postfix-container/Dockerfile at master · r-e-m-a/postfix-container · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
FROM debian:buster as builder

MAINTAINER Torsten Bronger <bronger@physik.rwth-aachen.de>

ARG TERM=linux
ARG DEBIAN_FRONTEND=noninteractive

RUN apt-get update && apt-get dist-upgrade -y --no-install-recommends --autoremove && \
    apt-get install -y \
    cmake \
    g++ \
    libboost-filesystem-dev \
    libboost-program-options-dev \
    libboost-system-dev \
    libmilter-dev \
    libssl-dev

ENV SIGH_VERSION=1607.1.6-tb2

ADD "https://github.com/bronger/sigh/archive/v${SIGH_VERSION}.tar.gz" /tmp/
COPY install-sigh.sh /
RUN /install-sigh.sh "${SIGH_VERSION}"


FROM python:3.6-slim-buster

MAINTAINER Torsten Bronger <bronger@physik.rwth-aachen.de>

ARG TERM=linux
ARG DEBIAN_FRONTEND=noninteractive

RUN apt-get update && apt-get dist-upgrade -y --no-install-recommends --autoremove && \
    apt-get install -y \
    ca-certificates \
    g++ \
    libboost-filesystem1.67.0 \
    libboost-program-options1.67.0 \
    libboost-system1.67.0 \
    libmilter1.0.1 \
    libsasl2-modules \
    libssl1.1 \
    locales \
    postfix \
    supervisor \
    telnet \
    tzdata \
    && rm -rf /var/lib/apt/lists/* && \
    pip3 --no-cache-dir install psutil && \
    apt-get purge -y --autoremove g++
RUN localedef -i en_US -c -f UTF-8 -A /usr/share/locale/locale.alias en_US.UTF-8
ENV LANG=en_US.UTF-8
ENV TZ=UTC

ENV RELAY_PORT=587
RUN adduser filter --disabled-login --gecos ""

ENV SIGH_ROOT=/var/lib/sigh
COPY --from=builder /usr/local/sbin/sigh /usr/local/sbin/
RUN mkdir /etc/sigh
COPY sigh.cfg /etc/sigh/
RUN mkdir "$SIGH_ROOT"; chown filter "$SIGH_ROOT"

COPY csr.conf /tmp
RUN openssl req -x509 -days 3650 -key /etc/ssl/private/ssl-cert-snakeoil.key \
        -out /etc/ssl/certs/ssl-cert-snakeoil-postfix.pem -config /tmp/csr.conf -extensions v3_req && \
    rm /tmp/csr.conf
RUN openssl x509 -in /etc/ssl/certs/ssl-cert-snakeoil-postfix.pem -text

RUN postconf -e "smtp_sasl_auth_enable=yes" && \
    postconf -e "smtp_use_tls=yes" && \
    postconf -e "smtp_tls_CAfile=/etc/ssl/certs/ca-certificates.crt" && \
    postconf -e "smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil-postfix.pem" && \
    postconf -e "smtp_sasl_tls_security_options=noanonymous" && \
    postconf -e "smtp_sasl_password_maps=hash:/etc/postfix/relay_passwd" && \
    postconf -e "mynetworks=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 [::ffff:127.0.0.0]/104 [::1]/128" && \
    postconf -e "smtpd_milters=inet:localhost:4000" && \
    postconf -e "local_header_rewrite_clients=permit_mynetworks" && \
    postconf -M "submission/inet=submission inet n - n - - smtpd" && \
    postconf -M "smtp/unix=smtp unix - - n - - smtp"

COPY supervisord.conf /etc/supervisor/
COPY kill_supervisor.py /
COPY entrypoints /opt/entrypoints

ENTRYPOINT ["/opt/entrypoints/entrypoint.sh"]