docker-compose.yml 18 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567
  1. version: '2.1'
  2. services:
  3. unbound-mailcow:
  4. image: mailcow/unbound:1.12
  5. environment:
  6. - TZ=${TZ}
  7. volumes:
  8. - ./data/hooks/unbound:/hooks
  9. - ./data/conf/unbound/unbound.conf:/etc/unbound/unbound.conf:ro
  10. restart: always
  11. tty: true
  12. networks:
  13. mailcow-network:
  14. ipv4_address: ${IPV4_NETWORK:-172.22.1}.254
  15. aliases:
  16. - unbound
  17. mysql-mailcow:
  18. image: mariadb:10.3
  19. depends_on:
  20. - unbound-mailcow
  21. stop_grace_period: 45s
  22. volumes:
  23. - mysql-vol-1:/var/lib/mysql/
  24. - mysql-socket-vol-1:/var/run/mysqld/
  25. - ./data/conf/mysql/:/etc/mysql/conf.d/:ro
  26. environment:
  27. - TZ=${TZ}
  28. - MYSQL_ROOT_PASSWORD=${DBROOT}
  29. - MYSQL_DATABASE=${DBNAME}
  30. - MYSQL_USER=${DBUSER}
  31. - MYSQL_PASSWORD=${DBPASS}
  32. - MYSQL_INITDB_SKIP_TZINFO=1
  33. restart: always
  34. ports:
  35. - "${SQL_PORT:-127.0.0.1:13306}:3306"
  36. networks:
  37. mailcow-network:
  38. aliases:
  39. - mysql
  40. redis-mailcow:
  41. image: redis:5-alpine
  42. volumes:
  43. - redis-vol-1:/data/
  44. restart: always
  45. ports:
  46. - "${REDIS_PORT:-127.0.0.1:7654}:6379"
  47. environment:
  48. - TZ=${TZ}
  49. networks:
  50. mailcow-network:
  51. ipv4_address: ${IPV4_NETWORK:-172.22.1}.249
  52. aliases:
  53. - redis
  54. clamd-mailcow:
  55. image: mailcow/clamd:1.36
  56. restart: always
  57. dns:
  58. - ${IPV4_NETWORK:-172.22.1}.254
  59. environment:
  60. - TZ=${TZ}
  61. - SKIP_CLAMD=${SKIP_CLAMD:-n}
  62. volumes:
  63. - ./data/conf/clamav/:/etc/clamav/
  64. networks:
  65. mailcow-network:
  66. aliases:
  67. - clamd
  68. rspamd-mailcow:
  69. image: mailcow/rspamd:1.68
  70. stop_grace_period: 30s
  71. depends_on:
  72. - nginx-mailcow
  73. - dovecot-mailcow
  74. environment:
  75. - TZ=${TZ}
  76. - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  77. - IPV6_NETWORK=${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
  78. - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  79. - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  80. volumes:
  81. - ./data/hooks/rspamd:/hooks
  82. - ./data/conf/rspamd/custom/:/etc/rspamd/custom
  83. - ./data/conf/rspamd/override.d/:/etc/rspamd/override.d
  84. - ./data/conf/rspamd/local.d/:/etc/rspamd/local.d
  85. - ./data/conf/rspamd/plugins.d/:/etc/rspamd/plugins.d
  86. - ./data/conf/rspamd/lua/:/etc/rspamd/lua/:ro
  87. - ./data/conf/rspamd/rspamd.conf.local:/etc/rspamd/rspamd.conf.local
  88. - ./data/conf/rspamd/rspamd.conf.override:/etc/rspamd/rspamd.conf.override
  89. - rspamd-vol-1:/var/lib/rspamd
  90. restart: always
  91. dns:
  92. - ${IPV4_NETWORK:-172.22.1}.254
  93. hostname: rspamd
  94. networks:
  95. mailcow-network:
  96. aliases:
  97. - rspamd
  98. php-fpm-mailcow:
  99. image: mailcow/phpfpm:1.64
  100. command: "php-fpm -d date.timezone=${TZ} -d expose_php=0"
  101. depends_on:
  102. - redis-mailcow
  103. volumes:
  104. - ./data/hooks/phpfpm:/hooks
  105. - ./data/web:/web:rw
