email-stack.yml

# use to create a swarm template in Portainer
# STACK_BASE_PATH [base folder where to host files, must exists]
# STACK_BASE_PATH=/srv/data/email ; grep device email-stack-4-swarm.yml|grep -v "#"|awk '{print $2}'|while read dir; do eval mkdir -p $dir; done
# MAILSERVER_CERT=yourmailserver.domain.tld
# Prior to run this stack you must have a SSL certificate to be used by dovecot and exim and a certificate used
#   by the webmail container

version: '3.7'

x-default-opts: 
  &default-opts
  deploy:
    restart_policy:
      #condition: on-failure
      condition: any
      delay: 15s
      #max_attempts: 3
      window: 20s
  
services:
  dovecot:
    image: neomediatech/dovecot:latest
    hostname: dovecot
    <<: *default-opts    
    ports:
      - target: 143
        published: 143
        protocol: tcp
        mode: host
      - target: 993
        published: 993
        protocol: tcp
        mode: host
    volumes:
      - mailbox_files:/data/files
      - mailbox_homes:/data/home
      - logs:/data/logs
      - common_data:/data/common
      - certs:/data/certs
      - common_bin:/data/common_bin
      - dovecot_conf:/etc/dovecot/conf.d
    environment:
      MAILSERVER_CERT: "${MAILSERVER_CERT}"
  
  exim:
    image: neomediatech/exim:4.93
    hostname: exim
    <<: *default-opts    
    ports:
      - target: 25
        published: 25
        protocol: tcp
        mode: host
      - target: 465
        published: 465
        protocol: tcp
        mode: host
      - target: 587
        published: 587
        protocol: tcp
        mode: host
    volumes:
      - mailbox_files:/data/files
      - mailbox_homes:/data/home
      - logs:/data/logs
      - common_data:/data/common
      - certs:/data/certs
      - /srv/data/email/servername_cert:/servername_cert:ro
      - exim_spool:/var/spool/exim
      - exim_confs:/data/conf
    environment:
      TZ: Europe/Rome
      WAITFOR: "tcp://dovecot:143 tcp://clamav:3310 tcp://redis:6379 tcp://rspamd:11333"
      EXIM_LOGDIR: ${EXIM_LOGDIR}
      MAILSERVER_CERT: ${MAILSERVER_CERT}
    depends_on:
      - dovecot
      - clamav
      - redis
      - rspamd

  webmail:
    image: roundcube/roundcubemail:1.5.x-apache
    hostname: webmail
    <<: *default-opts
    ports:
      - target: 80
        published: 81
        protocol: tcp
        mode: host    
    volumes:
      - /srv/data/email/webmail/config:/var/roundcube/config:ro
      - /srv/data/email/webmail/logo.png:/var/www/html/logo.png:ro
      - webmail_app:/var/www/html
      - common_bin:/data/common_bin
      - webmail_local_db:/var/roundcube/db
      - webmail_tmp:/tmp/roundcube-temp
    environment:
      ROUNDCUBEMAIL_DEFAULT_HOST: dovecot
      ROUNDCUBEMAIL_SMTP_SERVER: exim
      ROUNDCUBEMAIL_DB_TYPE: mysql
      ROUNDCUBEMAIL_DB_HOST: db
      TZ: Europe/Rome
    depends_on:
      - db
      - exim

  clamav:
    image: neomediatech/clamav:latest
    hostname: clamav
    <<: *default-opts    
    deploy:
      restart_policy:
        condition: any
        delay: 5s
        window: 20s    
    volumes:
      - clamav_defs:/var/lib/clamav
      - clamav_unoff_defs:/var/lib/clamav-unofficial-sigs
    stop_grace_period: 1m

  rspamd:
    image: neomediatech/rspamd:latest
    hostname: rspamd
    <<: *default-opts    
    ports:
      - target: 11334
        published: 11334
        protocol: tcp
        mode: host
    volumes:
      - rspamd_conf:/data
      - rspamd_data:/var/lib/rspamd
      - logs:/var/log/rspamd
      - common_bin:/data/common_bin
    environment:
      WAITFOR: "tcp://clamav:3310 tcp://redis:6379"
    depends_on:
      - redis
      - clamav
    stop_grace_period: 1m

