Postgres and dovecot in the single container
- Single instance only (not synchronizing with a backup server)
- With postgres backend
docker build --tag=postfix:0.0.1 .
- MYDOMAIN - The internet domain name of this mail system.
- MYORIGIN -The domain name that locally-posted mail appears to come from
- MYHOSTNAME - should resolve to the IP of your mailserver. In general that's the Kubernetes worker node the Postfix container runs on
- PGHOST
- PGPORT - defaults to 5432
- PGUSER
- PGPASS
- PGDATABASE
- SMTPD_TLS_CERT_FILE - mount from host filesystem; e.g. /etc/letsencrypt/live/example.org/fullchain.pem
- SMTPD_TLS_KEY_FILE - mount from host filesystem; e.g. /etc/letsencrypt/live/example.org/privkey.pem
- DOVECOT_DH_FILE - generated once with
openssl dhparam -out dhparam/dh4096.pem 4096e.g. /etc/dh4096.pem - SMTPD_TLS_DH1024_PARAM_FILE - generated once with
openssl dhparam -out dhparam/dh2048.pem 2048e.g. /etc/dh2048.pem - SMTPD_TLS_DH512_PARAM_FILE - generated once with
openssl dhparam -out dhparam/dh512.pem 512e.g. /etc/dh512.pem - MESSAGE_SIZE_LIMIT - in bytes, default value 20480000 for 20MB
- VIRTUAL_MAILBOX_BASE - mount from host filesystem, actual mail storage
- VIRTUAL_MAILBOX_LIMIT - Limit on the size of virtual mailbox files. In bytes, default value 512000000 for 480MB
Integration via docker-compose with
- postgresql (used as a database)
- postfixadmin
Postfixadmin provides an official docker container and runs a migrations on database first time running.
For the first run it is needed to:
- Run containers (via
docker-compose up) - Access the postfixadmin /setup.php and generate a setup_password hash
http://localhost:8181/setup.php- enter some string twice and hit [Generate setup_password_hash]- a
$CONF['setup_password'] = '$2y$10$somelonghashDO/X9Plg/longlonghash';line appears
- Add the generated setup password to the config.local.php inside the container:
docker exec -it postfixadmin bashsed -e 's/changeme/$2y$10$somelonghashDO\/pleaseescapebackslashes/' config.local.php > /tmp/a; mv /tmp/a config.local.php- Note that the forward slashes inside sed subsitution string must be escaped!
- Use this password to add an admin email to the database
- Visit
http://localhost:8181/setup.php - Enter admin login+password in Add Superadmin Account, hit [Add Admin] Entered credentials should be written into the permanent volume of the database.
- Visit
You may login to postfixadmin in http://localhost:8181/
Docker handles iptables rules for ipv4 for open ports, but it doesn't do the same for ipv6. If using ubuntu in a host system, you may run this to expose the ports in both ipv4 and ipv6:
sudo ufw allow 993/tcp
sudo ufw allow 587/tcp
sudo ufw allow 465/tcp
sudo ufw allow 25/tcpIf you are upgrading postgres container use:
docker exec -t postfix-dockerize-postgresql pg_dumpall -U mail > pg_backup.sqldocker-compose down
docker rm postfix-dockerize-postgresqlservices:
postgresql:
image: postgres:18
volumes:
- /root/mail/postgresql18-data:/var/lib/postgresqlNote the mountpoint was /var/lib/postgresql/data for postgres17 and bellow.
docker-compose up postgresql
docker exec -i postfix-dockerize-postgresql psql -U mail < pg_backup.sqlUsing Python / Pytest with dependencies managed by Poetry.
poetry install
poetry run pytestRestart / clean the containers
docker-compose -f tests/docker-compose.test.yml down
sudo snap restart dockerFor debug, you may show logs when you're running the tests
docker-compose -f tests/docker-compose.test.yml logs -f