  106. - ./data/conf/rspamd/dynmaps:/dynmaps:ro
  107. - ./data/conf/rspamd/custom/:/rspamd_custom_maps
  108. - rspamd-vol-1:/var/lib/rspamd
  109. - mysql-socket-vol-1:/var/run/mysqld/
  110. - ./data/conf/sogo/:/etc/sogo/
  111. - ./data/conf/rspamd/meta_exporter:/meta_exporter:ro
  112. - ./data/conf/phpfpm/sogo-sso/:/etc/sogo-sso/
  113. - ./data/conf/phpfpm/php-fpm.d/pools.conf:/usr/local/etc/php-fpm.d/z-pools.conf
  114. - ./data/conf/phpfpm/php-conf.d/opcache-recommended.ini:/usr/local/etc/php/conf.d/opcache-recommended.ini
  115. - ./data/conf/phpfpm/php-conf.d/upload.ini:/usr/local/etc/php/conf.d/upload.ini
  116. - ./data/conf/phpfpm/php-conf.d/other.ini:/usr/local/etc/php/conf.d/zzz-other.ini
  117. - ./data/conf/dovecot/global_sieve_before:/global_sieve/before
  118. - ./data/conf/dovecot/global_sieve_after:/global_sieve/after
  119. - ./data/assets/templates:/tpls
  120. dns:
  121. - ${IPV4_NETWORK:-172.22.1}.254
  122. environment:
  123. - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  124. - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  125. - LOG_LINES=${LOG_LINES:-9999}
  126. - TZ=${TZ}
  127. - DBNAME=${DBNAME}
  128. - DBUSER=${DBUSER}
  129. - DBPASS=${DBPASS}
  130. - MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
  131. - IMAP_PORT=${IMAP_PORT:-143}
  132. - IMAPS_PORT=${IMAPS_PORT:-993}
  133. - POP_PORT=${POP_PORT:-110}
  134. - POPS_PORT=${POPS_PORT:-995}
  135. - SIEVE_PORT=${SIEVE_PORT:-4190}
  136. - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  137. - IPV6_NETWORK=${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
  138. - SUBMISSION_PORT=${SUBMISSION_PORT:-587}
  139. - SMTPS_PORT=${SMTPS_PORT:-465}
  140. - SMTP_PORT=${SMTP_PORT:-25}
  141. - API_KEY=${API_KEY:-invalid}
  142. - API_KEY_READ_ONLY=${API_KEY_READ_ONLY:-invalid}
  143. - API_ALLOW_FROM=${API_ALLOW_FROM:-invalid}
  144. - COMPOSE_PROJECT_NAME=${COMPOSE_PROJECT_NAME:-mailcow-dockerized}
  145. - SKIP_SOLR=${SKIP_SOLR:-y}
  146. - SKIP_CLAMD=${SKIP_CLAMD:-n}
  147. - SKIP_SOGO=${SKIP_SOGO:-n}
  148. - ALLOW_ADMIN_EMAIL_LOGIN=${ALLOW_ADMIN_EMAIL_LOGIN:-n}
  149. - MASTER=${MASTER:-y}
  150. restart: always
  151. networks:
  152. mailcow-network:
  153. aliases:
  154. - phpfpm
  155. sogo-mailcow:
  156. image: mailcow/sogo:1.79
  157. environment:
  158. - DBNAME=${DBNAME}
  159. - DBUSER=${DBUSER}
  160. - DBPASS=${DBPASS}
  161. - TZ=${TZ}
  162. - LOG_LINES=${LOG_LINES:-9999}
  163. - MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
  164. - ACL_ANYONE=${ACL_ANYONE:-disallow}
  165. - ALLOW_ADMIN_EMAIL_LOGIN=${ALLOW_ADMIN_EMAIL_LOGIN:-n}
  166. - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  167. - SOGO_EXPIRE_SESSION=${SOGO_EXPIRE_SESSION:-480}
  168. - SKIP_SOGO=${SKIP_SOGO:-n}
  169. - MASTER=${MASTER:-y}
  170. - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  171. - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  172. dns:
  173. - ${IPV4_NETWORK:-172.22.1}.254
  174. volumes:
  175. - ./data/conf/sogo/:/etc/sogo/
  176. - ./data/web/inc/init_db.inc.php:/init_db.inc.php
