[ { "path": ".gitattributes", "content": "conf/* merge=ours\nDockerfiles/* merge=ours\nssl-self-signed/* merge=ours\ndocker-compose.yml merge=ours" }, { "path": ".github/ISSUE_TEMPLATE/00-bug.yaml", "content": "# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/configuring-issue-templates-for-your-repository#creating-issue-forms\n# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/syntax-for-githubs-form-schema\nname: Bugs\ndescription: Report a bug to help us improve\ntitle: \"Bug title\"\nlabels:\n - bug\n\nbody:\n - type: markdown\n attributes:\n value: |\n Thanks for helping us improve! 🙏 Please answer these questions and provide as much information as possible about your problem.\n\n # 1. Environment Information (Structured)\n - type: dropdown\n id: os\n attributes:\n label: Operating System\n description: Select or specify the exact distribution\n options:\n - Windows\n - macOS\n - Linux\n - Other\n validations:\n required: true\n\n - type: input\n id: os_version\n attributes:\n label: OS Version\n placeholder: e.g., \"Ubuntu 22.04 LTS\" or \"Windows 11 23H2\"\n validations:\n required: true\n\n - type: dropdown\n id: arch\n attributes:\n label: System Architecture\n options:\n - x86_64\n - ARM64\n - Other\n validations:\n required: true\n\n # 2. Docker Environment\n - type: input\n id: docker_version\n attributes:\n label: Docker Version\n placeholder: Output of `docker --version`\n validations:\n required: true\n\n - type: input\n id: compose_version\n attributes:\n label: Docker Compose Version\n placeholder: Output of `docker-compose --version`\n validations:\n required: false\n\n - type: dropdown\n id: reproduce_latest\n attributes:\n label: Reproducible in Latest Version?\n options:\n - \"Yes, occurs in the latest stable release\"\n - \"No, only in older versions (specify version)\"\n validations:\n required: true\n\n # 3. Core Bug Description (Required)\n - type: textarea\n id: steps\n attributes:\n label: Reproduction Steps\n description: Clear sequence to trigger the bug (commands/operations)\n placeholder: |\n 1. Run `docker-compose up -d`\n 2. Access http://localhost:8080\n 3. ...\n validations:\n required: true\n\n - type: textarea\n id: observed\n attributes:\n label: Observed Behavior\n description: Error logs, screenshots, or unexpected behavior\n placeholder: |\n - Container logs show `ERROR: Permission denied`\n - Service returns 500 error with headers...\n validations:\n required: true\n\n - type: textarea\n id: expected\n attributes:\n label: Expected Behavior\n description: Correct behavior or suggested fix\n placeholder: \"Service should return 200 status with JSON output\"\n validations:\n required: true\n\n # 4. Additional Context (Optional)\n - type: textarea\n id: additional\n attributes:\n label: Supplemental Information\n placeholder: Relevant config snippets, stack traces, etc.\n render: markdown\n validations:\n required: false\n" }, { "path": ".github/ISSUE_TEMPLATE/01-enhancement.yaml", "content": "# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/configuring-issue-templates-for-your-repository#creating-issue-forms\n# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/syntax-for-githubs-form-schema\nname: Enhancement\ndescription: Suggest an idea for this project\ntitle: \"A good idea\"\nlabels:\n - Enhancement\n\nbody:\n - type: markdown\n attributes:\n value: |\n Thanks for helping us improve! 🙏 Please answer these questions and provide as much information as possible about your problem. \n\n - type: dropdown\n id: is-problem\n attributes:\n label: Is your feature request related to a problem?\n options:\n - Option Yes\n - Option No\n validations:\n required: true\n\n - type: textarea\n id: description-solution\n attributes:\n label: \"Describe the solution you'd like\"\n validations:\n required: true\n\n - type: textarea\n id: description-considered\n attributes:\n label: \"Describe alternatives you've considered\"\n validations:\n required: true\n\n - type: textarea\n id: additional\n attributes:\n label: \"Additional\"\n validations:\n required: false" }, { "path": ".github/ISSUE_TEMPLATE/02-documentation.yaml", "content": "# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/configuring-issue-templates-for-your-repository#creating-issue-forms\n# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/syntax-for-githubs-form-schema\nname: Documentation\ndescription: Suggest improvements or additions to our documentation\ntitle: \"A good idea\"\nlabels:\n - documentation\n\nbody:\n - type: markdown\n attributes:\n value: |\n Thanks for helping us improve! 🙏 Please answer these questions and provide as much information as possible about your problem.\n\n - type: textarea\n id: description\n attributes:\n label: \"Description\"\n description: \"Please describe your idea in detail.\"\n validations:\n required: true\n\n - type: textarea\n id: additional\n attributes:\n label: \"Additional\"\n validations:\n required: false" }, { "path": ".github/ISSUE_TEMPLATE/03-question.yaml", "content": "# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/configuring-issue-templates-for-your-repository#creating-issue-forms\n# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/syntax-for-githubs-form-schema\nname: Questions\ndescription: I want to ask a question\ntitle: \"Question title\"\nlabels:\n - question\n\nbody:\n - type: markdown\n attributes:\n value: |\n Please read the document carefully.\n\n - type: textarea\n id: ask\n attributes:\n label: \"What do you want to ask?\"\n description: \"Please describe the details of your questions.\"\n validations:\n required: true" }, { "path": ".github/PULL_REQUEST_TEMPLATE.MD", "content": "# BillionMail Pull Request Template\n\n## PR Title Format\n`(): ` \n**Examples**:\n- `fix(smtp): handle connection timeout during bulk send`\n- `feat(campaign-ui): add A/B testing template selector`\n\n### Type Guidelines\n```\nfix : Bug fixes (e.g., `fix(auth): prevent login loop`) \nfeat : New features (e.g., `feat(analytics): add real-time dashboard`) \nbuild : Build system changes (Docker/dependencies) \nci : CI/CD workflows (GitHub Actions) \ndocs : Documentation updates \nstyle : Code formatting (non-functional changes) \nrefactor : Code restructuring (no functionality change) \nperf : Performance improvements \ntest : Test-related changes \nchore : Maintenance/tooling changes \n```\n\n**Rules**:\n- **Scope**: Specify module (e.g., `smtp`) or layer (e.g., `frontend`)\n- **Description**:\n - Use **present tense verbs** (e.g., `add` not `added`)\n - No ending punctuation, max 76 chars\n\n---\n\n## Linked Issues\nAdd one of these at the PR description's start:\n- `Fixes #1234` → Complete resolution\n- `Updates #1234` → Partial fix/related update\n\n---\n\n## Branch Management\n### Frontend Specific\n- **Target Branch**: `dev-frontend` (All frontend PRs must use this)\n- **Naming Convention**:\n```bash\n# Feature development\nfeat/[description] # e.g., feat/ab-test-ui\n# Bug fixes\nfix/[issue-id]-[desc] # e.g., fix/4567-template-render\n```\n\n### Backend/Core\n- **Target Branch**: `main`\n- **Naming Convention**:\n```bash\n# Mail engine\nsmtp/[feature] # e.g., smtp/rate-limit\n# Infrastructure\ninfra/[change] # e.g., infra/redis-cluster\n```\n\n---\n\n## PR Description Template\n```markdown\n### Purpose \n\n\n### Implementation \n\n\n### Testing \n- [ ] Unit tests passed (`npm test`/`go test`) \n- [ ] Manual steps: \n~~~bash\n# Example: Test bulk send\nbm send --campaign test --list 1000\n~~~\n- [ ] Impact analysis (e.g., template compatibility/sending rate)\n\n### Additional Context\n\n```\n\n---\n\n## Automation Integration\n1. **Commit Validation**: \n Use `husky` + `commitlint` to enforce conventions: \n```javascript\n// commitlint.config.js\nmodule.exports = { extends: ['@commitlint/config-conventional'] };\n```\n\n2. **PR Title Check**: \n Add GitHub Action to validate PR titles:\n```yaml\n# .github/workflows/pr-check.yml\nuses: amannn/action-semantic-pull-request@v5\n```\n\n> **Tip**: For mail-sending logic changes, verify SPF/DKIM signing\n```\n\n### Key Features\n- **Frontend Isolation**: Explicit `dev-frontend` branch for frontend changes \n- **Modular Scopes**: Clear module boundaries (e.g., `smtp`, `analytics`) for automated changelogs \n- **Compliance Ready**: GDPR/SPF checks emphasized for critical components \n\nThis template can be saved to `.github/PULL_REQUEST_TEMPLATE.md` for automatic application." }, { "path": ".gitignore", "content": "# IntelliJ project files\n*.iml\n.idea/\nidea/*\n.vscode/*\n.cursor/\ntest/*\nconfig/*\ntemp/\nssl/*\nbm\n.env\nbillionmail.conf\nDBPASS_file.pl\nlogs/\nbackup/\nvmail-data/\npostfix-data/\nrspamd-data/\npostgresql-data/\npostgresql-socket/\nredis-data/\nphp-sock/\nwebmail-data/\ncore-data/\nconf/postfix/conf/vmail_ssl.map\nconf/postfix/conf/vmail_ssl.map.db\nconf/postfix/conf/extra.cf\nconf/postfix/sql/\nconf/core/fail2ban/\nconf/dovecot/conf.d/dovecot-sql.conf.ext\nconf/dovecot/conf.d/extra.cf\nconf/rspamd/local.d/dkim_signing.conf\nconf/rspamd/local.d/redis.conf\nssl-self-signed/cert.pem\nssl-self-signed/key.pem\ncore/billionmail*\n" }, { "path": "Dockerfiles/core/Dockerfile", "content": "FROM alpine:3.20\n\nLABEL maintainer=\"https://github.com/aaPanel/BillionMail\"\n\n# Set environment variables\nENV LANG=C.UTF-8\nENV LC_ALL=C.UTF-8\n\n\n# Platform-specific binary copy\nARG TARGETARCH\nCOPY core/billionmail-${TARGETARCH} /opt/billionmail/core/billionmail\nCOPY core/manifest /opt/billionmail/core/manifest\nCOPY core/languages /opt/billionmail/core/languages\nCOPY core/public /opt/billionmail/core/public\nCOPY core/resource /opt/billionmail/core/resource\nCOPY core/template /opt/billionmail/core/template\n\n# Copy file\n# COPY repositories /etc/apk/repositories\nCOPY stop-supervisor.sh /stop-supervisor.sh\nCOPY core.sh /core.sh\nCOPY restart_fail2ban.sh /restart_fail2ban.sh\n\n# Install dependencies (using Alpine's apk package manager)\nRUN apk add --no-cache \\\n bash \\\n ca-certificates \\\n curl \\\n supervisor \\\n rsyslog \\\n tzdata \\\n busybox-extras \\\n postgresql-client \\\n fail2ban \\\n iptables \\\n ipset \\\n && rm -rf /var/cache/apk/* \\\n && chmod +x /stop-supervisor.sh /core.sh /restart_fail2ban.sh /opt/billionmail/core/billionmail\n\n# Copy file\n\nCOPY supervisord.conf /etc/supervisor/supervisord.conf\nCOPY fail2ban.conf /etc/fail2ban/fail2ban.conf\n\n\nENTRYPOINT [\"/core.sh\"]\nCMD [\"/usr/bin/supervisord\", \"-c\", \"/etc/supervisor/supervisord.conf\"]" }, { "path": "Dockerfiles/core/core.sh", "content": "#!/bin/bash\n\nif [ -f \"/opt/billionmail/.env\" ]; then\n if ! grep -q \"ADMIN_USERNAME\" /opt/billionmail/.env; then\n ADMIN_USERNAME=$(LC_ALL=C /dev/null | head -c 8)\n\n # Default administrator account password \n echo \"ADMIN_USERNAME=${ADMIN_USERNAME}\" >> /opt/billionmail/.env\n fi\n\n if ! grep -q \"ADMIN_PASSWORD\" /opt/billionmail/.env; then\n ADMIN_PASSWORD=$(LC_ALL=C /dev/null | head -c 8)\n # Default administrator account password \n echo \"ADMIN_PASSWORD=${ADMIN_PASSWORD}\" >> /opt/billionmail/.env\n fi\nfi\n\n# Generate DH params\nif [ ! -f \"/etc/ssl/mail/dh.pem\" ]; then\n cp -d -n /etc/ssl/ssl-self-signed/* /etc/ssl/mail/\nfi\n\n# # Generate DH params\n# if [ ! -f \"/etc/ssl/mail/dh.pem\" ]; then\n# openssl dhparam -out /etc/ssl/mail/dh.pem 2048\n# fi\n\n# Remove defaults-debian.conf\nif [ -f \"/etc/fail2ban/jail.d/defaults-debian.conf\" ]; then\n rm -f /etc/fail2ban/jail.d/defaults-debian.conf\nfi\n\n\n## Initialize fail2ban when y, otherwise delete the rule\n# Enable fail2ban Access restrictions, specify that the IP exceeds the access limit\nif [[ ${FAIL2BAN_INIT} == \"y\" ]]; then\n ## Copy fail2ban Jail\n cp -rf /opt/billionmail/conf/core/fail2ban_init/jail.d/*-accesslimit.conf /etc/fail2ban/jail.d/\n\n if ! grep -q \"restart_fail2ban.sh\" /var/spool/cron/crontabs/root; then\n chmod +x /restart_fail2ban.sh\n echo \"02 0,12 * * * bash /restart_fail2ban.sh\" >> /var/spool/cron/crontabs/root\n chmod 600 /var/spool/cron/crontabs/root\n chown root:crontab /var/spool/cron/crontabs/root \n pkill -9 crond\n fi\n bash /restart_fail2ban.sh\n\nelse\n rm -f /etc/fail2ban/jail.d/*-accesslimit.conf\n echo -e \"fail2ban: delete the rule\"\nfi\n\n## Copy fail2ban Filter\n# if [ ! -f \"/etc/fail2ban/filter.d/core-limit-filter.conf\" ]; then\n# cp -f /opt/billionmail/conf/core/fail2ban_init/filter.d/core-limit-filter.conf /etc/fail2ban/filter.d/core-limit-filter.conf\n# fi\ncp -rf /opt/billionmail/conf/core/fail2ban_init/filter.d/*.conf /etc/fail2ban/filter.d/\n\nif [ ! -d \"/opt/billionmail/core/template/\" ]; then\n mkdir /opt/billionmail/core/template\nfi\n\nif [ ! -d \"/opt/billionmail/core/logs/\" ]; then\n mkdir /opt/billionmail/core/logs\nfi\n\nif [ ! -f \"/opt/billionmail/core/logs/access-$(date -u +\"%Y%m%d\").log\" ]; then\n touch /opt/billionmail/core/logs/access-$(date -u +\"%Y%m%d\").log\nfi\n\ncd /opt/billionmail/core/\nchmod +x billionmail\n\n\nexec \"$@\"" }, { "path": "Dockerfiles/core/fail2ban.conf", "content": "# Fail2Ban main configuration file\n#\n# Comments: use '#' for comment lines and ';' (following a space) for inline comments\n#\n# Changes: in most of the cases you should not modify this\n# file, but provide customizations in fail2ban.local file, e.g.:\n#\n# [DEFAULT]\n# loglevel = DEBUG\n#\n\n[DEFAULT]\n\n# Option: loglevel\n# Notes.: Set the log level output.\n# CRITICAL\n# ERROR\n# WARNING\n# NOTICE\n# INFO\n# DEBUG\n# Values: [ LEVEL ] Default: INFO\n#\nloglevel = INFO\n\n# Option: logtarget\n# Notes.: Set the log target. This could be a file, SYSTEMD-JOURNAL, SYSLOG, STDERR or STDOUT.\n# Only one log target can be specified.\n# If you change logtarget from the default value and you are\n# using logrotate -- also adjust or disable rotation in the\n# corresponding configuration file\n# (e.g. /etc/logrotate.d/fail2ban on Debian systems)\n# Values: [ STDOUT | STDERR | SYSLOG | SYSOUT | SYSTEMD-JOURNAL | FILE ] Default: STDERR\n#\nlogtarget = /var/log/fail2ban/fail2ban.log\n\n# Option: syslogsocket\n# Notes: Set the syslog socket file. Only used when logtarget is SYSLOG\n# auto uses platform.system() to determine predefined paths\n# Values: [ auto | FILE ] Default: auto\nsyslogsocket = auto\n\n# Option: socket\n# Notes.: Set the socket file. This is used to communicate with the daemon. Do\n# not remove this file when Fail2ban runs. It will not be possible to\n# communicate with the server afterwards.\n# Values: [ FILE ] Default: /var/run/fail2ban/fail2ban.sock\n#\nsocket = /var/run/fail2ban/fail2ban.sock\n\n# Option: pidfile\n# Notes.: Set the PID file. This is used to store the process ID of the\n# fail2ban server.\n# Values: [ FILE ] Default: /var/run/fail2ban/fail2ban.pid\n#\npidfile = /var/run/fail2ban/fail2ban.pid\n\n# Option: allowipv6\n# Notes.: Allows IPv6 interface:\n# Default: auto\n# Values: [ auto yes (on, true, 1) no (off, false, 0) ] Default: auto\n#allowipv6 = auto\n\n# Options: dbfile\n# Notes.: Set the file for the fail2ban persistent data to be stored.\n# A value of \":memory:\" means database is only stored in memory \n# and data is lost when fail2ban is stopped.\n# A value of \"None\" disables the database.\n# Values: [ None :memory: FILE ] Default: /var/lib/fail2ban/fail2ban.sqlite3\ndbfile = /var/lib/fail2ban/fail2ban.sqlite3\n\n# Options: dbpurgeage\n# Notes.: Sets age at which bans should be purged from the database\n# Values: [ SECONDS ] Default: 86400 (24hours)\ndbpurgeage = 1d\n\n# Options: dbmaxmatches\n# Notes.: Number of matches stored in database per ticket (resolvable via \n# tags / in actions)\n# Values: [ INT ] Default: 10\ndbmaxmatches = 10\n\n[Definition]\n\n\n[Thread]\n\n# Options: stacksize\n# Notes.: Specifies the stack size (in KiB) to be used for subsequently created threads,\n# and must be 0 or a positive integer value of at least 32.\n# Values: [ SIZE ] Default: 0 (use platform or configured default)\n#stacksize = 0\n" }, { "path": "Dockerfiles/core/repositories", "content": "https://mirrors.ustc.edu.cn/alpine/v3.20/main\nhttps://mirrors.ustc.edu.cn/alpine/v3.20/community" }, { "path": "Dockerfiles/core/restart_fail2ban.sh", "content": "#!/bin/bash\nif [[ ${FAIL2BAN_INIT} == \"y\" ]]; then\n /usr/bin/fail2ban-client reload core-accesslimit\n /usr/bin/fail2ban-client reload roundcube-accesslimit\nfi\n" }, { "path": "Dockerfiles/core/stop-supervisor.sh", "content": "#!