init
This commit is contained in:
Tommy Parnell
183
QUICK_START.md
Normal file
183
QUICK_START.md
Normal file
@@ -0,0 +1,183 @@
|
|||||||
|
# Quick Start Guide
|
||||||
|
|
||||||
|
## Prerequisites Checklist
|
||||||
|
|
||||||
|
Before running the setup script, ensure you have:
|
||||||
|
|
||||||
|
- [ ] Fresh Ubuntu 20.04+ or Debian 11+ server
|
||||||
|
- [ ] Root access to the server
|
||||||
|
- [ ] Domain name (e.g., `example.com`)
|
||||||
|
- [ ] Subdomain for mail server (e.g., `mail.example.com`)
|
||||||
|
- [ ] DNS A record: `mail.example.com` → Your server IP
|
||||||
|
- [ ] DNS MX record: `example.com` → `mail.example.com`
|
||||||
|
- [ ] Server ports 25, 587, 465, 143, 993, 110, 995, 80, 443 accessible
|
||||||
|
|
||||||
|
## Quick Installation
|
||||||
|
|
||||||
|
1. **Download the setup script:**
|
||||||
|
```bash
|
||||||
|
wget https://raw.githubusercontent.com/your-repo/setup-email-server.sh
|
||||||
|
chmod +x setup-email-server.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
2. **Run as root:**
|
||||||
|
```bash
|
||||||
|
sudo ./setup-email-server.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
3. **Follow the prompts to enter:**
|
||||||
|
- Domain name (e.g., `example.com`)
|
||||||
|
- Hostname (e.g., `mail.example.com`)
|
||||||
|
- Admin email
|
||||||
|
- Database password
|
||||||
|
- PostfixAdmin setup password
|
||||||
|
|
||||||
|
4. **Wait for completion** (15-30 minutes)
|
||||||
|
|
||||||
|
## Post-Installation Steps
|
||||||
|
|
||||||
|
### 1. Add DNS Records
|
||||||
|
|
||||||
|
Copy the DNS records displayed at the end of the script:
|
||||||
|
|
||||||
|
```dns
|
||||||
|
; SPF Record
|
||||||
|
example.com. IN TXT "v=spf1 mx ~all"
|
||||||
|
|
||||||
|
; DMARC Record
|
||||||
|
_dmarc.example.com. IN TXT "v=DMARC1; p=none; rua=mailto:dmarc@example.com"
|
||||||
|
|
||||||
|
; DKIM Record (copy from script output)
|
||||||
|
mail._domainkey.example.com. IN TXT "v=DKIM1; k=rsa; p=..."
|
||||||
|
```
|
||||||
|
|
||||||
|
### 2. Configure PostfixAdmin
|
||||||
|
|
||||||
|
1. Visit: `https://mail.example.com/postfixadmin/setup.php`
|
||||||
|
2. Enter the setup password you created
|
||||||
|
3. Create admin user
|
||||||
|
4. Login at: `https://mail.example.com/postfixadmin/`
|
||||||
|
|
||||||
|
### 3. Create Your First Domain and Mailbox
|
||||||
|
|
||||||
|
1. In PostfixAdmin, add your domain (`example.com`)
|
||||||
|
2. Create a mailbox (e.g., `user@example.com`)
|
||||||
|
3. Test by sending an email
|
||||||
|
|
||||||
|
## Testing
|
||||||
|
|
||||||
|
Run the test script:
|
||||||
|
```bash
|
||||||
|
./test-email-server.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
## Maintenance
|
||||||
|
|
||||||
|
Set up automated maintenance:
|
||||||
|
```bash
|
||||||
|
# Add to crontab
|
||||||
|
sudo crontab -e
|
||||||
|
|
||||||
|
# Add these lines:
|
||||||
|
0 2 * * * /path/to/maintenance-email-server.sh
|
||||||
|
0 5 1 * * /path/to/backup-email-server.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
## Client Configuration
|
||||||
|
|
||||||
|
### IMAP Settings:
|
||||||
|
- **Server:** mail.example.com
|
||||||
|
- **Port:** 993
|
||||||
|
- **Security:** SSL/TLS
|
||||||
|
- **Authentication:** Normal password
|
||||||
|
|
||||||
|
### SMTP Settings:
|
||||||
|
- **Server:** mail.example.com
|
||||||
|
- **Port:** 587
|
||||||
|
- **Security:** STARTTLS
|
||||||
|
- **Authentication:** Normal password
|
||||||
|
|
||||||
|
## Troubleshooting
|
||||||
|
|
||||||
|
### Common Issues:
|
||||||
|
|
||||||
|
1. **Can't connect to PostfixAdmin:**
|
||||||
|
- Check Apache status: `systemctl status apache2`
|
||||||
|
- Verify SSL certificate: `openssl s_client -connect mail.example.com:443`
|
||||||
|
|
||||||
|
2. **Email not sending:**
|
||||||
|
- Check Postfix status: `systemctl status postfix`
|
||||||
|
- View logs: `tail -f /var/log/mail.log`
|
||||||
|
- Test SMTP: `telnet localhost 25`
|
||||||
|
|
||||||
|
3. **Email not receiving:**
|
||||||
|
- Check MX record: `dig MX example.com`
|
||||||
|
- Check firewall: `ufw status`
|
||||||
|
- Test port 25: `telnet mail.example.com 25`
|
||||||
|
|
||||||
|
4. **DKIM issues:**
|
||||||
|
- Test DKIM: `opendkim-testkey -d example.com -s mail -vvv`
|
||||||
|
- Check DNS: `dig TXT mail._domainkey.example.com`
|
||||||
|
|
||||||
|
### Log Files:
|
||||||
|
- Main mail log: `/var/log/mail.log`
|
||||||
|
- Setup log: `/var/log/email-server-setup.log`
|
||||||
|
- Apache error log: `/var/log/apache2/error.log`
|
||||||
|
|
||||||
|
### Useful Commands:
|
||||||
|
```bash
|
||||||
|
# Check all services
|
||||||
|
systemctl status postfix dovecot amavis spamassassin clamav-daemon opendkim apache2
|
||||||
|
|
||||||
|
# Test configuration
|
||||||
|
postfix check
|
||||||
|
dovecot -n
|
||||||
|
|
||||||
|
# Check mail queue
|
||||||
|
mailq
|
||||||
|
|
||||||
|
# Flush mail queue
|
||||||
|
postqueue -f
|
||||||
|
|
||||||
|
# Check disk space
|
||||||
|
df -h
|
||||||
|
|
||||||
|
# View active connections
|
||||||
|
ss -tulpn | grep :25
|
||||||
|
```
|
||||||
|
|
||||||
|
## Security Recommendations
|
||||||
|
|
||||||
|
1. **Keep system updated:**
|
||||||
|
```bash
|
||||||
|
apt update && apt upgrade -y
|
||||||
|
```
|
||||||
|
|
||||||
|
2. **Monitor logs regularly:**
|
||||||
|
```bash
|
||||||
|
tail -f /var/log/mail.log | grep -i error
|
||||||
|
```
|
||||||
|
|
||||||
|
3. **Backup regularly:**
|
||||||
|
```bash
|
||||||
|
./backup-email-server.sh --include-mail
|
||||||
|
```
|
||||||
|
|
||||||
|
4. **Test SSL certificates:**
|
||||||
|
```bash
|
||||||
|
openssl x509 -in /etc/letsencrypt/live/mail.example.com/fullchain.pem -noout -dates
|
||||||
|
```
|
||||||
|
|
||||||
|
5. **Monitor disk space:**
|
||||||
|
```bash
|
||||||
|
df -h /var/mail/vhosts
|
||||||
|
```
|
||||||
|
|
||||||
|
## Getting Help
|
||||||
|
|
||||||
|
1. Run the test script: `./test-email-server.sh`
|
||||||
|
2. Check the setup log: `/var/log/email-server-setup.log`
|
||||||
|
3. Use online testing tools:
|
||||||
|
- [MX Toolbox](https://mxtoolbox.com/)
|
||||||
|
- [Mail Tester](https://www.mail-tester.com/)
|
||||||
|
- [DKIM Validator](https://dkimvalidator.com/)
|
||||||
309
README.md
Normal file
309
README.md
Normal file
@@ -0,0 +1,309 @@
|
|||||||
|
# Email Server Setup Script
|
||||||
|
|
||||||
|
This script automatically sets up a complete email server with the following components:
|
||||||
|
|
||||||
|
- **Postfix** - SMTP server for sending/receiving emails
|
||||||
|
- **Dovecot** - IMAP/POP3 server for email retrieval
|
||||||
|
- **PostgreSQL** - Database backend for virtual domains and users
|
||||||
|
- **PostfixAdmin** - Web interface for managing domains and mailboxes
|
||||||
|
- **Amavis** - Content filter for spam and virus scanning
|
||||||
|
- **SpamAssassin** - Spam filtering
|
||||||
|
- **ClamAV** - Antivirus scanning
|
||||||
|
- **OpenDKIM** - DKIM signing for email authentication
|
||||||
|
- **Let's Encrypt** - SSL/TLS certificates for secure connections
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
1. **Fresh Ubuntu/Debian server** (tested on Ubuntu 20.04/22.04)
|
||||||
|
2. **Root access** to the server
|
||||||
|
3. **Domain name** pointing to your server
|
||||||
|
4. **Hostname** (e.g., mail.yourdomain.com) with A record pointing to server IP
|
||||||
|
5. **Ports 25, 587, 465, 110, 995, 143, 993, 80, 443** open in firewall
|
||||||
|
|
||||||
|
## DNS Prerequisites
|
||||||
|
|
||||||
|
Before running the script, ensure you have these DNS records:
|
||||||
|
|
||||||
|
```
|
||||||
|
A mail.yourdomain.com [Your Server IP]
|
||||||
|
MX yourdomain.com mail.yourdomain.com
|
||||||
|
```
|
||||||
|
|
||||||
|
## Installation
|
||||||
|
|
||||||
|
1. **Download the script:**
|
||||||
|
```bash
|
||||||
|
wget https://raw.githubusercontent.com/your-repo/setup-email-server.sh
|
||||||
|
chmod +x setup-email-server.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
2. **Run the script as root:**
|
||||||
|
```bash
|
||||||
|
sudo ./setup-email-server.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
3. **Provide the required information when prompted:**
|
||||||
|
- Domain name (e.g., yourdomain.com)
|
||||||
|
- Hostname (e.g., mail.yourdomain.com)
|
||||||
|
- Admin email address
|
||||||
|
- PostgreSQL password for postfix user
|
||||||
|
- PostfixAdmin setup password
|
||||||
|
|
||||||
|
## Post-Installation Steps
|
||||||
|
|
||||||
|
### 1. Add DNS Records
|
||||||
|
|
||||||
|
After the script completes, add these DNS records:
|
||||||
|
|
||||||
|
#### SPF Record
|
||||||
|
```
|
||||||
|
TXT yourdomain.com "v=spf1 mx ~all"
|
||||||
|
```
|
||||||
|
|
||||||
|
#### DMARC Record
|
||||||
|
```
|
||||||
|
TXT _dmarc.yourdomain.com "v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com"
|
||||||
|
```
|
||||||
|
|
||||||
|
#### DKIM Record
|
||||||
|
The script will display the DKIM DNS record. Add it to your DNS:
|
||||||
|
```
|
||||||
|
TXT mail._domainkey.yourdomain.com "v=DKIM1; k=rsa; p=..."
|
||||||
|
```
|
||||||
|
|
||||||
|
### 2. Complete PostfixAdmin Setup
|
||||||
|
|
||||||
|
1. Visit `https://mail.yourdomain.com/postfixadmin/setup.php`
|
||||||
|
2. Enter the setup password you provided during installation
|
||||||
|
3. Create an admin user
|
||||||
|
4. Login to PostfixAdmin at `https://mail.yourdomain.com/postfixadmin/`
|
||||||
|
|
||||||
|
### 3. Create Domains and Mailboxes
|
||||||
|
|
||||||
|
1. Add your domain in PostfixAdmin
|
||||||
|
2. Create mailboxes for your users
|
||||||
|
3. Test email functionality
|
||||||
|
|
||||||
|
## Multiple Domain Support
|
||||||
|
|
||||||
|
This email server fully supports unlimited virtual domains. Each domain can have its own mailboxes, aliases, quotas, and DKIM signing.
|
||||||
|
|
||||||
|
### Adding Additional Domains
|
||||||
|
|
||||||
|
#### Method 1: Using the Helper Script (Recommended)
|
||||||
|
```bash
|
||||||
|
# Add DKIM support for a new domain
|
||||||
|
sudo ./add-domain.sh newdomain.com
|
||||||
|
|
||||||
|
# This will:
|
||||||
|
# - Generate DKIM keys
|
||||||
|
# - Update OpenDKIM configuration
|
||||||
|
# - Display DNS records to add
|
||||||
|
# - Show PostfixAdmin setup instructions
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Method 2: Manual Process
|
||||||
|
1. **Add domain via PostfixAdmin:**
|
||||||
|
- Login to PostfixAdmin
|
||||||
|
- Go to "Domain List" → "New Domain"
|
||||||
|
- Enter domain details and save
|
||||||
|
|
||||||
|
2. **Configure DKIM for the domain:**
|
||||||
|
```bash
|
||||||
|
sudo ./add-domain.sh newdomain.com
|
||||||
|
```
|
||||||
|
|
||||||
|
3. **Add DNS records for the new domain:**
|
||||||
|
```
|
||||||
|
MX newdomain.com mail.yourmainhost.com
|
||||||
|
TXT newdomain.com "v=spf1 mx ~all"
|
||||||
|
TXT _dmarc.newdomain.com "v=DMARC1; p=none; rua=mailto:dmarc@newdomain.com"
|
||||||
|
TXT mail._domainkey.newdomain.com "v=DKIM1; k=rsa; p=..."
|
||||||
|
```
|
||||||
|
|
||||||
|
### Managing Multiple Domains
|
||||||
|
|
||||||
|
Use the domain management script for comprehensive domain operations:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# List all configured domains