  177. - ./data/conf/sogo/custom-sogo.js:/usr/lib/GNUstep/SOGo/WebServerResources/js/custom-sogo.js
  178. - mysql-socket-vol-1:/var/run/mysqld/
  179. - sogo-web-vol-1:/sogo_web
  180. - sogo-userdata-backup-vol-1:/sogo_backup
  181. restart: always
  182. networks:
  183. mailcow-network:
  184. ipv4_address: ${IPV4_NETWORK:-172.22.1}.248
  185. aliases:
  186. - sogo
  187. dovecot-mailcow:
  188. image: mailcow/dovecot:1.128
  189. depends_on:
  190. - mysql-mailcow
  191. dns:
  192. - ${IPV4_NETWORK:-172.22.1}.254
  193. cap_add:
  194. - NET_BIND_SERVICE
  195. volumes:
  196. - ./data/hooks/dovecot:/hooks
  197. - ./data/conf/dovecot:/etc/dovecot
  198. - ./data/assets/ssl:/etc/ssl/mail/:ro
  199. - ./data/conf/sogo/:/etc/sogo/
  200. - ./data/conf/phpfpm/sogo-sso/:/etc/phpfpm/
  201. - vmail-vol-1:/var/vmail
  202. - vmail-attachments-vol-1:/var/attachments
  203. - crypt-vol-1:/mail_crypt/
  204. - ./data/conf/rspamd/custom/:/etc/rspamd/custom
  205. - ./data/assets/templates:/templates
  206. - rspamd-vol-1:/var/lib/rspamd
  207. - mysql-socket-vol-1:/var/run/mysqld/
  208. environment:
  209. - LOG_LINES=${LOG_LINES:-9999}
  210. - DBNAME=${DBNAME}
  211. - DBUSER=${DBUSER}
  212. - DBPASS=${DBPASS}
  213. - TZ=${TZ}
  214. - MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
  215. - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  216. - ALLOW_ADMIN_EMAIL_LOGIN=${ALLOW_ADMIN_EMAIL_LOGIN:-n}
  217. - MAILDIR_GC_TIME=${MAILDIR_GC_TIME:-1440}
  218. - ACL_ANYONE=${ACL_ANYONE:-disallow}
  219. - SKIP_SOLR=${SKIP_SOLR:-y}
  220. - MAILDIR_SUB=${MAILDIR_SUB:-}
  221. - MASTER=${MASTER:-y}
  222. - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  223. - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  224. - COMPOSE_PROJECT_NAME=${COMPOSE_PROJECT_NAME:-mailcow-dockerized}
  225. ports:
  226. - "${DOVEADM_PORT:-127.0.0.1:19991}:12345"
  227. - "${IMAP_PORT:-143}:143"
  228. - "${IMAPS_PORT:-993}:993"
  229. - "${POP_PORT:-110}:110"
  230. - "${POPS_PORT:-995}:995"
  231. - "${SIEVE_PORT:-4190}:4190"
  232. restart: always
  233. tty: true
  234. ulimits:
  235. nproc: 65535
  236. nofile:
  237. soft: 20000
  238. hard: 40000
  239. hostname: ${MAILCOW_HOSTNAME}
  240. networks:
  241. mailcow-network:
  242. ipv4_address: ${IPV4_NETWORK:-172.22.1}.250
  243. aliases:
  244. - dovecot
  245. postfix-mailcow:
  246. image: mailcow/postfix:1.51
  247. depends_on:
  248. - mysql-mailcow
  249. volumes:
  250. - ./data/hooks/postfix:/hooks
  251. - ./data/conf/postfix:/opt/postfix/conf
  252. - ./data/assets/ssl:/etc/ssl/mail/:ro
  253. - postfix-vol-1:/var/spool/postfix
  254. - crypt-vol-1:/var/lib/zeyple
  255. - rspamd-vol-1:/var/lib/rspamd
  256. - mysql-socket-vol-1:/var/run/mysqld/
  257. environment:
  258. - LOG_LINES=${LOG_LINES:-9999}
  259. - TZ=${TZ}
  260. - DBNAME=${DBNAME}
  261. - DBUSER=${DBUSER}
  262. - DBPASS=${DBPASS}
  263. - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  264. - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  265. cap_add:
  266. - NET_BIND_SERVICE
  267. ports:
  268. - "${SMTP_PORT:-25}:25"