/bin/bash\n\nprintf \"Start\\n\";\n\nwhile read line; do\n echo \"PROCESS event: $line\" >&2;\n kill -3 $(cat \"/var/run/supervisord.pid\")\ndone < /dev/stdin\n" }, { "path": "Dockerfiles/core/supervisord.conf", "content": "[supervisord]\nnodaemon=true\nlogfile=/dev/stdout\nlogfile_maxbytes=0\npidfile=/var/run/supervisord.pid\nuser=root\n\n[program:core]\ncommand=/opt/billionmail/core/billionmail\ndirectory=/opt/billionmail/core/\nautostart=true\nautorestart=true\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\nuser=root\nstartsecs=10\npriority=100\n\n[program:fail2ban]\ncommand=/usr/bin/fail2ban-server -xf start\nautostart=true\nautorestart=true\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\nuser=root\nstartsecs=10\npriority=200\n\n\n[program:crond]\ncommand=/usr/sbin/crond -f\nautostart=true\nautorestart=true\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\nuser=root\n\n[eventlistener:processes]\ncommand=/stop-supervisor.sh\nevents=PROCESS_STATE_STOPPED, PROCESS_STATE_EXITED, PROCESS_STATE_FATAL\n\n[supervisorctl]\nserverurl=unix:///var/run/supervisord.sock\n\n[unix_http_server]\nfile=/var/run/supervisord.sock\nchmod=0700\n\n[rpcinterface:supervisor]\nsupervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface" }, { "path": "Dockerfiles/dovecot/Dockerfile", "content": "FROM debian:bookworm-slim\n\nLABEL maintainer=\"https://github.com/aaPanel/BillionMail\"\n\nARG DEBIAN_FRONTEND=noninteractive\nENV LC_ALL=C\n\n## Copy file\nCOPY stop-supervisor.sh /stop-supervisor.sh\nCOPY dovecot.sh /dovecot.sh\nCOPY rotate_log.sh /rotate_log.sh\n\n# COPY debian.sources /etc/apt/sources.list.d/debian.sources\n\n# install dovecot\nRUN apt-get update && apt-get install -y --no-install-recommends --allow-downgrades --allow-remove-essential --allow-change-held-packages \\\n\tdovecot-core \\\n\tdovecot-dev \\\n\tdovecot-pop3d \\\n\tdovecot-imapd \\\n\tdovecot-lmtpd \\\n\tdovecot-pgsql \\\n\tdovecot-sieve \\\n\tdovecot-ldap \\\n\tsasl2-bin \\\n\tlibsasl2-modules \\\n\tpostgresql-client \\\n\tca-certificates \\\n\tcurl \\\n\tsudo \\\n\tsupervisor \\\n\trsyslog \\\n\ttzdata \\\n\ttelnet \\\n\tcron \\\n\t&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* \\\n\t&& mkdir -p /usr/lib/dovecot/sieve \\\n\t&& chmod +x /stop-supervisor.sh /dovecot.sh /rotate_log.sh\n\n\n## Copy the supervisord configuration file\nCOPY supervisord.conf /etc/supervisor/supervisord.conf\n\nCOPY spam-to-folder.sieve /usr/lib/dovecot/sieve/spam-to-folder.sieve\nCOPY report-spam.sieve /usr/lib/dovecot/sieve/report-spam.sieve\nCOPY report-ham.sieve /usr/lib/dovecot/sieve/report-ham.sieve\nCOPY sa-learn-spam.sh /usr/lib/dovecot/sieve/sa-learn-spam.sh\nCOPY sa-learn-ham.sh /usr/lib/dovecot/sieve/sa-learn-ham.sh\n\nENTRYPOINT [\"/dovecot.sh\"]\n# EXPOSE 110 143 993 995\n\nCMD [\"/usr/bin/supervisord\", \"-c\", \"/etc/supervisor/supervisord.conf\"]\n" }, { "path": "Dockerfiles/dovecot/debian.sources", "content": "Types: deb\nURIs: http://mirrors.ustc.edu.cn/debian\nSuites: bookworm bookworm-updates\nComponents: main contrib non-free non-free-firmware\nSigned-By: /usr/share/keyrings/debian-archive-keyring.gpg\n\nTypes: deb\nURIs: http://mirrors.ustc.edu.cn/debian-security\nSuites: bookworm-security\nComponents: main contrib non-free non-free-firmware\nSigned-By: /usr/share/keyrings/debian-archive-keyring.gpg\n" }, { "path": "Dockerfiles/dovecot/dovecot.sh", "content": "#!/bin/bash\n\n\nid vmail || useradd -r -u 150 -g mail -d /var/vmail -s /sbin/nologin -c \"Virtual Mail User\" vmail\nchown -R vmail:mail /var/vmail\n\nif [ ! -f \"/etc/ssl/mail/dh.pem\" ] || [ ! -f \"/etc/ssl/mail/cert.pem\" ] || [ ! -f \"/etc/ssl/mail/key.pem\" ]; then\n cp -d -n /etc/ssl/ssl-self-signed/* /etc/ssl/mail/\nfi\n\nif ! grep -q \"rotate_log.sh\" /var/spool/cron/crontabs/root; then\n chmod +x /rotate_log.sh\n echo \"05 00 * * * bash /rotate_log.sh >> /var/log/mail/rotate_log.log 2>&1\" >> /var/spool/cron/crontabs/root\n chmod 600 /var/spool/cron/crontabs/root\n chown root:crontab /var/spool/cron/crontabs/root \n /usr/bin/supervisorctl restart cron\nfi\n\ncat < /etc/dovecot/conf.d/dovecot-sql.conf.ext\ndriver = pgsql\nconnect = host=pgsql dbname=${DBNAME} user=${DBUSER} password=${DBPASS}\n\ndefault_pass_scheme = MD5-CRYPT\n\nuser_query = SELECT '/var/vmail/%d/%n' as home, 'maildir:/var/vmail/%d/%n' as mail, 150 AS uid, 8 AS gid, 'maildir:storage=' || quota AS quota FROM mailbox WHERE username = '%u' AND active = 1\n\npassword_query = SELECT username as user, password, '/var/vmail/%d/%n' as userdb_home, 'maildir:/var/vmail/%d/%n' as userdb_mail, 150 as userdb_uid, 8 as userdb_gid FROM mailbox WHERE username = '%u' AND active = 1\n\n\nEOF\n\nchmod +x /usr/lib/dovecot/sieve/sa-learn-spam.sh\nchmod +x /usr/lib/dovecot/sieve/sa-learn-ham.sh\nsievec /usr/lib/dovecot/sieve/spam-to-folder.sieve\nsievec /usr/lib/dovecot/sieve/report-spam.sieve\nsievec /usr/lib/dovecot/sieve/report-ham.sieve\n\nexec \"$@\"" }, { "path": "Dockerfiles/dovecot/report-ham.sieve", "content": "require [\"vnd.dovecot.pipe\", \"copy\", \"imapsieve\", \"environment\", \"variables\"];\n\nif environment :matches \"imap.mailbox\" \"*\" {\n set \"mailbox\" \"${1}\";\n}\n\nif string \"${mailbox}\" \"Trash\" {\n stop;\n}\n\nif environment :matches \"imap.user\" \"*\" {\n set \"username\" \"${1}\";\n}\n\npipe :copy \"sa-learn-ham.sh\" [ \"${username}\" ];\n" }, { "path": "Dockerfiles/dovecot/report-spam.sieve", "content": "require [\"vnd.dovecot.pipe\", \"copy\", \"imapsieve\", \"environment\", \"variables\"];\n\nif environment :matches \"imap.user\" \"*\" {\n set \"username\" \"${1}\";\n}\n\npipe :copy \"sa-learn-spam.sh\" [ \"${username}\" ];\n" }, { "path": "Dockerfiles/dovecot/rotate_log.sh", "content": "#!/bin/bash\necho \" ---- $(date) START ----\"\n\nLOG_DIR=\"/var/log/mail\"\nLOG_FILE=\"${LOG_DIR}/mail.log\"\nDATE=$(date +%Y%m%d)\nBACKUP_FILE=\"${LOG_DIR}/mail-${DATE}.log\"\n\n# Retention days\nRETENTION_DAYS=${RETENTION_DAYS:-7}\n# echo \"Retention days: ${RETENTION_DAYS}\"\n\n# backup log\nif [ -f \"${LOG_FILE}\" ]; then\n echo \"Backup log: ${LOG_FILE}\"\n\tmv \"${LOG_FILE}\" \"${BACKUP_FILE}\"\n\n # Restart rsyslog\n if [ -f \"/var/run/rsyslogd.pid\" ]; then\n kill -HUP $(cat /var/run/rsyslogd.pid) >/dev/null 2>&1\n if [ $? -ne 0 ]; then\n echo \"Restart rsyslogd\"\n /usr/bin/supervisorctl restart rsyslog\n fi\n else\n /usr/bin/supervisorctl restart rsyslog\n fi\n\nelse\n\techo \"The log file does not exist: ${LOG_FILE}\"\n echo \"\"\n\texit 1\nfi\n\n\n# sleep 2\n# CHECK_RSYSLOG=$(/usr/bin/supervisorctl status rsyslog|grep RUNNING)\n# if [ -z \"${CHECK_RSYSLOG}\" ]; then\n# echo \"rsyslog is not running, Starting...\"\n# /usr/bin/supervisorctl restart rsyslog\n# fi\n\n# CHECK_dovecot=$(/usr/bin/supervisorctl status dovecot|grep RUNNING)\n# if [ -z \"${CHECK_dovecot}\" ]; then\n# echo \"dovecot is not running, Starting...\"\n# /usr/bin/supervisorctl restart dovecot\n# fi\n\n# Compress backup files\nif [ -f \"${BACKUP_FILE}.gz\" ]; then\n mv \"${BACKUP_FILE}.gz\" \"${BACKUP_FILE}_1.gz\"\nfi\necho \"Compressing: \"${BACKUP_FILE}\"\"\ngzip \"${BACKUP_FILE}\"\n\n# Clean up expiration logs\necho \"Cleaning up expiration logs:\"\nfind \"${LOG_DIR}\" -name \"mail-*.log.gz\" -type f -mtime +${RETENTION_DAYS} -print -delete\n\necho \" ---- $(date) END ----\"\necho \"\"\n\n# 10MB in bytes\nSIZE_THRESHOLD=$((10 * 1024 * 1024))\nTARGET_LOG=\"${LOG_DIR}/rotate_log.log\"\nGZIP_LOG=\"${LOG_DIR}/rotate_log-${DATE}.log\"\n# Check whether the target log file exceeds 10 m, if so, compress\nif [ -f \"${TARGET_LOG}\" ]; then\n FILE_SIZE=$(stat -c %s \"${TARGET_LOG}\")\n \n if [ ${FILE_SIZE} -gt ${SIZE_THRESHOLD} ]; then\n echo \"Log file ${TARGET_LOG} exceeds 10M, compress...\"\n mv \"${TARGET_LOG}\" \"${GZIP_LOG}\"\n gzip \"${GZIP_LOG}\"\n fi\nfi\nfind \"${LOG_DIR}\" -name \"rotate_log-*.gz\" -type f -mtime +${RETENTION_DAYS} -delete\n" }, { "path": "Dockerfiles/dovecot/sa-learn-ham.sh", "content": "#!/bin/sh\n# exec /usr/bin/rspamc -h rspamd:11334 learn_ham\n\n\nUSERNAME=\"$1\"\necho \"$USERNAME\" >> /tmp/learnham\n\n/usr/bin/curl -X POST --data-binary @- --unix-socket /var/lib/rspamd/rspamd.sock http://rspamd:11334/learnham\n" }, { "path": "Dockerfiles/dovecot/sa-learn-spam.sh", "content": "#!/bin/sh\n# exec /usr/bin/rspamc -h rspamd:11334 learn_spam\n\nUSERNAME=\"$1\"\necho \"$USERNAME\" >> /tmp/learnspam\n/usr/bin/curl -X POST --data-binary @- --unix-socket /var/lib/rspamd/rspamd.sock http://rspamd:11334/learnspam\n" }, { "path": "Dockerfiles/dovecot/spam-to-folder.sieve", "content": "require [\"fileinto\"];\n\nif header :is \"X-Spam\" \"Yes\" {\n fileinto \"Junk\";\n}\n" }, { "path": "Dockerfiles/dovecot/stop-supervisor.sh", "content": "#!/bin/bash\n\nprintf \"Start\\n\";\n\nwhile read line; do\n echo \"PROCESS event: $line\" >&2;\n kill -3 $(cat \"/var/run/supervisord.pid\")\ndone < /dev/stdin\n" }, { "path": "Dockerfiles/dovecot/supervisord.conf", "content": "[supervisord]\nnodaemon=true\nlogfile=/dev/stdout\nlogfile_maxbytes=0\npidfile=/var/run/supervisord.pid\nuser=root\n\n[program:rsyslog]\ncommand=/bin/sh -c \"rm -f /run/rsyslogd.pid && exec /usr/sbin/rsyslogd -n -i /run/rsyslogd.pid\"\nautostart=true\nautorestart=true\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\n\n[program:dovecot]\ncommand=/bin/sh -c \"rm -f /run/dovecot/master.pid && exec /usr/sbin/dovecot -F\"\nautostart=true\nautorestart=true\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\nstartsecs=10\nstopasgroup=true\nkillasgroup=true\n\n[program:cron]\ncommand=/usr/sbin/cron -f\nautostart=true\nautorestart=true\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\nuser=root\n\n\n[eventlistener:processes]\ncommand=/stop-supervisor.sh\nevents=PROCESS_STATE_STOPPED, PROCESS_STATE_EXITED, PROCESS_STATE_FATAL\n\n[supervisorctl]\nserverurl=unix:///var/run/supervisor.sock\n\n[unix_http_server]\nfile=/var/run/supervisor.sock\nchmod=0700\n\n[rpcinterface:supervisor]\nsupervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface" }, { "path": "Dockerfiles/postfix/Dockerfile", "content": "FROM debian:bookworm-slim\n\nLABEL maintainer=\"https://github.com/aaPanel/BillionMail\"\n\nARG DEBIAN_FRONTEND=noninteractive\nENV LC_ALL=C\n\nRUN dpkg-divert --local --rename --add /sbin/initctl \\\n\t&& dpkg-divert --local --rename --add /usr/bin/ischroot \\\n\t&& ln -sf /bin/true /sbin/initctl \\\n\t&& ln -sf /bin/true /usr/bin/ischroot\n\n## Copy postfix file\nCOPY postfix.sh /postfix.sh\nCOPY stop-supervisor.sh /stop-supervisor.sh\nCOPY rotate_log.sh /rotate_log.sh\n\n# COPY debian.sources /etc/apt/sources.list.d/debian.sources\n\n# Add groups and users install Postfix\nRUN groupadd -g 102 postfix \\\n && groupadd -g 103 postdrop \\\n && useradd -g postfix -u 101 -d /var/spool/postfix -s /usr/sbin/nologin postfix \\\n && apt-get update && apt-get install -y --no-install-recommends --allow-downgrades --allow-remove-essential --allow-change-held-packages \\\n\tca-certificates \\\n\tcurl \\\n\tdirmngr \\\n\tdnsutils \\\n\tgnupg \\\n\tlibsasl2-modules \\\n\tpostgresql-client \\\n\tpostfix \\\n\tpostfix-pgsql \\\n\tpostfix-pcre \\\n\tsasl2-bin \\\n\tsudo \\\n\tsupervisor \\\n\trsyslog \\\n\ttelnet \\\n\tnet-tools \\\n\ttzdata \\\n\tcron \\\n\t&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* \\\n\t&& chmod +x /postfix.sh /stop-supervisor.sh /rotate_log.sh\n\n## Copy the supervisord configuration file\n\nCOPY supervisord.conf /etc/supervisor/supervisord.conf\n\n# EXPOSE 25 465 587\n\nCMD [\"/usr/bin/supervisord\", \"-c\", \"/etc/supervisor/supervisord.conf\"]\n" }, { "path": "Dockerfiles/postfix/debian.sources", "content": "Types: deb\nURIs: http://mirrors.ustc.edu.cn/debian\nSuites: bookworm bookworm-updates\nComponents: main contrib non-free non-free-firmware\nSigned-By: /usr/share/keyrings/debian-archive-keyring.gpg\n\nTypes: deb\nURIs: http://mirrors.ustc.edu.cn/debian-security\nSuites: bookworm-security\nComponents: main contrib non-free non-free-firmware\nSigned-By: /usr/share/keyrings/debian-archive-keyring.gpg\n" }, { "path": "Dockerfiles/postfix/postfix.sh", "content": "#!/bin/bash\n\ntrap \"postfix stop\" EXIT\n\nif ! grep -q \"rotate_log.sh\" /var/spool/cron/crontabs/root; then\n chmod +x /rotate_log.sh\n echo \"00 00 * * * bash /rotate_log.sh >> /var/log/mail/rotate_log.log 2>&1\" >> /var/spool/cron/crontabs/root\n chmod 600 /var/spool/cron/crontabs/root\n chown root:crontab /var/spool/cron/crontabs/root \n /usr/bin/supervisorctl restart cron\nfi\n\ncat < /etc/postfix/btrule.cf\n\nuser = ${DBUSER}\npassword = ${DBPASS}\nhosts = pgsql\ndbname = ${DBNAME}\n\nquery = select s.goto from( select address, goto, 1 as stype from alias union select username,username,2 as stype from mailbox union select address, goto, 3 as stype from alias_domain a left join alias b on b.address = '@' || a.alias_domain and a.alias_domain ='%d' order by stype) s where s.address='%s' or s.stype=3 limit 0,1\n\nEOF\n\ncat < /etc/postfix/sql/pgsql_virtual_alias_domain_catchall_maps.cf\n\nuser = ${DBUSER}\npassword = ${DBPASS}\nhosts = pgsql\ndbname = ${DBNAME}\n\nquery = SELECT goto FROM alias,alias_domain WHERE alias_domain.alias_domain = '%d' and alias.address = '@' || alias_domain.target_domain AND alias.active = 1 AND alias_domain.active = 1\n\nEOF\n\ncat < /etc/postfix/sql/pgsql_virtual_alias_domain_mailbox_maps.cf\nuser = ${DBUSER}\npassword = ${DBPASS}\nhosts = pgsql\ndbname = ${DBNAME}\n\nquery = SELECT maildir FROM mailbox,alias_domain WHERE alias_domain.alias_domain = '%d' and mailbox.username = '%u' || '@' || alias_domain.target_domain AND mailbox.active = 1 AND alias_domain.active = 1\n\nEOF\n\ncat < /etc/postfix/sql/pgsql_virtual_alias_domain_maps.cf\nuser = ${DBUSER}\npassword = ${DBPASS}\nhosts = pgsql\ndbname = ${DBNAME}\n\nquery = SELECT goto FROM alias,alias_domain WHERE alias_domain.alias_domain = '%d' and alias.address = '%u' || '@' || alias_domain.target_domain AND alias.active = 1 AND alias_domain.active = 1\n\nEOF\n\n\ncat < /etc/postfix/sql/pgsql_virtual_alias_maps.cf\nuser = ${DBUSER}\npassword = ${DBPASS}\nhosts = pgsql\ndbname = ${DBNAME}\n\nquery = (select username from mailbox where username like '%s' and active = 1 limit 1) union (select goto from alias where address like '%s' and active = 1 limit 1)\n\nEOF\n\n\n\ncat < /etc/postfix/sql/pgsql_virtual_domains_maps.cf\nuser = ${DBUSER}\npassword = ${DBPASS}\nhosts = pgsql\ndbname = ${DBNAME}\n\nquery = SELECT domain FROM domain WHERE domain='%s' AND active = 1\n\nEOF\n\n\n\ncat < /etc/postfix/sql/pgsql_virtual_mailbox_maps.cf\nuser = ${DBUSER}\npassword = ${DBPASS}\nhosts = pgsql\ndbname = ${DBNAME}\n\nquery = SELECT maildir FROM mailbox WHERE username='%s' AND active = 1\n\nEOF\n\n\n# Append myhostname and User configuration\nif [ -z \"${BILLIONMAIL_HOSTNAME}\" ]; then\n BILLIONMAIL_HOSTNAME=mail.example.com\nfi\n\n\nif [ -f \"/etc/postfix/conf/extra.cf\" ]; then\n # Delete all contents of Overrides-configuration matching line to the end of the file\n sed '/Overrides-configuration/q' /etc/postfix/main.cf > /tmp/main.cf.tmp\n\n if [ -s \"/tmp/main.cf.tmp\" ]; then\n cat /tmp/main.cf.tmp > /etc/postfix/main.cf\n # rm -f /tmp/main.cf.tmp\n echo >> /etc/postfix/main.cf\n echo -e \"\\n# User Overrides-configuration\" >> /etc/postfix/main.cf\n # Append User configuration\n sed -i '/\\$myhostname/! { /myhostname/d }' /etc/postfix/conf/extra.cf\n echo -e \"myhostname = ${BILLIONMAIL_HOSTNAME}\\n$(cat /etc/postfix/conf/extra.cf)\" > /etc/postfix/conf/extra.cf\n cat /etc/postfix/conf/extra.cf >> /etc/postfix/main.cf\n rm -f /etc/postfix/conf/extra.cf\n else\n echo \"Rewriting /etc/postfix/main.cf failed, /tmp/main.cf.tmp is empty.\"\n fi\nfi\n\nCHECK_MYHOSTNAME=$(grep \"myhostname\" /etc/postfix/main.cf | grep -v '$myhostname')\nif [ -z \"${CHECK_MYHOSTNAME}\" ]; then\n echo >> /etc/postfix/main.cf\n echo -e \"\\n# User Overrides-configuration\" >> /etc/postfix/main.cf\n echo \"myhostname = ${BILLIONMAIL_HOSTNAME}\" >> /etc/postfix/main.cf\nfi\n\nif [ ! -f \"/etc/postfix/conf/vmail_ssl.map\" ]; then\n touch /etc/postfix/conf/vmail_ssl.map\nfi\npostmap -F hash:/etc/postfix/conf/vmail_ssl.map;\n\n\n\n# Fix Postfix permissions\nchgrp -R postdrop /var/spool/postfix/public\nchgrp -R postdrop /var/spool/postfix/maildrop\n#postfix set-permissions\n\nif [ -e \"/var/spool/postfix/pid/master.pid\" ]; then\n rm -rf /var/spool/postfix/pid/master.pid\nfi\n\nif [ -d \"/var/spool/postfix/\" ]; then\n [ ! -d \"/var/spool/postfix/dev/\" ] && mkdir /var/spool/postfix/dev\nfi\n\n# Check Postfix configuration\npostconf -c /etc/postfix/ > /dev/null\n\nif [[ $? != 0 ]]; then\n echo \"Postfix configuration error, Startup failed.\"\n exit 1\nelse\n postfix start-fg\nfi\n" }, { "path": "Dockerfiles/postfix/rotate_log.sh", "content": "#!