|
||||||
|
sudo ./manage-domains.sh list
|
||||||
|
|
||||||
|
# Show detailed information for a domain
|
||||||
|
sudo ./manage-domains.sh show example.com
|
||||||
|
|
||||||
|
# Test domain configuration (DNS, DKIM, etc.)
|
||||||
|
sudo ./manage-domains.sh test example.com
|
||||||
|
|
||||||
|
# Add a new domain
|
||||||
|
sudo ./manage-domains.sh add newdomain.com
|
||||||
|
|
||||||
|
# Remove a domain (WARNING: deletes all data)
|
||||||
|
sudo ./manage-domains.sh remove olddomain.com
|
||||||
|
|
||||||
|
# Show overall server status
|
||||||
|
sudo ./manage-domains.sh status
|
||||||
|
```
|
||||||
|
|
||||||
|
### Application SMTP for Multiple Domains
|
||||||
|
|
||||||
|
Applications can send from any configured domain using the same SMTP server:
|
||||||
|
|
||||||
|
```python
|
||||||
|
# Example: Send from different domains
|
||||||
|
domains = ['company.com', 'mysite.org', 'shop.net']
|
||||||
|
|
||||||
|
for domain in domains:
|
||||||
|
smtp_config = {
|
||||||
|
'host': 'mail.yourmainhost.com',
|
||||||
|
'port': 587,
|
||||||
|
'username': f'noreply@{domain}',
|
||||||
|
'password': 'domain_specific_password'
|
||||||
|
}
|
||||||
|
# Send email using this configuration
|
||||||
|
```
|
||||||
|
|
||||||
|
## Security Features
|
||||||
|
|
||||||
|
- **SSL/TLS encryption** for all connections
|
||||||
|
- **DKIM signing** for email authentication
|
||||||
|
- **SPF and DMARC** policies for anti-spoofing
|
||||||
|
- **Spam filtering** with SpamAssassin
|
||||||
|
- **Virus scanning** with ClamAV
|
||||||
|
- **Secure authentication** with encrypted passwords
|
||||||
|
- **Firewall rules** restricting access to necessary ports
|
||||||
|
|
||||||
|
## Email Ports
|
||||||
|
|
||||||
|
- **25** - SMTP (incoming mail)
|
||||||
|
- **587** - Submission (authenticated sending)
|
||||||
|
- **465** - SMTPS (secure SMTP)
|
||||||
|
- **143** - IMAP
|
||||||
|
- **993** - IMAPS (secure IMAP)
|
||||||
|
- **110** - POP3
|
||||||
|
- **995** - POP3S (secure POP3)
|
||||||
|
|
||||||
|
## Client Configuration
|
||||||
|
|
||||||
|
### IMAP Settings
|
||||||
|
- **Server**: mail.yourdomain.com
|
||||||
|
- **Port**: 993 (SSL) or 143 (STARTTLS)
|
||||||
|
- **Security**: SSL/TLS
|
||||||
|
- **Authentication**: Normal password
|
||||||
|
|
||||||
|
### SMTP Settings
|
||||||
|
- **Server**: mail.yourdomain.com
|
||||||
|
- **Port**: 587 (STARTTLS) or 465 (SSL)
|
||||||
|
- **Security**: SSL/TLS
|
||||||
|
- **Authentication**: Normal password
|
||||||
|
|
||||||
|
## Troubleshooting
|
||||||
|
|
||||||
|
### Check Service Status
|
||||||
|
```bash
|
||||||
|
systemctl status postfix dovecot amavis spamassassin clamav-daemon opendkim apache2
|
||||||
|
```
|
||||||
|
|
||||||
|
### View Logs
|
||||||
|
```bash
|
||||||
|
# Postfix logs
|
||||||
|
tail -f /var/log/mail.log
|
||||||
|
|
||||||
|
# Dovecot logs
|
||||||
|
tail -f /var/log/dovecot.log
|
||||||
|
|
||||||
|
# Amavis logs
|
||||||
|
tail -f /var/log/amavis.log
|
||||||
|
|
||||||
|
# Apache logs
|
||||||
|
tail -f /var/log/apache2/error.log
|
||||||
|
```
|
||||||
|
|
||||||
|
### Test Email Sending
|
||||||
|
```bash
|
||||||
|
echo "Test email" | mail -s "Test Subject" user@yourdomain.com
|
||||||
|
```
|
||||||
|
|
||||||
|
### Test DKIM
|
||||||
|
```bash
|
||||||
|
opendkim-testkey -d yourdomain.com -s mail -vvv
|
||||||
|
```
|
||||||
|
|
||||||
|
### Test DNS Records
|
||||||
|
```bash
|
||||||
|
dig MX yourdomain.com
|
||||||
|
dig TXT yourdomain.com
|
||||||
|
dig TXT mail._domainkey.yourdomain.com
|
||||||
|
```
|
||||||
|
|
||||||
|
## Maintenance
|
||||||
|
|
||||||
|
### Update SSL Certificates
|
||||||
|
Certificates are automatically renewed via cron. To test renewal:
|
||||||
|
```bash
|
||||||
|
certbot renew --dry-run
|
||||||
|
```
|
||||||
|
|
||||||
|
### Update Spam Rules
|
||||||
|
```bash
|
||||||
|
sa-update
|
||||||
|
systemctl restart spamassassin
|
||||||
|
```
|
||||||
|
|
||||||
|
### Update Virus Definitions
|
||||||
|
```bash
|
||||||
|
freshclam
|
||||||
|
systemctl restart clamav-daemon
|
||||||
|
```
|
||||||
|
|
||||||
|
### Backup Configuration
|
||||||
|
```bash
|
||||||
|
tar -czf email-backup-$(date +%Y%m%d).tar.gz \
|
||||||
|
/etc/postfix \
|
||||||
|
/etc/dovecot \
|
||||||
|
/etc/amavis \
|
||||||
|
/etc/opendkim \
|
||||||
|
/var/www/postfixadmin/config.local.php \
|
||||||
|
/etc/letsencrypt
|
||||||
|
```
|
||||||
|
|
||||||
|
## File Locations
|
||||||
|
|
||||||
|
- **Postfix config**: `/etc/postfix/`
|
||||||
|
- **Dovecot config**: `/etc/dovecot/`
|
||||||
|
- **Amavis config**: `/etc/amavis/`
|
||||||
|
- **OpenDKIM config**: `/etc/opendkim/`
|
||||||
|
- **PostfixAdmin**: `/var/www/postfixadmin/`
|
||||||
|
- **Mail storage**: `/var/mail/vhosts/`
|
||||||
|
- **SSL certificates**: `/etc/letsencrypt/live/`
|
||||||
|
- **Setup log**: `/var/log/email-server-setup.log`
|
||||||
|
|
||||||
|
## Advanced Configuration
|
||||||
|
|
||||||
|
### Custom Spam Rules
|
||||||
|
Edit `/etc/spamassassin/local.cf` and restart SpamAssassin.
|
||||||
|
|
||||||
|
### Additional Domains
|
||||||
|
Add domains through PostfixAdmin web interface.
|
||||||
|
|
||||||
|
### Quota Management
|
||||||
|
Quotas are managed through PostfixAdmin and enforced by Dovecot.
|
||||||
|
|
||||||
|
### Backup Strategy
|
||||||
|
Implement regular backups of:
|
||||||
|
- PostgreSQL database
|
||||||
|
- Configuration files
|
||||||
|
- SSL certificates
|
||||||
|
- Mail data
|
||||||
|
|
||||||
|
## Support
|
||||||
|
|
||||||
|
For issues and support:
|
||||||
|
1. Check the setup log: `/var/log/email-server-setup.log`
|
||||||
|
2. Review service logs
|
||||||
|
3. Verify DNS configuration
|
||||||
|
4. Test with online email testing tools
|
||||||
|
|
||||||
|
## License
|
||||||
|
|
||||||
|
This script is provided as-is under the MIT License.
|
||||||
329
add-domain.sh
Executable file
329
add-domain.sh
Executable file
@@ -0,0 +1,329 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Add Domain Helper Script
|
||||||
|
# Adds DKIM support and configuration for additional domains
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
# Colors
|
||||||
|
RED='\033[0;31m'
|
||||||
|
GREEN='\033[0;32m'
|
||||||
|
YELLOW='\033[1;33m'
|
||||||
|
BLUE='\033[0;34m'
|
||||||
|
NC='\033[0m'
|
||||||
|
|
||||||
|
# Check arguments
|
||||||
|
if [[ $# -ne 1 ]]; then
|
||||||
|
echo "Usage: $0 <domain>"
|
||||||
|
echo "Example: $0 newdomain.com"
|
||||||
|
echo
|
||||||
|
echo "This script will:"
|
||||||
|
echo " - Generate DKIM keys for the new domain"
|
||||||
|
echo " - Update OpenDKIM configuration"
|
||||||
|
echo " - Display DNS records to add"
|
||||||
|
echo " - Show PostfixAdmin setup instructions"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
DOMAIN=$1
|
||||||
|
|
||||||
|
# Logging
|
||||||
|
LOG_FILE="/var/log/email-server-setup.log"
|
||||||
|
|
||||||
|
log() {
|
||||||
|
echo "$(date '+%Y-%m-%d %H:%M:%S') - $1" | tee -a "$LOG_FILE"
|
||||||
|
}
|
||||||
|
|
||||||
|
info() {
|
||||||
|
echo -e "${BLUE}INFO: $1${NC}"
|
||||||
|
log "INFO: $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
success() {
|
||||||
|
echo -e "${GREEN}SUCCESS: $1${NC}"
|
||||||
|
log "SUCCESS: $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
warning() {
|
||||||
|
echo -e "${YELLOW}WARNING: $1${NC}"
|
||||||
|
log "WARNING: $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
error() {
|
||||||
|
echo -e "${RED}ERROR: $1${NC}" >&2
|
||||||
|
log "ERROR: $1"
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
# Check if running as root
|
||||||
|
check_root() {
|
||||||
|
if [[ $EUID -ne 0 ]]; then
|
||||||
|
error "This script must be run as root"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Validate domain format
|
||||||
|
validate_domain() {
|
||||||
|
if [[ ! "$DOMAIN" =~ ^[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]*\.[a-zA-Z]{2,}$ ]]; then
|
||||||
|
error "Invalid domain format: $DOMAIN"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Check if domain already exists in DKIM
|
||||||
|
check_existing_domain() {
|
||||||
|
if [[ -d "/etc/opendkim/keys/$DOMAIN" ]]; then
|
||||||
|
warning "DKIM keys already exist for $DOMAIN"
|
||||||
|
read -p "Do you want to regenerate them? (y/N): " -n 1 -r
|
||||||
|
echo
|
||||||
|
if [[ ! $REPLY =~ ^[Yy]$ ]]; then
|
||||||
|
info "Keeping existing DKIM keys for $DOMAIN"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
# Get main hostname from existing configuration
|
||||||
|
get_main_hostname() {
|
||||||
|
if [[ -f "/etc/postfix/main.cf" ]]; then
|
||||||
|
MAIN_HOSTNAME=$(grep "^myhostname" /etc/postfix/main.cf | cut -d= -f2 | tr -d ' ')
|
||||||
|
if [[ -z "$MAIN_HOSTNAME" ]]; then
|
||||||
|
error "Could not determine main hostname from Postfix configuration"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
error "Postfix configuration not found. Run the main setup script first."
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Generate DKIM keys for the new domain
|
||||||
|
generate_dkim_keys() {
|
||||||
|
info "Generating DKIM keys for domain: $DOMAIN"
|
||||||
|
|
||||||
|
# Create directory
|
||||||
|
mkdir -p /etc/opendkim/keys/$DOMAIN
|
||||||
|
|
||||||
|
# Generate DKIM key
|
||||||
|
opendkim-genkey -t -s mail -d $DOMAIN -D /etc/opendkim/keys/$DOMAIN
|
||||||
|
|
||||||
|
# Set permissions
|
||||||
|
chown -R opendkim:opendkim /etc/opendkim/keys/$DOMAIN
|
||||||
|
chmod 600 /etc/opendkim/keys/$DOMAIN/mail.private
|
||||||
|
|
||||||
|
success "DKIM keys generated for $DOMAIN"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Update OpenDKIM configuration
|
||||||
|
update_opendkim_config() {
|
||||||
|
info "Updating OpenDKIM configuration..."
|
||||||
|
|
||||||
|
# Check if entry already exists in key.table
|
||||||
|
if ! grep -q "mail._domainkey.$DOMAIN" /etc/opendkim/key.table 2>/dev/null; then
|
||||||
|
echo "mail._domainkey.$DOMAIN $DOMAIN:mail:/etc/opendkim/keys/$DOMAIN/mail.private" >> /etc/opendkim/key.table
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Check if entry already exists in signing.table
|
||||||
|
if ! grep -q "*@$DOMAIN" /etc/opendkim/signing.table 2>/dev/null; then
|
||||||
|
echo "*@$DOMAIN mail._domainkey.$DOMAIN" >> /etc/opendkim/signing.table
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Check if domain already exists in trusted.hosts
|
||||||
|
if ! grep -q "^$DOMAIN$" /etc/opendkim/trusted.hosts 2>/dev/null; then
|
||||||
|
echo "$DOMAIN" >> /etc/opendkim/trusted.hosts
|
||||||
|
fi
|
||||||
|
|
||||||
|
success "OpenDKIM configuration updated"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Restart OpenDKIM service
|
||||||
|
restart_opendkim() {
|
||||||
|
info "Restarting OpenDKIM service..."
|
||||||
|
if systemctl restart opendkim; then
|
||||||
|
success "OpenDKIM service restarted"
|
||||||
|
else
|
||||||
|
error "Failed to restart OpenDKIM service"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Test DKIM configuration
|
||||||
|
test_dkim() {
|
||||||
|
info "Testing DKIM configuration..."
|
||||||
|
sleep 2 # Give OpenDKIM time to start
|
||||||
|
|
||||||
|
if opendkim-testkey -d $DOMAIN -s mail -vvv 2>&1 | grep -q "key OK"; then
|
||||||
|
success "DKIM test passed for $DOMAIN"
|
||||||
|
else
|
||||||
|
warning "DKIM test failed. Check the DNS record below and try again later."
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Display DNS records to add
|
||||||
|
display_dns_records() {
|
||||||
|
get_main_hostname
|
||||||
|
|
||||||
|
echo
|
||||||
|
echo -e "${YELLOW}=== DNS Records to Add for $DOMAIN ===${NC}"
|
||||||
|
echo
|
||||||
|
echo -e "${BLUE}1. MX Record:${NC}"
|
||||||
|
echo "MX $DOMAIN $MAIN_HOSTNAME"
|
||||||
|
echo
|
||||||
|
echo -e "${BLUE}2. SPF Record:${NC}"
|
||||||
|
echo "TXT $DOMAIN \"v=spf1 mx ~all\""
|
||||||
|
echo
|
||||||
|
echo -e "${BLUE}3. DMARC Record:${NC}"
|
||||||
|
echo "TXT _dmarc.$DOMAIN \"v=DMARC1; p=none; rua=mailto:dmarc@$DOMAIN\""
|
||||||
|
echo
|
||||||
|
echo -e "${BLUE}4. DKIM Record:${NC}"
|
||||||
|
echo "Record name: mail._domainkey.$DOMAIN"
|
||||||
|
echo "Record type: TXT"
|
||||||
|
echo "Record value:"
|
||||||
|
cat /etc/opendkim/keys/$DOMAIN/mail.txt 2>/dev/null || echo "Error: DKIM key file not found"
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
# Display PostfixAdmin instructions
|
||||||
|
display_postfixadmin_instructions() {
|
||||||
|
get_main_hostname
|
||||||
|
|
||||||
|
echo -e "${YELLOW}=== PostfixAdmin Setup Instructions ===${NC}"
|
||||||
|
echo
|
||||||
|
echo "1. Visit: https://$MAIN_HOSTNAME/postfixadmin/"
|
||||||
|
echo "2. Login with your admin credentials"
|
||||||
|
echo "3. Go to 'Domain List' → 'New Domain'"
|
||||||
|
echo "4. Enter domain: $DOMAIN"
|
||||||
|
echo "5. Set desired limits and quotas"
|
||||||
|
echo "6. Click 'Add Domain'"
|
||||||
|
echo "7. Create mailboxes under 'Virtual List' → 'Add Mailbox'"
|
||||||
|
echo
|
||||||
|
echo -e "${BLUE}Suggested mailboxes for $DOMAIN:${NC}"
|
||||||
|
echo " - admin@$DOMAIN"
|
||||||
|
echo " - info@$DOMAIN"
|
||||||
|
echo " - noreply@$DOMAIN"
|
||||||
|
echo " - support@$DOMAIN"
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
# Display application configuration
|
||||||
|
display_app_config() {
|
||||||
|
get_main_hostname
|
||||||
|
|
||||||
|
echo -e "${YELLOW}=== Application SMTP Configuration ===${NC}"
|
||||||
|
echo
|
||||||
|
echo "Your applications can now send email from $DOMAIN using these settings:"
|
||||||
|
echo
|
||||||
|
echo -e "${BLUE}SMTP Settings:${NC}"
|
||||||
|
echo " Host: $MAIN_HOSTNAME"
|
||||||
|
echo " Port: 587 (STARTTLS) or 465 (SSL/TLS)"
|
||||||
|
echo " Security: STARTTLS or SSL/TLS"
|
||||||
|
echo " Username: mailbox@$DOMAIN (full email address)"
|
||||||
|
echo " Password: [mailbox password from PostfixAdmin]"
|
||||||
|
echo
|
||||||
|
echo -e "${BLUE}Example Python code:${NC}"
|
||||||
|
cat << 'EOF'
|
||||||
|
import smtplib
|
||||||
|
from email.mime.text import MIMEText
|
||||||
|
|
||||||
|
smtp_config = {
|
||||||
|
'host': 'MAIN_HOSTNAME',
|
||||||
|
'port': 587,
|
||||||
|
'username': 'app@DOMAIN',
|
||||||
|
'password': 'your_mailbox_password'
|
||||||
|
}
|
||||||
|
|
||||||
|
msg = MIMEText("Hello from DOMAIN!")
|
||||||
|
msg['Subject'] = "Test Email"
|
||||||
|
msg['From'] = smtp_config['username']
|
||||||
|
msg['To'] = "recipient@example.com"
|
||||||
|
|
||||||
|
with smtplib.SMTP(smtp_config['host'], smtp_config['port']) as server:
|
||||||
|
server.starttls()
|
||||||
|
server.login(smtp_config['username'], smtp_config['password'])
|
||||||
|
server.send_message(msg)
|
||||||
|
EOF
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
# Verify email server is running
|
||||||
|
verify_email_server() {
|
||||||
|
info "Verifying email server status..."
|
||||||
|
|
||||||
|
services=("postfix" "dovecot" "opendkim" "postgresql")
|
||||||
|
all_running=true
|
||||||
|
|
||||||
|
for service in "${services[@]}"; do
|
||||||
|
if ! systemctl is-active --quiet $service; then
|
||||||
|
warning "$service is not running"
|
||||||
|
all_running=false
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
if $all_running; then
|
||||||
|
success "All required services are running"
|
||||||
|
else
|
||||||
|
warning "Some services are not running. You may need to restart them."
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Main function
|
||||||
|
main() {
|
||||||
|
echo -e "${BLUE}Add Domain Script for Email Server${NC}"
|
||||||
|
echo "=================================="
|
||||||
|
echo "Adding domain: $DOMAIN"
|
||||||
|
echo
|
||||||
|
|
||||||
|
check_root
|
||||||
|
validate_domain
|
||||||
|
verify_email_server
|
||||||
|
|
||||||
|
if check_existing_domain; then
|
||||||
|
generate_dkim_keys
|
||||||
|
fi
|
||||||
|
|
||||||
|
update_opendkim_config
|
||||||
|
restart_opendkim
|
||||||
|
test_dkim
|
||||||
|
display_dns_records
|
||||||
|
display_postfixadmin_instructions
|
||||||
|
display_app_config
|
||||||
|
|
||||||
|
echo
|
||||||
|
success "Domain $DOMAIN has been configured!"
|
||||||
|
echo
|
||||||
|
echo -e "${YELLOW}Next steps:${NC}"
|
||||||
|
echo "1. Add the DNS records shown above"
|
||||||
|
echo "2. Wait for DNS propagation (up to 24 hours)"
|
||||||
|
echo "3. Add the domain in PostfixAdmin"
|
||||||
|
echo "4. Create mailboxes for the domain"
|
||||||
|
echo "5. Test email sending and receiving"
|
||||||
|
echo
|
||||||
|
echo -e "${BLUE}To test the configuration later, run:${NC}"
|
||||||
|
echo "./test-email-server.sh"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Show help if requested
|
||||||
|
if [[ "${1:-}" == "--help" || "${1:-}" == "-h" ]]; then
|
||||||
|
echo "Add Domain Script for Email Server"
|
||||||
|
echo "================================="
|
||||||
|
echo
|
||||||
|
echo "Usage: $0 <domain>"
|
||||||
|
echo
|
||||||
|
echo "This script adds DKIM support for additional domains to your email server."
|
||||||
|
echo "It will generate DKIM keys, update OpenDKIM configuration, and provide"
|
||||||
|
echo "DNS records and PostfixAdmin instructions."
|
||||||
|
echo
|
||||||
|
echo "Examples:"
|
||||||
|
echo " $0 newcompany.com"
|
||||||
|
echo " $0 mysite.org"
|
||||||
|
echo
|
||||||
|
echo "Prerequisites:"
|
||||||
|
echo " - Email server must be already set up with setup-email-server.sh"
|
||||||
|
echo " - Must be run as root"
|
||||||
|
echo " - Domain should point to your server"
|
||||||
|
echo
|
||||||
|
echo "After running this script:"
|
||||||
|
echo " 1. Add the provided DNS records"
|
||||||
|
echo " 2. Configure the domain in PostfixAdmin"
|
||||||
|
echo " 3. Create mailboxes for the new domain"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
main "$@"
|
||||||
179
backup-email-server.sh
Executable file
179
backup-email-server.sh
Executable file
@@ -0,0 +1,179 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Email Server Backup Script
|
||||||
|
# Creates backups of email server configuration and data
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
# Configuration
|
||||||
|
BACKUP_DIR="/var/backups/email-server"
|
||||||
|
DATE=$(date +%Y%m%d_%H%M%S)
|
||||||
|
BACKUP_NAME="email-backup-$DATE"
|
||||||
|
RETENTION_DAYS=30
|
||||||
|
|
||||||
|
# Colors
|
||||||
|
RED='\033[0;31m'
|
||||||
|
GREEN='\033[0;32m'
|
||||||
|
YELLOW='\033[1;33m'
|
||||||
|
BLUE='\033[0;34m'
|
||||||
|
NC='\033[0m'
|
||||||
|
|
||||||
|
log() {
|
||||||
|
echo "$(date '+%Y-%m-%d %H:%M:%S') - $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
info() {
|
||||||
|
echo -e "${BLUE}INFO: $1${NC}"
|
||||||
|
log "INFO: $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
success() {
|
||||||
|
echo -e "${GREEN}SUCCESS: $1${NC}"
|
||||||
|
log "SUCCESS: $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
error() {
|
||||||
|
echo -e "${RED}ERROR: $1${NC}" >&2
|
||||||
|
log "ERROR: $1"
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
# Create backup directory
|
||||||
|
create_backup_dir() {
|
||||||
|
info "Creating backup directory..."
|
||||||
|
mkdir -p "$BACKUP_DIR/$BACKUP_NAME"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Backup PostgreSQL database
|
||||||
|
backup_database() {
|
||||||
|
info "Backing up PostgreSQL database..."
|
||||||
|
sudo -u postgres pg_dump postfix > "$BACKUP_DIR/$BACKUP_NAME/postfix_db.sql"
|
||||||
|
success "Database backup completed"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Backup configuration files
|
||||||
|
backup_configs() {
|
||||||
|
info "Backing up configuration files..."
|
||||||
|
|
||||||
|
# Postfix
|
||||||
|
cp -r /etc/postfix "$BACKUP_DIR/$BACKUP_NAME/"
|
||||||
|
|
||||||
|
# Dovecot
|
||||||
|
cp -r /etc/dovecot "$BACKUP_DIR/$BACKUP_NAME/"
|
||||||
|
|
||||||
|
# Amavis
|
||||||
|
cp -r /etc/amavis "$BACKUP_DIR/$BACKUP_NAME/"
|
||||||
|
|
||||||
|
# OpenDKIM
|
||||||
|
cp -r /etc/opendkim "$BACKUP_DIR/$BACKUP_NAME/"
|
||||||
|
|
||||||
|
# SpamAssassin
|
||||||
|
cp -r /etc/spamassassin "$BACKUP_DIR/$BACKUP_NAME/"
|
||||||
|
|
||||||
|
# PostfixAdmin
|
||||||
|
if [[ -d "/var/www/postfixadmin" ]]; then
|
||||||
|
cp -r /var/www/postfixadmin "$BACKUP_DIR/$BACKUP_NAME/"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Apache configuration
|
||||||
|
cp -r /etc/apache2/sites-available "$BACKUP_DIR/$BACKUP_NAME/apache2-sites/"
|
||||||
|
|
||||||
|
success "Configuration backup completed"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Backup SSL certificates
|
||||||
|
backup_ssl() {
|
||||||
|
info "Backing up SSL certificates..."
|
||||||
|
if [[ -d "/etc/letsencrypt" ]]; then
|
||||||
|
cp -r /etc/letsencrypt "$BACKUP_DIR/$BACKUP_NAME/"
|
||||||
|
success "SSL certificates backup completed"
|
||||||
|
else
|
||||||
|
info "No SSL certificates found to backup"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Backup mail data (optional - can be large)
|
||||||
|
backup_mail_data() {
|
||||||
|
if [[ "${1:-}" == "--include-mail" ]]; then
|
||||||
|
info "Backing up mail data (this may take a while)..."
|
||||||
|
if [[ -d "/var/mail/vhosts" ]]; then
|
||||||
|
tar -czf "$BACKUP_DIR/$BACKUP_NAME/mail_data.tar.gz" -C /var/mail vhosts
|
||||||
|
success "Mail data backup completed"
|
||||||
|
else
|
||||||
|
info "No mail data found to backup"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
info "Skipping mail data backup (use --include-mail to include)"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Create compressed archive
|
||||||
|
create_archive() {
|
||||||
|
info "Creating compressed archive..."
|
||||||
|
cd "$BACKUP_DIR"
|
||||||
|
tar -czf "$BACKUP_NAME.tar.gz" "$BACKUP_NAME"
|
||||||
|
rm -rf "$BACKUP_NAME"
|
||||||
|
success "Archive created: $BACKUP_DIR/$BACKUP_NAME.tar.gz"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Cleanup old backups
|
||||||
|
cleanup_old_backups() {
|
||||||
|
info "Cleaning up backups older than $RETENTION_DAYS days..."
|
||||||
|
find "$BACKUP_DIR" -name "email-backup-*.tar.gz" -mtime +$RETENTION_DAYS -delete
|
||||||
|
success "Old backups cleaned up"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Display backup information
|
||||||
|
show_backup_info() {
|
||||||
|
echo
|
||||||
|
echo -e "${GREEN}Backup completed successfully!${NC}"
|
||||||
|
echo "Backup location: $BACKUP_DIR/$BACKUP_NAME.tar.gz"
|
||||||
|
echo "Backup size: $(du -h "$BACKUP_DIR/$BACKUP_NAME.tar.gz" | cut -f1)"
|
||||||
|
echo
|
||||||
|
echo "To restore this backup:"
|
||||||
|
echo "1. Extract: tar -xzf $BACKUP_NAME.tar.gz"
|
||||||
|
echo "2. Stop services: systemctl stop postfix dovecot amavis apache2"
|
||||||
|
echo "3. Restore configurations to their original locations"
|
||||||
|
echo "4. Restore database: sudo -u postgres psql postfix < postfix_db.sql"
|
||||||
|
echo "5. Restart services: systemctl start postfix dovecot amavis apache2"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Main function
|
||||||
|
main() {
|
||||||
|
echo -e "${BLUE}Email Server Backup Script${NC}"
|
||||||
|
echo "=========================="
|
||||||
|
echo
|
||||||
|
|
||||||
|
# Check if running as root
|
||||||
|
if [[ $EUID -ne 0 ]]; then
|
||||||
|
error "This script must be run as root"
|
||||||
|
fi
|
||||||
|
|
||||||
|
create_backup_dir
|
||||||
|
backup_database
|
||||||
|
backup_configs
|
||||||
|
backup_ssl
|
||||||
|
backup_mail_data "$@"
|
||||||
|
create_archive
|
||||||
|
cleanup_old_backups
|
||||||
|
show_backup_info
|
||||||
|
}
|
||||||
|
|
||||||
|
# Show usage if help requested
|
||||||
|
if [[ "${1:-}" == "--help" || "${1:-}" == "-h" ]]; then
|
||||||
|
echo "Usage: $0 [--include-mail]"
|
||||||
|
echo
|
||||||
|
echo "Options:"
|
||||||
|
echo " --include-mail Include mail data in backup (can be large)"
|
||||||
|
echo " --help, -h Show this help message"
|
||||||
|
echo
|
||||||
|
echo "This script backs up:"
|
||||||
|
echo " - PostgreSQL database"
|
||||||
|
echo " - Configuration files (Postfix, Dovecot, Amavis, OpenDKIM, etc.)"
|
||||||
|
echo " - SSL certificates"
|
||||||
|
echo " - PostfixAdmin installation"
|
||||||
|
echo " - Mail data (if --include-mail is specified)"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
main "$@"
|
||||||
207
config.template
Normal file
207
config.template
Normal file
@@ -0,0 +1,207 @@
|
|||||||
|
# Email Server Configuration Template
|
||||||
|
# Copy this file and customize for your environment
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# BASIC CONFIGURATION
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Your domain name (e.g., example.com)
|
||||||
|
DOMAIN="yourdomain.com"
|
||||||
|
|
||||||
|
# Your mail server hostname (e.g., mail.example.com)
|
||||||
|
HOSTNAME="mail.yourdomain.com"
|
||||||
|
|
||||||
|
# Administrator email address
|
||||||
|
ADMIN_EMAIL="admin@yourdomain.com"
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# DATABASE CONFIGURATION
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# PostgreSQL database settings
|
||||||
|
DB_NAME="postfix"
|
||||||
|
DB_USER="postfix"
|
||||||
|
DB_PASSWORD="your_secure_database_password"
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# POSTFIXADMIN CONFIGURATION
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# PostfixAdmin setup password (used during initial setup)
|
||||||
|
POSTFIXADMIN_PASSWORD="your_secure_setup_password"
|
||||||
|
|
||||||
|
# PostfixAdmin installation directory
|
||||||
|
WEBROOT="/var/www/postfixadmin"
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# SSL/TLS CONFIGURATION
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Let's Encrypt email for certificate registration
|
||||||
|
LETSENCRYPT_EMAIL="admin@yourdomain.com"
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# SECURITY SETTINGS
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Fail2ban configuration (optional)
|
||||||
|
ENABLE_FAIL2BAN="yes"
|
||||||
|
|
||||||
|
# Maximum message size (in bytes) - 50MB default
|
||||||
|
MAX_MESSAGE_SIZE="52428800"
|
||||||
|
|
||||||
|
# Maximum mailbox size (0 = unlimited)
|
||||||
|
MAX_MAILBOX_SIZE="0"
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# SPAM FILTERING SETTINGS
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# SpamAssassin score thresholds
|
||||||
|
SA_TAG_LEVEL="2.0" # Add spam headers
|
||||||
|
SA_TAG2_LEVEL="6.0" # Add more spam headers
|
||||||
|
SA_KILL_LEVEL="6.9" # Reject/quarantine
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# ADVANCED SETTINGS
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Virtual mail user/group IDs
|
||||||
|
VMAIL_UID="5000"
|
||||||
|
VMAIL_GID="5000"
|
||||||
|
|
||||||
|
# Mail storage location
|
||||||
|
MAIL_LOCATION="/var/mail/vhosts"
|
||||||
|
|
||||||
|
# Dovecot authentication method
|
||||||
|
AUTH_MECHANISMS="plain login"
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# NETWORK SETTINGS
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Listen on these interfaces (all = all interfaces)
|
||||||
|
INET_INTERFACES="all"
|
||||||
|
|
||||||
|
# IP protocol (ipv4, ipv6, or all)
|
||||||
|
INET_PROTOCOLS="ipv4"
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# BACKUP SETTINGS
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Backup directory
|
||||||
|
BACKUP_DIR="/var/backups/email-server"
|
||||||
|
|
||||||
|
# Backup retention (days)
|
||||||
|
BACKUP_RETENTION="30"
|
||||||
|
|
||||||
|
# Include mail data in backups (yes/no)
|
||||||
|
BACKUP_INCLUDE_MAIL="no"
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# MONITORING SETTINGS
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Log file locations
|
||||||
|
MAIN_LOG="/var/log/mail.log"
|
||||||
|
SETUP_LOG="/var/log/email-server-setup.log"
|
||||||
|
|
||||||
|
# Disk space warning threshold (percentage)
|
||||||
|
DISK_WARNING_THRESHOLD="85"
|
||||||
|
|
||||||
|
# Certificate expiration warning (days)
|
||||||
|
CERT_WARNING_DAYS="30"
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# DNS RECORDS REFERENCE
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Add these DNS records to your domain:
|
||||||
|
#
|
||||||
|
# A Record:
|
||||||
|
# mail.yourdomain.com IN A YOUR_SERVER_IP
|
||||||
|
#
|
||||||
|
# MX Record:
|
||||||
|
# yourdomain.com IN MX 10 mail.yourdomain.com
|
||||||
|
#
|
||||||
|
# SPF Record:
|
||||||
|
# yourdomain.com IN TXT "v=spf1 mx ~all"
|
||||||
|
#
|
||||||
|
# DMARC Record:
|
||||||
|
# _dmarc.yourdomain.com IN TXT "v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com"
|
||||||
|
#
|
||||||
|
# DKIM Record (generated by the script):
|
||||||
|
# mail._domainkey.yourdomain.com IN TXT "v=DKIM1; k=rsa; p=..."
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# FIREWALL PORTS
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# These ports will be opened in the firewall:
|
||||||
|
# 25 - SMTP (incoming mail)
|
||||||
|
# 587 - Submission (authenticated sending)
|
||||||
|
# 465 - SMTPS (secure SMTP)
|
||||||
|
# 143 - IMAP
|
||||||
|
# 993 - IMAPS (secure IMAP)
|
||||||
|
# 110 - POP3
|
||||||
|
# 995 - POP3S (secure POP3)
|
||||||
|
# 80 - HTTP (for certificate validation)
|
||||||
|
# 443 - HTTPS (PostfixAdmin web interface)
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# RECOMMENDED ADDITIONAL SECURITY
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Consider implementing:
|
||||||
|
# 1. Fail2ban for intrusion prevention
|
||||||
|
# 2. Regular security updates
|
||||||
|
# 3. Strong passwords for all accounts
|
||||||
|
# 4. Regular backups
|
||||||
|
# 5. Monitoring and alerting
|
||||||
|
# 6. Rate limiting
|
||||||
|
# 7. Greylisting (optional)
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# MAINTENANCE SCHEDULE
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Recommended cron jobs:
|
||||||
|
# Daily virus definition updates:
|
||||||
|
# 0 2 * * * /usr/bin/freshclam
|
||||||
|
|
||||||
|
# Weekly SpamAssassin rule updates:
|
||||||
|
# 0 3 * * 1 /usr/bin/sa-update && /bin/systemctl restart spamassassin
|
||||||
|
|
||||||
|
# Weekly maintenance:
|
||||||
|
# 0 4 * * 1 /path/to/maintenance-email-server.sh
|
||||||
|
|
||||||
|
# Monthly backups:
|
||||||
|
# 0 5 1 * * /path/to/backup-email-server.sh
|
||||||
|
|
||||||
|
# =============================================================================
|
||||||
|
# TROUBLESHOOTING COMMANDS
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Check service status:
|
||||||
|
# systemctl status postfix dovecot amavis spamassassin clamav-daemon opendkim
|
||||||
|
|
||||||
|
# View logs:
|
||||||
|
# tail -f /var/log/mail.log
|
||||||
|
# tail -f /var/log/dovecot.log
|
||||||
|
|
||||||
|
# Test configuration:
|
||||||
|
# postfix check
|
||||||
|
# dovecot -n
|
||||||
|
# amavisd-new testkeys
|
||||||
|
|
||||||
|
# Check mail queue:
|
||||||
|
# mailq
|
||||||
|
# postqueue -p
|
||||||
|
|
||||||
|
# Test DKIM:
|
||||||
|
# opendkim-testkey -d yourdomain.com -s mail -vvv
|
||||||
|
|
||||||
|
# Test ports:
|
||||||
|
# telnet localhost 25
|
||||||
|
# openssl s_client -connect localhost:993
|
||||||
290
maintenance-email-server.sh
Executable file
290
maintenance-email-server.sh
Executable file
@@ -0,0 +1,290 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Email Server Maintenance Script
|
||||||
|
# Performs routine maintenance tasks
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
# Colors
|
||||||
|
RED='\033[0;31m'
|
||||||
|
GREEN='\033[0;32m'
|
||||||
|
YELLOW='\033[1;33m'
|
||||||
|
BLUE='\033[0;34m'
|
||||||
|
NC='\033[0m'
|
||||||
|
|
||||||
|
log() {
|
||||||
|
echo "$(date '+%Y-%m-%d %H:%M:%S') - $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
info() {
|
||||||
|
echo -e "${BLUE}INFO: $1${NC}"
|
||||||
|
log "INFO: $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
success() {
|
||||||
|
echo -e "${GREEN}SUCCESS: $1${NC}"
|
||||||
|
log "SUCCESS: $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
warning() {
|
||||||
|
echo -e "${YELLOW}WARNING: $1${NC}"
|
||||||
|
log "WARNING: $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
error() {
|
||||||
|
echo -e "${RED}ERROR: $1${NC}" >&2
|
||||||
|
log "ERROR: $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Update virus definitions
|
||||||
|
update_virus_definitions() {
|
||||||
|
info "Updating virus definitions..."
|
||||||
|
if freshclam; then
|
||||||
|
success "Virus definitions updated"
|
||||||
|
systemctl restart clamav-daemon
|
||||||
|
else
|
||||||
|
error "Failed to update virus definitions"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Update spam rules
|
||||||
|
update_spam_rules() {
|
||||||
|
info "Updating SpamAssassin rules..."
|
||||||
|
if sa-update; then
|
||||||
|
success "SpamAssassin rules updated"
|
||||||
|
systemctl restart spamassassin
|
||||||
|
else
|
||||||
|
warning "SpamAssassin update failed or no updates available"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Clean mail logs
|
||||||
|
clean_mail_logs() {
|
||||||
|
info "Cleaning old mail logs..."
|
||||||
|
|
||||||
|
# Rotate logs if they're getting large (>100MB)
|
||||||
|
if [[ -f "/var/log/mail.log" ]]; then
|
||||||
|
size=$(stat -f%z "/var/log/mail.log" 2>/dev/null || stat -c%s "/var/log/mail.log" 2>/dev/null || echo 0)
|
||||||
|
if [[ $size -gt 104857600 ]]; then # 100MB
|
||||||
|
logrotate -f /etc/logrotate.d/rsyslog
|
||||||
|
success "Mail logs rotated"
|
||||||
|
else
|
||||||
|
info "Mail logs are not large enough to rotate"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Clean temporary files
|
||||||
|
clean_temp_files() {
|
||||||
|
info "Cleaning temporary files..."
|
||||||
|
|
||||||
|
# Clean Amavis temporary files
|
||||||
|
find /var/lib/amavis/tmp -type f -mtime +7 -delete 2>/dev/null || true
|
||||||
|
|
||||||
|
# Clean SpamAssassin temporary files
|
||||||
|
find /var/lib/spamassassin -name "*.tmp" -mtime +7 -delete 2>/dev/null || true
|
||||||
|
|
||||||
|
# Clean Postfix temporary files
|
||||||
|
find /var/spool/postfix -name "*" -type f -mtime +7 -path "*/tmp/*" -delete 2>/dev/null || true
|
||||||
|
|
||||||
|
success "Temporary files cleaned"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Check disk space
|
||||||
|
check_disk_space() {
|
||||||
|
info "Checking disk space..."
|
||||||
|
|
||||||
|
# Check root filesystem
|
||||||
|
root_usage=$(df / | awk 'NR==2 {print $5}' | sed 's/%//')
|
||||||
|
if [[ $root_usage -gt 85 ]]; then
|
||||||
|
warning "Root filesystem is ${root_usage}% full"
|
||||||
|
else
|
||||||
|
info "Root filesystem usage: ${root_usage}%"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Check mail directory
|
||||||
|
if [[ -d "/var/mail/vhosts" ]]; then
|
||||||
|
mail_usage=$(df /var/mail/vhosts | awk 'NR==2 {print $5}' | sed 's/%//')
|
||||||
|
if [[ $mail_usage -gt 85 ]]; then
|
||||||
|
warning "Mail directory is ${mail_usage}% full"
|
||||||
|
else
|
||||||
|
info "Mail directory usage: ${mail_usage}%"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Check certificate expiration
|
||||||
|
check_ssl_expiration() {
|
||||||
|
info "Checking SSL certificate expiration..."
|
||||||
|
|
||||||
|
cert_files=$(find /etc/letsencrypt/live -name "fullchain.pem" 2>/dev/null || true)
|
||||||
|
|
||||||
|
for cert_file in $cert_files; do
|
||||||
|
domain=$(basename $(dirname $cert_file))
|
||||||
|
expires=$(openssl x509 -in "$cert_file" -noout -enddate | cut -d= -f2)
|
||||||
|
expires_epoch=$(date -d "$expires" +%s)
|
||||||
|
current_epoch=$(date +%s)
|
||||||
|
days_left=$(( (expires_epoch - current_epoch) / 86400 ))
|
||||||
|
|
||||||
|
if [[ $days_left -lt 30 ]]; then
|
||||||
|
warning "SSL certificate for $domain expires in $days_left days"
|
||||||
|
else
|
||||||
|
info "SSL certificate for $domain expires in $days_left days"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
|
# Check service status
|
||||||
|
check_services() {
|
||||||
|
info "Checking service status..."
|
||||||
|
|
||||||
|
services=("postfix" "dovecot" "amavis" "spamassassin" "clamav-daemon" "opendkim" "apache2" "postgresql")
|
||||||
|
|
||||||
|
for service in "${services[@]}"; do
|
||||||
|
if systemctl is-active --quiet $service; then
|
||||||
|
success "$service is running"
|
||||||
|
else
|
||||||
|
error "$service is not running"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
|
# Test basic email functionality
|
||||||
|
test_email_basic() {
|
||||||
|
info "Testing basic email functionality..."
|
||||||
|
|
||||||
|
# Test SMTP port
|
||||||
|
if nc -z localhost 25; then
|
||||||
|
success "SMTP port 25 is accessible"
|
||||||
|
else
|
||||||
|
error "SMTP port 25 is not accessible"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Test submission port
|
||||||
|
if nc -z localhost 587; then
|
||||||
|
success "Submission port 587 is accessible"
|
||||||
|
else
|
||||||
|
error "Submission port 587 is not accessible"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Test IMAP port
|
||||||
|
if nc -z localhost 993; then
|
||||||
|
success "IMAPS port 993 is accessible"
|
||||||
|
else
|
||||||
|
error "IMAPS port 993 is not accessible"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Database maintenance
|
||||||
|
database_maintenance() {
|
||||||
|
info "Performing database maintenance..."
|
||||||
|
|
||||||
|
# Analyze and vacuum database
|
||||||
|
sudo -u postgres psql -d postfix -c "ANALYZE;" >/dev/null 2>&1
|
||||||
|
sudo -u postgres psql -d postfix -c "VACUUM;" >/dev/null 2>&1
|
||||||
|
|
||||||
|
success "Database maintenance completed"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Check mail queue
|
||||||
|
check_mail_queue() {
|
||||||
|
info "Checking mail queue..."
|
||||||
|
|
||||||
|
queue_count=$(mailq | tail -1 | awk '{print $5}' || echo "0")
|
||||||
|
if [[ "$queue_count" == "empty" ]]; then
|
||||||
|
queue_count=0
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ $queue_count -gt 10 ]]; then
|
||||||
|
warning "Mail queue has $queue_count messages"
|
||||||
|
echo "Run 'mailq' to see queued messages"
|
||||||
|
echo "Run 'postqueue -f' to flush the queue"
|
||||||
|
else
|
||||||
|
info "Mail queue has $queue_count messages"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Generate maintenance report
|
||||||
|
generate_report() {
|
||||||
|
info "Generating maintenance report..."
|
||||||
|
|
||||||
|
report_file="/var/log/email-maintenance-$(date +%Y%m%d).log"
|
||||||
|
|
||||||
|
{
|
||||||
|
echo "Email Server Maintenance Report - $(date)"
|
||||||
|
echo "============================================"
|
||||||
|
echo
|
||||||
|
echo "System Information:"
|
||||||
|
echo "- Hostname: $(hostname)"
|
||||||
|
echo "- Uptime: $(uptime | awk -F'up ' '{print $2}' | awk -F', load' '{print $1}')"
|
||||||
|
echo "- Load: $(uptime | awk -F'load average: ' '{print $2}')"
|
||||||
|
echo
|
||||||
|
echo "Disk Usage:"
|
||||||
|
df -h | grep -E "/$|/var"
|
||||||
|
echo
|
||||||
|
echo "Service Status:"
|
||||||
|
systemctl status postfix dovecot amavis --no-pager -l
|
||||||
|
echo
|
||||||
|
echo "Recent Mail Log Entries:"
|
||||||
|
tail -20 /var/log/mail.log | grep "$(date '+%b %d')"
|
||||||
|
} > "$report_file"
|
||||||
|
|
||||||
|
success "Maintenance report saved to $report_file"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Main function
|
||||||
|
main() {
|
||||||
|
echo -e "${BLUE}Email Server Maintenance Script${NC}"
|
||||||
|
echo "==============================="
|
||||||
|
echo
|
||||||
|
|
||||||
|
# Check if running as root
|
||||||
|
if [[ $EUID -ne 0 ]]; then
|
||||||
|
error "This script must be run as root"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
update_virus_definitions
|
||||||
|
update_spam_rules
|
||||||
|
clean_mail_logs
|
||||||
|
clean_temp_files
|
||||||
|
check_disk_space
|
||||||
|
check_ssl_expiration
|
||||||
|
check_services
|
||||||
|
test_email_basic
|
||||||
|
database_maintenance
|
||||||
|
check_mail_queue
|
||||||
|
generate_report
|
||||||
|
|
||||||
|
echo
|
||||||
|
success "Maintenance completed successfully!"
|
||||||
|
|
||||||
|
echo
|
||||||
|
echo -e "${YELLOW}Recommended actions:${NC}"
|
||||||
|
echo "1. Review the maintenance report in /var/log/"
|
||||||
|
echo "2. Monitor disk space regularly"
|
||||||
|
echo "3. Check for any service issues"
|
||||||
|
echo "4. Verify SSL certificate renewal is working"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Show usage
|
||||||
|
if [[ "${1:-}" == "--help" || "${1:-}" == "-h" ]]; then
|
||||||
|
echo "Usage: $0"
|
||||||
|
echo
|
||||||
|
echo "This maintenance script performs:"
|
||||||
|
echo " - Updates virus definitions"
|
||||||
|
echo " - Updates SpamAssassin rules"
|
||||||
|
echo " - Cleans old logs and temporary files"
|
||||||
|
echo " - Checks disk space usage"
|
||||||
|
echo " - Verifies SSL certificate expiration"
|
||||||
|
echo " - Tests service status"
|
||||||
|
echo " - Performs database maintenance"
|
||||||
|
echo " - Checks mail queue status"
|
||||||
|
echo " - Generates maintenance report"
|
||||||
|
echo
|
||||||
|
echo "Run this script regularly (daily/weekly) via cron:"
|
||||||
|
echo "0 2 * * 0 /path/to/maintenance-email-server.sh"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
main "$@"
|
||||||
386
manage-domains.sh
Executable file
386
manage-domains.sh
Executable file
@@ -0,0 +1,386 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Multiple Domain Management Script for Email Server
|
||||||
|
# Manage multiple domains, view status, and perform domain operations
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
# Colors
|
||||||
|
RED='\033[0;31m'
|
||||||
|
GREEN='\033[0;32m'
|
||||||
|
YELLOW='\033[1;33m'
|
||||||
|
BLUE='\033[0;34m'
|
||||||
|
NC='\033[0m'
|
||||||
|
|
||||||
|
# Functions
|
||||||
|
info() {
|
||||||
|
echo -e "${BLUE}INFO: $1${NC}"
|
||||||
|
}
|
||||||
|
|
||||||
|
success() {
|
||||||
|
echo -e "${GREEN}SUCCESS: $1${NC}"
|
||||||
|
}
|
||||||
|
|
||||||
|
warning() {
|
||||||
|
echo -e "${YELLOW}WARNING: $1${NC}"
|
||||||
|
}
|
||||||
|
|
||||||
|
error() {
|
||||||
|
echo -e "${RED}ERROR: $1${NC}" >&2
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
# Check if running as root
|
||||||
|
check_root() {
|
||||||
|
if [[ $EUID -ne 0 ]]; then
|
||||||
|
error "This script must be run as root"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# List all configured domains
|
||||||
|
list_domains() {
|
||||||
|
echo -e "${BLUE}Configured Email Domains${NC}"
|
||||||
|
echo "========================"
|
||||||
|
echo
|
||||||
|
|
||||||
|
# Get domains from database
|
||||||
|
echo -e "${YELLOW}Domains in Database:${NC}"
|
||||||
|
if sudo -u postgres psql -d postfix -t -c "
|
||||||
|
SELECT
|
||||||
|
domain,
|
||||||
|
CASE WHEN active = '1' THEN 'Active' ELSE 'Inactive' END as status,
|
||||||
|
aliases || ' aliases' as aliases,
|
||||||
|
mailboxes || ' mailboxes' as mailboxes,
|
||||||
|
CASE WHEN maxquota = 0 THEN 'Unlimited' ELSE (maxquota/1048576)::text || ' MB' END as quota
|
||||||
|
FROM domains
|
||||||
|
ORDER BY domain;" 2>/dev/null; then
|
||||||
|
echo
|
||||||
|
else
|
||||||
|
echo " Database connection failed"
|
||||||
|
echo
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Get domains with DKIM keys
|
||||||
|
echo -e "${YELLOW}Domains with DKIM Keys:${NC}"
|
||||||
|
if [[ -d "/etc/opendkim/keys" ]]; then
|
||||||
|
for domain_dir in /etc/opendkim/keys/*/; do
|
||||||
|
if [[ -d "$domain_dir" ]]; then
|
||||||
|
domain=$(basename "$domain_dir")
|
||||||
|
if [[ -f "$domain_dir/mail.private" ]]; then
|
||||||
|
echo " $domain (DKIM configured)"
|
||||||
|
else
|
||||||
|
echo " $domain (DKIM incomplete)"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
else
|
||||||
|
echo " No DKIM directory found"
|
||||||
|
fi
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
# Show domain details
|
||||||
|
show_domain_details() {
|
||||||
|
local domain=$1
|
||||||
|
|
||||||
|
echo -e "${BLUE}Domain Details: $domain${NC}"
|
||||||
|
echo "==============================="
|
||||||
|
echo
|
||||||
|
|
||||||
|
# Database information
|
||||||
|
echo -e "${YELLOW}Database Information:${NC}"
|
||||||
|
sudo -u postgres psql -d postfix -c "
|
||||||
|
SELECT
|
||||||
|
domain,
|
||||||
|
description,
|
||||||
|
aliases || ' aliases' as aliases,
|
||||||
|
mailboxes || ' mailboxes' as mailboxes,
|
||||||
|
CASE WHEN maxquota = 0 THEN 'Unlimited' ELSE (maxquota/1048576)::text || ' MB' END as max_quota,
|
||||||
|
CASE WHEN active = '1' THEN 'Active' ELSE 'Inactive' END as status,
|
||||||
|
created,
|
||||||
|
modified
|
||||||
|
FROM domains
|
||||||
|
WHERE domain = '$domain';" 2>/dev/null || echo "Domain not found in database"
|
||||||
|
|
||||||
|
echo
|
||||||
|
|
||||||
|
# Mailboxes for this domain
|
||||||
|
echo -e "${YELLOW}Mailboxes:${NC}"
|
||||||
|
sudo -u postgres psql -d postfix -c "
|
||||||
|
SELECT
|
||||||
|
username,
|
||||||
|
name,
|
||||||
|
CASE WHEN quota = 0 THEN 'Unlimited' ELSE (quota/1048576)::text || ' MB' END as quota,
|
||||||
|
CASE WHEN active = '1' THEN 'Active' ELSE 'Inactive' END as status,
|
||||||
|
created
|
||||||
|
FROM mailbox
|
||||||
|
WHERE domain = '$domain'
|
||||||
|
ORDER BY username;" 2>/dev/null || echo "No mailboxes found"
|
||||||
|
|
||||||
|
echo
|
||||||
|
|
||||||
|