  269. - "${SMTPS_PORT:-465}:465"
  270. - "${SUBMISSION_PORT:-587}:587"
  271. restart: always
  272. dns:
  273. - ${IPV4_NETWORK:-172.22.1}.254
  274. hostname: ${MAILCOW_HOSTNAME}
  275. networks:
  276. mailcow-network:
  277. aliases:
  278. - postfix
  279. memcached-mailcow:
  280. image: memcached:alpine
  281. restart: always
  282. environment:
  283. - TZ=${TZ}
  284. networks:
  285. mailcow-network:
  286. aliases:
  287. - memcached
  288. nginx-mailcow:
  289. depends_on:
  290. - sogo-mailcow
  291. - php-fpm-mailcow
  292. - redis-mailcow
  293. image: nginx:mainline-alpine
  294. dns:
  295. - ${IPV4_NETWORK:-172.22.1}.254
  296. command: /bin/sh -c "envsubst < /etc/nginx/conf.d/templates/listen_plain.template > /etc/nginx/conf.d/listen_plain.active &&
  297. envsubst < /etc/nginx/conf.d/templates/listen_ssl.template > /etc/nginx/conf.d/listen_ssl.active &&
  298. envsubst < /etc/nginx/conf.d/templates/server_name.template > /etc/nginx/conf.d/server_name.active &&
  299. envsubst < /etc/nginx/conf.d/templates/sogo.template > /etc/nginx/conf.d/sogo.active &&
  300. envsubst < /etc/nginx/conf.d/templates/sogo_eas.template > /etc/nginx/conf.d/sogo_eas.active &&
  301. . /etc/nginx/conf.d/templates/sogo.auth_request.template.sh > /etc/nginx/conf.d/sogo_proxy_auth.active &&
  302. . /etc/nginx/conf.d/templates/sites.template.sh > /etc/nginx/conf.d/sites.active &&
  303. nginx -qt &&
  304. until ping phpfpm -c1 > /dev/null; do sleep 1; done &&
  305. until ping sogo -c1 > /dev/null; do sleep 1; done &&
  306. until ping redis -c1 > /dev/null; do sleep 1; done &&
  307. until ping rspamd -c1 > /dev/null; do sleep 1; done &&
  308. exec nginx -g 'daemon off;'"
  309. environment:
  310. - HTTPS_PORT=${HTTPS_PORT:-443}
  311. - HTTP_PORT=${HTTP_PORT:-80}
  312. - MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
  313. - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  314. - TZ=${TZ}
  315. - ALLOW_ADMIN_EMAIL_LOGIN=${ALLOW_ADMIN_EMAIL_LOGIN:-n}
  316. volumes:
  317. - ./data/web:/web:ro
  318. - ./data/conf/rspamd/dynmaps:/dynmaps:ro
  319. - ./data/assets/ssl/:/etc/ssl/mail/:ro
  320. - ./data/conf/nginx/:/etc/nginx/conf.d/:rw
  321. - ./data/conf/rspamd/meta_exporter:/meta_exporter:ro
  322. - sogo-web-vol-1:/usr/lib/GNUstep/SOGo/
  323. ports:
  324. - "${HTTPS_BIND:-0.0.0.0}:${HTTPS_PORT:-443}:${HTTPS_PORT:-443}"
  325. - "${HTTP_BIND:-0.0.0.0}:${HTTP_PORT:-80}:${HTTP_PORT:-80}"
  326. restart: always
  327. networks:
  328. mailcow-network:
  329. aliases:
  330. - nginx
  331. acme-mailcow:
  332. depends_on:
  333. - nginx-mailcow
  334. image: mailcow/acme:1.73
  335. dns:
  336. - ${IPV4_NETWORK:-172.22.1}.254
  337. environment:
  338. - LOG_LINES=${LOG_LINES:-9999}
  339. - ADDITIONAL_SAN=${ADDITIONAL_SAN}
  340. - MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
  341. - DBNAME=${DBNAME}
  342. - DBUSER=${DBUSER}
  343. - DBPASS=${DBPASS}
  344. - SKIP_LETS_ENCRYPT=${SKIP_LETS_ENCRYPT:-n}
  345. - COMPOSE_PROJECT_NAME=${COMPOSE_PROJECT_NAME:-mailcow-dockerized}
  346. - DIRECTORY_URL=${DIRECTORY_URL:-}