/bin/bash\necho \" ---- $(date) START ----\"\n\nLOG_DIR=\"/var/log/mail\"\nLOG_FILE=\"${LOG_DIR}/mail.log\"\nDATE=$(date +%Y%m%d)\nBACKUP_FILE=\"${LOG_DIR}/mail-${DATE}.log\"\n\n# Retention days\nRETENTION_DAYS=${RETENTION_DAYS:-7}\n# echo \"Retention days: ${RETENTION_DAYS}\"\n\n# backup log\nif [ -f \"${LOG_FILE}\" ]; then\n echo \"Backup log: ${LOG_FILE}\"\n\tmv \"${LOG_FILE}\" \"${BACKUP_FILE}\"\n\n # Restart rsyslog\n if [ -f \"/var/run/rsyslogd.pid\" ]; then\n kill -HUP $(cat /var/run/rsyslogd.pid) >/dev/null 2>&1\n if [ $? -ne 0 ]; then\n echo \"Restart rsyslogd\"\n /usr/bin/supervisorctl restart rsyslog\n fi\n else\n /usr/bin/supervisorctl restart rsyslog\n fi\n\nelse\n\techo \"The log file does not exist: ${LOG_FILE}\"\n echo \"\"\n\texit 1\nfi\n\n\n# sleep 2\n# CHECK_RSYSLOG=$(/usr/bin/supervisorctl status rsyslog|grep RUNNING)\n# if [ -z \"${CHECK_RSYSLOG}\" ]; then\n# echo \"rsyslog is not running, Starting...\"\n# /usr/bin/supervisorctl restart rsyslog\n# fi\n\n# CHECK_POSTFIX=$(/usr/bin/supervisorctl status postfix|grep RUNNING)\n# if [ -z \"${CHECK_POSTFIX}\" ]; then\n# echo \"Postfix is not running, Starting...\"\n# /usr/bin/supervisorctl restart postfix\n# fi\n\n# Compress backup files\nif [ -f \"${BACKUP_FILE}.gz\" ]; then\n mv \"${BACKUP_FILE}.gz\" \"${BACKUP_FILE}_1.gz\"\nfi\necho \"Compressing: \"${BACKUP_FILE}\"\"\ngzip \"${BACKUP_FILE}\"\n\n# Clean up expiration logs\necho \"Cleaning up expiration logs:\"\nfind \"${LOG_DIR}\" -name \"mail-*.log.gz\" -type f -mtime +${RETENTION_DAYS} -print -delete\n\necho \" ---- $(date) END ----\"\necho \"\"\n\n# 10MB in bytes\nSIZE_THRESHOLD=$((10 * 1024 * 1024))\nTARGET_LOG=\"${LOG_DIR}/rotate_log.log\"\nGZIP_LOG=\"${LOG_DIR}/rotate_log-${DATE}.log\"\n# Check whether the target log file exceeds 10 m, if so, compress\nif [ -f \"${TARGET_LOG}\" ]; then\n FILE_SIZE=$(stat -c %s \"${TARGET_LOG}\")\n \n if [ ${FILE_SIZE} -gt ${SIZE_THRESHOLD} ]; then\n echo \"Log file ${TARGET_LOG} exceeds 10M, compress...\"\n mv \"${TARGET_LOG}\" \"${GZIP_LOG}\"\n gzip \"${GZIP_LOG}\"\n fi\nfi\nfind \"${LOG_DIR}\" -name \"rotate_log-*.gz\" -type f -mtime +${RETENTION_DAYS} -delete\n" }, { "path": "Dockerfiles/postfix/stop-supervisor.sh", "content": "#!/bin/bash\n\nprintf \"Start\\n\";\n\nwhile read line; do\n echo \"PROCESS event: $line\" >&2;\n kill -3 $(cat \"/var/run/supervisord.pid\")\ndone < /dev/stdin\n" }, { "path": "Dockerfiles/postfix/supervisord.conf", "content": "[supervisord]\nnodaemon=true\nlogfile=/dev/stdout\nlogfile_maxbytes=0\npidfile=/var/run/supervisord.pid\nuser=root\n\n[program:rsyslog]\ncommand=/bin/sh -c \"rm -f /run/rsyslogd.pid && exec /usr/sbin/rsyslogd -n -i /run/rsyslogd.pid\"\nautostart=true\nautorestart=true\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\n\n[program:postfix]\ncommand=/postfix.sh\nautostart=true\nautorestart=true\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\nstartsecs=10\n\n[program:cron]\ncommand=/usr/sbin/cron -f\nautostart=true\nautorestart=true\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\nuser=root\n\n\n[eventlistener:processes]\ncommand=/stop-supervisor.sh\nevents=PROCESS_STATE_STOPPED, PROCESS_STATE_EXITED, PROCESS_STATE_FATAL\n\n[supervisorctl]\nserverurl=unix:///var/run/supervisor.sock\n\n[unix_http_server]\nfile=/var/run/supervisor.sock\nchmod=0700\n\n[rpcinterface:supervisor]\nsupervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface\n" }, { "path": "Dockerfiles/rspamd/Dockerfile", "content": "FROM debian:bookworm-slim\n\nLABEL maintainer=\"https://github.com/aaPanel/BillionMail\"\n\nARG DEBIAN_FRONTEND=noninteractive\nARG RSPAMD_VER=rspamd_3.11.1-1~ab0b44951\nARG CODENAME=bookworm\nENV LC_ALL=C\n\nCOPY rspamd.sh /rspamd.sh\nCOPY stop-supervisor.sh /stop-supervisor.sh\nCOPY rotate_log.sh /rotate_log.sh\n\n# COPY debian.sources /etc/apt/sources.list.d/debian.sources\n\n\nRUN apt-get update && apt-get install -y \\\n tzdata \\\n ca-certificates \\\n gnupg2 \\\n apt-transport-https \\\n dnsutils \\\n netcat-traditional \\\n wget \\\n redis-tools \\ \n procps \\ \n vim-tiny \\\n lua-cjson \\\n cron \\\n supervisor \\\n && arch=$(arch | sed s/aarch64/arm64/ | sed s/x86_64/amd64/) \\\n && wget -O /tmp/${RSPAMD_VER}~${CODENAME}_${arch}.deb https://rspamd.com/apt-stable/pool/main/r/rspamd/${RSPAMD_VER}~${CODENAME}_${arch}.deb \\\n && apt install -y /tmp/${RSPAMD_VER}~${CODENAME}_${arch}.deb \\\n && rm -rf /var/lib/apt/lists/* /tmp/*\\\n && apt-get autoremove --purge \\\n && apt-get clean \\\n && mkdir -p /run/rspamd \\\n && chown _rspamd:_rspamd /run/rspamd \\\n && chmod +x /rspamd.sh /stop-supervisor.sh /rotate_log.sh \\\n && echo 'alias ll=\"ls -la --color\"' >> ~/.bashrc\n\nCOPY supervisord.conf /etc/supervisor/supervisord.conf\n\nENTRYPOINT [\"/rspamd.sh\"]\n\nSTOPSIGNAL SIGTERM\n\n# CMD [\"/usr/bin/rspamd\", \"-f\", \"-u\", \"_rspamd\", \"-g\", \"_rspamd\"]\nCMD [\"/usr/bin/supervisord\", \"-c\", \"/etc/supervisor/supervisord.conf\"]\n" }, { "path": "Dockerfiles/rspamd/debian.sources", "content": "Types: deb\nURIs: http://mirrors.ustc.edu.cn/debian\nSuites: bookworm bookworm-updates\nComponents: main contrib non-free non-free-firmware\nSigned-By: /usr/share/keyrings/debian-archive-keyring.gpg\n\nTypes: deb\nURIs: http://mirrors.ustc.edu.cn/debian-security\nSuites: bookworm-security\nComponents: main contrib non-free non-free-firmware\nSigned-By: /usr/share/keyrings/debian-archive-keyring.gpg\n" }, { "path": "Dockerfiles/rspamd/rotate_log.sh", "content": "#!/bin/bash\necho \" ---- $(date) START ----\"\n\nLOG_DIR=\"/var/log/rspamd\"\nLOG_FILE=\"${LOG_DIR}/rspamd.log\"\nDATE=$(date +%Y%m%d)\nBACKUP_FILE=\"${LOG_DIR}/rspamd-${DATE}.log\"\n\n# Retention days\nRETENTION_DAYS=${RETENTION_DAYS:-7}\n# echo \"Retention days: ${RETENTION_DAYS}\"\n\n# backup log\nif [ -f \"${LOG_FILE}\" ]; then\n echo \"Backup log: ${LOG_FILE}\"\n\tmv \"${LOG_FILE}\" \"${BACKUP_FILE}\"\n\n # Restart rspamd\n /usr/bin/pkill -USR1 rspamd\n if [ $? -ne 0 ]; then\n echo \"Restart rspamd\"\n /usr/bin/supervisorctl restart rspamd\n fi\n\nelse\n\techo \"The log file does not exist: ${LOG_FILE}\"\n echo \"\"\n\texit 1\nfi\n\n# Compress backup files\nif [ -f \"${BACKUP_FILE}.gz\" ]; then\n mv \"${BACKUP_FILE}.gz\" \"${BACKUP_FILE}_1.gz\"\nfi\necho \"Compressing: \"${BACKUP_FILE}\"\"\ngzip \"${BACKUP_FILE}\"\n\n# Clean up expiration logs\necho \"Cleaning up expiration logs:\"\nfind \"${LOG_DIR}\" -name \"rspamd-*.log.gz\" -type f -mtime +${RETENTION_DAYS} -print -delete\n\necho \" ---- $(date) END ----\"\necho \"\"\n\n# 10MB in bytes\nSIZE_THRESHOLD=$((10 * 1024 * 1024))\nTARGET_LOG=\"${LOG_DIR}/rotate_log.log\"\nGZIP_LOG=\"${LOG_DIR}/rotate_log-${DATE}.log\"\n# Check whether the target log file exceeds 10 m, if so, compress\nif [ -f \"${TARGET_LOG}\" ]; then\n FILE_SIZE=$(stat -c %s \"${TARGET_LOG}\")\n \n if [ ${FILE_SIZE} -gt ${SIZE_THRESHOLD} ]; then\n echo \"Log file ${TARGET_LOG} exceeds 10M, compress...\"\n mv \"${TARGET_LOG}\" \"${GZIP_LOG}\"\n gzip \"${GZIP_LOG}\"\n fi\nfi\nfind \"${LOG_DIR}\" -name \"rotate_log-*.gz\" -type f -mtime +${RETENTION_DAYS} -delete\n" }, { "path": "Dockerfiles/rspamd/rspamd.sh", "content": "#!/bin/bash\n\n\nif ! grep -q \"rotate_log.sh\" /var/spool/cron/crontabs/root; then\n chmod +x /rotate_log.sh\n echo \"10 00 * * * bash /rotate_log.sh >> /var/log/rspamd/rotate_log.log 2>&1\" >> /var/spool/cron/crontabs/root\n chmod 600 /var/spool/cron/crontabs/root\n chown root:crontab /var/spool/cron/crontabs/root \n /usr/bin/supervisorctl restart cron\nfi\n\n\nchmod 755 /var/lib/rspamd\nchown -R _rspamd:_rspamd /var/lib/rspamd\n\ncat < /etc/rspamd/local.d/redis.conf\nservers = \"redis:6379\"; # Read servers (unless write_servers are unspecified)\nwrite_servers = \"redis:6379\"; # Servers to write data\ndisabled_modules = [\"ratelimit\"]; # List of modules that should not use redis from this section\ntimeout = 10s;\ndb = \"0\";\npassword = \"${REDISPASS}\";\nEOF\n\nexec \"$@\"\n" }, { "path": "Dockerfiles/rspamd/stop-supervisor.sh", "content": "#!/bin/bash\n\nprintf \"Start\\n\";\n\nwhile read line; do\n echo \"PROCESS event: $line\" >&2;\n kill -3 $(cat \"/var/run/supervisord.pid\")\ndone < /dev/stdin\n" }, { "path": "Dockerfiles/rspamd/supervisord.conf", "content": "[supervisord]\nnodaemon=true\nlogfile=/dev/stdout\nlogfile_maxbytes=0\npidfile=/var/run/supervisord.pid\nuser=root\n\n[program:rspamd]\ncommand=/usr/bin/rspamd -f -u _rspamd -g _rspamd\nautostart=true\nautorestart=true\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\n\n[program:cron]\ncommand=/usr/sbin/cron -f\nautostart=true\nautorestart=true\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\nuser=root\n\n\n[eventlistener:processes]\ncommand=/stop-supervisor.sh\nevents=PROCESS_STATE_STOPPED, PROCESS_STATE_EXITED, PROCESS_STATE_FATAL\n\n[supervisorctl]\nserverurl=unix:///var/run/supervisor.sock\n\n[unix_http_server]\nfile=/var/run/supervisor.sock\nchmod=0700\n\n[rpcinterface:supervisor]\nsupervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface\n" }, { "path": "LICENSE", "content": " GNU AFFERO GENERAL PUBLIC LICENSE\n Version 3, 19 November 2007\n\n Copyright (C) 2007 Free Software Foundation, Inc. \n Everyone is permitted to copy and distribute verbatim copies\n of this license document, but changing it is not allowed.\n\n Preamble\n\n The GNU Affero General Public License is a free, copyleft license for\nsoftware and other kinds of works, specifically designed to ensure\ncooperation with the community in the case of network server software.\n\n The licenses for most software and other practical works are designed\nto take away your freedom to share and change the works. By contrast,\nour General Public Licenses are intended to guarantee your freedom to\nshare and change all versions of a program--to make sure it remains free\nsoftware for all its users.\n\n When we speak of free software, we are referring to freedom, not\nprice. Our General Public Licenses are designed to make sure that you\nhave the freedom to distribute copies of free software (and charge for\nthem if you wish), that you receive source code or can get it if you\nwant it, that you can change the software or use pieces of it in new\nfree programs, and that you know you can do these things.\n\n Developers that use our General Public Licenses protect your rights\nwith two steps: (1) assert copyright on the software, and (2) offer\nyou this License which gives you legal permission to copy, distribute\nand/or modify the software.\n\n A secondary benefit of defending all users' freedom is that\nimprovements made in alternate versions of the program, if they\nreceive widespread use, become available for other developers to\nincorporate. Many developers of free software are heartened and\nencouraged by the resulting cooperation. However, in the case of\nsoftware used on network servers, this result may fail to come about.\nThe GNU General Public License permits making a modified version and\nletting the public access it on a server without ever releasing its\nsource code to the public.\n\n The GNU Affero General Public License is designed specifically to\nensure that, in such cases, the modified source code becomes available\nto the community. It requires the operator of a network server to\nprovide the source code of the modified version running there to the\nusers of that server. Therefore, public use of a modified version, on\na publicly accessible server, gives the public access to the source\ncode of the modified version.\n\n An older license, called the Affero General Public License and\npublished by Affero, was designed to accomplish similar goals. This is\na different license, not a version of the Affero GPL, but Affero has\nreleased a new version of the Affero GPL which permits relicensing under\nthis license.\n\n The precise terms and conditions for copying, distribution and\nmodification follow.\n\n TERMS AND CONDITIONS\n\n 0. Definitions.\n\n \"This License\" refers to version 3 of the GNU Affero General Public License.\n\n \"Copyright\" also means copyright-like laws that apply to other kinds of\nworks, such as semiconductor masks.\n\n \"The Program\" refers to any copyrightable work licensed under this\nLicense. Each licensee is addressed as \"you\". \"Licensees\" and\n\"recipients\" may be individuals or organizations.\n\n To \"modify\" a work means to copy from or adapt all or part of the work\nin a fashion requiring copyright permission, other than the making of an\nexact copy. The resulting work is called a \"modified version\" of the\nearlier work or a work \"based on\" the earlier work.\n\n A \"covered work\" means either the unmodified Program or a work based\non the Program.\n\n To \"propagate\" a work means to do anything with it that, without\npermission, would make you directly or secondarily liable for\ninfringement under applicable copyright law, except executing it on a\ncomputer or modifying a private copy. Propagation includes copying,\ndistribution (with or without modification), making available to the\npublic, and in some countries other activities as well.\n\n To \"convey\" a work means any kind of propagation that enables other\nparties to make or receive copies. Mere interaction with a user through\na computer network, with no transfer of a copy, is not conveying.\n\n An interactive user interface displays \"Appropriate Legal Notices\"\nto the extent that it includes a convenient and prominently visible\nfeature that (1) displays an appropriate copyright notice, and (2)\ntells the user that there is no warranty for the work (except to the\nextent that warranties are provided), that licensees may convey the\nwork under this License, and how to view a copy of this License. If\nthe interface presents a list of user commands or options, such as a\nmenu, a prominent item in the list meets this criterion.\n\n 1. Source Code.\n\n The \"source code\" for a work means the preferred form of the work\nfor making modifications to it. \"Object code\" means any non-source\nform of a work.\n\n A \"Standard Interface\" means an interface that either is an official\nstandard defined by a recognized standards body, or, in the case of\ninterfaces specified for a particular programming language, one that\nis widely used among developers working in that language.\n\n The \"System Libraries\" of an executable work include anything, other\nthan the work as a whole, that (a) is included in the normal form of\npackaging a Major Component, but which is not part of that Major\nComponent, and (b) serves only to enable use of the work with that\nMajor Component, or to implement a Standard Interface for which an\nimplementation is available to the public in source code form. A\n\"Major Component\", in this context, means a major essential component\n(kernel, window system, and so on) of the specific operating system\n(if any) on which the executable work runs, or a compiler used to\nproduce the work, or an object code interpreter used to run it.\n\n The \"Corresponding Source\" for a work in object code form means all\nthe source code needed to generate, install, and (for an executable\nwork) run the object code and to modify the work, including scripts to\ncontrol those activities. However, it does not include the work's\nSystem Libraries, or general-purpose tools or generally available free\nprograms which are used unmodified in performing those activities but\nwhich are not part of the work. For example, Corresponding Source\nincludes interface definition files associated with source files for\nthe work, and the source code for shared libraries and dynamically\nlinked subprograms that the work is specifically designed to require,\nsuch as by intimate data communication or control flow between those\nsubprograms and other parts of the work.\n\n The Corresponding Source need not include anything that users\ncan regenerate automatically from other parts of the Corresponding\nSource.\n\n The Corresponding Source for a work in source code form is that\nsame work.\n\n 2. Basic Permissions.\n\n All rights granted under this License are granted for the term of\ncopyright on the Program, and are irrevocable provided the stated\nconditions are met. This License explicitly affirms your unlimited\npermission to run the unmodified Program. The output from running a\ncovered work is covered by this License only if the output, given its\ncontent, constitutes a covered work. This License acknowledges your\nrights of fair use or other equivalent, as provided by copyright law.\n\n You may make, run and propagate covered works that you do not\nconvey, without conditions so long as your license otherwise remains\nin force. You may convey covered works to others for the sole purpose\nof having them make modifications exclusively for you, or provide you\nwith facilities for running those works, provided that you comply with\nthe terms of this License in conveying all material for which you do\nnot control copyright. Those thus making or running the covered works\nfor you must do so exclusively on your behalf, under your direction\nand control, on terms that prohibit them from making any copies of\nyour copyrighted material outside their relationship with you.