Docker MTA

docker-compose.yml

@@ -134,6 +134,20 @@ services:
     volumes:
       - ./docker/ldap.ldif:/ldifs/ldap.ldif
       - ./var/openldap:/bitnami/openldap
+  mta:
+    image: 4teamwork/ogmta:latest
+    build:
+      context: .
+      dockerfile: ./docker/mta/Dockerfile
+    ports:
+      - '8025:25'
+    environment:
+      POSTFIX_MYHOSTNAME: ogmta.onegovgever.ch
+      POSTFIX_MYORIGIN: dev.onegovgever.ch
+      POSTFIX_SMTPD_TLS_SECURITY_LEVEL: none
+      VIRTUAL_DOMAINS_0: name=dev.onegovgever.ch,url=http://ogcore:8080/ogsite
+    profiles:
+      - mta
   ianus-frontend:
     image: ghcr.io/4teamwork/ianus-frontend:2024.2.0
     ports:

docker/mta/Dockerfile

@@ -0,0 +1,15 @@
+FROM alpine:3.19
+
+RUN apk add --no-cache \
+    postfix \
+    python3 \
+    py3-jinja2
+
+COPY docker/mta/conf /etc/postfix
+COPY docker/mta/configure-postfix.py docker/mta/mta2plone.py docker/mta/docker-entrypoint.sh /usr/local/bin/
+
+VOLUME ["/var/spool/postfix"]
+
+ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
+
+EXPOSE 25

docker/mta/conf/aliases.jinja

@@ -0,0 +1,31 @@
+# Person who should get root's mail. Don't receive mail as root!
+#root:		you
+
+# Basic system aliases -- these MUST be present
+MAILER-DAEMON:	postmaster
+postmaster:	root
+
+# General redirections for pseudo accounts
+bin:		root
+daemon:		root
+named:		root
+nobody:		root
+uucp:		root
+www:		root
+ftp-bugs:	root
+postfix:	root
+
+# Put your local aliases here.
+
+# Well-known aliases
+manager:	root
+dumper:		root
+operator:	root
+abuse:		postmaster
+
+# trap decode to catch security attacks
+decode:		root
+
+{% for domain in virtual_domains %}
+{{ domain.name }}-inbox: "|/usr/local/bin/mta2plone.py {{ domain.url }}/mail-inbound"
+{% endfor %}