  347. - ENABLE_SSL_SNI=${ENABLE_SSL_SNI:-n}
  348. - SKIP_IP_CHECK=${SKIP_IP_CHECK:-n}
  349. - SKIP_HTTP_VERIFICATION=${SKIP_HTTP_VERIFICATION:-n}
  350. - ONLY_MAILCOW_HOSTNAME=${ONLY_MAILCOW_HOSTNAME:-n}
  351. - LE_STAGING=${LE_STAGING:-n}
  352. - TZ=${TZ}
  353. - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  354. - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  355. - SNAT_TO_SOURCE=${SNAT_TO_SOURCE:-n}
  356. - SNAT6_TO_SOURCE=${SNAT6_TO_SOURCE:-n}
  357. volumes:
  358. - ./data/web/.well-known/acme-challenge:/var/www/acme:rw
  359. - ./data/assets/ssl:/var/lib/acme/:rw
  360. - ./data/assets/ssl-example:/var/lib/ssl-example/:ro
  361. - mysql-socket-vol-1:/var/run/mysqld/
  362. restart: always
  363. networks:
  364. mailcow-network:
  365. aliases:
  366. - acme
  367. netfilter-mailcow:
  368. image: mailcow/netfilter:1.37
  369. stop_grace_period: 30s
  370. depends_on:
  371. - dovecot-mailcow
  372. - postfix-mailcow
  373. - sogo-mailcow
  374. - php-fpm-mailcow
  375. - redis-mailcow
  376. restart: always
  377. privileged: true
  378. environment:
  379. - TZ=${TZ}
  380. - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  381. - IPV6_NETWORK=${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
  382. - SNAT_TO_SOURCE=${SNAT_TO_SOURCE:-n}
  383. - SNAT6_TO_SOURCE=${SNAT6_TO_SOURCE:-n}
  384. - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  385. - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  386. network_mode: "host"
  387. volumes:
  388. - /lib/modules:/lib/modules:ro
  389. watchdog-mailcow:
  390. image: mailcow/watchdog:1.81
  391. # Debug
  392. #command: /watchdog.sh
  393. dns:
  394. - ${IPV4_NETWORK:-172.22.1}.254
  395. volumes:
  396. - rspamd-vol-1:/var/lib/rspamd
  397. - mysql-socket-vol-1:/var/run/mysqld/
  398. - postfix-vol-1:/var/spool/postfix
  399. - ./data/assets/ssl:/etc/ssl/mail/:ro
  400. restart: always
  401. environment:
  402. - IPV6_NETWORK=${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
  403. - LOG_LINES=${LOG_LINES:-9999}
  404. - TZ=${TZ}
  405. - DBNAME=${DBNAME}
  406. - DBUSER=${DBUSER}
  407. - DBPASS=${DBPASS}
  408. - DBROOT=${DBROOT}
  409. - USE_WATCHDOG=${USE_WATCHDOG:-n}
  410. - WATCHDOG_NOTIFY_EMAIL=${WATCHDOG_NOTIFY_EMAIL}
  411. - WATCHDOG_NOTIFY_BAN=${WATCHDOG_NOTIFY_BAN:-y}
  412. - WATCHDOG_EXTERNAL_CHECKS=${WATCHDOG_EXTERNAL_CHECKS:-n}
  413. - WATCHDOG_MYSQL_REPLICATION_CHECKS=${WATCHDOG_MYSQL_REPLICATION_CHECKS:-n}
  414. - MAILCOW_HOSTNAME=${MAILCOW_HOSTNAME}
  415. - COMPOSE_PROJECT_NAME=${COMPOSE_PROJECT_NAME:-mailcow-dockerized}
  416. - IPV4_NETWORK=${IPV4_NETWORK:-172.22.1}
  417. - IP_BY_DOCKER_API=${IP_BY_DOCKER_API:-0}
  418. - CHECK_UNBOUND=${CHECK_UNBOUND:-1}
  419. - SKIP_CLAMD=${SKIP_CLAMD:-n}
  420. - SKIP_LETS_ENCRYPT=${SKIP_LETS_ENCRYPT:-n}
  421. - SKIP_SOGO=${SKIP_SOGO:-n}
  422. - HTTPS_PORT=${HTTPS_PORT:-443}
  423. - REDIS_SLAVEOF_IP=${REDIS_SLAVEOF_IP:-}
  424. - REDIS_SLAVEOF_PORT=${REDIS_SLAVEOF_PORT:-}
  425. - EXTERNAL_CHECKS_THRESHOLD=1
  426. - NGINX_THRESHOLD=5
  427. - UNBOUND_THRESHOLD=5
  428. - REDIS_THRESHOLD=5