# Aliases for this domain
|
||||||
|
echo -e "${YELLOW}Aliases:${NC}"
|
||||||
|
sudo -u postgres psql -d postfix -c "
|
||||||
|
SELECT
|
||||||
|
address,
|
||||||
|
goto,
|
||||||
|
CASE WHEN active = '1' THEN 'Active' ELSE 'Inactive' END as status,
|
||||||
|
created
|
||||||
|
FROM aliases
|
||||||
|
WHERE domain = '$domain'
|
||||||
|
ORDER BY address;" 2>/dev/null || echo "No aliases found"
|
||||||
|
|
||||||
|
echo
|
||||||
|
|
||||||
|
# DKIM status
|
||||||
|
echo -e "${YELLOW}DKIM Status:${NC}"
|
||||||
|
if [[ -d "/etc/opendkim/keys/$domain" ]]; then
|
||||||
|
if [[ -f "/etc/opendkim/keys/$domain/mail.private" && -f "/etc/opendkim/keys/$domain/mail.txt" ]]; then
|
||||||
|
echo " ✓ DKIM keys exist"
|
||||||
|
|
||||||
|
# Test DKIM
|
||||||
|
if opendkim-testkey -d "$domain" -s mail 2>/dev/null | grep -q "key OK"; then
|
||||||
|
echo " ✓ DKIM test passed"
|
||||||
|
else
|
||||||
|
echo " ✗ DKIM test failed (check DNS record)"
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo
|
||||||
|
echo " DKIM DNS Record:"
|
||||||
|
echo " Record name: mail._domainkey.$domain"
|
||||||
|
echo " Record type: TXT"
|
||||||
|
echo " Record value:"
|
||||||
|
cat "/etc/opendkim/keys/$domain/mail.txt" 2>/dev/null | sed 's/^/ /'
|
||||||
|
else
|
||||||
|
echo " ✗ DKIM keys incomplete"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo " ✗ No DKIM configuration found"
|
||||||
|
fi
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
# Test domain configuration
|
||||||
|
test_domain() {
|
||||||
|
local domain=$1
|
||||||
|
|
||||||
|
echo -e "${BLUE}Testing Domain: $domain${NC}"
|
||||||
|
echo "========================="
|
||||||
|
echo
|
||||||
|
|
||||||
|
# DNS tests
|
||||||
|
echo -e "${YELLOW}DNS Configuration:${NC}"
|
||||||
|
|
||||||
|
# MX record
|
||||||
|
if dig +short MX "$domain" | grep -q .; then
|
||||||
|
mx_record=$(dig +short MX "$domain" | head -1)
|
||||||
|
echo " ✓ MX record: $mx_record"
|
||||||
|
else
|
||||||
|
echo " ✗ MX record not found"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# SPF record
|
||||||
|
if dig +short TXT "$domain" | grep -q "v=spf1"; then
|
||||||
|
echo " ✓ SPF record found"
|
||||||
|
else
|
||||||
|
echo " ✗ SPF record not found"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# DMARC record
|
||||||
|
if dig +short TXT "_dmarc.$domain" | grep -q "v=DMARC1"; then
|
||||||
|
echo " ✓ DMARC record found"
|
||||||
|
else
|
||||||
|
echo " ✗ DMARC record not found"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# DKIM record
|
||||||
|
if dig +short TXT "mail._domainkey.$domain" | grep -q "v=DKIM1"; then
|
||||||
|
echo " ✓ DKIM record found"
|
||||||
|
|
||||||
|
# Test DKIM key
|
||||||
|
if opendkim-testkey -d "$domain" -s mail 2>/dev/null | grep -q "key OK"; then
|
||||||
|
echo " ✓ DKIM key validation passed"
|
||||||
|
else
|
||||||
|
echo " ✗ DKIM key validation failed"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo " ✗ DKIM record not found"
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo
|
||||||
|
|
||||||
|
# Database test
|
||||||
|
echo -e "${YELLOW}Database Status:${NC}"
|
||||||
|
if sudo -u postgres psql -d postfix -t -c "SELECT 1 FROM domains WHERE domain = '$domain' AND active = '1';" 2>/dev/null | grep -q 1; then
|
||||||
|
echo " ✓ Domain is active in database"
|
||||||
|
else
|
||||||
|
echo " ✗ Domain not found or inactive in database"
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
# Remove domain
|
||||||
|
remove_domain() {
|
||||||
|
local domain=$1
|
||||||
|
|
||||||
|
echo -e "${YELLOW}WARNING: This will remove all data for domain $domain${NC}"
|
||||||
|
echo "This includes:"
|
||||||
|
echo " - All mailboxes and their emails"
|
||||||
|
echo " - All aliases"
|
||||||
|
echo " - DKIM keys"
|
||||||
|
echo " - Database entries"
|
||||||
|
echo
|
||||||
|
read -p "Are you sure you want to continue? Type 'DELETE' to confirm: " confirm
|
||||||
|
|
||||||
|
if [[ "$confirm" != "DELETE" ]]; then
|
||||||
|
echo "Operation cancelled"
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
|
||||||
|
info "Removing domain: $domain"
|
||||||
|
|
||||||
|
# Remove from database
|
||||||
|
sudo -u postgres psql -d postfix -c "DELETE FROM aliases WHERE domain = '$domain';" 2>/dev/null
|
||||||
|
sudo -u postgres psql -d postfix -c "DELETE FROM mailbox WHERE domain = '$domain';" 2>/dev/null
|
||||||
|
sudo -u postgres psql -d postfix -c "DELETE FROM domain_admins WHERE domain = '$domain';" 2>/dev/null
|
||||||
|
sudo -u postgres psql -d postfix -c "DELETE FROM domains WHERE domain = '$domain';" 2>/dev/null
|
||||||
|
|
||||||
|
# Remove DKIM configuration
|
||||||
|
if [[ -d "/etc/opendkim/keys/$domain" ]]; then
|
||||||
|
rm -rf "/etc/opendkim/keys/$domain"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Remove from OpenDKIM config files
|
||||||
|
sed -i "/mail\._domainkey\.$domain/d" /etc/opendkim/key.table 2>/dev/null || true
|
||||||
|
sed -i "/*@$domain/d" /etc/opendkim/signing.table 2>/dev/null || true
|
||||||
|
sed -i "/^$domain$/d" /etc/opendkim/trusted.hosts 2>/dev/null || true
|
||||||
|
|
||||||
|
# Remove mail data
|
||||||
|
if [[ -d "/var/mail/vhosts/$domain" ]]; then
|
||||||
|
warning "Removing mail data for $domain"
|
||||||
|
rm -rf "/var/mail/vhosts/$domain"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Restart OpenDKIM
|
||||||
|
systemctl restart opendkim
|
||||||
|
|
||||||
|
success "Domain $domain removed successfully"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Show usage
|
||||||
|
show_usage() {
|
||||||
|
echo "Multiple Domain Management Script"
|
||||||
|
echo "================================"
|
||||||
|
echo
|
||||||
|
echo "Usage: $0 <command> [options]"
|
||||||
|
echo
|
||||||
|
echo "Commands:"
|
||||||
|
echo " list - List all configured domains"
|
||||||
|
echo " show <domain> - Show detailed information for a domain"
|
||||||
|
echo " test <domain> - Test domain configuration (DNS, DKIM, etc.)"
|
||||||
|
echo " add <domain> - Add a new domain (calls add-domain.sh)"
|
||||||
|
echo " remove <domain> - Remove a domain and all its data"
|
||||||
|
echo " status - Show overall email server status"
|
||||||
|
echo
|
||||||
|
echo "Examples:"
|
||||||
|
echo " $0 list"
|
||||||
|
echo " $0 show example.com"
|
||||||
|
echo " $0 test example.com"
|
||||||
|
echo " $0 add newdomain.com"
|
||||||
|
echo " $0 remove olddomain.com"
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
# Show server status
|
||||||
|
show_status() {
|
||||||
|
echo -e "${BLUE}Email Server Status${NC}"
|
||||||
|
echo "==================="
|
||||||
|
echo
|
||||||
|
|
||||||
|
# Service status
|
||||||
|
echo -e "${YELLOW}Service Status:${NC}"
|
||||||
|
services=("postfix" "dovecot" "amavis" "spamassassin" "clamav-daemon" "opendkim" "apache2" "postgresql")
|
||||||
|
|
||||||
|
for service in "${services[@]}"; do
|
||||||
|
if systemctl is-active --quiet "$service"; then
|
||||||
|
echo " ✓ $service is running"
|
||||||
|
else
|
||||||
|
echo " ✗ $service is not running"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
echo
|
||||||
|
|
||||||
|
# Domain summary
|
||||||
|
echo -e "${YELLOW}Domain Summary:${NC}"
|
||||||
|
total_domains=$(sudo -u postgres psql -d postfix -t -c "SELECT COUNT(*) FROM domains;" 2>/dev/null | xargs || echo "0")
|
||||||
|
active_domains=$(sudo -u postgres psql -d postfix -t -c "SELECT COUNT(*) FROM domains WHERE active = '1';" 2>/dev/null | xargs || echo "0")
|
||||||
|
total_mailboxes=$(sudo -u postgres psql -d postfix -t -c "SELECT COUNT(*) FROM mailbox;" 2>/dev/null | xargs || echo "0")
|
||||||
|
active_mailboxes=$(sudo -u postgres psql -d postfix -t -c "SELECT COUNT(*) FROM mailbox WHERE active = '1';" 2>/dev/null | xargs || echo "0")
|
||||||
|
|
||||||
|
echo " Total domains: $total_domains"
|
||||||
|
echo " Active domains: $active_domains"
|
||||||
|
echo " Total mailboxes: $total_mailboxes"
|
||||||
|
echo " Active mailboxes: $active_mailboxes"
|
||||||
|
echo
|
||||||
|
|
||||||
|
# Mail queue
|
||||||
|
echo -e "${YELLOW}Mail Queue:${NC}"
|
||||||
|
queue_count=$(mailq 2>/dev/null | tail -1 | awk '{print $5}' || echo "0")
|
||||||
|
if [[ "$queue_count" == "empty" ]]; then
|
||||||
|
echo " Mail queue is empty"
|
||||||
|
else
|
||||||
|
echo " Mail queue has $queue_count messages"
|
||||||
|
fi
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
# Main logic
|
||||||
|
case "${1:-}" in
|
||||||
|
"list")
|
||||||
|
check_root
|
||||||
|
list_domains
|
||||||
|
;;
|
||||||
|
"show")
|
||||||
|
if [[ -z "${2:-}" ]]; then
|
||||||
|
error "Domain name required. Usage: $0 show <domain>"
|
||||||
|
fi
|
||||||
|
check_root
|
||||||
|
show_domain_details "$2"
|
||||||
|
;;
|
||||||
|
"test")
|
||||||
|
if [[ -z "${2:-}" ]]; then
|
||||||
|
error "Domain name required. Usage: $0 test <domain>"
|
||||||
|
fi
|
||||||
|
test_domain "$2"
|
||||||
|
;;
|
||||||
|
"add")
|
||||||
|
if [[ -z "${2:-}" ]]; then
|
||||||
|
error "Domain name required. Usage: $0 add <domain>"
|
||||||
|
fi
|
||||||
|
check_root
|
||||||
|
if [[ -f "./add-domain.sh" ]]; then
|
||||||
|
./add-domain.sh "$2"
|
||||||
|
else
|
||||||
|
error "add-domain.sh script not found in current directory"
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
"remove")
|
||||||
|
if [[ -z "${2:-}" ]]; then
|
||||||
|
error "Domain name required. Usage: $0 remove <domain>"
|
||||||
|
fi
|
||||||
|
check_root
|
||||||
|
remove_domain "$2"
|
||||||
|
;;
|
||||||
|
"status")
|
||||||
|
check_root
|
||||||
|
show_status
|
||||||
|
;;
|
||||||
|
"--help"|"-h"|"help"|"")
|
||||||
|
show_usage
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
error "Unknown command: $1. Use --help for usage information."
|
||||||
|
;;
|
||||||
|
esac
|
||||||
921
setup-email-server.sh
Executable file
921
setup-email-server.sh
Executable file
@@ -0,0 +1,921 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Email Server Setup Script
|
||||||
|
# Components: Postfix, Dovecot, Amavis, SpamAssassin, OpenDKIM, PostgreSQL, PostfixAdmin
|
||||||
|
# SSL: Let's Encrypt
|
||||||
|
# Author: Email Server Setup Script
|
||||||
|
# Date: $(date)
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
# Colors for output
|
||||||
|
RED='\033[0;31m'
|
||||||
|
GREEN='\033[0;32m'
|
||||||
|
YELLOW='\033[1;33m'
|
||||||
|
BLUE='\033[0;34m'
|
||||||
|
NC='\033[0m' # No Color
|
||||||
|
|
||||||
|
# Configuration variables
|
||||||
|
DOMAIN=""
|
||||||
|
HOSTNAME=""
|
||||||
|
ADMIN_EMAIL=""
|
||||||
|
DB_NAME="postfix"
|
||||||
|
DB_USER="postfix"
|
||||||
|
DB_PASSWORD=""
|
||||||
|
POSTFIXADMIN_PASSWORD=""
|
||||||
|
WEBROOT="/var/www/postfixadmin"
|
||||||
|
|
||||||
|
# Logging
|
||||||
|
LOG_FILE="/var/log/email-server-setup.log"
|
||||||
|
|
||||||
|
log() {
|
||||||
|
echo "$(date '+%Y-%m-%d %H:%M:%S') - $1" | tee -a "$LOG_FILE"
|
||||||
|
}
|
||||||
|
|
||||||
|
error() {
|
||||||
|
echo -e "${RED}ERROR: $1${NC}" >&2
|
||||||
|
log "ERROR: $1"
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
info() {
|
||||||
|
echo -e "${BLUE}INFO: $1${NC}"
|
||||||
|
log "INFO: $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
success() {
|
||||||
|
echo -e "${GREEN}SUCCESS: $1${NC}"
|
||||||
|
log "SUCCESS: $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
warning() {
|
||||||
|
echo -e "${YELLOW}WARNING: $1${NC}"
|
||||||
|
log "WARNING: $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Check if running as root
|
||||||
|
check_root() {
|
||||||
|
if [[ $EUID -ne 0 ]]; then
|
||||||
|
error "This script must be run as root"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Get user input
|
||||||
|
get_configuration() {
|
||||||
|
echo -e "${BLUE}Email Server Configuration${NC}"
|
||||||
|
echo "================================="
|
||||||
|
|
||||||
|
while [[ -z "$DOMAIN" ]]; do
|
||||||
|
read -p "Enter your domain name (e.g., example.com): " DOMAIN
|
||||||
|
done
|
||||||
|
|
||||||
|
while [[ -z "$HOSTNAME" ]]; do
|
||||||
|
read -p "Enter your hostname (e.g., mail.example.com): " HOSTNAME
|
||||||
|
done
|
||||||
|
|
||||||
|
while [[ -z "$ADMIN_EMAIL" ]]; do
|
||||||
|
read -p "Enter admin email address: " ADMIN_EMAIL
|
||||||
|
done
|
||||||
|
|
||||||
|
while [[ -z "$DB_PASSWORD" ]]; do
|
||||||
|
read -s -p "Enter PostgreSQL password for postfix user: " DB_PASSWORD
|
||||||
|
echo
|
||||||
|
done
|
||||||
|
|
||||||
|
while [[ -z "$POSTFIXADMIN_PASSWORD" ]]; do
|
||||||
|
read -s -p "Enter PostfixAdmin setup password: " POSTFIXADMIN_PASSWORD
|
||||||
|
echo
|
||||||
|
done
|
||||||
|
|
||||||
|
info "Configuration completed"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Update system
|
||||||
|
update_system() {
|
||||||
|
info "Updating system packages..."
|
||||||
|
apt update && apt upgrade -y
|
||||||
|
success "System updated"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Install required packages
|
||||||
|
install_packages() {
|
||||||
|
info "Installing required packages..."
|
||||||
|
|
||||||
|
# Install basic packages
|
||||||
|
apt install -y \
|
||||||
|
curl \
|
||||||
|
wget \
|
||||||
|
gnupg \
|
||||||
|
lsb-release \
|
||||||
|
software-properties-common \
|
||||||
|
certbot \
|
||||||
|
nginx \
|
||||||
|
ufw
|
||||||
|
|
||||||
|
# Install PostgreSQL
|
||||||
|
apt install -y postgresql postgresql-contrib
|
||||||
|
|
||||||
|
# Install Postfix and related packages
|
||||||
|
debconf-set-selections <<< "postfix postfix/mailname string $HOSTNAME"
|
||||||
|
debconf-set-selections <<< "postfix postfix/main_mailer_type string 'Internet Site'"
|
||||||
|
apt install -y \
|
||||||
|
postfix \
|
||||||
|
postfix-pgsql \
|
||||||
|
postfix-policyd-spf-python
|
||||||
|
|
||||||
|
# Install Dovecot
|
||||||
|
apt install -y \
|
||||||
|
dovecot-core \
|
||||||
|
dovecot-imapd \
|
||||||
|
dovecot-pop3d \
|
||||||
|
dovecot-lmtpd \
|
||||||
|
dovecot-pgsql
|
||||||
|
|
||||||
|
# Install Amavis and SpamAssassin
|
||||||
|
apt install -y \
|
||||||
|
amavisd-new \
|
||||||
|
spamassassin \
|
||||||
|
clamav \
|
||||||
|
clamav-daemon \
|
||||||
|
clamav-freshclam \
|
||||||
|
clamav-unofficial-sigs
|
||||||
|
|
||||||
|
# Install OpenDKIM
|
||||||
|
apt install -y opendkim opendkim-tools
|
||||||
|
|
||||||
|
# Install PHP and Apache for PostfixAdmin
|
||||||
|
apt install -y \
|
||||||
|
apache2 \
|
||||||
|
php \
|
||||||
|
php-fpm \
|
||||||
|
php-cli \
|
||||||
|
php-pgsql \
|
||||||
|
php-mbstring \
|
||||||
|
php-xml \
|
||||||
|
php-curl \
|
||||||
|
php-zip \
|
||||||
|
php-gd
|
||||||
|
|
||||||
|
success "All packages installed"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Configure PostgreSQL
|
||||||
|
configure_postgresql() {
|
||||||
|
info "Configuring PostgreSQL..."
|
||||||
|
|
||||||
|
# Start PostgreSQL
|
||||||
|
systemctl start postgresql
|
||||||
|
systemctl enable postgresql
|
||||||
|
|
||||||
|
# Create database and user
|
||||||
|
sudo -u postgres psql -c "CREATE DATABASE $DB_NAME;"
|
||||||
|
sudo -u postgres psql -c "CREATE USER $DB_USER WITH PASSWORD '$DB_PASSWORD';"
|
||||||
|
sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $DB_NAME TO $DB_USER;"
|
||||||
|
|
||||||
|
# Create tables for Postfix
|
||||||
|
sudo -u postgres psql -d "$DB_NAME" << 'EOF'
|
||||||
|
CREATE TABLE domains (
|
||||||
|
domain varchar(50) NOT NULL,
|
||||||
|
description varchar(255),
|
||||||
|
aliases int NOT NULL default '0',
|
||||||
|
mailboxes int NOT NULL default '0',
|
||||||
|
maxquota bigint NOT NULL default '0',
|
||||||
|
quota bigint NOT NULL default '0',
|
||||||
|
transport varchar(255) default NULL,
|
||||||
|
backupmx boolean NOT NULL default '0',
|
||||||
|
created timestamp NOT NULL default now(),
|
||||||
|
modified timestamp NOT NULL default now(),
|
||||||
|
active boolean NOT NULL default '1',
|
||||||
|
PRIMARY KEY (domain)
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE aliases (
|
||||||
|
address varchar(255) NOT NULL,
|
||||||
|
goto text NOT NULL,
|
||||||
|
domain varchar(255) NOT NULL,
|
||||||
|
created timestamp NOT NULL default now(),
|
||||||
|
modified timestamp NOT NULL default now(),
|
||||||
|
active boolean NOT NULL default '1',
|
||||||
|
PRIMARY KEY (address)
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE mailbox (
|
||||||
|
username varchar(255) NOT NULL,
|
||||||
|
password varchar(255) NOT NULL,
|
||||||
|
name varchar(255) NOT NULL default '',
|
||||||
|
maildir varchar(255) NOT NULL default '',
|
||||||
|
quota bigint NOT NULL default '0',
|
||||||
|
local_part varchar(255) NOT NULL,
|
||||||
|
domain varchar(255) NOT NULL,
|
||||||
|
created timestamp NOT NULL default now(),
|
||||||
|
modified timestamp NOT NULL default now(),
|
||||||
|
active boolean NOT NULL default '1',
|
||||||
|
PRIMARY KEY (username)
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE domain_admins (
|
||||||
|
username varchar(255) NOT NULL,
|
||||||
|
domain varchar(255) NOT NULL,
|
||||||
|
created timestamp NOT NULL default now(),
|
||||||
|
active boolean NOT NULL default '1',
|
||||||
|
PRIMARY KEY (username, domain)
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE admin (
|
||||||
|
username varchar(255) NOT NULL,
|
||||||
|
password varchar(255) NOT NULL,
|
||||||
|
created timestamp NOT NULL default now(),
|
||||||
|
modified timestamp NOT NULL default now(),
|
||||||
|
active boolean NOT NULL default '1',
|
||||||
|
PRIMARY KEY (username)
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE log (
|
||||||
|
timestamp timestamp NOT NULL default now(),
|
||||||
|
username varchar(255) NOT NULL default '',
|
||||||
|
domain varchar(255) NOT NULL default '',
|
||||||
|
action varchar(255) NOT NULL default '',
|
||||||
|
data text NOT NULL default ''
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE vacation (
|
||||||
|
email varchar(255) NOT NULL,
|
||||||
|
subject varchar(255) NOT NULL,
|
||||||
|
body text NOT NULL,
|
||||||
|
cache text NOT NULL default '',
|
||||||
|
domain varchar(255) NOT NULL,
|
||||||
|
created timestamp NOT NULL default now(),
|
||||||
|
active boolean NOT NULL default '1',
|
||||||
|
PRIMARY KEY (email)
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE quota (
|
||||||
|
username varchar(255) NOT NULL,
|
||||||
|
path varchar(100) NOT NULL,
|
||||||
|
current bigint NOT NULL default 0,
|
||||||
|
PRIMARY KEY (username, path)
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE quota2 (
|
||||||
|
username varchar(100) NOT NULL,
|
||||||
|
bytes bigint NOT NULL default 0,
|
||||||
|
messages int NOT NULL default 0,
|
||||||
|
PRIMARY KEY (username)
|
||||||
|
);
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Grant permissions
|
||||||
|
sudo -u postgres psql -d "$DB_NAME" -c "GRANT SELECT ON ALL TABLES IN SCHEMA public TO $DB_USER;"
|
||||||
|
sudo -u postgres psql -d "$DB_NAME" -c "GRANT INSERT, UPDATE, DELETE ON aliases, mailbox, domain_admins, domains TO $DB_USER;"
|
||||||
|
sudo -u postgres psql -d "$DB_NAME" -c "GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public TO $DB_USER;"
|
||||||
|
|
||||||
|
# Insert the primary domain
|
||||||
|
sudo -u postgres psql -d "$DB_NAME" -c "INSERT INTO domains (domain, description, active) VALUES ('$DOMAIN', 'Primary domain configured during setup', '1') ON CONFLICT (domain) DO NOTHING;"
|
||||||
|
|
||||||
|
success "PostgreSQL configured"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Configure Postfix
|
||||||
|
configure_postfix() {
|
||||||
|
info "Configuring Postfix..."
|
||||||
|
|
||||||
|
# Backup original configuration
|
||||||
|
cp /etc/postfix/main.cf /etc/postfix/main.cf.backup
|
||||||
|
|
||||||
|
# Create main.cf
|
||||||
|
cat > /etc/postfix/main.cf << EOF
|
||||||
|
# Basic configuration
|
||||||
|
myhostname = $HOSTNAME
|
||||||
|
mydomain = $DOMAIN
|
||||||
|
myorigin = \$mydomain
|
||||||
|
inet_interfaces = all
|
||||||
|
inet_protocols = ipv4
|
||||||
|
mydestination = localhost
|
||||||
|
|
||||||
|
# Virtual domains
|
||||||
|
virtual_mailbox_domains = pgsql:/etc/postfix/pgsql-virtual-mailbox-domains.cf
|
||||||
|
virtual_mailbox_maps = pgsql:/etc/postfix/pgsql-virtual-mailbox-maps.cf
|
||||||
|
virtual_alias_maps = pgsql:/etc/postfix/pgsql-virtual-alias-maps.cf
|
||||||
|
virtual_mailbox_base = /var/mail/vhosts
|
||||||
|
virtual_minimum_uid = 100
|
||||||
|
virtual_uid_maps = static:5000
|
||||||
|
virtual_gid_maps = static:5000
|
||||||
|
|
||||||
|
# SSL/TLS configuration
|
||||||
|
smtpd_tls_cert_file = /etc/letsencrypt/live/$HOSTNAME/fullchain.pem
|
||||||
|
smtpd_tls_key_file = /etc/letsencrypt/live/$HOSTNAME/privkey.pem
|
||||||
|
smtpd_tls_security_level = may
|
||||||
|
smtpd_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
|
||||||
|
smtp_tls_security_level = may
|
||||||
|
smtp_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
|
||||||
|
|
||||||
|
# SASL authentication
|
||||||
|
smtpd_sasl_type = dovecot
|
||||||
|
smtpd_sasl_path = private/auth
|
||||||
|
smtpd_sasl_auth_enable = yes
|
||||||
|
|
||||||
|
# Restrictions
|
||||||
|
smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_pipelining, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname
|
||||||
|
smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_sender, reject_unknown_sender_domain
|
||||||
|
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_unknown_recipient_domain, reject_non_fqdn_recipient
|
||||||
|
smtpd_data_restrictions = reject_unauth_pipelining
|
||||||
|
|
||||||
|
# Content filter (Amavis)
|
||||||
|
content_filter = smtp-amavis:[127.0.0.1]:10024
|
||||||
|
|
||||||
|
# Milters (OpenDKIM)
|
||||||
|
milter_protocol = 2
|
||||||
|
milter_default_action = accept
|
||||||
|
smtpd_milters = inet:localhost:8891
|
||||||
|
non_smtpd_milters = inet:localhost:8891
|
||||||
|
|
||||||
|
# Miscellaneous
|
||||||
|
message_size_limit = 52428800
|
||||||
|
mailbox_size_limit = 0
|
||||||
|
biff = no
|
||||||
|
append_dot_mydomain = no
|
||||||
|
readme_directory = no
|
||||||
|
compatibility_level = 2
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Create PostgreSQL lookup files
|
||||||
|
cat > /etc/postfix/pgsql-virtual-mailbox-domains.cf << EOF
|
||||||
|
user = $DB_USER
|
||||||
|
password = $DB_PASSWORD
|
||||||
|
hosts = localhost
|
||||||
|
dbname = $DB_NAME
|
||||||
|
query = SELECT 1 FROM domains WHERE domain='%s' AND active='1'
|
||||||
|
EOF
|
||||||
|
|
||||||
|
cat > /etc/postfix/pgsql-virtual-mailbox-maps.cf << EOF
|
||||||
|
user = $DB_USER
|
||||||
|
password = $DB_PASSWORD
|
||||||
|
hosts = localhost
|
||||||
|
dbname = $DB_NAME
|
||||||
|
query = SELECT 1 FROM mailbox WHERE username='%s' AND active='1'
|
||||||
|
EOF
|
||||||
|
|
||||||
|
cat > /etc/postfix/pgsql-virtual-alias-maps.cf << EOF
|
||||||
|
user = $DB_USER
|
||||||
|
password = $DB_PASSWORD
|
||||||
|
hosts = localhost
|
||||||
|
dbname = $DB_NAME
|
||||||
|
query = SELECT goto FROM aliases WHERE address='%s' AND active='1'
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Set permissions
|
||||||
|
chmod 640 /etc/postfix/pgsql-*.cf
|
||||||
|
chown root:postfix /etc/postfix/pgsql-*.cf
|
||||||
|
|
||||||
|
# Configure master.cf for submission and smtps
|
||||||
|
cat >> /etc/postfix/master.cf << EOF
|
||||||
|
|
||||||
|
# Submission port 587
|
||||||
|
submission inet n - y - - smtpd
|
||||||
|
-o syslog_name=postfix/submission
|
||||||
|
-o smtpd_tls_security_level=encrypt
|
||||||
|
-o smtpd_sasl_auth_enable=yes
|
||||||
|
-o smtpd_sasl_type=dovecot
|
||||||
|
-o smtpd_sasl_path=private/auth
|
||||||
|
-o smtpd_reject_unlisted_recipient=no
|
||||||
|
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
|
||||||
|
-o milter_macro_daemon_name=ORIGINATING
|
||||||
|
|
||||||
|
# SMTPS port 465
|
||||||
|
smtps inet n - y - - smtpd
|
||||||
|
-o syslog_name=postfix/smtps
|
||||||
|
-o smtpd_tls_wrappermode=yes
|
||||||
|
-o smtpd_sasl_auth_enable=yes
|
||||||
|
-o smtpd_sasl_type=dovecot
|
||||||
|
-o smtpd_sasl_path=private/auth
|
||||||
|
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
|
||||||
|
-o milter_macro_daemon_name=ORIGINATING
|
||||||
|
|
||||||
|
# Amavis
|
||||||
|
smtp-amavis unix - - - - 2 smtp
|
||||||
|
-o smtp_data_done_timeout=1200
|
||||||
|
-o smtp_send_xforward_command=yes
|
||||||
|
-o disable_dns_lookups=yes
|
||||||
|
-o max_use=20
|
||||||
|
|
||||||
|
127.0.0.1:10025 inet n - - - - smtpd
|
||||||
|
-o content_filter=
|
||||||
|
-o local_recipient_maps=
|
||||||
|
-o relay_recipient_maps=
|
||||||
|
-o smtpd_restriction_classes=
|
||||||
|
-o smtpd_delay_reject=no
|
||||||
|
-o smtpd_client_restrictions=permit_mynetworks,reject
|
||||||
|
-o smtpd_helo_restrictions=
|
||||||
|
-o smtpd_sender_restrictions=
|
||||||
|
-o smtpd_recipient_restrictions=permit_mynetworks,reject
|
||||||
|
-o smtpd_data_restrictions=reject_unauth_pipelining
|
||||||
|
-o smtpd_end_of_data_restrictions=
|
||||||
|
-o mynetworks=127.0.0.0/8
|
||||||
|
-o smtpd_error_sleep_time=0
|
||||||
|
-o smtpd_soft_error_limit=1001
|
||||||
|
-o smtpd_hard_error_limit=1000
|
||||||
|
-o smtpd_client_connection_count_limit=0
|
||||||
|
-o smtpd_client_connection_rate_limit=0
|
||||||
|
-o receive_override_options=no_header_body_checks,no_unknown_recipient_checks
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Create virtual mailbox directory
|
||||||
|
mkdir -p /var/mail/vhosts
|
||||||
|
groupadd -g 5000 vmail 2>/dev/null || true
|
||||||
|
useradd -g vmail -u 5000 vmail -d /var/mail/vhosts -m 2>/dev/null || true
|
||||||
|
chown -R vmail:vmail /var/mail/vhosts
|
||||||
|
|
||||||
|
success "Postfix configured"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Configure Dovecot
|
||||||
|
configure_dovecot() {
|
||||||
|
info "Configuring Dovecot..."
|
||||||
|
|
||||||
|
# Backup configuration
|
||||||
|
cp -r /etc/dovecot /etc/dovecot.backup
|
||||||
|
|
||||||
|
# Main configuration
|
||||||
|
cat > /etc/dovecot/dovecot.conf << EOF
|
||||||
|
!include_try /usr/share/dovecot/protocols.d/*.protocol
|
||||||
|
protocols = imap pop3 lmtp
|
||||||
|
!include conf.d/*.conf
|
||||||
|
!include_try local.conf
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# 10-mail.conf
|
||||||
|
cat > /etc/dovecot/conf.d/10-mail.conf << EOF
|
||||||
|
mail_location = maildir:/var/mail/vhosts/%d/%n
|
||||||
|
namespace inbox {
|
||||||
|
inbox = yes
|
||||||
|
}
|
||||||
|
mail_privileged_group = mail
|
||||||
|
mail_uid = vmail
|
||||||
|
mail_gid = vmail
|
||||||
|
first_valid_uid = 5000
|
||||||
|
last_valid_uid = 5000
|
||||||
|
first_valid_gid = 5000
|
||||||
|
last_valid_gid = 5000
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# 10-auth.conf
|
||||||
|
cat > /etc/dovecot/conf.d/10-auth.conf << EOF
|
||||||
|
disable_plaintext_auth = yes
|
||||||
|
auth_mechanisms = plain login
|
||||||
|
!include auth-sql.conf.ext
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# auth-sql.conf.ext
|
||||||
|
cat > /etc/dovecot/conf.d/auth-sql.conf.ext << EOF
|
||||||
|
passdb {
|
||||||
|
driver = sql
|
||||||
|
args = /etc/dovecot/dovecot-sql.conf.ext
|
||||||
|
}
|
||||||
|
userdb {
|
||||||
|
driver = static
|
||||||
|
args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n
|
||||||
|
}
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# dovecot-sql.conf.ext
|
||||||
|
cat > /etc/dovecot/dovecot-sql.conf.ext << EOF
|
||||||
|
driver = pgsql
|
||||||
|
connect = host=localhost dbname=$DB_NAME user=$DB_USER password=$DB_PASSWORD
|
||||||
|
default_pass_scheme = SHA512-CRYPT
|
||||||
|
password_query = SELECT username as user, password FROM mailbox WHERE username='%u' AND active='1'
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# 10-master.conf
|
||||||
|
cat > /etc/dovecot/conf.d/10-master.conf << EOF
|
||||||
|
service imap-login {
|
||||||
|
inet_listener imap {
|
||||||
|
port = 143
|
||||||
|
}
|
||||||
|
inet_listener imaps {
|
||||||
|
port = 993
|
||||||
|
ssl = yes
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
service pop3-login {
|
||||||
|
inet_listener pop3 {
|
||||||
|
port = 110
|
||||||
|
}
|
||||||
|
inet_listener pop3s {
|
||||||
|
port = 995
|
||||||
|
ssl = yes
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
service lmtp {
|
||||||
|
unix_listener /var/spool/postfix/private/dovecot-lmtp {
|
||||||
|
mode = 0600
|
||||||
|
user = postfix
|
||||||
|
group = postfix
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
service auth {
|
||||||
|
unix_listener /var/spool/postfix/private/auth {
|
||||||
|
mode = 0666
|
||||||
|
user = postfix
|
||||||
|
group = postfix
|
||||||
|
}
|
||||||
|
unix_listener auth-userdb {
|
||||||
|
mode = 0600
|
||||||
|
user = vmail
|
||||||
|
group = vmail
|
||||||
|
}
|
||||||
|
user = dovecot
|
||||||
|
}
|
||||||
|
|
||||||
|
service auth-worker {
|
||||||
|
user = vmail
|
||||||
|
}
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# 10-ssl.conf
|
||||||
|
cat > /etc/dovecot/conf.d/10-ssl.conf << EOF
|
||||||
|
ssl = required
|
||||||
|
ssl_cert = </etc/letsencrypt/live/$HOSTNAME/fullchain.pem
|
||||||
|
ssl_key = </etc/letsencrypt/live/$HOSTNAME/privkey.pem
|
||||||
|
ssl_protocols = !SSLv2 !SSLv3 !TLSv1 !TLSv1.1
|
||||||
|
ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384
|
||||||
|
ssl_prefer_server_ciphers = yes
|
||||||
|
ssl_dh = </etc/dovecot/dh.pem
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Generate DH parameters
|
||||||
|
openssl dhparam -out /etc/dovecot/dh.pem 2048
|
||||||
|
|
||||||
|
# Set permissions
|
||||||
|
chmod 600 /etc/dovecot/dovecot-sql.conf.ext
|
||||||
|
chown vmail:dovecot /etc/dovecot/dovecot-sql.conf.ext
|
||||||
|
|
||||||
|
success "Dovecot configured"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Configure OpenDKIM
|
||||||
|
configure_opendkim() {
|
||||||
|
info "Configuring OpenDKIM..."
|
||||||
|
|
||||||
|
# Create directories
|
||||||
|
mkdir -p /etc/opendkim/keys/$DOMAIN
|
||||||
|
|
||||||
|
# Generate DKIM key
|
||||||
|
opendkim-genkey -t -s mail -d $DOMAIN -D /etc/opendkim/keys/$DOMAIN
|
||||||
|
|
||||||
|
# Set permissions
|
||||||
|
chown -R opendkim:opendkim /etc/opendkim
|
||||||
|
chmod 600 /etc/opendkim/keys/$DOMAIN/mail.private
|
||||||
|
|
||||||
|
# OpenDKIM configuration
|
||||||
|
cat > /etc/opendkim.conf << EOF
|
||||||
|
Syslog yes
|
||||||
|
UMask 007
|
||||||
|
Socket inet:8891@localhost
|
||||||
|
PidFile /var/run/opendkim/opendkim.pid
|
||||||
|
OversignHeaders From
|
||||||
|
TrustAnchorFile /usr/share/dns/root.key
|
||||||
|
UserID opendkim
|
||||||
|
KeyTable /etc/opendkim/key.table
|
||||||
|
SigningTable /etc/opendkim/signing.table
|
||||||
|
ExternalIgnoreList /etc/opendkim/trusted.hosts
|
||||||
|
InternalHosts /etc/opendkim/trusted.hosts
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Key table
|
||||||
|
echo "mail._domainkey.$DOMAIN $DOMAIN:mail:/etc/opendkim/keys/$DOMAIN/mail.private" > /etc/opendkim/key.table
|
||||||
|
|
||||||
|
# Signing table
|
||||||
|
echo "*@$DOMAIN mail._domainkey.$DOMAIN" > /etc/opendkim/signing.table
|
||||||
|
|
||||||
|
# Trusted hosts
|
||||||
|
cat > /etc/opendkim/trusted.hosts << EOF
|
||||||
|
127.0.0.1
|
||||||
|
localhost
|
||||||
|
$HOSTNAME
|
||||||
|
$DOMAIN
|
||||||
|
EOF
|
||||||
|
|
||||||
|
success "OpenDKIM configured"
|
||||||
|
|
||||||
|
# Display DNS record
|
||||||
|
info "Add this TXT record to your DNS:"
|
||||||
|
echo "mail._domainkey.$DOMAIN"
|
||||||
|
cat /etc/opendkim/keys/$DOMAIN/mail.txt
|
||||||
|
}
|
||||||
|
|
||||||
|
# Configure Amavis and SpamAssassin
|
||||||
|
configure_amavis() {
|
||||||
|
info "Configuring Amavis and SpamAssassin..."
|
||||||
|
|
||||||
|
# Update ClamAV signatures
|
||||||
|
freshclam
|
||||||
|
|
||||||
|
# Configure Amavis
|
||||||
|
cat > /etc/amavis/conf.d/15-content_filter_mode << 'EOF'
|
||||||
|
use strict;
|
||||||
|
@bypass_virus_checks_maps = (
|
||||||
|
\%bypass_virus_checks, \@bypass_virus_checks_acl, \$bypass_virus_checks_re);
|
||||||
|
@bypass_spam_checks_maps = (
|
||||||
|
\%bypass_spam_checks, \@bypass_spam_checks_acl, \$bypass_spam_checks_re);
|
||||||
|
1; # ensure a defined return
|
||||||
|
EOF
|
||||||
|
|
||||||
|
cat > /etc/amavis/conf.d/20-debian_defaults << EOF
|
||||||
|
use strict;
|
||||||
|
\$MYHOME = '/var/lib/amavis';
|
||||||
|
\$mydomain = '$DOMAIN';
|
||||||
|
\$myhostname = '$HOSTNAME';
|
||||||
|
\$max_servers = 3;
|
||||||
|
\$daemon_user = 'amavis';
|
||||||
|
\$daemon_group = 'amavis';
|
||||||
|
\$inet_socket_port = 10024;
|
||||||
|
\$policy_bank{'MYNETS'} = {
|
||||||
|
originating => 1,
|
||||||
|
os_fingerprint_method => undef,
|
||||||
|
};
|
||||||
|
\$interface_policy{'10024'} = 'ORIGINATING';
|
||||||
|
\$policy_bank{'ORIGINATING'} = {
|
||||||
|
originating => 1,
|
||||||
|
allow_disclaimers => 1,
|
||||||
|
virus_admin_maps => ["virusalert\\\@\$mydomain"],
|
||||||
|
spam_admin_maps => ["virusalert\\\@\$mydomain"],
|
||||||
|
warnbadhsender => 1,
|
||||||
|
forward_method => 'smtp:[127.0.0.1]:10025',
|
||||||
|
smtpd_discard_ehlo_keywords => ['8BITMIME'],
|
||||||
|
bypass_banned_checks_maps => [1],
|
||||||
|
terminate_dsn_on_notify_success => 0,
|
||||||
|
};
|
||||||
|
\$sa_tag_level_deflt = 2.0;
|
||||||
|
\$sa_tag2_level_deflt = 6.0;
|
||||||
|
\$sa_kill_level_deflt = 6.9;
|
||||||
|
\$sa_dsn_cutoff_level = 10;
|
||||||
|
\$penpals_bonus_score = 8;
|
||||||
|
\$penpals_threshold_high = \$sa_kill_level_deflt;
|
||||||
|
\$bounce_killer_score = 100;
|
||||||
|
\$virus_admin = "postmaster\\\@\$mydomain";
|
||||||
|
\$mailfrom_notify_admin = "postmaster\\\@\$mydomain";
|
||||||
|
\$mailfrom_notify_recip = "postmaster\\\@\$mydomain";
|
||||||
|
\$mailfrom_notify_spamadmin = "postmaster\\\@\$mydomain";
|
||||||
|
\$mailfrom_to_quarantine = '';
|
||||||
|
\@lookup_sql_dsn = ( ['DBI:Pg:database=$DB_NAME;host=127.0.0.1;port=5432', '$DB_USER', '$DB_PASSWORD'] );
|
||||||
|
\$enable_db = 1;
|
||||||
|
\$enable_global_cache = 1;
|
||||||
|
\$inet_socket_bind = '127.0.0.1';
|
||||||
|
@inet_acl = qw(127.0.0.1);
|
||||||
|
1;
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Configure SpamAssassin
|
||||||
|
cat > /etc/spamassassin/local.cf << EOF
|
||||||
|
rewrite_header Subject *****SPAM*****
|
||||||
|
report_safe 0
|
||||||
|
required_score 5.0
|
||||||
|
use_bayes 1
|
||||||
|
use_bayes_rules 1
|
||||||
|
bayes_auto_learn 1
|
||||||
|
skip_rbl_checks 0
|
||||||
|
use_razor2 1
|
||||||
|
use_dcc 1
|
||||||
|
use_pyzor 1
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Add amavis user to clamav group
|
||||||
|
usermod -a -G clamav amavis
|
||||||
|
|
||||||
|
success "Amavis and SpamAssassin configured"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Get Let's Encrypt certificates
|
||||||
|
get_ssl_certificates() {
|
||||||
|
info "Obtaining Let's Encrypt certificates..."
|
||||||
|
|
||||||
|
# Stop services that might be using port 80
|
||||||
|
systemctl stop apache2 2>/dev/null || true
|
||||||
|
systemctl stop nginx 2>/dev/null || true
|
||||||
|
|
||||||
|
# Get certificate
|
||||||
|
certbot certonly --standalone -d $HOSTNAME --email $ADMIN_EMAIL --agree-tos --non-interactive
|
||||||
|
|
||||||
|
if [[ ! -f "/etc/letsencrypt/live/$HOSTNAME/fullchain.pem" ]]; then
|
||||||
|
error "Failed to obtain SSL certificate"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Set up auto-renewal
|
||||||
|
(crontab -l 2>/dev/null; echo "0 12 * * * /usr/bin/certbot renew --quiet") | crontab -
|
||||||
|
|
||||||
|
success "SSL certificates obtained"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Install PostfixAdmin
|
||||||
|
install_postfixadmin() {
|
||||||
|
info "Installing PostfixAdmin..."
|
||||||
|
|
||||||
|
# Download PostfixAdmin
|
||||||
|
cd /tmp
|
||||||
|
wget https://github.com/postfixadmin/postfixadmin/archive/postfixadmin-3.3.11.tar.gz
|
||||||
|
tar -xzf postfixadmin-3.3.11.tar.gz
|
||||||
|
mv postfixadmin-postfixadmin-3.3.11 $WEBROOT
|
||||||
|
|
||||||
|
# Set permissions
|
||||||
|
chown -R www-data:www-data $WEBROOT
|
||||||
|
chmod -R 755 $WEBROOT
|
||||||
|
|
||||||
|
# Create PostfixAdmin configuration
|
||||||
|
cat > $WEBROOT/config.local.php << EOF
|
||||||
|
<?php
|
||||||
|
\$CONF['configured'] = true;
|
||||||
|
\$CONF['setup_password'] = '$(php -r "echo password_hash('$POSTFIXADMIN_PASSWORD', PASSWORD_DEFAULT);")';
|
||||||
|
\$CONF['postfix_admin_url'] = 'https://$HOSTNAME/postfixadmin';
|
||||||
|
\$CONF['postfix_admin_path'] = '$WEBROOT';
|
||||||
|
\$CONF['default_language'] = 'en';
|
||||||
|
\$CONF['database_type'] = 'pgsql';
|
||||||
|
\$CONF['database_host'] = 'localhost';
|
||||||
|
\$CONF['database_user'] = '$DB_USER';
|
||||||
|
\$CONF['database_password'] = '$DB_PASSWORD';
|
||||||
|
\$CONF['database_name'] = '$DB_NAME';
|
||||||
|
\$CONF['admin_email'] = '$ADMIN_EMAIL';
|
||||||
|
\$CONF['encrypt'] = 'sha512.crypt';
|
||||||
|
\$CONF['dovecotpw'] = "/usr/bin/doveadm pw";
|
||||||
|
\$CONF['page_size'] = '10';
|
||||||
|
\$CONF['default_aliases'] = array (
|
||||||
|
'abuse' => 'abuse@change-this-to-your.domain.tld',
|
||||||
|
'hostmaster' => 'hostmaster@change-this-to-your.domain.tld',
|
||||||
|
'postmaster' => 'postmaster@change-this-to-your.domain.tld',
|
||||||
|
'webmaster' => 'webmaster@change-this-to-your.domain.tld'
|
||||||
|
);
|
||||||
|
\$CONF['domain_path'] = 'YES';
|
||||||
|
\$CONF['domain_in_mailbox'] = 'YES';
|
||||||
|
\$CONF['maildir_name_hook'] = 'maildir_name_hook';
|
||||||
|
function maildir_name_hook(\$domain, \$user) {
|
||||||
|
return \$domain . '/' . \$user . '/';
|
||||||
|
}
|
||||||
|
?>
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Configure Apache virtual host
|
||||||
|
cat > /etc/apache2/sites-available/postfixadmin.conf << EOF
|
||||||
|
<VirtualHost *:80>
|
||||||
|
ServerName $HOSTNAME
|
||||||
|
Redirect permanent / https://$HOSTNAME/
|
||||||
|
</VirtualHost>
|
||||||
|
|
||||||
|
<VirtualHost *:443>
|
||||||
|
ServerName $HOSTNAME
|
||||||
|
DocumentRoot $WEBROOT/public
|
||||||
|
|
||||||
|
SSLEngine on
|
||||||
|
SSLCertificateFile /etc/letsencrypt/live/$HOSTNAME/fullchain.pem
|
||||||
|
SSLCertificateKeyFile /etc/letsencrypt/live/$HOSTNAME/privkey.pem
|
||||||
|
|
||||||
|
<Directory $WEBROOT/public>
|
||||||
|
Options -Indexes
|
||||||
|
AllowOverride All
|
||||||
|
Require all granted
|
||||||
|
</Directory>
|
||||||
|
|
||||||
|
ErrorLog \${APACHE_LOG_DIR}/postfixadmin_error.log
|
||||||
|
CustomLog \${APACHE_LOG_DIR}/postfixadmin_access.log combined
|
||||||
|
</VirtualHost>
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# Enable Apache modules and site
|
||||||
|
a2enmod ssl
|
||||||
|
a2enmod rewrite
|
||||||
|
a2ensite postfixadmin
|
||||||
|
a2dissite 000-default
|
||||||
|
|
||||||
|
success "PostfixAdmin installed"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Configure firewall
|
||||||
|
configure_firewall() {
|
||||||
|
info "Configuring firewall..."
|
||||||
|
|
||||||
|
# Reset UFW
|
||||||
|
ufw --force reset
|
||||||
|
|
||||||
|
# Default policies
|
||||||
|
ufw default deny incoming
|
||||||
|
ufw default allow outgoing
|
||||||
|
|
||||||
|
# Allow SSH
|
||||||
|
ufw allow ssh
|
||||||
|
|
||||||
|
# Allow email ports
|
||||||
|
ufw allow 25/tcp # SMTP
|
||||||
|
ufw allow 587/tcp # Submission
|
||||||
|
ufw allow 465/tcp # SMTPS
|
||||||
|
ufw allow 110/tcp # POP3
|
||||||
|
ufw allow 995/tcp # POP3S
|
||||||
|
ufw allow 143/tcp # IMAP
|
||||||
|
ufw allow 993/tcp # IMAPS
|
||||||
|
|
||||||
|
# Allow web ports
|
||||||
|
ufw allow 80/tcp # HTTP
|
||||||
|
ufw allow 443/tcp # HTTPS
|
||||||
|
|
||||||
|
# Enable UFW
|
||||||
|
ufw --force enable
|
||||||
|
|
||||||
|
success "Firewall configured"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Start and enable services
|
||||||
|
start_services() {
|
||||||
|
info "Starting and enabling services..."
|
||||||
|
|
||||||
|
# Reload systemd
|
||||||
|
systemctl daemon-reload
|
||||||
|
|
||||||
|
# Start and enable services
|
||||||
|
systemctl enable --now postgresql
|
||||||
|
systemctl enable --now postfix
|
||||||
|
systemctl enable --now dovecot
|
||||||
|
systemctl enable --now amavis
|
||||||
|
systemctl enable --now spamassassin
|
||||||
|
systemctl enable --now clamav-daemon
|
||||||
|
systemctl enable --now clamav-freshclam
|
||||||
|
systemctl enable --now opendkim
|
||||||
|
systemctl enable --now apache2
|
||||||
|
|
||||||
|
success "All services started and enabled"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Display final information
|
||||||
|
display_final_info() {
|
||||||
|
success "Email server setup completed!"
|
||||||
|
echo
|
||||||
|
echo -e "${BLUE}=== Setup Summary ===${NC}"
|
||||||
|
echo "Primary Domain: $DOMAIN"
|
||||||
|
echo "Hostname: $HOSTNAME"
|
||||||
|
echo "Admin Email: $ADMIN_EMAIL"
|
||||||
|
echo "PostfixAdmin URL: https://$HOSTNAME/postfixadmin/"
|
||||||
|
echo
|
||||||
|
echo -e "${YELLOW}=== DNS Records to Add for $DOMAIN ===${NC}"
|
||||||
|
echo "A $HOSTNAME [Your server IP]"
|
||||||
|
echo "MX $DOMAIN $HOSTNAME"
|
||||||
|
echo "TXT $DOMAIN \"v=spf1 mx ~all\""
|
||||||
|
echo "TXT _dmarc.$DOMAIN \"v=DMARC1; p=none; rua=mailto:dmarc@$DOMAIN\""
|
||||||
|
echo
|
||||||
|
echo -e "${YELLOW}=== DKIM DNS Record for $DOMAIN ===${NC}"
|
||||||
|
cat /etc/opendkim/keys/$DOMAIN/mail.txt
|
||||||
|
echo
|
||||||
|
echo -e "${YELLOW}=== Next Steps ===${NC}"
|
||||||
|
echo "1. Add the DNS records shown above"
|
||||||
|
echo "2. Visit https://$HOSTNAME/postfixadmin/setup.php to complete PostfixAdmin setup"
|
||||||
|
echo "3. Create your first domain and mailbox in PostfixAdmin"
|
||||||
|
echo "4. Test email sending and receiving"
|
||||||
|
echo
|
||||||
|
echo -e "${BLUE}=== Multiple Domain Support ===${NC}"
|
||||||
|
echo "This server supports unlimited virtual domains!"
|
||||||
|
echo
|
||||||
|
echo "To add additional domains:"
|
||||||
|
echo "1. Run: ./add-domain.sh newdomain.com"
|
||||||
|
echo "2. Add the provided DNS records"
|
||||||
|
echo "3. Configure the domain in PostfixAdmin"
|
||||||
|
echo "4. Create mailboxes for the new domain"
|
||||||
|
echo
|
||||||
|
echo "Each domain can have its own:"
|
||||||
|
echo " • Independent mailboxes and aliases"
|
||||||
|
echo " • DKIM signing for authentication"
|
||||||
|
echo " • Custom quotas and limits"
|
||||||
|
echo " • Application SMTP access"
|
||||||
|
echo
|
||||||
|
echo -e "${BLUE}=== Application SMTP Configuration ===${NC}"
|
||||||
|
echo "Your applications can send email using these settings:"
|
||||||
|
echo " Host: $HOSTNAME"
|
||||||
|
echo " Port: 587 (STARTTLS) or 465 (SSL/TLS)"
|
||||||
|
echo " Username: mailbox@yourdomain.com (full email address)"
|
||||||
|
echo " Password: [mailbox password from PostfixAdmin]"
|
||||||
|
echo " Security: STARTTLS or SSL/TLS"
|
||||||
|
echo
|
||||||
|
echo -e "${GREEN}Setup completed successfully!${NC}"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Main execution
|
||||||
|
main() {
|
||||||
|
echo -e "${BLUE}Email Server Setup Script${NC}"
|
||||||
|
echo "========================="
|
||||||
|
echo
|
||||||
|
|
||||||
|
check_root
|
||||||
|
get_configuration
|
||||||
|
update_system
|
||||||
|
install_packages
|
||||||
|
configure_postgresql
|
||||||
|
get_ssl_certificates
|
||||||
|
configure_postfix
|
||||||
|
configure_dovecot
|
||||||
|
configure_opendkim
|
||||||
|
configure_amavis
|
||||||
|
install_postfixadmin
|
||||||
|
configure_firewall
|
||||||
|
start_services
|
||||||
|
display_final_info
|
||||||
|
}
|
||||||
|
|
||||||
|
# Run main function
|
||||||
|
main "$@"
|
||||||
262
test-email-server.sh
Executable file
262
test-email-server.sh
Executable file
@@ -0,0 +1,262 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Email Server Test Script
|
||||||
|
# This script helps test various components of your email server
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
# Colors
|
||||||
|
RED='\033[0;31m'
|
||||||
|
GREEN='\033[0;32m'
|
||||||
|
YELLOW='\033[1;33m'
|
||||||
|
BLUE='\033[0;34m'
|
||||||
|
NC='\033[0m'
|
||||||
|
|
||||||
|
# Configuration
|
||||||
|
DOMAIN=""
|
||||||
|
HOSTNAME=""
|
||||||
|
TEST_EMAIL=""
|
||||||
|
|
||||||
|
# Get configuration
|
||||||
|
get_config() {
|
||||||
|
if [[ -z "$DOMAIN" ]]; then
|
||||||
|
read -p "Enter your domain (e.g., example.com): " DOMAIN
|
||||||
|
fi
|
||||||
|
if [[ -z "$HOSTNAME" ]]; then
|
||||||
|
read -p "Enter your hostname (e.g., mail.example.com): " HOSTNAME
|
||||||
|
fi
|
||||||
|
if [[ -z "$TEST_EMAIL" ]]; then
|
||||||
|
read -p "Enter test email address: " TEST_EMAIL
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Test functions
|
||||||
|
test_dns() {
|
||||||
|
echo -e "${BLUE}Testing DNS Configuration...${NC}"
|
||||||
|
|
||||||
|
echo "Checking MX record for $DOMAIN:"
|
||||||
|
if dig +short MX $DOMAIN | grep -q $HOSTNAME; then
|
||||||
|
echo -e "${GREEN}✓ MX record found${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ MX record not found or incorrect${NC}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Checking A record for $HOSTNAME:"
|
||||||
|
if dig +short A $HOSTNAME | grep -q .; then
|
||||||
|
echo -e "${GREEN}✓ A record found${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ A record not found${NC}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Checking SPF record for $DOMAIN:"
|
||||||
|
if dig +short TXT $DOMAIN | grep -q "v=spf1"; then
|
||||||
|
echo -e "${GREEN}✓ SPF record found${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ SPF record not found${NC}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Checking DKIM record for $DOMAIN:"
|
||||||
|
if dig +short TXT mail._domainkey.$DOMAIN | grep -q "v=DKIM1"; then
|
||||||
|
echo -e "${GREEN}✓ DKIM record found${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ DKIM record not found${NC}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Checking DMARC record for $DOMAIN:"
|
||||||
|
if dig +short TXT _dmarc.$DOMAIN | grep -q "v=DMARC1"; then
|
||||||
|
echo -e "${GREEN}✓ DMARC record found${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ DMARC record not found${NC}"
|
||||||
|
fi
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
test_services() {
|
||||||
|
echo -e "${BLUE}Testing Service Status...${NC}"
|
||||||
|
|
||||||
|
services=("postfix" "dovecot" "amavis" "spamassassin" "clamav-daemon" "opendkim" "apache2" "postgresql")
|
||||||
|
|
||||||
|
for service in "${services[@]}"; do
|
||||||
|
if systemctl is-active --quiet $service; then
|
||||||
|
echo -e "${GREEN}✓ $service is running${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ $service is not running${NC}"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
test_ports() {
|
||||||
|
echo -e "${BLUE}Testing Port Connectivity...${NC}"
|
||||||
|
|
||||||
|
ports=("25:SMTP" "587:Submission" "465:SMTPS" "143:IMAP" "993:IMAPS" "110:POP3" "995:POP3S")
|
||||||
|
|
||||||
|
for port_info in "${ports[@]}"; do
|
||||||
|
port=$(echo $port_info | cut -d: -f1)
|
||||||
|
name=$(echo $port_info | cut -d: -f2)
|
||||||
|
|
||||||
|
if nc -z localhost $port 2>/dev/null; then
|
||||||
|
echo -e "${GREEN}✓ Port $port ($name) is open${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ Port $port ($name) is closed${NC}"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
test_ssl() {
|
||||||
|
echo -e "${BLUE}Testing SSL Certificates...${NC}"
|
||||||
|
|
||||||
|
if [[ -f "/etc/letsencrypt/live/$HOSTNAME/fullchain.pem" ]]; then
|
||||||
|
echo -e "${GREEN}✓ SSL certificate found${NC}"
|
||||||
|
|
||||||
|
# Check certificate validity
|
||||||
|
if openssl x509 -in /etc/letsencrypt/live/$HOSTNAME/fullchain.pem -noout -checkend 86400; then
|
||||||
|
echo -e "${GREEN}✓ SSL certificate is valid${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ SSL certificate is expired or expiring soon${NC}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Check certificate CN
|
||||||
|
cn=$(openssl x509 -in /etc/letsencrypt/live/$HOSTNAME/fullchain.pem -noout -subject | grep -o "CN=[^,]*" | cut -d= -f2)
|
||||||
|
if [[ "$cn" == "$HOSTNAME" ]]; then
|
||||||
|
echo -e "${GREEN}✓ SSL certificate CN matches hostname${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ SSL certificate CN ($cn) doesn't match hostname ($HOSTNAME)${NC}"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ SSL certificate not found${NC}"
|
||||||
|
fi
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
test_dkim() {
|
||||||
|
echo -e "${BLUE}Testing DKIM Configuration...${NC}"
|
||||||
|
|
||||||
|
# Find all domains with DKIM keys
|
||||||
|
dkim_domains=()
|
||||||
|
if [[ -d "/etc/opendkim/keys" ]]; then
|
||||||
|
while IFS= read -r -d '' domain_dir; do
|
||||||
|
domain=$(basename "$domain_dir")
|
||||||
|
dkim_domains+=("$domain")
|
||||||
|
done < <(find /etc/opendkim/keys -mindepth 1 -maxdepth 1 -type d -print0)
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ ${#dkim_domains[@]} -eq 0 ]]; then
|
||||||
|
echo -e "${RED}✗ No DKIM domains found${NC}"
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
|
||||||
|
for domain in "${dkim_domains[@]}"; do
|
||||||
|
if opendkim-testkey -d "$domain" -s mail -vvv 2>&1 | grep -q "key OK"; then
|
||||||
|
echo -e "${GREEN}✓ DKIM key test passed for $domain${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ DKIM key test failed for $domain${NC}"
|
||||||
|
echo " Run: opendkim-testkey -d $domain -s mail -vvv"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
test_authentication() {
|
||||||
|
echo -e "${BLUE}Testing SMTP Authentication...${NC}"
|
||||||
|
|
||||||
|
if echo "quit" | telnet localhost 587 2>/dev/null | grep -q "250-AUTH"; then
|
||||||
|
echo -e "${GREEN}✓ SMTP AUTH is available${NC}"
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ SMTP AUTH is not available${NC}"
|
||||||
|
fi
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
test_database() {
|
||||||
|
echo -e "${BLUE}Testing Database Connection...${NC}"
|
||||||
|
|
||||||
|
if sudo -u postgres psql -d postfix -c "SELECT 1;" >/dev/null 2>&1; then
|
||||||
|
echo -e "${GREEN}✓ Database connection successful${NC}"
|
||||||
|
|
||||||
|
# Check tables
|
||||||
|
tables=$(sudo -u postgres psql -d postfix -t -c "SELECT tablename FROM pg_tables WHERE schemaname='public';" | xargs)
|
||||||
|
if [[ "$tables" == *"domains"* && "$tables" == *"mailbox"* && "$tables" == *"aliases"* ]]; then
|
||||||
|
echo -e "${GREEN}✓ Required database tables exist${NC}"
|
||||||
|
|
||||||
|
# Check configured domains
|
||||||
|
domain_count=$(sudo -u postgres psql -d postfix -t -c "SELECT COUNT(*) FROM domains WHERE active='1';" | xargs)
|
||||||
|
echo -e "${GREEN}✓ Database has $domain_count active domain(s)${NC}"
|
||||||
|
|
||||||
|
if [[ $domain_count -gt 0 ]]; then
|
||||||
|
echo "Active domains:"
|
||||||
|
sudo -u postgres psql -d postfix -t -c "SELECT ' - ' || domain FROM domains WHERE active='1';" | grep -v "^$"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ Required database tables missing${NC}"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ Database connection failed${NC}"
|
||||||
|
fi
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
test_email_flow() {
|
||||||
|
echo -e "${BLUE}Testing Email Flow...${NC}"
|
||||||
|
|
||||||
|
if [[ -n "$TEST_EMAIL" ]]; then
|
||||||
|
echo "Sending test email to $TEST_EMAIL..."
|
||||||
|
if echo "This is a test email from your email server." | mail -s "Email Server Test" $TEST_EMAIL; then
|
||||||
|
echo -e "${GREEN}✓ Test email sent${NC}"
|
||||||
|
echo "Check your inbox for the test email"
|
||||||
|
else
|
||||||
|
echo -e "${RED}✗ Failed to send test email${NC}"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo -e "${YELLOW}! No test email provided, skipping email flow test${NC}"
|
||||||
|
fi
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
check_logs() {
|
||||||
|
echo -e "${BLUE}Recent Log Entries...${NC}"
|
||||||
|
|
||||||
|
echo "=== Postfix Logs (last 10 lines) ==="
|
||||||
|
tail -10 /var/log/mail.log | grep postfix || echo "No recent postfix logs"
|
||||||
|
|
||||||
|
echo
|
||||||
|
echo "=== Dovecot Logs (last 5 lines) ==="
|
||||||
|
tail -5 /var/log/mail.log | grep dovecot || echo "No recent dovecot logs"
|
||||||
|
|
||||||
|
echo
|
||||||
|
echo "=== Setup Log (last 5 lines) ==="
|
||||||
|
if [[ -f "/var/log/email-server-setup.log" ]]; then
|
||||||
|
tail -5 /var/log/email-server-setup.log
|
||||||
|
else
|
||||||
|
echo "Setup log not found"
|
||||||
|
fi
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
|
||||||
|
main() {
|
||||||
|
echo -e "${BLUE}Email Server Test Suite${NC}"
|
||||||
|
echo "======================"
|
||||||
|
echo
|
||||||
|
|
||||||
|
get_config
|
||||||
|
|
||||||
|
test_dns
|
||||||
|
test_services
|
||||||
|
test_ports
|
||||||
|
test_ssl
|
||||||
|
test_dkim
|
||||||
|
test_authentication
|
||||||
|
test_database
|
||||||
|
test_email_flow
|
||||||
|
check_logs
|
||||||
|
|
||||||
|
echo -e "${GREEN}Testing completed!${NC}"
|
||||||
|
echo
|
||||||
|
echo -e "${YELLOW}Online testing tools:${NC}"
|
||||||
|
echo "- MX Toolbox: https://mxtoolbox.com/"
|
||||||
|
echo "- Mail Tester: https://www.mail-tester.com/"
|
||||||
|
echo "- DKIM Validator: https://dkimvalidator.com/"
|
||||||
|
}
|
||||||
|
|
||||||
|
main "$@"
|
||||||
Reference in New Issue
Block a user