193 lines
5.2 KiB
YAML
Executable File
193 lines
5.2 KiB
YAML
Executable File
#
|
|
# upgrade: docker-compose run --rm sentry upgrade
|
|
#
|
|
|
|
version: '2.2'
|
|
services:
|
|
|
|
openldap:
|
|
image: osixia/openldap:1.5.0
|
|
container_name: openldap
|
|
domainname: "example.org" # important: same as hostname
|
|
hostname: "example.org"
|
|
restart: unless-stopped
|
|
cpus: 2
|
|
mem_limit: 100MB
|
|
environment:
|
|
LDAP_LOG_LEVEL: "256"
|
|
LDAP_ORGANISATION: "Example"
|
|
LDAP_DOMAIN: "example.org"
|
|
LDAP_BASE_DN: ""
|
|
LDAP_ADMIN_PASSWORD: "admin"
|
|
LDAP_CONFIG_PASSWORD: "config"
|
|
LDAP_READONLY_USER: "false"
|
|
LDAP_READONLY_USER_USERNAME: "readonly"
|
|
LDAP_READONLY_USER_PASSWORD: "readonly"
|
|
LDAP_RFC2307BIS_SCHEMA: "false"
|
|
LDAP_BACKEND: "mdb"
|
|
LDAP_TLS: "true"
|
|
LDAP_TLS_CRT_FILENAME: "ldap.crt"
|
|
LDAP_TLS_KEY_FILENAME: "ldap.key"
|
|
LDAP_TLS_CA_CRT_FILENAME: "ca.crt"
|
|
LDAP_TLS_ENFORCE: "false"
|
|
LDAP_TLS_CIPHER_SUITE: "SECURE256:-VERS-SSL3.0"
|
|
LDAP_TLS_PROTOCOL_MIN: "3.1"
|
|
LDAP_TLS_VERIFY_CLIENT: "demand"
|
|
LDAP_REPLICATION: "false"
|
|
#LDAP_REPLICATION_CONFIG_SYNCPROV: "binddn="cn=admin,cn=config" bindmethod=simple credentials=$LDAP_CONFIG_PASSWORD searchbase="cn=config" type=refreshAndPersist retry="60 +" timeout=1 starttls=critical"
|
|
#LDAP_REPLICATION_DB_SYNCPROV: "binddn="cn=admin,$LDAP_BASE_DN" bindmethod=simple credentials=$LDAP_ADMIN_PASSWORD searchbase="$LDAP_BASE_DN" type=refreshAndPersist interval=00:00:00:10 retry="60 +" timeout=1 starttls=critical"
|
|
#docker-compose.ymlLDAP_REPLICATION_HOSTS: "#PYTHON2BASH:['ldap://ldap.example.org','ldap://ldap2.example.org']"
|
|
KEEP_EXISTING_CONFIG: "false"
|
|
LDAP_REMOVE_CONFIG_AFTER_SETUP: "false"
|
|
LDAP_SSL_HELPER_PREFIX: "ldap"
|
|
tty: true
|
|
stdin_open: true
|
|
volumes:
|
|
- ldap_data:/var/lib/ldap
|
|
- ldap_config:/etc/ldap/slapd.d
|
|
- ldap_certs:/container/service/slapd/assets/certs/
|
|
- ./ldif:/container/service/slapd/assets/config/bootstrap/ldif/custom/
|
|
expose:
|
|
- 389
|
|
- 636
|
|
networks:
|
|
- default
|
|
|
|
phpldapadmin:
|
|
image: osixia/phpldapadmin:latest
|
|
container_name: phpldapadmin
|
|
depends_on:
|
|
- openldap
|
|
restart: unless-stopped
|
|
cpus: 2
|
|
mem_limit: 100MB
|
|
environment:
|
|
PHPLDAPADMIN_LDAP_HOSTS: openldap
|
|
PHPLDAPADMIN_HTTPS: "false"
|
|
ports:
|
|
- "127.0.0.1:8080:80"
|
|
networks:
|
|
- default
|
|
|
|
|
|
mail:
|
|
image: test/mail:latest
|
|
container_name: mail
|
|
depends_on:
|
|
- openldap
|
|
links:
|
|
- mysql
|
|
build:
|
|
context: .
