feat: Added Dovecot and Postfix to container

Initial config also added.

MR !1

dockerfile

@@ -10,13 +10,119 @@ RUN apt update && DEBIAN_FRONTEND=noninteractive apt -y --no-install-recommends
       ca-certificates \
       supervisor
 
+RUN curl https://repo.dovecot.org/DOVECOT-REPO-GPG | gpg --import && \
+    gpg --export ED409DA1 > /etc/apt/trusted.gpg.d/dovecot.gpg
+
+RUN echo "deb https://repo.dovecot.org/ce-2.3-latest/debian/bullseye bullseye main" > /etc/apt/sources.list.d/dovecot.list
 
 RUN apt update && DEBIAN_FRONTEND=noninteractive apt -y --no-install-recommends install \
         # System Apps
       cron \
       rsyslog \
       logrotate \
+        # Dovecot
+      dovecot-core=2:2.3.18-4+debian11 \
+      dovecot-imapd=2:2.3.18-4+debian11 \
+      dovecot-lmtpd=2:2.3.18-4+debian11 \
+      dovecot-ldap=2:2.3.18-4+debian11 \
+      dovecot-sieve=2:2.3.18-4+debian11 \
+      dovecot-managesieved=2:2.3.18-4+debian11 \
+        # Postfix
+      postfix=3.5.6-1+b1 \
+      postfix-ldap=3.5.6-1+b1 \
+      libsasl2-modules \
+      sasl2-bin \
 # Cleanup, remove cron jobs not required
 RUN rm -f /etc/cron.d/e2scrub_all \
     && rm -f /etc/cron.daily/apt-compat \
     && rm -f /etc/cron.daily/dpkg
+
+
+COPY include/ /
+
+RUN chmod +x /docker-entrypoint.sh \
+      # Create vmail user for system
+    && groupadd -g 5000 vmail \
+    && useradd -g vmail -u 5000 vmail -d /var/vmail \
+      # create SSL directory for ssl certificates
+    && mkdir -p /ssl \
+      # Dovecot related commands
+    && mkdir -p /srv/mail \ 
+    && chown vmail:vmail /srv/mail \
+    && chmod 765 -R /srv/mail \
+    && mkdir -p /ssl/dovecot \
+    && chown dovecot:dovecot -R /etc/dovecot/ \
+    && chgrp postfix -R /etc/dovecot/sieve/ \
+    && chmod 0755 -R /etc/dovecot/sieve/ \
+      # ensure dovecot related scripts are executable
+    && chmod +x /bin/quota-warning.sh \
+    && chmod +x /bin/welcome-email.sh \
+    && chmod 744 /etc/dovecot/dovecot-acl \
+      # Postfix related commands
+    && usermod -a -G vmail postfix \
+    && mkdir -p /ssl/postfix \
+    && ln -s /etc/dovecot/dovecot-ldap.conf.ext /etc/dovecot/dovecot-ldap-userdb.conf.ext \
+      # ensure postfix related scripts are executable
+    && chmod +x /bin/postfix.sh \
+      # check if needed
+    && mkdir -p /var/spool/postfix/private/dovecot \
+    && chown postfix:postfix /var/spool/postfix/private/dovecot \
+    && chown vmail:vmail /var/lib/dovecot \
+
+# Setup data volumes
+VOLUME /srv/mail /ssl /var/log
+
+# Configure postfix
+RUN postconf -e "maillog_file=/var/log/postfix.log" \
+  # Postfix to use dovecot LMTP
+  && postconf -e "virtual_transport=lmtp:unix:private/lda" \
+  #       # Only allow a user to send from email address' they own
+  #    && postconf -e "smtpd_sender_login_maps=ldap:/etc/postfix/ldap/smtpd_sender_login_maps" \
+  # Only allow specified domains for usage
+  && postconf -e "virtual_mailbox_domains=ldap:/etc/postfix/ldap/virtual_email_domains" \
+  # postfix user mapping 
+  && postconf -e "virtual_alias_maps=ldap:/etc/postfix/ldap/virtual_alias_maps" \
+  # by default encryption is optional
+  && postconf -e "smtpd_tls_security_level=may" \
+  # log outbound tls connection information
+  && postconf -e "smtpd_tls_loglevel=1" \
+  # try tls connection outbound
+  && postconf -e "smtp_tls_security_level=may" \
+  # log inbound tls connection information
+  && postconf -e "smtp_tls_loglevel=1" \
+  # Only authenticate over tls
+  && postconf -e "smtpd_tls_auth_only=yes" \
+  # all smtpd actions need to be filtered
+  && postconf -e "content_filter=amavis:[127.0.0.1]:10024" \
+  # not give away os, set clean banner
+  && postconf -e "smtpd_banner=$myhostname ESMTP " \
+  # Dont give away that postfix is used
+  && postconf -e "mail_name=server" \
+  # create privacy header check db
+  && postmap /etc/postfix/header_checks_privacy \
+  # create clean header check db
+  && postmap /etc/postfix/header_checks_outbound \
+  # Clean outbound headers
+  && postconf -e "smtp_header_checks=regexp:/etc/postfix/header_checks_outbound" \
+  # Add To, From, Date and Message-id headers if missing
+  && postconf -e "always_add_missing_headers=yes" \
+  # Only add missing headers for authenticated users (mail users) and my networks and mail orginating from localhost
+  && postconf -e "local_header_rewrite_clients=permit_sasl_authenticated,permit_mynetworks,permit_inet_interfaces" \
+  # check quota before delivery
+  && postconf -e "smtpd_recipient_restrictions=check_policy_service=inet:localhost:12340" \
+  # set tls settings
+  && postconf -e "smtpd_tls_cert_file=/ssl/postfix/cert.pem" \
+  && postconf -e "smtpd_tls_key_file=/ssl/postfix/key.pem" \
+  && postconf -e "smtpd_helo_required = yes" \
+  && postconf -e "smtpd_delay_reject = yes" \
+  && postconf -e "disable_vrfy_command = yes" \
+  # use secure protocols and cyphers
+  && postconf -e "smtpd_tls_protocols=!SSLv2,!SSLv3,!TLSv1,!TLSv1.1" \
+  && postconf -e "smtp_tls_protocols=!SSLv2,!SSLv3,!TLSv1,!TLSv1.1" \
+  && postconf -e "smtpd_tls_mandatory_ciphers=high" \
+  && postconf -e "smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3,!TLSv1,!TLSv1.1"
+    
+EXPOSE 25 587 993 4190
+
+
+ENTRYPOINT ["/docker-entrypoint.sh"]