\n\n Conveying under any other circumstances is permitted solely under\nthe conditions stated below. Sublicensing is not allowed; section 10\nmakes it unnecessary.\n\n 3. Protecting Users' Legal Rights From Anti-Circumvention Law.\n\n No covered work shall be deemed part of an effective technological\nmeasure under any applicable law fulfilling obligations under article\n11 of the WIPO copyright treaty adopted on 20 December 1996, or\nsimilar laws prohibiting or restricting circumvention of such\nmeasures.\n\n When you convey a covered work, you waive any legal power to forbid\ncircumvention of technological measures to the extent such circumvention\nis effected by exercising rights under this License with respect to\nthe covered work, and you disclaim any intention to limit operation or\nmodification of the work as a means of enforcing, against the work's\nusers, your or third parties' legal rights to forbid circumvention of\ntechnological measures.\n\n 4. Conveying Verbatim Copies.\n\n You may convey verbatim copies of the Program's source code as you\nreceive it, in any medium, provided that you conspicuously and\nappropriately publish on each copy an appropriate copyright notice;\nkeep intact all notices stating that this License and any\nnon-permissive terms added in accord with section 7 apply to the code;\nkeep intact all notices of the absence of any warranty; and give all\nrecipients a copy of this License along with the Program.\n\n You may charge any price or no price for each copy that you convey,\nand you may offer support or warranty protection for a fee.\n\n 5. Conveying Modified Source Versions.\n\n You may convey a work based on the Program, or the modifications to\nproduce it from the Program, in the form of source code under the\nterms of section 4, provided that you also meet all of these conditions:\n\n a) The work must carry prominent notices stating that you modified\n it, and giving a relevant date.\n\n b) The work must carry prominent notices stating that it is\n released under this License and any conditions added under section\n 7. This requirement modifies the requirement in section 4 to\n \"keep intact all notices\".\n\n c) You must license the entire work, as a whole, under this\n License to anyone who comes into possession of a copy. This\n License will therefore apply, along with any applicable section 7\n additional terms, to the whole of the work, and all its parts,\n regardless of how they are packaged. This License gives no\n permission to license the work in any other way, but it does not\n invalidate such permission if you have separately received it.\n\n d) If the work has interactive user interfaces, each must display\n Appropriate Legal Notices; however, if the Program has interactive\n interfaces that do not display Appropriate Legal Notices, your\n work need not make them do so.\n\n A compilation of a covered work with other separate and independent\nworks, which are not by their nature extensions of the covered work,\nand which are not combined with it such as to form a larger program,\nin or on a volume of a storage or distribution medium, is called an\n\"aggregate\" if the compilation and its resulting copyright are not\nused to limit the access or legal rights of the compilation's users\nbeyond what the individual works permit. Inclusion of a covered work\nin an aggregate does not cause this License to apply to the other\nparts of the aggregate.\n\n 6. Conveying Non-Source Forms.\n\n You may convey a covered work in object code form under the terms\nof sections 4 and 5, provided that you also convey the\nmachine-readable Corresponding Source under the terms of this License,\nin one of these ways:\n\n a) Convey the object code in, or embodied in, a physical product\n (including a physical distribution medium), accompanied by the\n Corresponding Source fixed on a durable physical medium\n customarily used for software interchange.\n\n b) Convey the object code in, or embodied in, a physical product\n (including a physical distribution medium), accompanied by a\n written offer, valid for at least three years and valid for as\n long as you offer spare parts or customer support for that product\n model, to give anyone who possesses the object code either (1) a\n copy of the Corresponding Source for all the software in the\n product that is covered by this License, on a durable physical\n medium customarily used for software interchange, for a price no\n more than your reasonable cost of physically performing this\n conveying of source, or (2) access to copy the\n Corresponding Source from a network server at no charge.\n\n c) Convey individual copies of the object code with a copy of the\n written offer to provide the Corresponding Source. This\n alternative is allowed only occasionally and noncommercially, and\n only if you received the object code with such an offer, in accord\n with subsection 6b.\n\n d) Convey the object code by offering access from a designated\n place (gratis or for a charge), and offer equivalent access to the\n Corresponding Source in the same way through the same place at no\n further charge. You need not require recipients to copy the\n Corresponding Source along with the object code. If the place to\n copy the object code is a network server, the Corresponding Source\n may be on a different server (operated by you or a third party)\n that supports equivalent copying facilities, provided you maintain\n clear directions next to the object code saying where to find the\n Corresponding Source. Regardless of what server hosts the\n Corresponding Source, you remain obligated to ensure that it is\n available for as long as needed to satisfy these requirements.\n\n e) Convey the object code using peer-to-peer transmission, provided\n you inform other peers where the object code and Corresponding\n Source of the work are being offered to the general public at no\n charge under subsection 6d.\n\n A separable portion of the object code, whose source code is excluded\nfrom the Corresponding Source as a System Library, need not be\nincluded in conveying the object code work.\n\n A \"User Product\" is either (1) a \"consumer product\", which means any\ntangible personal property which is normally used for personal, family,\nor household purposes, or (2) anything designed or sold for incorporation\ninto a dwelling. In determining whether a product is a consumer product,\ndoubtful cases shall be resolved in favor of coverage. For a particular\nproduct received by a particular user, \"normally used\" refers to a\ntypical or common use of that class of product, regardless of the status\nof the particular user or of the way in which the particular user\nactually uses, or expects or is expected to use, the product. A product\nis a consumer product regardless of whether the product has substantial\ncommercial, industrial or non-consumer uses, unless such uses represent\nthe only significant mode of use of the product.\n\n \"Installation Information\" for a User Product means any methods,\nprocedures, authorization keys, or other information required to install\nand execute modified versions of a covered work in that User Product from\na modified version of its Corresponding Source. The information must\nsuffice to ensure that the continued functioning of the modified object\ncode is in no case prevented or interfered with solely because\nmodification has been made.\n\n If you convey an object code work under this section in, or with, or\nspecifically for use in, a User Product, and the conveying occurs as\npart of a transaction in which the right of possession and use of the\nUser Product is transferred to the recipient in perpetuity or for a\nfixed term (regardless of how the transaction is characterized), the\nCorresponding Source conveyed under this section must be accompanied\nby the Installation Information. But this requirement does not apply\nif neither you nor any third party retains the ability to install\nmodified object code on the User Product (for example, the work has\nbeen installed in ROM).\n\n The requirement to provide Installation Information does not include a\nrequirement to continue to provide support service, warranty, or updates\nfor a work that has been modified or installed by the recipient, or for\nthe User Product in which it has been modified or installed. Access to a\nnetwork may be denied when the modification itself materially and\nadversely affects the operation of the network or violates the rules and\nprotocols for communication across the network.\n\n Corresponding Source conveyed, and Installation Information provided,\nin accord with this section must be in a format that is publicly\ndocumented (and with an implementation available to the public in\nsource code form), and must require no special password or key for\nunpacking, reading or copying.\n\n 7. Additional Terms.\n\n \"Additional permissions\" are terms that supplement the terms of this\nLicense by making exceptions from one or more of its conditions.\nAdditional permissions that are applicable to the entire Program shall\nbe treated as though they were included in this License, to the extent\nthat they are valid under applicable law. If additional permissions\napply only to part of the Program, that part may be used separately\nunder those permissions, but the entire Program remains governed by\nthis License without regard to the additional permissions.\n\n When you convey a copy of a covered work, you may at your option\nremove any additional permissions from that copy, or from any part of\nit. (Additional permissions may be written to require their own\nremoval in certain cases when you modify the work.) You may place\nadditional permissions on material, added by you to a covered work,\nfor which you have or can give appropriate copyright permission.\n\n Notwithstanding any other provision of this License, for material you\nadd to a covered work, you may (if authorized by the copyright holders of\nthat material) supplement the terms of this License with terms:\n\n a) Disclaiming warranty or limiting liability differently from the\n terms of sections 15 and 16 of this License; or\n\n b) Requiring preservation of specified reasonable legal notices or\n author attributions in that material or in the Appropriate Legal\n Notices displayed by works containing it; or\n\n c) Prohibiting misrepresentation of the origin of that material, or\n requiring that modified versions of such material be marked in\n reasonable ways as different from the original version; or\n\n d) Limiting the use for publicity purposes of names of licensors or\n authors of the material; or\n\n e) Declining to grant rights under trademark law for use of some\n trade names, trademarks, or service marks; or\n\n f) Requiring indemnification of licensors and authors of that\n material by anyone who conveys the material (or modified versions of\n it) with contractual assumptions of liability to the recipient, for\n any liability that these contractual assumptions directly impose on\n those licensors and authors.\n\n All other non-permissive additional terms are considered \"further\nrestrictions\" within the meaning of section 10. If the Program as you\nreceived it, or any part of it, contains a notice stating that it is\ngoverned by this License along with a term that is a further\nrestriction, you may remove that term. If a license document contains\na further restriction but permits relicensing or conveying under this\nLicense, you may add to a covered work material governed by the terms\nof that license document, provided that the further restriction does\nnot survive such relicensing or conveying.\n\n If you add terms to a covered work in accord with this section, you\nmust place, in the relevant source files, a statement of the\nadditional terms that apply to those files, or a notice indicating\nwhere to find the applicable terms.\n\n Additional terms, permissive or non-permissive, may be stated in the\nform of a separately written license, or stated as exceptions;\nthe above requirements apply either way.\n\n 8. Termination.\n\n You may not propagate or modify a covered work except as expressly\nprovided under this License. Any attempt otherwise to propagate or\nmodify it is void, and will automatically terminate your rights under\nthis License (including any patent licenses granted under the third\nparagraph of section 11).\n\n However, if you cease all violation of this License, then your\nlicense from a particular copyright holder is reinstated (a)\nprovisionally, unless and until the copyright holder explicitly and\nfinally terminates your license, and (b) permanently, if the copyright\nholder fails to notify you of the violation by some reasonable means\nprior to 60 days after the cessation.\n\n Moreover, your license from a particular copyright holder is\nreinstated permanently if the copyright holder notifies you of the\nviolation by some reasonable means, this is the first time you have\nreceived notice of violation of this License (for any work) from that\ncopyright holder, and you cure the violation prior to 30 days after\nyour receipt of the notice.\n\n Termination of your rights under this section does not terminate the\nlicenses of parties who have received copies or rights from you under\nthis License. If your rights have been terminated and not permanently\nreinstated, you do not qualify to receive new licenses for the same\nmaterial under section 10.\n\n 9. Acceptance Not Required for Having Copies.\n\n You are not required to accept this License in order to receive or\nrun a copy of the Program. Ancillary propagation of a covered work\noccurring solely as a consequence of using peer-to-peer transmission\nto receive a copy likewise does not require acceptance. However,\nnothing other than this License grants you permission to propagate or\nmodify any covered work. These actions infringe copyright if you do\nnot accept this License. Therefore, by modifying or propagating a\ncovered work, you indicate your acceptance of this License to do so.\n\n 10. Automatic Licensing of Downstream Recipients.\n\n Each time you convey a covered work, the recipient automatically\nreceives a license from the original licensors, to run, modify and\npropagate that work, subject to this License. You are not responsible\nfor enforcing compliance by third parties with this License.\n\n An \"entity transaction\" is a transaction transferring control of an\norganization, or substantially all assets of one, or subdividing an\norganization, or merging organizations. If propagation of a covered\nwork results from an entity transaction, each party to that\ntransaction who receives a copy of the work also receives whatever\nlicenses to the work the party's predecessor in interest had or could\ngive under the previous paragraph, plus a right to possession of the\nCorresponding Source of the work from the predecessor in interest, if\nthe predecessor has it or can get it with reasonable efforts.\n\n You may not impose any further restrictions on the exercise of the\nrights granted or affirmed under this License. For example, you may\nnot impose a license fee, royalty, or other charge for exercise of\nrights granted under this License, and you may not initiate litigation\n(including a cross-claim or counterclaim in a lawsuit) alleging that\nany patent claim is infringed by making, using, selling, offering for\nsale, or importing the Program or any portion of it.\n\n 11. Patents.\n\n A \"contributor\" is a copyright holder who authorizes use under this\nLicense of the Program or a work on which the Program is based. The\nwork thus licensed is called the contributor's \"contributor version\".\n\n A contributor's \"essential patent claims\" are all patent claims\nowned or controlled by the contributor, whether already acquired or\nhereafter acquired, that would be infringed by some manner, permitted\nby this License, of making, using, or selling its contributor version,\nbut do not include claims that would be infringed only as a\nconsequence of further modification of the contributor version. For\npurposes of this definition, \"control\" includes the right to grant\npatent sublicenses in a manner consistent with the requirements of\nthis License.