZ=${TZ}
  312.         - DBNAME=${DBNAME}
  313.         - DBUSER=${DBUSER}
  314.         - DBPASS=${DBPASS}
  315.         - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  316.         - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  317.         - MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
  318.       cap_add:
  319.        - NET_BIND_SERVICE
  320.       ports:
  321.        - "${SMTP_PORT:-25}:25"
  322.         - "${SMTPS_PORT:-465}:465"
  323.         - "${SUBMISSION_PORT:-587}:587"
  324.       restart: always
  325.       dns:
  326.        - ${IPV4_NETWORK:-172.22.1}.254
  327.       networks:
  328.         mailcow-network:
  329.           ipv4_address: ${IPV4_NETWORK:-172.22.1}.253
  330.           aliases:
  331.            - postfix
  332.  
  333.     memcached-mailcow:
  334.       image: memcached:alpine
  335.       restart: always
  336.       environment:
  337.        - TZ=${TZ}
  338.       networks:
  339.         mailcow-network:
  340.           aliases:
  341.            - memcached
  342.  
  343.     nginx-mailcow:
  344.       depends_on:
  345.        - sogo-mailcow
  346.         - php-fpm-mailcow
  347.         - redis-mailcow
  348.       image: nginx:mainline-alpine
  349.       dns:
  350.        - ${IPV4_NETWORK:-172.22.1}.254
  351.       command: /bin/sh -c "envsubst < /etc/nginx/conf.d/templates/listen_plain.template > /etc/nginx/conf.d/listen_plain.active &&
  352.        envsubst < /etc/nginx/conf.d/templates/listen_ssl.template > /etc/nginx/conf.d/listen_ssl.active &&
  353.        envsubst < /etc/nginx/conf.d/templates/sogo.template > /etc/nginx/conf.d/sogo.active &&
  354.        . /etc/nginx/conf.d/templates/server_name.template.sh > /etc/nginx/conf.d/server_name.active &&
  355.        . /etc/nginx/conf.d/templates/sites.template.sh > /etc/nginx/conf.d/sites.active &&
  356.        . /etc/nginx/conf.d/templates/sogo_eas.template.sh > /etc/nginx/conf.d/sogo_eas.active &&
  357.        nginx -qt &&
  358.        until ping phpfpm -c1 > /dev/null; do sleep 1; done &&
  359.        until ping sogo -c1 > /dev/null; do sleep 1; done &&
  360.        until ping redis -c1 > /dev/null; do sleep 1; done &&
  361.        until ping rspamd -c1 > /dev/null; do sleep 1; done &&
  362.        exec nginx -g 'daemon off;'"
  363.       environment:
  364.        - HTTPS_PORT=${HTTPS_PORT:-443}
  365.         - HTTP_PORT=${HTTP_PORT:-80}
  366.         - MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
  367.         - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  368.         - TZ=${TZ}
  369.         - SKIP_SOGO=${SKIP_SOGO:-n}
  370.         - ALLOW_ADMIN_EMAIL_LOGIN=${ALLOW_ADMIN_EMAIL_LOGIN:-n}
  371.         - ADDITIONAL_SERVER_NAMES=${ADDITIONAL_SERVER_NAMES:-}
  372.       volumes:
  373.        - ./data/web:/web:ro,z
  374.         - ./data/conf/rspamd/dynmaps:/dynmaps:ro,z
  375.         - ./data/assets/ssl/:/etc/ssl/mail/:ro,z
  376.         - ./data/conf/nginx/:/etc/nginx/conf.d/:z
  377.         - ./data/conf/rspamd/meta_exporter:/meta_exporter:ro,z
  378.         - ./data/sogo/web/:/usr/lib/GNUstep/SOGo//:z
  379.       ports:
  380.        - "${HTTPS_BIND:-}:${HTTPS_PORT:-443}:${HTTPS_PORT:-443}"
  381.         - "${HTTP_BIND:-}:${HTTP_PORT:-80}:${HTTP_PORT:-80}"
  382.       restart: always
  383.       networks:
  384.         mailcow-network:
  385.           aliases:
  386.            - nginx
  387.  
  388.     acme-mailcow:
  389.       depends_on:
  390.        - nginx-mailcow
  391.       image: mailcow/acme:1.82
  392.       dns:
  393.        - ${IPV4_NETWORK:-172.22.1}.254
  394.       environment:
  395.        - LOG_LINES=${LOG_LINES:-9999}
  396.         - ACME_CONTACT=${ACME_CONTACT:-}
  397.         - ADDITIONAL_SAN=${ADDITIONAL_SAN}
  398.         - MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
  399.         - DBNAME=${DBNAME}
  400.         - DBUSER=${DBUSER}
  401.         - DBPASS=${DBPASS}
  402.         - SKIP_LETS_ENCRYPT=${SKIP_LETS_ENCRYPT:-n}
  403.         - COMPOSE_PROJECT_NAME=${COMPOSE_PROJECT_NAME:-mailcow-dockerized}
  404.         - DIRECTORY_URL=${DIRECTORY_URL:-}
  405.         - ENABLE_SSL_SNI=${ENABLE_SSL_SNI:-n}
  406.         - SKIP_IP_CHECK=${SKIP_IP_CHECK:-n}
  407.         - SKIP_HTTP_VERIFICATION=${SKIP_HTTP_VERIFICATION:-n}
  408.         - ONLY_MAILCOW_HOSTNAME=${ONLY_MAILCOW_HOSTNAME:-n}
  409.         - LE_STAGING=${LE_STAGING:-n}
  410.         - TZ=${TZ}
  411.         - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  412.         - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  413.         - SNAT_TO_SOURCE=${SNAT_TO_SOURCE:-n}
  414.         - SNAT6_TO_SOURCE=${SNAT6_TO_SOURCE:-n}
  415.       volumes:
  416.        - ./data/web/.well-known/acme-challenge:/var/www/acme:z
  417.         - ./data/assets/ssl:/var/lib/acme/:z
  418.         - ./data/assets/ssl/-example:/var/lib/ssl-example/:ro,Z
  419.         - ./data/mysql/sock/:/var/run/mysqld/:z
  420.       restart: always
  421.       networks:
  422.         mailcow-network:
  423.           aliases:
  424.            - acme
  425.  
  426.     netfilter-mailcow:
  427.       image: mailcow/netfilter:1.48
  428.       stop_grace_period: 30s
  429.       depends_on:
  430.        - dovecot-mailcow
  431.         - postfix-mailcow
  432.         - sogo-mailcow
  433.         - php-fpm-mailcow
  434.         - redis-mailcow
  435.       restart: always
  436.       privileged: true
  437.       environment:
  438.        - TZ=${TZ}
  439.         - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  440.         - IPV6_NETWORK=${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
  441.         - SNAT_TO_SOURCE=${SNAT_TO_SOURCE:-n}
  442.         - SNAT6_TO_SOURCE=${SNAT6_TO_SOURCE:-n}
  443.         - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  444.         - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  445.       network_mode: "host"
  446.       volumes:
  447.        - /lib/modules:/lib/modules:ro
  448.  
  449.     watchdog-mailcow:
  450.       image: mailcow/watchdog:1.96
  451.       dns:
  452.        - ${IPV4_NETWORK:-172.22.1}.254
  453.       tmpfs:
  454.        - /tmp
  455.       volumes:
  456.        - ./data/rspamd/:/var//lib/rspamd/:z
  457.         - ./data/mysql/sock/:/var/run/mysqld/:z
  458.         - ./data/postfix/:/var/spool/postfix/:z
  459.         - ./data/assets/ssl:/etc/ssl/mail/:ro,z
  460.       restart: always
  461.       environment:
  462.        - IPV6_NETWORK=${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
  463.         - LOG_LINES=${LOG_LINES:-9999}
  464.         - TZ=${TZ}
  465.         - DBNAME=${DBNAME}
  466.         - DBUSER=${DBUSER}
  467.         - DBPASS=${DBPASS}
  468.         - DBROOT=${DBROOT}
  469.         - USE_WATCHDOG=${USE_WATCHDOG:-n}
  470.         - WATCHDOG_NOTIFY_EMAIL=${WATCHDOG_NOTIFY_EMAIL:-}
  471.         - WATCHDOG_NOTIFY_BAN=${WATCHDOG_NOTIFY_BAN:-y}
  472.         - WATCHDOG_SUBJECT=${WATCHDOG_SUBJECT:-Watchdog ALERT}
  473.         - WATCHDOG_EXTERNAL_CHECKS=${WATCHDOG_EXTERNAL_CHECKS:-n}
  474.         - WATCHDOG_MYSQL_REPLICATION_CHECKS=${WATCHDOG_MYSQL_REPLICATION_CHECKS:-n}
  475.         - WATCHDOG_VERBOSE=${WATCHDOG_VERBOSE:-n}
  476.         - MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
  477.         - COMPOSE_PROJECT_NAME=${COMPOSE_PROJECT_NAME:-mailcow-dockerized}
  478.         - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  479.         - IP_BY_DOCKER_API=${IP_BY_DOCKER_API:-0}
  480.         - CHECK_UNBOUND=${CHECK_UNBOUND:-1}
  481.         - SKIP_CLAMD=${SKIP_CLAMD:-n}
  482.         - SKIP_LETS_ENCRYPT=${SKIP_LETS_ENCRYPT:-n}
  483.         - SKIP_SOGO=${SKIP_SOGO:-n}
  484.         - HTTPS_PORT=${HTTPS_PORT:-443}
  485.         - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  486.         - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  487.         - EXTERNAL_CHECKS_THRESHOLD=${EXTERNAL_CHECKS_THRESHOLD:-1}
  488.         - NGINX_THRESHOLD=${NGINX_THRESHOLD:-5}
  489.         - UNBOUND_THRESHOLD=${UNBOUND_THRESHOLD:-5}
  490.         - REDIS_THRESHOLD=${REDIS_THRESHOLD:-5}
  491.         - MYSQL_THRESHOLD=${MYSQL_THRESHOLD:-5}
  492.         - MYSQL_REPLICATION_THRESHOLD=${MYSQL_REPLICATION_THRESHOLD:-1}
  493.         - SOGO_THRESHOLD=${SOGO_THRESHOLD:-3}
  494.         - POSTFIX_THRESHOLD=${POSTFIX_THRESHOLD:-8}
  495.         - CLAMD_THRESHOLD=${CLAMD_THRESHOLD:-15}
  496.         - DOVECOT_THRESHOLD=${DOVECOT_THRESHOLD:-12}
  497.         - DOVECOT_REPL_THRESHOLD=${DOVECOT_REPL_THRESHOLD:-20}
  498.         - PHPFPM_THRESHOLD=${PHPFPM_THRESHOLD:-5}
  499.         - RATELIMIT_THRESHOLD=${RATELIMIT_THRESHOLD:-1}
  500.         - FAIL2BAN_THRESHOLD=${FAIL2BAN_THRESHOLD:-1}
  501.         - ACME_THRESHOLD=${ACME_THRESHOLD:-1}
  502.         - RSPAMD_THRESHOLD=${RSPAMD_THRESHOLD:-5}
  503.         - OLEFY_THRESHOLD=${OLEFY_THRESHOLD:-5}
  504.         - MAILQ_THRESHOLD=${MAILQ_THRESHOLD:-20}
  505.         - MAILQ_CRIT=${MAILQ_CRIT:-30}
  506.       networks:
  507.         mailcow-network:
  508.           aliases:
  509.            - watchdog
  510.  
  511.     dockerapi-mailcow:
  512.       image: mailcow/dockerapi:1.42
  513.       security_opt:
  514.        - label=disable
  515.       restart: always
  516.       oom_kill_disable: true
  517.       dns:
  518.        - ${IPV4_NETWORK:-172.22.1}.254
  519.       environment:
  520.        - DBROOT=${DBROOT}
  521.         - TZ=${TZ}
  522.       volumes:
  523.        - /var/run/docker.sock:/var/run/docker.sock:ro
  524.       networks:
  525.         mailcow-network:
  526.           aliases:
  527.            - dockerapi
  528.  
  529.     solr-mailcow:
  530.       image: mailcow/solr:1.8.1
  531.       restart: always
  532.       volumes:
  533.        - ./data/solr/:/opt/solr/server/solr/dovecot-fts/data/:Z
  534.       ports:
  535.        - "${SOLR_PORT:-127.0.0.1:18983}:8983"
  536.       environment:
  537.        - TZ=${TZ}
  538.         - SOLR_HEAP=${SOLR_HEAP:-1024}
  539.         - SKIP_SOLR=${SKIP_SOLR:-y}
  540.       networks:
  541.         mailcow-network:
  542.           aliases:
  543.            - solr
  544.  
  545.     olefy-mailcow:
  546.       image: mailcow/olefy:1.10
  547.       restart: always
  548.       environment:
  549.        - TZ=${TZ}
  550.         - OLEFY_BINDADDRESS=0.0.0.0
  551.         - OLEFY_BINDPORT=10055
  552.         - OLEFY_TMPDIR=/tmp
  553.         - OLEFY_PYTHON_PATH=/usr/bin/python3
  554.         - OLEFY_OLEVBA_PATH=/usr/bin/olevba
  555.         - OLEFY_LOGLVL=20
  556.         - OLEFY_MINLENGTH=500
  557.         - OLEFY_DEL_TMP=1
  558.       networks:
  559.         mailcow-network:
  560.           aliases:
  561.            - olefy
  562.  
  563.     ofelia-mailcow:
  564.       image: mcuadros/ofelia:latest
  565.       restart: always
  566.       command: daemon --docker
  567.       environment:
  568.        - TZ=${TZ}
  569.       depends_on:
  570.        - sogo-mailcow
  571.         - dovecot-mailcow
  572.       labels:
  573.         ofelia.enabled: "true"
  574.       security_opt:
  575.        - label=disable
  576.       volumes:
  577.        - /var/run/docker.sock:/var/run/docker.sock:ro
  578.       networks:
  579.         mailcow-network:
  580.           aliases:
  581.            - ofelia
  582.  
  583.     ipv6nat-mailcow:
  584.       depends_on:
  585.        - unbound-mailcow
  586.         - mysql-mailcow
  587.         - redis-mailcow
  588.         - clamd-mailcow
  589.         - rspamd-mailcow
  590.         - php-fpm-mailcow
  591.         - sogo-mailcow
  592.         - dovecot-mailcow
  593.         - postfix-mailcow
  594.         - memcached-mailcow
  595.         - nginx-mailcow
  596.         - acme-mailcow
  597.         - netfilter-mailcow
  598.         - watchdog-mailcow
  599.         - dockerapi-mailcow
  600.         - solr-mailcow
  601.       environment:
  602.        - TZ=${TZ}
  603.       image: robbertkl/ipv6nat
  604.       security_opt:
  605.        - label=disable
  606.       restart: always
  607.       privileged: true
  608.       network_mode: "host"
  609.       volumes:
  610.        - /var/run/docker.sock:/var/run/docker.sock:ro
  611.         - /lib/modules:/lib/modules:ro
  612.  
  613. networks:
  614.   mailcow-network:
  615.     driver: bridge
  616.     driver_opts:
  617.       com.docker.network.bridge.name: br-mailcow
  618.     enable_ipv6: true
  619.     ipam:
  620.       driver: default
  621.       config:
  622.         - subnet: ${IPV4_NETWORK:-172.22.1}.0/24
  623.         - subnet: ${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
  624.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!