|
|
dockerfile: dockerfile
|
|
restart: unless-stopped
|
|
cpus: 2
|
|
mem_limit: 512MB
|
|
hostname: mail.nofusscomputing.com
|
|
volumes:
|
|
- mail_store:/srv/mail:rw
|
|
- mail_ssl:/ssl
|
|
- sa_learn:/var/spool/spamassassin
|
|
- mail_backup:/backup
|
|
- mail_log:/var/log
|
|
ports:
|
|
# SMTP
|
|
- '25:25'
|
|
# IMAP
|
|
- "993:993"
|
|
# Submission
|
|
- "587:587"
|
|
# ManageSieve
|
|
- "4190:4190"
|
|
environment:
|
|
POST_MASTER_EMAIL: postmaster@example.org
|
|
USE_FETCHMAIL_PL: "true"
|
|
networks:
|
|
- default
|
|
|
|
mysql:
|
|
image: mysql:5.7
|
|
container_name: mysql
|
|
restart: unless-stopped
|
|
cpus: 2
|
|
mem_limit: 350MB
|
|
volumes:
|
|
- mysql_data:/var/lib/mysql
|
|
expose:
|
|
- 5432
|
|
- 3306
|
|
environment:
|
|
- MYSQL_ROOT_PASSWORD=admin
|
|
- MYSQL_DATABASE=roundcube
|
|
- MYSQL_USER=roundcube
|
|
- MYSQL_PASSWORD=roundcube
|
|
|
|
roundcube:
|
|
image: roundcube/roundcubemail:1.5.x-fpm-alpine
|
|
container_name: roundcube
|
|
restart: unless-stopped
|
|
cpus: 2
|
|
mem_limit: 100MB
|
|
depends_on:
|
|
- mysql
|
|
- mail
|
|
links:
|
|
- mysql
|
|
expose:
|
|
- 9000
|
|
volumes:
|
|
- roundcube_www:/var/www/html
|
|
- ./config.inc.php:/var/www/html/config/config.inc.php:ro
|
|
environment:
|
|
- ROUNDCUBEMAIL_DB_TYPE=mysql
|
|
- ROUNDCUBEMAIL_DB_HOST=mysql
|
|
- ROUNDCUBEMAIL_DB_NAME=roundcube
|
|
- ROUNDCUBEMAIL_DB_USER=roundcube
|
|
- ROUNDCUBEMAIL_DB_PASSWORD=roundcube
|
|
- ROUNDCUBEMAIL_SKIN=larry
|
|
- ROUNDCUBEMAIL_DEFAULT_HOST=ssl://mail
|
|
- ROUNDCUBEMAIL_SMTP_SERVER=tls://mail
|
|
- ROUNDCUBEMAIL_PLUGINS=acl,additional_message_headers,managesieve,show_additional_headers
|
|
|
|
nginx:
|
|
image: nginx:1.21-alpine
|
|
container_name: nginx
|
|
restart: unless-stopped
|
|
cpus: 2
|
|
mem_limit: 100MB
|
|
ports:
|
|
- 80:80
|
|
# If you need SSL connection
|
|
# - '443:443'
|
|
depends_on:
|
|
- roundcube
|
|
links:
|
|
- roundcube
|
|
volumes:
|
|
- roundcube_www:/var/www/html
|
|
- ./nginx/templates:/etc/nginx/templates
|
|
- ngnix_log:/var/log
|
|
# Provide a custom nginx conf
|
|
# - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
|
|
# If you need SSL connection, you can provide your own certificates
|
|
# - ./certs:/etc/letsencrypt
|
|
# - ./certs-data:/data/letsencrypt
|
|
environment:
|
|
- NGINX_HOST=localhost # set your local domain or your live domain
|
|
- NGINX_PHP_CGI=roundcube:9000 # same as roundcubemail container name
|
|
|
|
volumes:
|
|
ldap_data:
|
|
ldap_config:
|
|
ldap_certs:
|
|
mail_store:
|
|
mail_ssl:
|
|
clamav_db:
|
|
sa_learn:
|
|
mail_backup:
|
|
mail_log:
|
|
mysql_data:
|
|
roundcube_www:
|
|
nginx_www:
|
|
ngnix_log:
|