Michael Grote
b0214bdb9a
https://cheatsheetseries.owasp.org/cheatsheets/Docker_Security_Cheat_Sheet.html Reviewed-on: #274 Co-authored-by: Michael Grote <michael.grote@posteo.de> Co-committed-by: Michael Grote <michael.grote@posteo.de>
39 lines
1.2 KiB
Django/Jinja
39 lines
1.2 KiB
Django/Jinja
services:
|
|
postfix:
|
|
image: "registry.mgrote.net/postfix:latest"
|
|
container_name: postfix
|
|
restart: unless-stopped
|
|
pull_policy: missing
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
cpus: "2"
|
|
memory: "512M"
|
|
security_opt:
|
|
- no-new-privileges=true
|
|
ports:
|
|
- 1025:25
|
|
environment:
|
|
SMTP_SERVER: smtp.strato.de
|
|
SMTP_USERNAME: info@mgrote.net
|
|
SMTP_PASSWORD: "{{ lookup('viczem.keepass.keepass', 'strato_smtp_password', 'password') }}"
|
|
SERVER_HOSTNAME: mgrote.net
|
|
# DEBUG: "yes" # as string not boolean
|
|
ALWAYS_ADD_MISSING_HEADERS: "no" # as string not boolean
|
|
# LOG_SUBJECT: "yes" # as string not boolean
|
|
INET_PROTOCOL: ipv4
|
|
SMTP_GENERIC_MAP: |
|
|
/nobody@lldap/ lldap@mgrote.net
|
|
/mg@pbs.localdomain/ pbs@mgrote.net
|
|
/root@pbs.localdomain/ pbs@mgrote.net
|
|
/root@pve5.localdomain/ pve5@mgrote.net
|
|
/no-reply@ubnt.com/ ubiquity@mgrote.net
|
|
# rewrite FROM "nobody@lldap" to "lldap@mgrote.net"
|
|
# /.*/ würde alle absender adressen ersetzen
|
|
networks:
|
|
- postfix
|
|
|
|
######## Networks ########
|
|
networks:
|
|
postfix:
|
|
external: true
|