  dcc:
    image: neomediatech/dcc:latest
    hostname: dcc
    <<: *default-opts    

  razor:
    image: neomediatech/razor:latest
    hostname: razor
    <<: *default-opts
    ports:
      - target: 9192
        published: 9192
        protocol: tcp
        mode: host

  pyzor:
    image: neomediatech/pyzor-cc:latest
    hostname: pyzor
    <<: *default-opts
    ports:
      - target: 5953
        published: 5953
        protocol: tcp
        mode: host

  redis:
    image: redis:7-alpine
    hostname: redis
    <<: *default-opts    
    environment:
      TZ: Europe/Rome
    #command: ["redis-server", "--appendonly", "yes"]
    volumes:
      - redis_db:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 10s
      retries: 3
    # according to https://github.com/moby/moby/pull/37701#issuecomment-448014841
    # on docker 19.03 you will be able to set /proc/sys/net/core/somaxconn to 511 instead of default 128
    # like this example below (maybe syntax will change)
    #sysctls:
    #  - net.core.somaxconn=511
    stop_grace_period: 1m

  redis-rspamd-history:
    image: redis:7-alpine
    hostname: redis-rspamd-history
    <<: *default-opts    
    environment:
      TZ: Europe/Rome
    #command: ["redis-server", "--appendonly", "yes"]
    volumes:
      - redis_history_db:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 10s
      retries: 3
    # according to https://github.com/moby/moby/pull/37701#issuecomment-448014841
    # on docker 19.03 you will be able to set /proc/sys/net/core/somaxconn to 511 instead of default 128
    # like this example below (maybe syntax will change)
    #sysctls:
    #  - net.core.somaxconn=511
    stop_grace_period: 1m

  db:
    image: mariadb:10.8
    hostname: db
    <<: *default-opts    
    volumes:
      - webmail_db:/var/lib/mysql
    environment:
      MYSQL_ROOT_PASSWORD_FILE: /var/lib/mysql/db-root.pwd
      MYSQL_PASSWORD_FILE: /var/lib/mysql/db-webmail.pwd
      MYSQL_DATABASE_FILE: /var/lib/mysql/db-name.txt
      MYSQL_USER_FILE: /var/lib/mysql/db-user.txt
      TZ: Europe/Rome
    healthcheck:
      test: ["CMD", "/bin/bash", "-c", "read p < $$MYSQL_PASSWORD_FILE ; read u < $$MYSQL_USER_FILE ; mysql -p$$p -u$$u -e status | grep Uptime || (echo \"MariaDB is down\" && exit 1)"]
      interval: 30s
      timeout: 30s
      start_period: 1s
      retries: 20

  phpmyadmin:
    image: phpmyadmin/phpmyadmin
    hostname: phpmyadmin
    <<: *default-opts
    environment:
      PMA_HOST: db
      PMA_PORT: 3306
    ports:
      - '8280:80'
    depends_on:
      - db

volumes:
  common_data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${STACK_BASE_PATH}/common
  webmail_app:
    driver: local
  clamav_defs:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${STACK_BASE_PATH}/clamav/defs
  clamav_unoff_defs:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${STACK_BASE_PATH}/clamav/unoff_defs  
  redis_db:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${STACK_BASE_PATH}/redis/db
  redis_history_db:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${STACK_BASE_PATH}/redis_history/db
  rspamd_data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${STACK_BASE_PATH}/rspamd/var
  rspamd_conf:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${STACK_BASE_PATH}/rspamd/conf
  logs:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/data/logs/email
  mailbox_files:    
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/data/mailboxes/files
  mailbox_homes:    
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/data/mailboxes/home
  certs:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/data/certbot/conf
  exim_spool:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${STACK_BASE_PATH}/exim/spool
  exim_confs:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${STACK_BASE_PATH}/exim/conf
  webmail_db:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/data/databases/webmail
  common_bin:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /srv/data/common/bin
  webmail_local_db:
    driver: local
  webmail_tmp:
    driver: local
  dovecot_conf:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${STACK_BASE_PATH}/dovecot/conf