  429. - MYSQL_THRESHOLD=5
  430. - MYSQL_REPLICATION_THRESHOLD=1
  431. - SOGO_THRESHOLD=3
  432. - POSTFIX_THRESHOLD=8
  433. - CLAMD_THRESHOLD=15
  434. - DOVECOT_THRESHOLD=12
  435. - DOVECOT_REPL_THRESHOLD=20
  436. - PHPFPM_THRESHOLD=5
  437. - RATELIMIT_THRESHOLD=1
  438. - FAIL2BAN_THRESHOLD=1
  439. - ACME_THRESHOLD=1
  440. - IPV6NAT_THRESHOLD=1
  441. - RSPAMD_THRESHOLD=5
  442. - OLEFY_THRESHOLD=5
  443. - MAILQ_THRESHOLD=20
  444. - MAILQ_CRIT=30
  445. networks:
  446. mailcow-network:
  447. aliases:
  448. - watchdog
  449. dockerapi-mailcow:
  450. image: mailcow/dockerapi:1.37
  451. restart: always
  452. oom_kill_disable: true
  453. dns:
  454. - ${IPV4_NETWORK:-172.22.1}.254
  455. environment:
  456. - DBROOT=${DBROOT}
  457. - TZ=${TZ}
  458. volumes:
  459. - /var/run/docker.sock:/var/run/docker.sock:ro
  460. networks:
  461. mailcow-network:
  462. aliases:
  463. - dockerapi
  464. solr-mailcow:
  465. image: mailcow/solr:1.7
  466. restart: always
  467. volumes:
  468. - solr-vol-1:/opt/solr/server/solr/dovecot-fts/data
  469. ports:
  470. - "${SOLR_PORT:-127.0.0.1:18983}:8983"
  471. environment:
  472. - TZ=${TZ}
  473. - SOLR_HEAP=${SOLR_HEAP:-1024}
  474. - SKIP_SOLR=${SKIP_SOLR:-y}
  475. networks:
  476. mailcow-network:
  477. aliases:
  478. - solr
  479. olefy-mailcow:
  480. image: mailcow/olefy:1.3
  481. restart: always
  482. environment:
  483. - TZ=${TZ}
  484. - OLEFY_BINDADDRESS=0.0.0.0
  485. - OLEFY_BINDPORT=10055
  486. - OLEFY_TMPDIR=/tmp
  487. - OLEFY_PYTHON_PATH=/usr/bin/python3
  488. - OLEFY_OLEVBA_PATH=/usr/bin/olevba3
  489. - OLEFY_LOGLVL=20
  490. - OLEFY_MINLENGTH=500
  491. - OLEFY_DEL_TMP=1
  492. networks:
  493. mailcow-network:
  494. aliases:
  495. - olefy
  496. ipv6nat-mailcow:
  497. depends_on:
  498. - unbound-mailcow
  499. - mysql-mailcow
  500. - redis-mailcow
  501. - clamd-mailcow
  502. - rspamd-mailcow
  503. - php-fpm-mailcow
  504. - sogo-mailcow
  505. - dovecot-mailcow
  506. - postfix-mailcow
  507. - memcached-mailcow
  508. - nginx-mailcow
  509. - acme-mailcow
  510. - netfilter-mailcow
  511. - watchdog-mailcow
  512. - dockerapi-mailcow
  513. - solr-mailcow
  514. environment:
  515. - TZ=${TZ}
  516. image: robbertkl/ipv6nat
  517. restart: always
  518. privileged: true
  519. network_mode: "host"
  520. volumes:
  521. - /var/run/docker.sock:/var/run/docker.sock:ro
  522. - /lib/modules:/lib/modules:ro
  523. networks:
  524. mailcow-network:
  525. driver: bridge
  526. driver_opts:
  527. com.docker.network.bridge.name: br-mailcow
  528. enable_ipv6: true
  529. ipam:
  530. driver: default
  531. config:
  532. - subnet: ${IPV4_NETWORK:-172.22.1}.0/24
  533. - subnet: ${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
  534. volumes:
  535. # Storage for email files
  536. vmail-vol-1:
  537. # Storage for attachments (deduplicated)
  538. vmail-attachments-vol-1:
  539. mysql-vol-1:
  540. mysql-socket-vol-1:
  541. redis-vol-1:
  542. rspamd-vol-1:
  543. solr-vol-1:
  544. postfix-vol-1:
  545. crypt-vol-1:
  546. sogo-web-vol-1:
  547. sogo-userdata-backup-vol-1: