mirror of
https://github.com/chatmail/relay.git
synced 2026-05-10 16:04:37 +00:00
103 lines
3.6 KiB
Docker
103 lines
3.6 KiB
Docker
FROM jrei/systemd-debian:12 AS base
|
|
|
|
ENV LANG=en_US.UTF-8
|
|
|
|
RUN echo 'APT::Install-Recommends "0";' > /etc/apt/apt.conf.d/01norecommend && \
|
|
echo 'APT::Install-Suggests "0";' >> /etc/apt/apt.conf.d/01norecommend && \
|
|
apt-get update && \
|
|
apt-get install -y \
|
|
ca-certificates && \
|
|
DEBIAN_FRONTEND=noninteractive \
|
|
TZ=Europe/London \
|
|
apt-get install -y tzdata && \
|
|
apt-get install -y locales && \
|
|
sed -i -e "s/# $LANG.*/$LANG UTF-8/" /etc/locale.gen && \
|
|
dpkg-reconfigure --frontend=noninteractive locales && \
|
|
update-locale LANG=$LANG \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN apt-get update && \
|
|
apt-get install -y \
|
|
openssh-client \
|
|
openssh-server \
|
|
git \
|
|
python3 \
|
|
python3-venv \
|
|
python3-virtualenv \
|
|
gcc \
|
|
python3-dev \
|
|
opendkim \
|
|
opendkim-tools \
|
|
curl \
|
|
rsync \
|
|
unbound \
|
|
unbound-anchor \
|
|
dnsutils \
|
|
postfix \
|
|
acl \
|
|
nginx \
|
|
libnginx-mod-stream \
|
|
fcgiwrap \
|
|
cron \
|
|
&& for pkg in core imapd lmtpd; do \
|
|
case "$pkg" in \
|
|
core) sha256="43f593332e22ac7701c62d58b575d2ca409e0f64857a2803be886c22860f5587" ;; \
|
|
imapd) sha256="8d8dc6fc00bbb6cdb25d345844f41ce2f1c53f764b79a838eb2a03103eebfa86" ;; \
|
|
lmtpd) sha256="2f69ba5e35363de50962d42cccbfe4ed8495265044e244007d7ccddad77513ab" ;; \
|
|
esac; \
|
|
url="https://download.delta.chat/dovecot/dovecot-${pkg}_2.3.21%2Bdfsg1-3_amd64.deb"; \
|
|
file="/tmp/$(basename "$url")"; \
|
|
curl -fsSL "$url" -o "$file"; \
|
|
echo "$sha256 $file" | sha256sum -c -; \
|
|
apt-get install -y "$file"; \
|
|
rm -f "$file"; \
|
|
done \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN systemctl enable \
|
|
ssh \
|
|
fcgiwrap
|
|
|
|
RUN sed -i 's/^#PasswordAuthentication .*/PasswordAuthentication no/' /etc/ssh/sshd_config && \
|
|
sed -i 's/^#PermitRootLogin .*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config && \
|
|
ssh-keygen -P "" -t rsa -b 2048 -f /root/.ssh/id_rsa && \
|
|
mkdir -p /root/.ssh && \
|
|
cat /root/.ssh/id_rsa.pub >> /root/.ssh/authorized_keys && \
|
|
SSH_USER_CONFIG="/root/.ssh/config" && \
|
|
echo "Host localhost" > "$SSH_USER_CONFIG" && \
|
|
echo " HostName localhost" >> "$SSH_USER_CONFIG" && \
|
|
echo " User root" >> "$SSH_USER_CONFIG" && \
|
|
echo " StrictHostKeyChecking no" >> "$SSH_USER_CONFIG" && \
|
|
echo " UserKnownHostsFile /dev/null" >> "$SSH_USER_CONFIG"
|
|
## TODO: deny access for all insteed root form 127.0.0.1 https://unix.stackexchange.com/a/406264
|
|
|
|
WORKDIR /opt/chatmail
|
|
|
|
ARG SETUP_CHATMAIL_SERVICE_PATH=/lib/systemd/system/setup_chatmail.service
|
|
COPY ./files/setup_chatmail.service "$SETUP_CHATMAIL_SERVICE_PATH"
|
|
RUN ln -sf "$SETUP_CHATMAIL_SERVICE_PATH" "/etc/systemd/system/multi-user.target.wants/setup_chatmail.service"
|
|
|
|
COPY --chmod=555 ./files/setup_chatmail_docker.sh /setup_chatmail_docker.sh
|
|
COPY --chmod=555 ./files/update_ini.sh /update_ini.sh
|
|
COPY --chmod=555 ./files/entrypoint.sh /entrypoint.sh
|
|
|
|
## TODO: add git clone.
|
|
## Problem: how correct save only required files inside container....
|
|
# RUN git clone https://github.com/chatmail/relay.git -b master . \
|
|
# && ./scripts/initenv.sh
|
|
|
|
# EXPOSE 443 25 587 143 993
|
|
|
|
VOLUME ["/sys/fs/cgroup", "/home"]
|
|
|
|
STOPSIGNAL SIGRTMIN+3
|
|
|
|
ENTRYPOINT ["/entrypoint.sh"]
|
|
|
|
CMD [ "--default-standard-output=journal+console", \
|
|
"--default-standard-error=journal+console" ]
|
|
|
|
## TODO: Add installation and configuration of chatmaild inside the Dockerfile.
|
|
## This is required to ensure repeatable deployment.
|
|
## In the current MVP, the chatmaild server is updated on every container restart.
|