|
@@ -97,7 +97,7 @@ log_msg() {
|
|
|
echo $(date) $(printf '%s\n' "${1}")
|
|
|
}
|
|
|
|
|
|
-function mail_error() {
|
|
|
+function notify_error() {
|
|
|
THROTTLE=
|
|
|
[[ -z ${1} ]] && return 1
|
|
|
# If exists, body will be the content of "/tmp/${1}", even if ${2} is set
|
|
@@ -197,7 +197,7 @@ get_container_ip() {
|
|
|
# One-time check
|
|
|
if grep -qi "$(echo ${IPV6_NETWORK} | cut -d: -f1-3)" <<< "$(ip a s)"; then
|
|
|
if [[ -z "$(get_ipv6)" ]]; then
|
|
|
- mail_error "ipv6-config" "enable_ipv6 is true in docker-compose.yml, but an IPv6 link could not be established. Please verify your IPv6 connection."
|
|
|
+ notify_error "ipv6-config" "enable_ipv6 is true in docker-compose.yml, but an IPv6 link could not be established. Please verify your IPv6 connection."
|
|
|
fi
|
|
|
fi
|
|
|
|
|
@@ -747,7 +747,7 @@ olefy_checks() {
|
|
|
|
|
|
# Notify about start
|
|
|
if [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]]; then
|
|
|
- mail_error "watchdog-mailcow" "Watchdog started monitoring mailcow."
|
|
|
+ notify_error "watchdog-mailcow" "Watchdog started monitoring mailcow."
|
|
|
fi
|
|
|
|
|
|
# Create watchdog agents
|
|
@@ -1029,33 +1029,33 @@ while true; do
|
|
|
fi
|
|
|
if [[ ${com_pipe_answer} == "ratelimit" ]]; then
|
|
|
log_msg "At least one ratelimit was applied"
|
|
|
- [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && mail_error "${com_pipe_answer}"
|
|
|
+ [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && notify_error "${com_pipe_answer}"
|
|
|
elif [[ ${com_pipe_answer} == "mail_queue_status" ]]; then
|
|
|
log_msg "Mail queue status is critical"
|
|
|
- [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && mail_error "${com_pipe_answer}"
|
|
|
+ [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && notify_error "${com_pipe_answer}"
|
|
|
elif [[ ${com_pipe_answer} == "external_checks" ]]; then
|
|
|
log_msg "Your mailcow is an open relay!"
|
|
|
# Define $2 to override message text, else print service was restarted at ...
|
|
|
- [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && mail_error "${com_pipe_answer}" "Please stop mailcow now and check your network configuration!"
|
|
|
+ [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && notify_error "${com_pipe_answer}" "Please stop mailcow now and check your network configuration!"
|
|
|
elif [[ ${com_pipe_answer} == "mysql_repl_checks" ]]; then
|
|
|
log_msg "MySQL replication is not working properly"
|
|
|
# Define $2 to override message text, else print service was restarted at ...
|
|
|
# Once mail per 10 minutes
|
|
|
- [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && mail_error "${com_pipe_answer}" "Please check the SQL replication status" 600
|
|
|
+ [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && notify_error "${com_pipe_answer}" "Please check the SQL replication status" 600
|
|
|
elif [[ ${com_pipe_answer} == "dovecot_repl_checks" ]]; then
|
|
|
log_msg "Dovecot replication is not working properly"
|
|
|
# Define $2 to override message text, else print service was restarted at ...
|
|
|
# Once mail per 10 minutes
|
|
|
- [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && mail_error "${com_pipe_answer}" "Please check the Dovecot replicator status" 600
|
|
|
+ [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && notify_error "${com_pipe_answer}" "Please check the Dovecot replicator status" 600
|
|
|
elif [[ ${com_pipe_answer} == "certcheck" ]]; then
|
|
|
log_msg "Certificates are about to expire"
|
|
|
# Define $2 to override message text, else print service was restarted at ...
|
|
|
# Only mail once a day
|
|
|
- [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && mail_error "${com_pipe_answer}" "Please renew your certificate" 86400
|
|
|
+ [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && notify_error "${com_pipe_answer}" "Please renew your certificate" 86400
|
|
|
elif [[ ${com_pipe_answer} == "acme-mailcow" ]]; then
|
|
|
log_msg "acme-mailcow did not complete successfully"
|
|
|
# Define $2 to override message text, else print service was restarted at ...
|
|
|
- [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && mail_error "${com_pipe_answer}" "Please check acme-mailcow for further information."
|
|
|
+ [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && notify_error "${com_pipe_answer}" "Please check acme-mailcow for further information."
|
|
|
elif [[ ${com_pipe_answer} == "fail2ban" ]]; then
|
|
|
F2B_RES=($(timeout 4s ${REDIS_CMDLINE} --raw GET F2B_RES 2> /dev/null))
|
|
|
if [[ ! -z "${F2B_RES}" ]]; then
|
|
@@ -1065,7 +1065,7 @@ while true; do
|
|
|
log_msg "Banned ${host}"
|
|
|
rm /tmp/fail2ban 2> /dev/null
|
|
|
timeout 2s whois "${host}" > /tmp/fail2ban
|
|
|
- [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && [[ ${WATCHDOG_NOTIFY_BAN} =~ ^([yY][eE][sS]|[yY])+$ ]] && mail_error "${com_pipe_answer}" "IP ban: ${host}"
|
|
|
+ [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && [[ ${WATCHDOG_NOTIFY_BAN} =~ ^([yY][eE][sS]|[yY])+$ ]] && notify_error "${com_pipe_answer}" "IP ban: ${host}"
|
|
|
done
|
|
|
fi
|
|
|
elif [[ ${com_pipe_answer} =~ .+-mailcow ]]; then
|
|
@@ -1085,7 +1085,7 @@ while true; do
|
|
|
else
|
|
|
log_msg "Sending restart command to ${CONTAINER_ID}..."
|
|
|
curl --silent --insecure -XPOST https://dockerapi/containers/${CONTAINER_ID}/restart
|
|
|
- [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && mail_error "${com_pipe_answer}"
|
|
|
+ [[ ! -z ${WATCHDOG_NOTIFY_EMAIL} ]] && notify_error "${com_pipe_answer}"
|
|
|
log_msg "Wait for restarted container to settle and continue watching..."
|
|
|
sleep 35
|
|
|
fi
|