\n\n Each contributor grants you a non-exclusive, worldwide, royalty-free\npatent license under the contributor's essential patent claims, to\nmake, use, sell, offer for sale, import and otherwise run, modify and\npropagate the contents of its contributor version.\n\n In the following three paragraphs, a \"patent license\" is any express\nagreement or commitment, however denominated, not to enforce a patent\n(such as an express permission to practice a patent or covenant not to\nsue for patent infringement). To \"grant\" such a patent license to a\nparty means to make such an agreement or commitment not to enforce a\npatent against the party.\n\n If you convey a covered work, knowingly relying on a patent license,\nand the Corresponding Source of the work is not available for anyone\nto copy, free of charge and under the terms of this License, through a\npublicly available network server or other readily accessible means,\nthen you must either (1) cause the Corresponding Source to be so\navailable, or (2) arrange to deprive yourself of the benefit of the\npatent license for this particular work, or (3) arrange, in a manner\nconsistent with the requirements of this License, to extend the patent\nlicense to downstream recipients. \"Knowingly relying\" means you have\nactual knowledge that, but for the patent license, your conveying the\ncovered work in a country, or your recipient's use of the covered work\nin a country, would infringe one or more identifiable patents in that\ncountry that you have reason to believe are valid.\n\n If, pursuant to or in connection with a single transaction or\narrangement, you convey, or propagate by procuring conveyance of, a\ncovered work, and grant a patent license to some of the parties\nreceiving the covered work authorizing them to use, propagate, modify\nor convey a specific copy of the covered work, then the patent license\nyou grant is automatically extended to all recipients of the covered\nwork and works based on it.\n\n A patent license is \"discriminatory\" if it does not include within\nthe scope of its coverage, prohibits the exercise of, or is\nconditioned on the non-exercise of one or more of the rights that are\nspecifically granted under this License. You may not convey a covered\nwork if you are a party to an arrangement with a third party that is\nin the business of distributing software, under which you make payment\nto the third party based on the extent of your activity of conveying\nthe work, and under which the third party grants, to any of the\nparties who would receive the covered work from you, a discriminatory\npatent license (a) in connection with copies of the covered work\nconveyed by you (or copies made from those copies), or (b) primarily\nfor and in connection with specific products or compilations that\ncontain the covered work, unless you entered into that arrangement,\nor that patent license was granted, prior to 28 March 2007.\n\n Nothing in this License shall be construed as excluding or limiting\nany implied license or other defenses to infringement that may\notherwise be available to you under applicable patent law.\n\n 12. No Surrender of Others' Freedom.\n\n If conditions are imposed on you (whether by court order, agreement or\notherwise) that contradict the conditions of this License, they do not\nexcuse you from the conditions of this License. If you cannot convey a\ncovered work so as to satisfy simultaneously your obligations under this\nLicense and any other pertinent obligations, then as a consequence you may\nnot convey it at all. For example, if you agree to terms that obligate you\nto collect a royalty for further conveying from those to whom you convey\nthe Program, the only way you could satisfy both those terms and this\nLicense would be to refrain entirely from conveying the Program.\n\n 13. Remote Network Interaction; Use with the GNU General Public License.\n\n Notwithstanding any other provision of this License, if you modify the\nProgram, your modified version must prominently offer all users\ninteracting with it remotely through a computer network (if your version\nsupports such interaction) an opportunity to receive the Corresponding\nSource of your version by providing access to the Corresponding Source\nfrom a network server at no charge, through some standard or customary\nmeans of facilitating copying of software. This Corresponding Source\nshall include the Corresponding Source for any work covered by version 3\nof the GNU General Public License that is incorporated pursuant to the\nfollowing paragraph.\n\n Notwithstanding any other provision of this License, you have\npermission to link or combine any covered work with a work licensed\nunder version 3 of the GNU General Public License into a single\ncombined work, and to convey the resulting work. The terms of this\nLicense will continue to apply to the part which is the covered work,\nbut the work with which it is combined will remain governed by version\n3 of the GNU General Public License.\n\n 14. Revised Versions of this License.\n\n The Free Software Foundation may publish revised and/or new versions of\nthe GNU Affero General Public License from time to time. Such new versions\nwill be similar in spirit to the present version, but may differ in detail to\naddress new problems or concerns.\n\n Each version is given a distinguishing version number. If the\nProgram specifies that a certain numbered version of the GNU Affero General\nPublic License \"or any later version\" applies to it, you have the\noption of following the terms and conditions either of that numbered\nversion or of any later version published by the Free Software\nFoundation. If the Program does not specify a version number of the\nGNU Affero General Public License, you may choose any version ever published\nby the Free Software Foundation.\n\n If the Program specifies that a proxy can decide which future\nversions of the GNU Affero General Public License can be used, that proxy's\npublic statement of acceptance of a version permanently authorizes you\nto choose that version for the Program.\n\n Later license versions may give you additional or different\npermissions. However, no additional obligations are imposed on any\nauthor or copyright holder as a result of your choosing to follow a\nlater version.\n\n 15. Disclaimer of Warranty.\n\n THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY\nAPPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT\nHOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM \"AS IS\" WITHOUT WARRANTY\nOF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,\nTHE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR\nPURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM\nIS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF\nALL NECESSARY SERVICING, REPAIR OR CORRECTION.\n\n 16. Limitation of Liability.\n\n IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING\nWILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS\nTHE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY\nGENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE\nUSE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF\nDATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD\nPARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),\nEVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF\nSUCH DAMAGES.\n\n 17. Interpretation of Sections 15 and 16.\n\n If the disclaimer of warranty and limitation of liability provided\nabove cannot be given local legal effect according to their terms,\nreviewing courts shall apply local law that most closely approximates\nan absolute waiver of all civil liability in connection with the\nProgram, unless a warranty or assumption of liability accompanies a\ncopy of the Program in return for a fee.\n\n END OF TERMS AND CONDITIONS\n\n How to Apply These Terms to Your New Programs\n\n If you develop a new program, and you want it to be of the greatest\npossible use to the public, the best way to achieve this is to make it\nfree software which everyone can redistribute and change under these terms.\n\n To do so, attach the following notices to the program. It is safest\nto attach them to the start of each source file to most effectively\nstate the exclusion of warranty; and each file should have at least\nthe \"copyright\" line and a pointer to where the full notice is found.\n\n \n Copyright (C) \n\n This program is free software: you can redistribute it and/or modify\n it under the terms of the GNU Affero General Public License as published by\n the Free Software Foundation, either version 3 of the License, or\n (at your option) any later version.\n\n This program is distributed in the hope that it will be useful,\n but WITHOUT ANY WARRANTY; without even the implied warranty of\n MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n GNU Affero General Public License for more details.\n\n You should have received a copy of the GNU Affero General Public License\n along with this program. If not, see .\n\nAlso add information on how to contact you by electronic and paper mail.\n\n If your software can interact with users remotely through a computer\nnetwork, you should also make sure that it provides a way for users to\nget its source. For example, if your program is a web application, its\ninterface could display a \"Source\" link that leads users to an archive\nof the code. There are many ways you could offer source, and different\nsolutions will be better for different programs; see section 13 for the\nspecific requirements.\n\n You should also get your employer (if you work as a programmer) or school,\nif any, to sign a \"copyright disclaimer\" for the program, if necessary.\nFor more information on this, and how to apply and follow the GNU AGPL, see\n." }, { "path": "README-ja.md", "content": "
\n \n

BillionMail 📧

\n\n\n## スマートなキャンペーンのためのオープンソースメールサーバー／メールマガジン／Eメールマーケティングソリューション\n\n[![][license-shield]][license-link] [![][docs-shield]][docs-link] [![][github-release-shield]][github-release-link] [![][github-stars-shield]][github-stars-link]\n\n[English](README.md) | [简体中文](README-zh_CN.md) | 日本語 | [Türkçe](README-ja.md)\n
\n
\n\n
\n\"aaPanel%2FBillionMail\n
\n\n## BillionMailとは？\n\nBillionMailは、ビジネスや個人がメールキャンペーンを簡単に管理できるよう設計された**オープンソースのメールサーバー兼Eメールマーケティングプラットフォーム**です。ニュースレター、プロモーションメール、取引通知などを送信する際に、メールマーケティングのすべてを**完全にコントロール**できます。**高度な分析機能**や**顧客管理機能**を活用し、プロフェッショナルのようにメールを作成、送信、トラッキングできます。\n\n![BillionMailバナー](https://www.billionmail.com/home.png?v1)\n\n# たった3ステップで10億通のメールを送信！\n**10億通のメール。あらゆるビジネスに。保証付き。**\n\n### Step 1️⃣ BillionMailのインストール \n✅ インストールから**8分**で**✅ メール送信成功**まで完了します\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && bash install.sh\n````\n\n### Step 2️⃣ ドメインを接続する\n\n* 送信ドメインを追加\n* DNSレコードを検証\n* 無料SSLを自動有効化\n\n### Step 3️⃣ キャンペーンを構築する\n\n* メールを作成または貼り付け\n* リストとタグを選択\n* 送信日時を設定または今すぐ送信\n\n\n\n## その他のインストール方法\n\n👉 [https://www.aapanel.com/new/download.html](https://www.aapanel.com/new/download.html)\n\n### aaPanelでワンクリックインストール\n\n**Docker**\n\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && cp env_init .env && docker compose up -d || docker-compose up -d\n```\n\n## 管理スクリプト\n\n* 管理ヘルプ\n\n `bm help`\n\n* デフォルトログイン情報を表示\n\n `bm default`\n\n* ドメインのDNSレコードを表示\n\n `bm show-record`\n\n* BillionMailを更新\n\n `bm update`\n\n## ライブデモ\n\nBillionMailデモ: [https://demo.billionmail.com/billionmail](https://demo.billionmail.com/billionmail)\n\nユーザー名: `billionmail`\n\nパスワード: `billionmail`\n\n## Webメール\n\nBillionMailには**RoundCube**が統合されており、`/roundcube/`からWebメールにアクセスできます。\n\n## なぜBillionMailを選ぶのか？\n\nほとんどのEメールマーケティングプラットフォームは**高価**、**クローズドソース**、または**基本機能が不足**しています。BillionMailはこれらと異なります：\n\n✅ **完全オープンソース** – 隠れたコストなし、ベンダーロックインなし。\n📊 **高度な分析機能** – メール配信、開封率、クリック率などを追跡。\n📧 **送信数無制限** – 送信メール数に制限なし。\n🎨 **カスタマイズ可能なテンプレート** – プロフェッショナルなマーケティングテンプレートを再利用可能。\n🔒 **プライバシーファースト** – データは自分のサーバーにあり、サードパーティによる追跡なし。\n🚀 **セルフホスト** – 自分のサーバーで実行し、完全にコントロール可能。\n\n## どうすれば貢献できるか 🌟\n\nBillionMailは**コミュニティ主導のプロジェクト**であり、立ち上げには皆さんのサポートが必要です！以下の方法でご参加ください：\n\n1. **このリポジトリにスターを付ける**：スターを付けて関心を示しましょう。\n2. **情報を拡散する**：開発者、マーケター、オープンソース愛好家にBillionMailを紹介しましょう。\n3. **フィードバックを共有する**：Issueを立てるかディスカッションに参加して、どんな機能がほしいか教えてください。\n4. **コントリビュートする**：開発が始まったら、コミュニティからの貢献を歓迎します。今後のアップデートをお待ちください！\n\n---\n\n📧 **BillionMail – オープンソースEメールマーケティングの未来。**\n\n## Issues\n\n問題が発生したり機能リクエストがある場合は、[Issueを作成](https://github.com/aaPanel/BillionMail/issues)してください。以下を含めると助かります：\n\n* 問題またはリクエストの明確な説明\n* 再現手順（該当する場合）\n* スクリーンショットやエラーログ（該当する場合）\n\n## 今すぐインストール\n\n✅ インストールから**8分**で**メール送信成功**まで完了します\n\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && bash install.sh\n```\n\n**Dockerでインストール:**（Dockerとdocker-compose-pluginを手動でインストールし、.envファイルを編集してください）\n\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && cp env_init .env && docker compose up -d || docker-compose up -d\n```\n\n## ライセンス\n\nBillionMailは**AGPLv3ライセンス**のもとで公開されています。これにより以下が可能です：\n\n✅ ソフトウェアを無料で使用する\n✅ コードを改変・再配布する\n✅ プライベート利用に制限なし\n\n詳細は[LICENSE](LICENSE)ファイルをご覧ください。\n\n---\n\n\n\n[docs-link]: https://www.billionmail.com/\n\n\n[license-link]: https://www.gnu.org/licenses/gpl-3.0.html\n[github-release-link]: https://github.com/aaPanel/BillionMail/releases/latest\n[github-stars-link]: https://github.com/aaPanel/BillionMail\n[github-issues-link]: https://github.com/aaPanel/BillionMail/issues\n\n\n[docs-shield]: https://img.shields.io/badge/documentation-148F76\n[github-release-shield]: https://img.shields.io/github/v/release/aaPanel/BillionMail\n[github-stars-shield]: https://img.shields.io/github/stars/aaPanel/BillionMail?color=%231890FF&style=flat-square\n[license-shield]: https://img.shields.io/github/license/aaPanel/BillionMail\n" }, { "path": "README-tr.md", "content": "
\n \n

BillionMail 📧

\n\n\n## Daha Akıllı Kampanyalar İçin Açık Kaynaklı Bir Posta Sunucusu, Bülten ve E-posta Pazarlama Çözümü\n\n[![][license-shield]][license-link] [![][docs-shield]][docs-link] [![][github-release-shield]][github-release-link] [![][github-stars-shield]][github-stars-link]\n\nEnglish | [简体中文](README-zh_CN.md) | [日本語](README-ja.md) | [Türkçe](README-ja.md)\n
\n
\n\n
\n\"aaPanel%2FBillionMail\n
\n\n## BillionMail Nedir?\n\nBillionMail, işletmelerin ve bireylerin e-posta kampanyalarını kolayca yönetmelerine yardımcı olmak için tasarlanmış **geleceğe yönelik açık kaynaklı bir Posta sunucusu ve E-posta pazarlama platformudur**. İster bültenler, ister tanıtım e-postaları veya işlem mesajları gönderiyor olun, bu araç e-posta pazarlama çabalarınız üzerinde **tam kontrol sağlar**. **Gelişmiş analitik** ve **müşteri yönetimi** gibi özelliklerle, e-postaları bir profesyonel gibi oluşturabilir, gönderebilir ve takip edebilirsiniz.\n\n![BillionMail Banner](https://www.billionmail.com/home.png?v1)\n\n# Bir Milyar E-posta Göndermek İçin Sadece 3 Adım!\n**Bir milyar e-posta. Her işletme. Garantili.**\n\n### Adım 1️⃣ BillionMail'i Kurun: \n✅ ✅ Kurulumdan ✅ **başarılı e-posta gönderimine** geçmek **sadece 8️⃣ dakika** sürer\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && bash install.sh\n```\n\n\n### Adım 2️⃣: Alan Adınızı Bağlayın\n\n- Gönderim alan adını ekleyin\n- DNS kayıtlarını doğrulayın\n- Ücretsiz SSL'yi otomatik etkinleştirin\n\n\n### Adım 3️⃣: Kampanyanızı Oluşturun\n\n- E-postanızı yazın veya yapıştırın\n- Liste ve etiketleri seçin\n- Gönderim zamanını ayarlayın veya hemen gönderin\n\n\n\n\n\n## Diğer Kurulum Yöntemleri\n\n### aaPanel'de Tek Tıkla Kurulum\n👉 https://www.aapanel.com/new/download.html (✅aaPanel'e giriş yapın --> 🐳Docker --> 1️⃣Tek Tıkla Kurulum)\n\n\n\n\n**Docker**\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && cp env_init .env && docker compose up -d || docker-compose up -d\n```\n\n## Yönetim Scripti\n- Yönetim yardımı\n\n `bm help`\n\n- Varsayılan oturum açma bilgilerini görüntüleme\n\n `bm default`\n\n- Alan adı DNS kaydını gösterme\n\n `bm show-record`\n\n- BillionMail'i güncelleme\n\n `bm update`\n\n## Canlı Demo\nBillionMail Demo: [https://demo.billionmail.com/billionmail](https://demo.billionmail.com/billionmail)\n\nKullanıcı Adı: `billionmail` \n\nŞifre: `billionmail` \n\n\n## WebMail\n\nBillionMail, **RoundCube**'u entegre etmiştir, WebMail'e `/roundcube/` üzerinden erişebilirsiniz. .\n\n## Neden BillionMail?\n\nÇoğu e-posta pazarlama platformu ya **pahalı**, ya **kapalı kaynaklı** ya da **temel özelliklerden yoksundur**. BillionMail farklı olmayı hedefliyor::\n\n✅ **Tamamen Açık Kaynaklı** – Gizli maliyetler yok, tedarikçi bağımlılığı yok.\n📊 **Gelişmiş Analitik** – E-posta teslimatını, açılma oranlarını, tıklanma oranlarını ve daha fazlasını takip edin.\n📧 **Sınırsız Gönderim** – Gönderebileceğiniz e-posta sayısında kısıtlama yok.\n🎨 **Özelleştirilebilir** Şablonlar – Yeniden kullanım için özel profesyonel pazarlama şablonları.\n🔒 **Gizlilik Öncelikli** – Verileriniz sizde kalır, üçüncü taraf takibi yok.\n🚀 **Kendi Sunucunuzda Barındırma** – Tam kontrol için kendi sunucunuzda çalıştırın.\n\n## Nasıl Yardımcı Olabilirsiniz 🌟\n\nBillionMail **topluluk odaklı bir projedir** ve başlamak için desteğinize ihtiyacımız var! İşte nasıl yardımcı olabileceğiniz:\n\n1. **Bu Depoyu Yıldızlayın**: Bu depoyu yıldızlayarak ilginizi gösterin.\n2. **Haberi Yayın:** BillionMail'i ağınızla (geliştiriciler, pazarlamacılar ve açık kaynak meraklıları) paylaşın.\n3. **Geri Bildirim Paylaşın:** Bir sorun açarak veya tartışmaya katılarak BillionMail'de görmek istediğiniz özellikleri bize bildirin.\n4. **Katkıda Bulunun:** Geliştirme başladığında, topluluktan gelen katkıları memnuniyetle karşılayacağız. Güncellemeler için takipte kalın!\n\n---\n\n📧 **BillionMail – Açık Kaynaklı E-posta Pazarlamasının Geleceği.**\n\n## Sorunlar\n\nHerhangi bir sorunla karşılaşırsanız veya özellik talepleriniz olursa, lütfen [bir sorun açın](https://github.com/aaPanel/BillionMail/issues). Şunları eklediğinizden emin olun:\n\n- Sorunun veya talebin açık bir açıklaması.\n- Sorunu yeniden oluşturma adımları (varsa).\n- Ekran görüntüleri veya hata günlükleri (varsa).\n\n## Şimdi Kurun:\n✅Kurulumdan **başarılı e-posta gönderimine** geçmek **sadece 8 dakika** sürer\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && bash install.sh\n```\n\n\n**Docker ile Kurulum**: (Lütfen Docker ve docker-compose-plugin'i manuel olarak kurun ve .env dosyasını değiştirin)\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && cp env_init .env && docker compose up -d || docker-compose up -d\n```\n\n## Yıldız Geçmişi\n\n[![Star History Chart](https://api.star-history.com/svg?repos=aapanel/billionmail&type=Date)](https://www.star-history.com/#aapanel/billionmail&Date)\n\n## Lisans\n\nBillionMail, **AGPLv3 Lisansı** altında lisanslanmıştır. Bu, şunları yapabileceğiniz anlamına gelir\n\n✅ Yazılımı ücretsiz kullanma.\n✅ Kodu değiştirme ve dağıtma.\n✅ Özel olarak kısıtlama olmaksızın kullanma.\n\nDaha fazla ayrıntı için [LICENSE](LICENSE) dosyasına bakın.\n\n---\n\n\n[docs-link]: https://www.billionmail.com/\n\n\n[license-link]: https://www.gnu.org/licenses/agpl-3.0.html\n[github-release-link]: https://github.com/aaPanel/BillionMail/releases/latest\n[github-stars-link]: https://github.com/aaPanel/BillionMail\n[github-issues-link]: https://github.com/aaPanel/BillionMail/issues\n\n\n[docs-shield]: https://img.shields.io/badge/documentation-148F76\n[github-release-shield]: https://img.shields.io/github/v/release/aaPanel/BillionMail\n[github-stars-shield]: https://img.shields.io/github/stars/aaPanel/BillionMail?color=%231890FF&style=flat-square   \n[license-shield]: https://img.shields.io/github/license/aaPanel/BillionMail\n" }, { "path": "README-zh_CN.md", "content": "
\n \n

BillionMail 📧

\n\n\n## 一个开源的邮件服务器，为智能营销提供电子邮件解决方案\n\n[![][license-shield]][license-link] [![][docs-shield]][docs-link] [![][github-release-shield]][github-release-link] [![][github-stars-shield]][github-stars-link]\n\n[English](README.md) | 简体中文 | [日本語](README-ja.md) | [Türkçe](README-ja.md)\n
\n
\n\n
\n\"aaPanel%2FBillionMail\n
\n\n## 在线演示\nBillionMail 演示: [https://demo.billionmail.com/billionmail](https://demo.billionmail.com/billionmail)\n\n用户名: `billionmail` \n\n密码: `billionmail` \n\n## 什么是 BillionMail？\n\nBillionMail 是一个**未来的开源邮件服务器和电子邮件营销平台**，旨在帮助企业和个人轻松管理他们的电子邮件营销活动。无论您是发送新闻通讯、促销邮件还是交易消息，这个工具都将为您的电子邮件营销工作提供**完全控制**。通过**高级分析**和**客户管理**等功能，您将能够像专业人士一样创建、发送和跟踪电子邮件。\n\n![BillionMail Banner](https://www.billionmail.com/home.png?v1)\n\n## 如何使用？\n**安装脚本：** (✅该脚本会自动安装所有必需的运行环境，包括Docker)\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && bash install.sh\n```\n\n\n**使用Docker安装：** (请手动安装Docker和docker-compose-plugin，并修改.env文件)\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && cp env_init .env && docker compose up -d || docker-compose up -d\n```\n\n\n\n\n## 管理脚本\n- 管理帮助\n\n `bm help`\n\n- 查看默认登录信息\n\n `bm default`\n\n- 显示域名DNS记录\n\n `bm show-record`\n\n- 更新BillionMail\n\n `bm update`\n\n\n\n## 网页邮箱\n\nBillionMail已集成**RoundCube**，您可以通过`/roundcube/`访问网页邮箱。\n\n## 为什么选择BillionMail？\n\n### 大多数电子邮件营销平台要么**昂贵**，要么**闭源**，或者**缺乏基本功能**。BillionMail的目标是与众不同：\n\n✅ **完全开源** – 没有隐藏成本，没有供应商锁定。 \n📊 **高级分析** – 跟踪电子邮件投递、打开率、点击率等。 \n📧 **无限发送** – 对您可以发送的电子邮件数量没有限制。 \n🎨 **可定制模板** – 可重复使用的专业营销模板。\n🔒 **隐私优先** – 您的数据保留在您这里，没有第三方跟踪。 \n🚀 **自托管** – 在您自己的服务器上运行，完全控制。 \n\n## 您如何提供帮助 🌟\n\nBillionMail是一个**社区驱动的项目**，我们需要您的支持才能开始！以下是您可以提供帮助的方式：\n\n1. **为此仓库加星标**：通过为此仓库加星表示您的兴趣。 \n2. **传播消息**：与您的网络分享BillionMail—开发者、营销人员和开源爱好者。 \n3. **分享反馈**：通过提出问题或加入讨论，让我们知道您希望在BillionMail中看到哪些功能。 \n4. **贡献**：一旦开发开始，我们将欢迎社区的贡献。敬请关注更新！\n\n---\n\n📧 **BillionMail – 开源电子邮件营销的未来。**\n\n## 问题\n\n如果您遇到任何问题或有功能请求，请[提交issue](https://github.com/aaPanel/BillionMail/issues)。请确保包括：\n\n- 问题或请求的清晰描述。\n- 重现问题的步骤（如适用）。\n- 截图或错误日志（如适用）。\n\n## 许可证\n\nBillionMail根据**AGPLv3许可证**授权。这意味着您可以：\n\n✅ 免费使用该软件。 \n✅ 修改和分发代码。 \n✅ 私下使用，没有限制。\n\n有关更多详细信息，请参阅[LICENSE](LICENSE)文件。\n\n\n\n[docs-link]: https://www.billionmail.com/\n\n\n[license-link]: https://www.gnu.org/licenses/gpl-3.0.html\n[github-release-link]: https://github.com/aaPanel/BillionMail/releases/latest\n[github-stars-link]: https://github.com/aaPanel/BillionMail\n[github-issues-link]: https://github.com/aaPanel/BillionMail/issues\n\n\n[docs-shield]: https://img.shields.io/badge/documentation-148F76\n[github-release-shield]: https://img.shields.io/github/v/release/aaPanel/BillionMail\n[github-stars-shield]: https://img.shields.io/github/stars/aaPanel/BillionMail?color=%231890FF&style=flat-square \n[license-shield]: https://img.shields.io/github/license/aaPanel/BillionMail\n" }, { "path": "README.md", "content": "
\n \n

BillionMail 📧

\n\n\n## An Open-Source MailServer, NewsLetter, Email Marketing Solution for Smarter Campaigns\n\n[![][license-shield]][license-link] [![][docs-shield]][docs-link] [![][github-release-shield]][github-release-link] [![][github-stars-shield]][github-stars-link]\n\nEnglish | [简体中文](README-zh_CN.md) | [日本語](README-ja.md) | [Türkçe](README-ja.md)\n
\n
\n\n
\n\"aaPanel%2FBillionMail\n
\n\n## What is BillionMail?\n\nBillionMail is a **future open-source Mail server, Email marketing platform** designed to help businesses and individuals manage their email campaigns with ease. Whether you're sending newsletters, promotional emails, or transactional messages, this tool will provide **full control** over your email marketing efforts. With features like **advanced analytics**, and **customer management**, you'll be able to create, send, and track emails like a pro.\n\n![BillionMail Banner](https://www.billionmail.com/home.png?v1)\n\n# Just 3 steps to send a billion emails!\n**Billion emails. Any business. Guaranteed.**\n\n### Step 1️⃣ Install BillionMail: \n✅ It takes **only 8️⃣ minutes** from installation to **✅ successful email sending**\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && bash install.sh\n```\n\n\n### Step 2️⃣: Connect Your Domain\n- Add the sending domain\n- Verify DNS records\n- Auto-enable free SSL\n\n\n### Step 3️⃣: Build Your Campaign\n\n- Write or paste your email\n- Choose list & tags\n- Set send time or send now\n\n\n\n\n\n## Other installation methods\n\n### One-click installation on aaPanel\n👉 https://www.aapanel.com/new/download.html (Log in to ✅aaPanel --> 🐳Docker --> 1️⃣OneClick install)\n\n\n\n\n**Docker**\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && cp env_init .env && docker compose up -d || docker-compose up -d\n```\n\n## Management script\n- Management help\n\n `bm help`\n\n- View Login default info\n\n `bm default`\n\n- Show domain DNS record\n\n `bm show-record`\n\n- Update BillionMail\n\n `bm update`\n\n## Live Demo\nBillionMail Demo: [https://demo.billionmail.com/billionmail](https://demo.billionmail.com/billionmail)\n\nUsername: `billionmail` \n\nPassword: `billionmail` \n\n\n## WebMail\n\nBillionMail has integrated **RoundCube**, you can access WebMail via `/roundcube/`.\n\n## Why BillionMail?\n\nMost email marketing platforms are either **expensive**, **closed-source**, or **lack essential features**. BillionMail aims to be different:\n\n✅ **Fully Open-Source** – No hidden costs, no vendor lock-in. \n📊 **Advanced Analytics** – Track email delivery, open rates, click-through rates, and more. \n📧 **Unlimited Sending** – No restrictions on the number of emails you can send. \n🎨 **Customizable Templates** – Custom professional marketing templates for reuse.\n🔒 **Privacy-First** – Your data stays with you, no third-party tracking. \n🚀 **Self-Hosted** – Run it on your own server for complete control. \n\n## How You Can Help 🌟\n\nBillionMail is a **community-driven project**, and we need your support to get started! Here's how you can help:\n\n1. **Star This Repository**: Show your interest by starring this repo. \n2. **Spread the Word**: Share BillionMail with your network—developers, marketers, and open-source enthusiasts. \n3. **Share Feedback**: Let us know what features you'd like to see in BillionMail by opening an issue or joining the discussion. \n4. **Contribute**: Once development begins, we'll welcome contributions from the community. Stay tuned for updates!\n\n---\n\n📧 **BillionMail – The Future of Open-Source Email Marketing.**\n\n## Issues\n\nIf you encounter any issues or have feature requests, please [open an issue](https://github.com/aaPanel/BillionMail/issues). Be sure to include:\n\n- A clear description of the problem or request.\n- Steps to reproduce the issue (if applicable).\n- Screenshots or error logs (if applicable).\n\n## Install Now:\n✅It takes **only 8 minutes** from installation to **successful email sending**\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && bash install.sh\n```\n\n\n**Install with Docker:** (Please install Docker and docker-compose-plugin manually, and modify .env file)\n```shell\ncd /opt && git clone https://github.com/aaPanel/BillionMail && cd BillionMail && cp env_init .env && docker compose up -d || docker-compose up -d\n```\n\n## Star History\n\n[![Star History Chart](https://api.star-history.com/svg?repos=aapanel/billionmail&type=Date)](https://www.star-history.com/#aapanel/billionmail&Date)\n\n## License\n\nBillionMail is licensed under the **AGPLv3 License**. This means you can:\n\n✅ Use the software for free. \n✅ Modify and distribute the code. \n✅ Use it privately without restrictions.\n\nSee the [LICENSE](LICENSE) file for more details.\n\n---\n\n\n[docs-link]: https://www.billionmail.com/\n\n\n[license-link]: https://www.gnu.org/licenses/agpl-3.0.html\n[github-release-link]: https://github.com/aaPanel/BillionMail/releases/latest\n[github-stars-link]: https://github.com/aaPanel/BillionMail\n[github-issues-link]: https://github.com/aaPanel/BillionMail/issues\n\n\n[docs-shield]: https://img.shields.io/badge/documentation-148F76\n[github-release-shield]: https://img.shields.io/github/v/release/aaPanel/BillionMail\n[github-stars-shield]: https://img.shields.io/github/stars/aaPanel/BillionMail?color=%231890FF&style=flat-square   \n[license-shield]: https://img.shields.io/github/license/aaPanel/BillionMail\n\n" }, { "path": "SECURITY.md", "content": "# Security Policy\n\n## Reporting a Vulnerability\n\nPlease report security issues to `1249648969@qq.com`\n" }, { "path": "bm.sh", "content": "#!/bin/bash\nPATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin\nexport PATH\n\n# Add domain name and email\n\nCONTAINER_PROJECT_NAME=billionmail\nPGSQL_CONTAINER_NAME=\"${CONTAINER_PROJECT_NAME}-pgsql-billionmail-1\"\nDOVECOT_CONTAINER_NAME=\"${CONTAINER_PROJECT_NAME}-dovecot-billionmail-1\"\nPOSTFIX_CONTAINER_NAME=\"${CONTAINER_PROJECT_NAME}-postfix-billionmail-1\"\nRSPAMD_CONTAINER_NAME=\"${CONTAINER_PROJECT_NAME}-rspamd-billionmail-1\"\ncreate_time=$(date +%s)\ntime=$(date +%Y_%m_%d_%H_%M_%S)\n\nif [ $(whoami) != \"root\" ];then\n echo -e \"Non-root install, please try the following solutions: \\n 1.Please switch to root user install \\n 2.Try executing the following install commands: \\n sudo bash $0 $@\"\n exit 1\nfi\n\nPWD_d=`pwd`\n\nSWITCH_TO_BILLIONMAIL_DIR(){\n if [ -f \"/opt/PWD-Billion-Mail.txt\" ]; then\n DIR=$(cat /opt/PWD-Billion-Mail.txt)\n if [ -d \"${DIR}\" ]; then\n cd \"${DIR}\"\n echo \"Enter the BillionMail project directory: ${DIR}\"\n fi\n fi\n}\n\nif [ -s \".env\" ]; then\n CHECK_BILLIONMAIL=$(grep \"BILLIONMAIL_HOSTNAME\" .env)\n if [ -z \"${CHECK_BILLIONMAIL}\" ]; then\n SWITCH_TO_BILLIONMAIL_DIR\n fi\nelse\n SWITCH_TO_BILLIONMAIL_DIR\nfi\n\nif [ ! -s \".env\" ]; then\n ls -al\n echo \" The .env file does not exist. Cannot continue operation, please operate in the BillionMail project directory\"\n exit 1\nfi\n\nsource .env\nif [ -z \"${DBUSER}\" ] || [ -z \"${DBNAME}\" ] || [ -z \"${DBPASS}\" ]; then\n echo \"The obtained .env configuration exception is empty.\" \n exit 1\nfi\n\nRed_Error(){\n echo '=================================================';\n printf '\\033[1;31;40m%b\\033[0m\\n' \"$@\";\n exit 1;\n}\n\nCommand_Exists() {\n command -v \"$@\" >/dev/null 2>&1\n}\n\n\nDocker_Compose_Check(){\n\n if Command_Exists docker-compose ; then\n DOCKER_COMPOSE=\"docker-compose\"\n else \n if Command_Exists docker; then\n Docker_compose=\"docker compose version\"\n if $Docker_compose >/dev/null 2>&1; then\n DOCKER_COMPOSE=\"docker compose\"\n fi\n else\n Red_Error \"ERROR: Docker Compose does not exist\"\n fi\n\n fi\n}\nDocker_Compose_Check\n\nGET_SERVICE_NAME() {\n\n # ALL_SERVICE_NAME=$(${DOCKER_COMPOSE} config --services |grep \"${SERVICE}\")\n # echo \"${ALL_SERVICE_NAME}\"\n\n if [[ \"${SERVICE}\" == \"core\" ]] || [[ \"${SERVICE}\" == \"manage\" ]]; then\n #echo \"Getting the \"${SERVICE}\" service...\"\n SERVICE_NAME=$(${DOCKER_COMPOSE} ps -a --format \" {{.Service}} {{.ID}} {{.Image}}\" |grep \"/core:\" | awk '{print $1}' )\n \n elif [[ \"${SERVICE}\" == \"postfix\" ]] || [[ \"${SERVICE}\" == \"postfix-billionmail\" ]]; then\n SERVICE_NAME=\"postfix-billionmail\"\n \n elif [[ \"${SERVICE}\" == \"dovecot\" ]] || [[ \"${SERVICE}\" == \"dovecot-billionmail\" ]]; then\n SERVICE_NAME=\"dovecot-billionmail\"\n \n elif [[ \"${SERVICE}\" == \"rspamd\" ]] || [[ \"${SERVICE}\" == \"rspamd-billionmail\" ]]; then\n SERVICE_NAME=\"rspamd-billionmail\"\n \n elif [[ \"${SERVICE}\" == \"pgsql\" ]] || [[ \"${SERVICE}\" == \"postgres\" ]] || [[ \"${SERVICE}\" == \"pgsql-billionmail\" ]]; then\n SERVICE_NAME=\"pgsql-billionmail\"\n \n elif [[ \"${SERVICE}\" == \"redis\" ]] || [[ \"${SERVICE}\" == \"redis-billionmail\" ]]; then\n SERVICE_NAME=\"redis-billionmail\"\n\n elif [[ \"${SERVICE}\" == \"webmail\" ]] || [[ \"${SERVICE}\" == \"roundcube\" ]] || [[ \"${SERVICE}\" == \"webmail-billionmail\" ]]; then\n SERVICE_NAME=\"webmail-billionmail\"\n \n else\n echo \"Please use: core|postfix|dovecot|rspamd|pgsql|redis|webmail\"\n Red_Error \"ERROR: The \"${SERVICE}\" service does not exist\"\n\n fi\n\n if [ -z \"${SERVICE_NAME}\" ]; then\n Red_Error \"ERROR: The \"${SERVICE}\" service does not exist\"\n fi\n\n}\n\n\nGET_CONTAINER_ID() {\n\n if [ -z \"${CONTAINER}\" ]; then\n CONTAINER=\"$1\"\n fi\n\n if [[ \"${CONTAINER}\" == \"core\" ]] || [[ \"${CONTAINER}\" == \"manage\" ]]; then\n CONTAINER_ID=$(${DOCKER_COMPOSE} ps -a --format \"{{.ID}} {{.Image}}\" |grep \"/core:\" | awk '{print $1}' )\n \n elif [[ \"\"${CONTAINER}\"\" == \"postfix\" ]] || [[ \"\"${CONTAINER}\"\" == \"postfix-billionmail\" ]]; then\n CONTAINER_ID=$(${DOCKER_COMPOSE} ps -a --format \"{{.ID}} {{.Image}}\" |grep \"/postfix:\" | awk '{print $1}' )\n \n elif [[ \"\"${CONTAINER}\"\" == \"dovecot\" ]] || [[ \"\"${CONTAINER}\"\" == \"dovecot-billionmail\" ]]; then\n CONTAINER_ID=$(${DOCKER_COMPOSE} ps -a --format \"{{.ID}} {{.Image}}\" |grep \"/dovecot:\" | awk '{print $1}' )\n \n elif [[ \"\"${CONTAINER}\"\" == \"rspamd\" ]] || [[ \"\"${CONTAINER}\"\" == \"rspamd-billionmail\" ]]; then\n CONTAINER_ID=$(${DOCKER_COMPOSE} ps -a --format \"{{.ID}} {{.Image}}\" |grep \"/rspamd:\" | awk '{print $1}' )\n \n elif [[ \"\"${CONTAINER}\"\" == \"pgsql\" ]] || [[ \"\"${CONTAINER}\"\" == \"postgres\" ]] || [[ \"\"${CONTAINER}\"\" == \"pgsql-billionmail\" ]]; then\n CONTAINER_ID=$(${DOCKER_COMPOSE} ps -a --format \"{{.ID}} {{.Image}}\" |grep \"postgres:\" | awk '{print $1}' )\n \n elif [[ \"\"${CONTAINER}\"\" == \"redis\" ]] || [[ \"\"${CONTAINER}\"\" == \"redis-billionmail\" ]]; then\n CONTAINER_ID=$(${DOCKER_COMPOSE} ps -a --format \"{{.ID}} {{.Image}}\" |grep \"redis:\" | awk '{print $1}' )\n\n elif [[ \"\"${CONTAINER}\"\" == \"webmail\" ]] || [[ \"\"${CONTAINER}\"\" == \"roundcube\" ]] || [[ \"\"${CONTAINER}\"\" == \"webmail-billionmail\" ]]; then\n CONTAINER_ID=$(${DOCKER_COMPOSE} ps -a --format \"{{.ID}} {{.Image}}\" |grep \"roundcubemail:\" | awk '{print $1}' )\n \n else\n echo \"Please use: core|postfix|dovecot|rspamd|pgsql|redis|webmail\"\n Red_Error \"ERROR: The \"\"${CONTAINER}\"\" container does not exist\"\n fi\n\n}\n\n\nInit_Email() {\n input=\"$2\"\n\n # Regular expression verification email address format\n if [[ \"$input\" =~ ^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}$ ]]; then\n mailbox=$(echo \"$input\" | cut -d '@' -f 1 | tr '[:upper:]' '[:lower:]')\n BILLIONMAIL_HOSTNAME=$(echo \"$input\" | cut -d '@' -f 2 | tr '[:upper:]' '[:lower:]')\n \n else\n echo \"Enter an email address that is not a legal one: $input\"\n echo \"Example: user@example.com\"\n exit 1\n fi\n}\n\n\nInit_Domain() {\n BILLIONMAIL_HOSTNAME=\"$2\"\n\n # Regular expression check domain name format\n # if [[ ! \"${BILLIONMAIL_HOSTNAME}\" =~ ^[a-zA-Z0-9][a-zA-Z0-9-]{0,61}[a-zA-Z0-9](\\.[a-zA-Z0-9][a-zA-Z0-9-]{0,61}[a-zA-Z0-9])*$ ]]; then\n if [[ ! \"${BILLIONMAIL_HOSTNAME}\" =~ ^([a-zA-Z0-9]([a-zA-Z0-9-]{0,62}[a-zA-Z0-9])?\\.)+[a-zA-Z]{2,}$ ]]; then\n echo -e \"\\e[31m(${BILLIONMAIL_HOSTNAME}) is not a FQDN!\\e[0m\"\n echo \"Please change it to a FQDN\"\n exit 1\n elif [[ \"${BILLIONMAIL_HOSTNAME: -1}\" == \".\" ]]; then\n echo \"(${BILLIONMAIL_HOSTNAME}) is ending with a dot. This is not a valid FQDN!\"\n exit 1\n\n fi\n\n # Convert to lowercase\n BILLIONMAIL_HOSTNAME=$(echo \"${BILLIONMAIL_HOSTNAME}\" | tr '[:upper:]' '[:lower:]')\n\n}\n\nDomain_DKIM_record(){\n if [ -z \"${BILLIONMAIL_HOSTNAME}\" ]; then\n echo \"Please enter the domain name\"\n exit 1\n fi\n\n Check_domain=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"SELECT * FROM domain WHERE domain = '${BILLIONMAIL_HOSTNAME}';\" | grep -w \"^ ${BILLIONMAIL_HOSTNAME}\")\n if [ -z \"${Check_domain}\" ]; then\n echo \"Error: ${BILLIONMAIL_HOSTNAME} Domain does not exist.\"\n exit 1\n fi\n\n ## DKIM key generation\n docker exec -i -e BILLIONMAIL_HOSTNAME=${BILLIONMAIL_HOSTNAME} ${RSPAMD_CONTAINER_NAME} bash -c 'cat << \"EOF\" > /tmp/1.sh\n#!/bin/bash\nif [ ! -d \"/var/lib/rspamd/dkim/${BILLIONMAIL_HOSTNAME}/\" ]; then\n mkdir -p \"/var/lib/rspamd/dkim/${BILLIONMAIL_HOSTNAME}/\"\nfi\nif [ -f \"/var/lib/rspamd/dkim/${BILLIONMAIL_HOSTNAME}/default.private\" ] && [ -f \"/var/lib/rspamd/dkim/${BILLIONMAIL_HOSTNAME}/default.pub\" ]; then\n #echo \"DKIM key already exists, skipping generation.\"\n exit 0\nfi\n\nrspamadm dkim_keygen -s 'default' -b 1024 -d {domain} -k \"/var/lib/rspamd/dkim/${BILLIONMAIL_HOSTNAME}/default.private\" > \"/var/lib/rspamd/dkim/${BILLIONMAIL_HOSTNAME}/default.pub\"\nif [ $? -eq 0 ]; then\n # Define the root directory for private keys\n DKIM_KEYS_DIR=\"/var/lib/rspamd/dkim\"\n # Configuration file path\n CONFIG_FILE=\"/etc/rspamd/local.d/dkim_signing.conf\"\n # Check if the configuration file exists, if not, create it\n if [ ! -f \"${CONFIG_FILE}\" ]; then\n touch \"${CONFIG_FILE}\"\n echo \"${CONFIG_FILE}\"\n echo \"domain {\" > \"${CONFIG_FILE}\"\n echo \"#BT_DOMAIN_DKIM_BEGIN\" >> \"${CONFIG_FILE}\"\n echo \"#BT_DOMAIN_DKIM_END\" >> \"${CONFIG_FILE}\"\n echo \"}\" >> \"${CONFIG_FILE}\"\n fi\n # Scan the DKIM_KEYS_DIR directory to get all domains\n DOMAINS=()\n for DOMAIN_DIR in \"${DKIM_KEYS_DIR}\"/*; do\n if [ -d \"${DOMAIN_DIR}\" ]; then\n DOMAIN_NAME=$(basename \"${DOMAIN_DIR}\")\n PRIVATE_KEY_PATH=\"${DOMAIN_DIR}/default.private\"\n if [ -f \"${PRIVATE_KEY_PATH}\" ]; then\n DOMAINS+=(\"${DOMAIN_NAME}:${PRIVATE_KEY_PATH}\")\n else\n echo \"Warning: Private key file ${PRIVATE_KEY_PATH} for domain ${DOMAIN_NAME} does not exist, skipping configuration.\"\n fi\n fi\n done\n # Add domain configurations\n for DOMAIN in \"${DOMAINS[@]}\"; do\n DOMAIN_NAME=$(echo \"${DOMAIN}\" | cut -d':' -f1)\n PRIVATE_KEY_PATH=$(echo \"${DOMAIN}\" | cut -d':' -f2)\n # Check if the domain already exists\n if grep -wq \"${DOMAIN_NAME}\" \"${CONFIG_FILE}\"; then\n # echo \"Domain ${DOMAIN_NAME} already exists, skipping configuration.\"\n continue\n fi\n # Insert domain configuration between #BT_DOMAIN_DKIM_BEGIN and #BT_DOMAIN_DKIM_END\n sed -i \"/^#BT_DOMAIN_DKIM_BEGIN$/a #${DOMAIN_NAME}_DKIM_BEGIN\\n ${DOMAIN_NAME} {\\n selectors [\\n {\\n path: \\\"${PRIVATE_KEY_PATH}\\\";\\n selector: \\\"default\\\"\\n }\\n ]\\n }\\n#${DOMAIN_NAME}_DKIM_END\" \"${CONFIG_FILE}\"\n # echo \"Domain ${DOMAIN_NAME} has been successfully added to the configuration file.\"\n done\n # echo \"DKIM configuration update completed.\"\nelse\n echo -e \"DKIM key generation failed!\"\n exit 1\nfi\nchmod 755 -R \"/var/lib/rspamd/dkim/${BILLIONMAIL_HOSTNAME}/\"\nEOF'\n docker exec -i -e BILLIONMAIL_HOSTNAME=${BILLIONMAIL_HOSTNAME} ${RSPAMD_CONTAINER_NAME} bash /tmp/1.sh && rm -f /tmp/1.sh\n DKIM_RECORD=$(docker exec ${RSPAMD_CONTAINER_NAME} cat \"/var/lib/rspamd/dkim/${BILLIONMAIL_HOSTNAME}/default.pub\")\n # echo \"DKIM RECORD: ${DKIM_RECORD}\"\n \n}\n\n\nDomain_record() {\n\n Check_domain=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"SELECT * FROM domain WHERE domain = '${BILLIONMAIL_HOSTNAME}';\" | grep -w \"^ ${BILLIONMAIL_HOSTNAME}\")\n if [ \"${Check_domain}\" ]; then\n\n IPV4_ADDRESS=$(curl -sS -4 --connect-timeout 10 -m 20 https://ifconfig.me)\n if [ -z \"${IPV4_ADDRESS}\" ]; then\n IPV4_ADDRESS=$(curl -sSk --connect-timeout 10 -m 20 https://www.aapanel.com/api/common/getClientIP)\n fi\n ipv4_regex=\"^([0-9]{1,3}\\.){3}[0-9]{1,3}$\"\n if [[ ${IPV4_ADDRESS} =~ ${ipv4_regex} ]]; then \n echo \"${IPV4_ADDRESS}\" >/dev/null 2>&1\n elif [ -z \"${IPV4_ADDRESS}\" ]; then\n IPV4_ADDRESS=\"YOUR_SERVER_IPV4_ADDRESS\"\n fi\n echo -e \"\"\n echo -e \"\\e[31mPlease add the following record to your domain name\\e[0m\"\n echo -e \"===========================================================\"\n echo -e \" Type | Host record | IPv4 address |\"\n echo -e \" \\e[1;33mA\\e[0m | \\e[1;33mmail.${BILLIONMAIL_HOSTNAME}\\e[0m | \\e[1;33m${IPV4_ADDRESS}\\e[0m |\"\n echo -e \"===========================================================\"\n echo -e \" Type | Host record | MX priority | Record value \"\n echo -e \" \\e[1;33mMX\\e[0m | \\e[1;33m@\\e[0m | \\e[1;33m10\\e[0m | \\e[1;33mmail.${BILLIONMAIL_HOSTNAME}\\e[0m \"\n echo -e \"===========================================================\"\n if [ \"${IPV4_ADDRESS}\" ]; then\n echo -e \" Type | Host record | Record value |\"\n echo -e \" \\e[1;33mTXT\\e[0m | \\e[1;33m@\\e[0m | \\e[1;33mv=spf1 +a +mx +ip4:${IPV4_ADDRESS} -all\\e[0m |\"\n else\n echo -e \" Type | Host record | Record value |\"\n echo -e \" \\e[1;33mTXT\\e[0m | \\e[1;33m@\\e[0m | \\e[1;33mv=spf1 +a +mx -all\\e[0m |\"\n fi\n echo -e \"===========================================================\"\n echo -e \" Type | Host record | Record value |\"\n echo -e \" \\e[1;33mTXT\\e[0m | \\e[1;33m_dmarc\\e[0m | \\e[1;33mv=DMARC1;p=quarantine;rua=mailto:admin@${BILLIONMAIL_HOSTNAME}\\e[0m |\"\n echo -e \"===========================================================\"\n\n Domain_DKIM_record\n\n if [ \"${DKIM_RECORD}\" ]; then\n DKIM_RECORD=$(echo \"${DKIM_RECORD}\" | awk -F'\"' '{print $2 $4}' | tr -d '[:space:]')\n #echo \"DKIM RECORD: ${DKIM_RECORD}\"\n echo -e \" Type | Host record | Record value |\"\n echo -e \" \\e[1;33mTXT\\e[0m | \\e[1;33mdefault._domainkey\\e[0m | \\e[1;33m${DKIM_RECORD}\\e[0m |<-- Start from \\\"v=DKIM1\\\" end, A single line.\"\n echo -e \"===========================================================\"\n else\n echo -e \"${BILLIONMAIL_HOSTNAME} DKIM key generation failed!\"\n fi\n else\n echo -e \"Domain ${BILLIONMAIL_HOSTNAME} does not exist.\"\n fi\n}\n\n\nSelect_Domain_data(){\n\n # Check_domain=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"SELECT * FROM domain;\")\n # echo \"${Check_domain}\"\n Check_domain=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"SELECT domain FROM domain;\")\n echo \"${Check_domain}\"\n}\n\nSelect_Email_data(){\n\n Check_mailbox=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"SELECT username FROM mailbox;\")\n echo \"${Check_mailbox}\"\n}\n\nAdd_Domain() {\n\n echo \"Creating domain...\"\n \n Check_domain=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"SELECT * FROM domain WHERE domain = '${BILLIONMAIL_HOSTNAME}';\" | grep -w \"^ ${BILLIONMAIL_HOSTNAME}\")\n if [ -z \"${Check_domain}\" ]; then\n # Create a domain\n \n docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"INSERT INTO domain (domain, a_record, mailboxes, mailbox_quota, quota, rate_limit, create_time, active)\n VALUES ('${BILLIONMAIL_HOSTNAME}', 'mail.${BILLIONMAIL_HOSTNAME}', 500, 5368709120, 5368709120, 12, ${create_time}, 1);\"\n if [ $? -eq 0 ]; then\n echo \"${BILLIONMAIL_HOSTNAME} Domain creation was successful!\"\n Domain_record\n else\n Red_Error \"Domain creation failed!\"\n fi\n else\n echo \"\"${Check_domain}\" Domain already exists!\"\n fi\n}\n\nDel_Domain() {\n echo \"Deleting domain...\"\n\n Check_domain=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"SELECT * FROM domain WHERE domain = '${BILLIONMAIL_HOSTNAME}';\" | grep -w \"^ ${BILLIONMAIL_HOSTNAME}\")\n \n if [ -z \"${Check_domain}\" ]; then\n echo \"Domain '${BILLIONMAIL_HOSTNAME}' does not exist!\"\n else\n # Delete the domain\n docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"DELETE FROM domain WHERE domain = '${BILLIONMAIL_HOSTNAME}';\"\n if [ $? -eq 0 ]; then\n echo \"Domain '${BILLIONMAIL_HOSTNAME}' deleted successfully!\"\n else\n Red_Error \"Failed to delete domain '${BILLIONMAIL_HOSTNAME}'!\"\n fi\n fi\n}\n\n\nAdd_Email() {\n echo \"Creating mailbox...\"\n\n Check_domain=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"SELECT * FROM domain WHERE domain = '${BILLIONMAIL_HOSTNAME}';\" | grep -w \"^ ${BILLIONMAIL_HOSTNAME}\")\n if [ -z \"${Check_domain}\" ]; then\n Red_Error \"Domain '${BILLIONMAIL_HOSTNAME}' does not exist, please create it first!\"\n fi\n\n # Create a mailbox\n if [ -z \"${mailbox}\" ]; then\n mailbox=$(LC_ALL=C /dev/null | head -c 6)\n echo \"Generate mailbox: ${mailbox}\"\n else\n mailbox=$(echo \"${mailbox}\" | tr '[:upper:]' '[:lower:]')\n fi\n Generate_mailbox_password=$(LC_ALL=C /dev/null | head -c 16)\n #echo \"Generate_mailbox_password: ${Generate_mailbox_password}\"\n Encrypt_mailbox_password=$(docker exec -i ${DOVECOT_CONTAINER_NAME} doveadm pw -s MD5-CRYPT -p \"${Generate_mailbox_password}\" | sed 's/{MD5-CRYPT}//')\n if [ $? -eq 0 ]; then\n echo \"Generate_mailbox_password: ${Generate_mailbox_password}\"\n echo \"mailbox_password: ${Encrypt_mailbox_password}\"\n else\n # Generate the default password after failure: BILLIONMAIL\n Generate_mailbox_password=\"BILLIONMAIL\"\n Encrypt_mailbox_password='$1$ELBUCcYE$TbdGKBvLkFbjQguDbi3s01'\n echo \"Generate_mailbox_password--default: ${Generate_mailbox_password}\"\n Default_password=1\n fi\n\n if [ \"${Default_password}\" != 1 ]; then\n # password_encode \n # Base64 encoding of strings\n b64_data=$(echo -n \"${Generate_mailbox_password}\" | base64)\n # Convert characters to hexadecimal\n password_encode=$(echo -n \"${b64_data}\" | while IFS= read -r -n1 char; do printf \"%02x\" \"'$char\"; done)\n echo \"password_encode: ${password_encode}\"\n if [ -z ${password_encode} ]; then\n b64_data=$(echo -n \"${Generate_mailbox_password}\" | base64)\n password_encode=$(echo -n \"${b64_data}\" | od -A n -t x1 | tr -d ' \\n')\n echo \"password_encode: ${password_encode}\"\n fi\n else\n password_encode=\"516b6c4d54456c50546b31425355773d\"\n fi\n\n Check_mailbox=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"SELECT * FROM mailbox WHERE username = '${mailbox}@${BILLIONMAIL_HOSTNAME}';\" | grep -w \"${mailbox}@${BILLIONMAIL_HOSTNAME}\")\n if [ -z \"${Check_mailbox}\" ]; then\n INSERT_mailbox='INSERT INTO mailbox (username, password, password_encode, full_name, is_admin, maildir, quota, local_part, domain, create_time, update_time, active)\n VALUES (\n '\\'${mailbox}@${BILLIONMAIL_HOSTNAME}\\'',\n '\\'${Encrypt_mailbox_password}\\'',\n '\\'${password_encode}\\'',\n '\\'${mailbox}\\'',\n 0,\n '\\'${mailbox}@${BILLIONMAIL_HOSTNAME}/\\'',\n 5368709120,\n '\\'${mailbox}\\'',\n '\\'${BILLIONMAIL_HOSTNAME}\\'',\n '${create_time}',\n '${create_time}',\n 1\n );'\n echo \"$INSERT_mailbox\"\n docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"$INSERT_mailbox\"\n if [ $? -eq 0 ]; then\n echo \"Mailbox creation was successful!\"\n else\n Red_Error \"Mailbox creation failed!\"\n fi\n #docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"SELECT * FROM mailbox WHERE username = '${mailbox}@${BILLIONMAIL_HOSTNAME}';\"\n else\n echo \"\"${Check_mailbox}\" Mailbox already exists!\"\n fi\n \n echo -e \"\\e[31mPlease save the following information:\\e[0m\"\n echo -e \"Mailbox (e-mail): \\e[33m${mailbox}@${BILLIONMAIL_HOSTNAME}\\e[0m \\nPassword: \\e[33m${Generate_mailbox_password}\\e[0m\" \n}\n\n\nDel_Email() {\n \n echo \"Deleting mailbox...\"\n\n Check_mailbox=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"SELECT * FROM mailbox WHERE username = '${mailbox}@${BILLIONMAIL_HOSTNAME}';\" | grep -w \"${mailbox}@${BILLIONMAIL_HOSTNAME}\")\n \n if [ -z \"${Check_mailbox}\" ]; then\n echo \"Mailbox '${mailbox}@${BILLIONMAIL_HOSTNAME}' does not exist!\"\n else\n docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"DELETE FROM mailbox WHERE username = '${mailbox}@${BILLIONMAIL_HOSTNAME}';\"\n if [ $? -eq 0 ]; then\n echo \"Mailbox '${mailbox}@${BILLIONMAIL_HOSTNAME}' deleted successfully!\"\n else\n Red_Error \"Failed to delete mailbox '${mailbox}@${BILLIONMAIL_HOSTNAME}'!\"\n fi\n fi\n}\n\nUpdate_BillionMail() {\n BRANCH=\"main\"\n if [ -f \"update.sh\" ]; then\n echo -e \"Checking for update.sh script...\"\n MD5_1=\"$(md5sum update.sh)\"\n git fetch origin\n git checkout \"origin/${BRANCH}\" update.sh\n MD5_2=$(md5sum update.sh)\n if [[ \"${MD5_1}\" != \"${MD5_2}\" ]]; then\n #echo -e \"\\033[33m update.sh is changed, please run update.sh script again.\\033[0m\"\n chmod +x update.sh\n echo y | ./update.sh\n #exit 1\n else\n chmod +x update.sh\n echo y | ./update.sh\n fi\n else\n Red_Error \"Error: update.sh script does not exist!\"\n fi\n}\n\n\nDefault_info() {\n\n ipv4_address=\"\"\n ipv6_address=\"\"\n if [ \"$address\" = \"\" ];then\n \n ipv4_address=$(curl -4 -sSf --connect-timeout 10 -m 15 https://ifconfig.me 2>&1)\n if [ -z \"${ipv4_address}\" ];then\n ipv4_address=$(curl -4 -sSf --connect-timeout 10 -m 15 https://www.aapanel.com/api/common/getClientIP 2>&1)\n if [ -z \"${ipv4_address}\" ];then\n ipv4_address=$(curl -4 -sSf --connect-timeout 10 -m 15 https://www.bt.cn/Api/getIpAddress 2>&1)\n fi\n fi\n IPV4_REGEX=\"^([0-9]{1,3}\\.){3}[0-9]{1,3}$\"\n if ! [[ $ipv4_address =~ $IPV4_REGEX ]]; then\n ipv4_address=\"\"\n fi\n \n ipv6_address=$(curl -6 -sSf --connect-timeout 10 -m 15 https://ifconfig.me 2>&1)\n IPV6_REGEX=\"^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}$\"\n if ! [[ $ipv6_address =~ $IPV6_REGEX ]]; then\n ipv6_address=\"\"\n else\n if [[ ! $ipv6_address =~ ^\\[ ]]; then\n ipv6_address=\"[$ipv6_address]\"\n fi\n fi\n\n if [ \"$address\" = \"\" ] && [ \"$ipv4_address\" = \"\" ] && [ \"$ipv6_address\" = \"\" ];then\n address=\"SERVER_IP\"\n echo -e \"\\033[33mFailed to obtain Internet IP, please use the server Internet IP+PORT to access.\\033[0m\"\n fi\n fi\n\n LOCAL_IP=$(ip addr | grep -E -o '[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}' | grep -E -v \"^127\\.|^255\\.|^0\\.\" | head -n 1)\n echo -e \"==================================================================\"\n echo -e \"\\033[32mBillionMail default info!\\033[0m\"\n echo -e \"==================================================================\"\n pool=https\n\n if [ -f \"core-data/billionmail_hostname.txt\" ];then\n BILLIONMAIL_Domain=$(cat core-data/billionmail_hostname.txt)\n if [ \"${HTTPS_PORT}\" = \"443\" ];then\n echo \"BillionMail Domain Address: ${pool}://${BILLIONMAIL_Domain}/${SafePath}\"\n else\n echo \"BillionMail Domain Address: ${pool}://${BILLIONMAIL_Domain}:${HTTPS_PORT}/${SafePath}\"\n fi\n fi\n \n if [ \"${ipv6_address}\" ];then\n if [ \"${HTTPS_PORT}\" = \"443\" ];then\n echo \"BillionMail Internet IPv6 Address: ${pool}://${ipv6_address}/${SafePath}\"\n else\n echo \"BillionMail Internet IPv6 Address: ${pool}://${ipv6_address}:${HTTPS_PORT}/${SafePath}\"\n fi\n fi\n if [ \"${ipv4_address}\" ];then\n if [ \"${HTTPS_PORT}\" = \"443\" ];then\n echo \"BillionMail Internet IPv4 Address: ${pool}://${ipv4_address}/${SafePath}\"\n else\n echo \"BillionMail Internet IPv4 Address: ${pool}://${ipv4_address}:${HTTPS_PORT}/${SafePath}\"\n fi\n fi\n if [ \"${address}\" ];then\n if [ \"${HTTPS_PORT}\" = \"443\" ];then\n echo \"BillionMail Internet Address: ${pool}://${address}/${SafePath}\"\n else\n echo \"BillionMail Internet Address: ${pool}://${address}:${HTTPS_PORT}/${SafePath}\"\n fi\n\n fi\n\n if [ \"${HTTPS_PORT}\" = \"443\" ];then\n echo \"BillionMail Internal Address: ${pool}://${LOCAL_IP}/${SafePath}\"\n else\n echo \"BillionMail Internal Address: ${pool}://${LOCAL_IP}:${HTTPS_PORT}/${SafePath}\"\n fi\n \n echo -e \"Username: ${ADMIN_USERNAME} \\nPassword: ${ADMIN_PASSWORD}\"\n echo -e \"\\033[33mWarning:\\033[0m\"\n echo -e \"\\033[33mIf you cannot access the BillionMail, \\033[0m\"\n echo -e \"\\033[33mrelease the following port ${SMTP_PORT}|${SMTPS_PORT}|${SUBMISSION_PORT}|${POP_PORT}|${IMAP_PORT}|${IMAPS_PORT}|${POPS_PORT}|${HTTP_PORT}|${HTTPS_PORT} in the security group\\033[0m\"\n echo -e \"==================================================================\"\n}\n\n# Modify the apply SSL interface access port\nMODIFY_HTTP_SSL_PORT() { \n\n NEW_PORT=\"$2\"\n if [ -z \"${NEW_PORT}\" ]; then\n echo -e \"\\033[31m Let's Encrypt SSL certificate can only be applied using port 80, other ports cannot be applied.\\033[0m\"\n read -p \"Please enter the new apply SSL port: \" NEW_PORT\n fi\n\n # Verify that the input is a number\n if ! echo \"${NEW_PORT}\" | grep -qE '^[0-9]+$' || ((NEW_PORT < 1 || NEW_PORT > 65535)); then\n echo -e \"\\033[31m Error: The port number must be a number between 1-65535 \\033[0m\"\n exit 1\n fi\n\n Check_Port=$(ss -tlnp | grep -E \":(${NEW_PORT})\\b\")\n if [ ! -z \"${Check_Port}\" ]; then\n echo \"${Check_Port}\"\n echo -e \"\\033[31m Error: The ${NEW_PORT} port is already in use. \\033[0m\"\n exit 1\n fi\n\n # Perform modification\n sed -i 's/^HTTP_PORT=.*/HTTP_PORT='\"${NEW_PORT}\"'/' .env\n echo -e \"The BillionMail apply SSL port has been modified to: ${NEW_PORT} \\n Rebuild the container, please wait...\"\n\n sleep 3\n # Find the container ID of the core image in the current project and rebuild the container\n # CONTAINER_ID=$(${DOCKER_COMPOSE} ps -a --format \"{{.ID}} {{.Image}}\" |grep \"/core:\" | awk '{print $1}' )\n CONTAINER=\"core\"\n GET_CONTAINER_ID ${CONTAINER}\n if [ \"${CONTAINER_ID}\" ]; then\n echo \"Rebuilding Manage Container...\"\n docker stop ${CONTAINER_ID}\n docker rm -f ${CONTAINER_ID}\n ${DOCKER_COMPOSE} up -d\n else\n echo \"The \"core\" container does not exist\"\n echo \"Starting BillionMail...\"\n ${DOCKER_COMPOSE} up -d\n fi\n\n if [ -f \"/usr/sbin/ufw\" ]; then\n /usr/sbin/ufw allow ${NEW_PORT}/tcp >/dev/null 2>&1\n /usr/sbin/ufw reload\n elif [ -f \"/usr/sbin/firewall-cmd\" ]; then\n /usr/sbin/firewall-cmd --permanent --zone=public --add-port=${NEW_PORT}/tcp >/dev/null 2>&1\n /usr/sbin/firewall-cmd --reload\n elif [ -f \"/etc/sysconfig/iptables\" ]; then\n iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport ${NEW_PORT} -j ACCEPT\n service iptables save\n fi\n\n if [[ ${NEW_PORT} != \"80\" ]]; then \n echo -e \"\\033[31m Let's Encrypt SSL certificate can only be applied using port 80, other ports cannot be applied.\\033[0m\"\n fi\n}\n\n# Modify the management interface access port\nMODIFY_HTTPS_PORT() { \n\n NEW_PORT=\"$2\"\n if [ -z \"${NEW_PORT}\" ]; then\n read -p \"Please enter the new BillionMail management port: \" NEW_PORT\n fi\n\n # Verify that the input is a number\n if ! echo \"${NEW_PORT}\" | grep -qE '^[0-9]+$' || ((NEW_PORT < 1 || NEW_PORT > 65535)); then\n echo -e \"\\033[31m Error: The port number must be a number between 1-65535 \\033[0m\"\n exit 1\n fi\n\n Check_Port=$(ss -tlnp | grep -E \":(${NEW_PORT})\\b\")\n if [ ! -z \"${Check_Port}\" ]; then\n echo \"${Check_Port}\"\n echo -e \"\\033[31m Error: The ${NEW_PORT} port is already in use. \\033[0m\"\n exit 1\n fi\n\n # Perform modification\n sed -i 's/^HTTPS_PORT=.*/HTTPS_PORT='\"${NEW_PORT}\"'/' .env\n if [ $? -ne 0 ]; then\n echo -e \"\\033[31m Error: The BillionMail management port modification failed! \\033[0m\"\n exit 1\n fi\n \n echo -e \"The BillionMail management port has been modified to: ${NEW_PORT} \\n Rebuild the container, please wait...\"\n sleep 3\n # Find the container ID of the core image in the current project and rebuild the container\n # CONTAINER_ID=$(${DOCKER_COMPOSE} ps -a --format \"{{.ID}} {{.Image}}\" |grep \"/core:\" | awk '{print $1}' )\n CONTAINER=\"core\"\n GET_CONTAINER_ID ${CONTAINER}\n if [ \"${CONTAINER_ID}\" ]; then\n echo \"Rebuilding Manage Container...\"\n docker stop ${CONTAINER_ID}\n docker rm -f ${CONTAINER_ID}\n ${DOCKER_COMPOSE} up -d\n else\n echo \"The \"core\" container does not exist\"\n echo \"Starting BillionMail...\"\n ${DOCKER_COMPOSE} up -d\n fi\n\n if [ -f \"/usr/sbin/ufw\" ]; then\n /usr/sbin/ufw allow ${NEW_PORT}/tcp >/dev/null 2>&1\n /usr/sbin/ufw reload\n elif [ -f \"/usr/sbin/firewall-cmd\" ]; then\n /usr/sbin/firewall-cmd --permanent --zone=public --add-port=${NEW_PORT}/tcp >/dev/null 2>&1\n /usr/sbin/firewall-cmd --reload\n elif [ -f \"/etc/sysconfig/iptables\" ]; then\n iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport ${NEW_PORT} -j ACCEPT\n service iptables save\n fi\n\n # Display login information\n bash bm.sh default\n}\n\n# Modify time zone\nMODIFY_TZ() { \n if [ -a /etc/timezone ]; then\n SYSTEM_TIME_ZONE=$(cat /etc/timezone)\n elif [ -a /etc/localtime ]; then\n SYSTEM_TIME_ZONE=$(readlink /etc/localtime|sed -n 's|^.*zoneinfo/||p')\n fi\n NEW_TZ=\"$2\"\n echo -e \"\"\n echo -e \"See https://en.wikipedia.org/wiki/List_of_tz_database_time_zones for a list of timezones\"\n echo -e \"Use a column named \"TZ identifier\" + note the column named \"Notes\"\"\n echo -e \"Please enter your time zone\"\n echo -e \"\"\n if [ -z \"${SYSTEM_TIME_ZONE}\" ]; then\n read -p \"Timezone: \" -e NEW_TZ\n else\n read -p \"Timezone [${SYSTEM_TIME_ZONE}]: \" -e NEW_TZ\n [ -z \"${NEW_TZ}\" ] && NEW_TZ=${SYSTEM_TIME_ZONE}\n fi\n\n if [ -z \"${NEW_TZ}\" ]; then\n echo -e \"\\033[31m Error: Please enter the time zone \\033[0m\"\n exit 1\n fi\n\n # Perform modification\n sed -i \"s|^TZ=.*|TZ=${NEW_TZ}|\" .env\n if [ $? -ne 0 ]; then\n echo -e \"\\033[31m Error: The BillionMail time zone modification failed! \\033[0m\"\n exit 1\n fi\n\n if [ -f \"postgresql-data/postgresql.conf\" ]; then\n cp -arpf postgresql-data/postgresql.conf postgresql-data/postgresql.conf_${time}\n sed -i \"s|^log_timezone = .*|log_timezone = \\'${NEW_TZ}\\'|\" postgresql-data/postgresql.conf\n sed -i \"s|^timezone = .*|timezone = \\'${NEW_TZ}\\'|\" postgresql-data/postgresql.conf\n fi\n\n echo -e \"The BillionMail time zone has been modified to: ${NEW_TZ} \\n Rebuild the container, please wait...\"\n sleep 3\n ${DOCKER_COMPOSE} down\n ${DOCKER_COMPOSE} up -d\n\n}\n\n\n# Modify Admin Username\nMODIFY_ADMIN_USERNAME() { \n\n NEW_ADMIN=\"$2\"\n if [ -z \"${NEW_ADMIN}\" ]; then\n read -p \"Please enter the new BillionMail administrator username (minimum 5 characters): \" NEW_ADMIN\n fi\n if [ -z \"${NEW_ADMIN}\" ]; then\n echo -e \"\\033[31mError: Administrator username is required!\\033[0m\"\n exit 1\n fi\n if [ ${#NEW_ADMIN} -lt 5 ]; then\n echo -e \"\\033[31mError: Username must be at least 5 characters long!\\033[0m\"\n exit 1\n fi\n if ! [[ \"${NEW_ADMIN}\" =~ ^[a-zA-Z0-9@#_.!+-]+$ ]]; then\n echo -e \"\\033[31mError: Username can only contain letters, numbers, symbols: @ # _ - + . !\\033[0m\"\n exit 1\n fi\n # Perform modification\n sed -i \"s|^ADMIN_USERNAME=.*|ADMIN_USERNAME=\"${NEW_ADMIN}\"|\" .env\n if [ $? -ne 0 ]; then\n echo -e \"\\033[31mError: Failed to update BillionMail administrator username!\\033[0m\"\n exit 1\n fi\n echo -e \"BillionMail administrator username has been updated. Restarting container, please wait...\"\n sleep 3\n # Find the container ID of the core image in the current project and rebuild the container\n # CONTAINER_ID=$(${DOCKER_COMPOSE} ps -a --format \"{{.ID}} {{.Image}}\" |grep \"/core:\" | awk '{print $1}' )\n CONTAINER=\"core\"\n GET_CONTAINER_ID ${CONTAINER}\n if [ \"${CONTAINER_ID}\" ]; then\n echo \"Restarting Manage Container...\"\n docker restart ${CONTAINER_ID}\n else\n echo \"The \"core\" container does not exist\"\n echo \"Starting BillionMail...\"\n ${DOCKER_COMPOSE} up -d\n fi\n # Display login information\n bash bm.sh default\n}\n\n\n# Modify Admin Password\nMODIFY_ADMIN_PASSWORD() { \n\n NEW_PASSWORD=\"$2\"\n if [ -z \"${NEW_PASSWORD}\" ]; then\n read -p \"Please enter the new BillionMail administrator password (minimum 5 characters): \" NEW_PASSWORD\n fi\n if [ -z \"${NEW_PASSWORD}\" ]; then\n echo -e \"\\033[31mError: Administrator password is required!\\033[0m\"\n exit 1\n fi\n if [ ${#NEW_PASSWORD} -lt 5 ]; then\n echo -e \"\\033[31mError: Password must be at least 5 characters long!\\033[0m\"\n exit 1\n fi\n if ! [[ \"${NEW_PASSWORD}\" =~ ^[a-zA-Z0-9@#_.!+-]+$ ]]; then\n echo -e \"\\033[31mError: Password can only contain letters, numbers, symbols: @ # _ - + . !\\033[0m\"\n exit 1\n fi\n # Perform modification\n sed -i \"s|^ADMIN_PASSWORD=.*|ADMIN_PASSWORD=\"${NEW_PASSWORD}\"|\" .env\n if [ $? -ne 0 ]; then\n echo -e \"\\033[31mError: Failed to update BillionMail administrator password!\\033[0m\"\n exit 1\n fi\n echo -e \"BillionMail administrator password has been updated. Restarting container, please wait...\"\n sleep 3\n # Find the container ID of the core image in the current project and rebuild the container\n #CONTAINER_ID=$(${DOCKER_COMPOSE} ps -a --format \"{{.ID}} {{.Image}}\" |grep \"/core:\" | awk '{print $1}' )\n CONTAINER=\"core\"\n GET_CONTAINER_ID ${CONTAINER}\n if [ \"${CONTAINER_ID}\" ]; then\n echo \"Restarting Manage Container...\"\n docker restart ${CONTAINER_ID}\n else\n echo \"The \"core\" container does not exist\"\n echo \"Starting BillionMail...\"\n ${DOCKER_COMPOSE} up -d\n fi\n # Display login information\n bash bm.sh default\n\n}\n\n\n# Modify Safe entrance\nMODIFY_SAFE_ENTRANCE() { \n\n NEW_ENTRANCE=\"$2\"\n if [ -z \"${NEW_ENTRANCE}\" ]; then\n read -p \"Please enter the new BillionMail security entrance path (minimum 5 characters): \" NEW_ENTRANCE\n fi\n if [ -z \"${NEW_ENTRANCE}\" ]; then\n echo -e \"\\033[31mError: Security entrance path is required!\\033[0m\"\n exit 1\n fi\n if [ ${#NEW_ENTRANCE} -lt 5 ]; then\n echo -e \"\\033[31mError: Security entrance path must be at least 5 characters long!\\033[0m\"\n exit 1\n fi\n if ! [[ \"${NEW_ENTRANCE}\" =~ ^[a-zA-Z0-9]+$ ]]; then\n echo -e \"\\033[31mError: Security entrance path can only contain letters and numbers!\\033[0m\"\n exit 1\n fi\n # Perform modification\n sed -i \"s|^SafePath=.*|SafePath=${NEW_ENTRANCE}|\" .env\n if [ $? -ne 0 ]; then\n echo -e \"\\033[31mError: Failed to update BillionMail security entrance path!\\033[0m\"\n exit 1\n fi\n echo -e \"BillionMail security entrance path has been updated. Restarting container, please wait...\"\n sleep 3\n # Find the container ID of the core image in the current project and rebuild the container\n # CONTAINER_ID=$(${DOCKER_COMPOSE} ps -a --format \"{{.ID}} {{.Image}}\" |grep \"/core:\" | awk '{print $1}' )\n CONTAINER=\"core\"\n GET_CONTAINER_ID ${CONTAINER}\n if [ \"${CONTAINER_ID}\" ]; then\n echo \"Restarting Manage Container...\"\n docker restart ${CONTAINER_ID}\n else\n echo \"The \"core\" container does not exist\"\n echo \"Starting BillionMail...\"\n ${DOCKER_COMPOSE} up -d\n fi\n # Display login information\n bash bm.sh default\n}\n\n# Rebuild the BillionMail project\n REBUILD_PROJECT() {\n echo \"Rebuilding BillionMail...\"\n echo -e \"\\033[31mWarning: This operation will rebuild all containers, service will be unavailable during the rebuild process. \\033[0m\"\n read -p \"Are you sure you want to continue? (yes/no): \" NEW_REBUILD\n if [[ \"$NEW_REBUILD\" =~ ^(yes|y|Y)$ ]]; then\n sleep 3\n ${DOCKER_COMPOSE} down\n ${DOCKER_COMPOSE} up -d\n echo \"Rebuild completed.\"\n else\n echo \"Rebuild cancel.\"\n fi\n }\n\n# Restart the BillionMail project\nRESTART_PROJECT() {\n echo \"Restarting BillionMail...\"\n sleep 1\n ${DOCKER_COMPOSE} restart\n}\n\n# Stop the BillionMail project\nSTOP_PROJECT() {\n echo \"Stop BillionMail...\"\n sleep 1\n ${DOCKER_COMPOSE} stop\n}\n\nSTART_PROJECT() {\n echo \"Start BillionMail...\"\n sleep 1\n ${DOCKER_COMPOSE} up -d\n}\n\nDOWN_PROJECT() {\n echo \"Stop all BillionMail services and delete all BillionMail containers...\"\n sleep 3\n ${DOCKER_COMPOSE} down\n}\n\n# Restart the specified service\nRESTART_SERVICE() { \n SERVICE=\"$2\"\n if [ -z \"${SERVICE}\" ]; then\n echo \"\"\n echo \"Support input: postfix|core|dovecot|rspamd|redis|webmail|pgsql\"\n read -p \"Please enter service: \" SERVICE\n fi\n\n GET_SERVICE_NAME ${SERVICE}\n echo \"Restarting ${SERVICE} service...\"\n sleep 3\n ${DOCKER_COMPOSE} restart ${SERVICE_NAME}\n}\n\nRESTART_SERVICE_ADMIN() { \n SERVICE=\"core\"\n GET_SERVICE_NAME ${SERVICE}\n echo \"Restarting ${SERVICE} service...\"\n sleep 3\n ${DOCKER_COMPOSE} restart ${SERVICE_NAME}\n}\n\n# Get container log \nGET_CONTAINER_LOG() { \n CONTAINER=\"$2\"\n if [ -z \"${CONTAINER}\" ]; then\n echo \"\"\n echo \"Support input: postfix|core|dovecot|rspamd|redis|webmail|pgsql\"\n read -p \"Please enter container: \" CONTAINER\n fi\n\n log_num=\"$3\"\n follow=\"\"\n\n if [ \"$log_num\" == \"-f\" ]; then\n follow=\"-f\"\n log_num=\"$4\"\n elif [ \"$4\" == \"-f\" ]; then\n follow=\"-f\"\n fi\n\n if [[ \"$log_num\" =~ ^[0-9]+$ ]]; then\n log_num=\"${log_num}\"\n else\n log_num=25\n fi\n\n GET_CONTAINER_ID ${CONTAINER}\n if [ -z \"${CONTAINER_ID}\" ]; then\n Red_Error \"ERROR: The \"${CONTAINER}\" container does not exist, Please execute '${DOCKER_COMPOSE} up -d' to start BillionMail\"\n fi\n docker logs ${follow} --tail=\"${log_num}\" ${CONTAINER_ID}\n}\n\n# Get file log\nGET_FILE_LOG() {\n NAME_FILE=\"$2\"\n \n if [ -z \"${NAME_FILE}\" ]; then\n echo \"\"\n echo \"Support input: postfix|core|core-access|core-error|dovecot|rspamd|fail2ban\"\n read -p \"Please enter name: \" NAME_FILE\n fi\n\n log_num=\"$3\"\n follow=\"\"\n\n if [ \"$log_num\" == \"-f\" ]; then\n follow=\"-f\"\n log_num=\"$4\"\n elif [ \"$4\" == \"-f\" ]; then\n follow=\"-f\"\n fi\n\n if [[ \"$log_num\" =~ ^[0-9]+$ ]]; then\n log_num=\"${log_num}\"\n else\n log_num=25\n fi\n\n # Define log files\n declare -A LOG_FILES=(\n [\"core\"]=\"$(date +%Y-%m-%d).log\"\n [\"core-access\"]=\"access-$(date +%Y%m%d).log\"\n [\"core-error\"]=\"error-$(date +%Y%m%d).log\"\n [\"postfix\"]=\"mail.log\"\n [\"dovecot\"]=\"mail.log\"\n [\"rspamd\"]=\"rspamd.log\"\n [\"fail2ban\"]=\"fail2ban.log\"\n )\n\n # Define log directory mapping \n declare -A LOG_DIRS=(\n [\"core\"]=\"core\"\n [\"core-access\"]=\"core\"\n [\"core-error\"]=\"core\"\n [\"postfix\"]=\"postfix\"\n [\"dovecot\"]=\"dovecot\"\n [\"rspamd\"]=\"rspamd\"\n [\"fail2ban\"]=\"fail2ban\"\n )\n\n # Check whether the service name is valid\n if [[ ! \" ${!LOG_FILES[@]} \" =~ \" ${NAME_FILE} \" ]]; then\n echo \"How to use: $0 log_file core 100\"\n Red_Error \"Error: Invalid name. Please enter name: (postfix|core|core-access|core-error|dovecot|rspamd|fail2ban) \"\n fi\n\n # Get log file name and directory\n LOG_FILE=\"${LOG_FILES[$NAME_FILE]}\"\n LOG_DIR=\"${LOG_DIRS[$NAME_FILE]}\"\n \n # Check and display log files\n if [ -f \"logs/${LOG_DIR}/${LOG_FILE}\" ]; then\n tail ${follow} -n ${log_num} \"logs/${LOG_DIR}/${LOG_FILE}\"\n elif [ -f \"data/logs/${LOG_DIR}/${LOG_FILE}\" ]; then\n tail ${follow} -n ${log_num} \"data/logs/${LOG_DIR}/${LOG_FILE}\"\n else\n Red_Error \"logs file does not exist!\"\n fi\n}\n\n# Get service TOP \nGET_SERVICE_TOP() {\n\n SERVICE=\"$2\"\n if [ -z \"${SERVICE}\" ]; then\n read -p \"Please enter service: \" SERVICE\n fi\n\n GET_SERVICE_NAME ${SERVICE}\n ${DOCKER_COMPOSE} top ${SERVICE_NAME}\n}\n\nGET_SERVICE_TOP_ALL() {\n\n ${DOCKER_COMPOSE} top\n\n}\n\nGET_SERVICE_PS() {\n\n ${DOCKER_COMPOSE} ps\n\n}\n\n# Get containers status\nGET_CONTAINER_STATUS() {\n CONTAINERS=(\"core\" \"postfix\" \"dovecot\" \"rspamd\" \"pgsql\" \"redis\" \"webmail\")\n \n for cc in \"${CONTAINERS[@]}\"; do\n \n CONTAINER=\"${cc}\"\n GET_CONTAINER_ID \"${CONTAINER}\"\n \n status=$(docker inspect --format='{{.State.Status}}' \"${CONTAINER_ID}\" 2>/dev/null)\n if [ \"$status\" = \"running\" ]; then\n echo -e \"\\033[32m ${CONTAINER} container is running\\033[0m\"\n else\n echo -e \"\\033[31m ${CONTAINER} container is not running. Status: ${status} \\033[0m\"\n fi\n \n done\n}\n\nCLEAR_OLD_IMAGE() {\n # Remove only outdated versions of images defined in docker-compose.yml\n\n # Check if docker-compose.yml exists\n if [ ! -f \"docker-compose.yml\" ]; then\n Red_Error \"Error: docker-compose.yml file not found\" \n fi\n\n # Extract complete image names (including tags) defined in compose file\n # echo \"Extracting billionmail images from docker-compose.yml...\"\n # COMPOSE_IMAGES=$(grep -oP 'image:\\s*\\K[^\"\\s]+' docker-compose.yml | sort -u)\n COMPOSE_IMAGES=$(grep -oP 'image:\\s*\\K(?:billionmail|ghcr\\.io/aapanel)[^\"\\s]+' docker-compose.yml | sort -u)\n\n # Check if any images were found\n if [ -z \"${COMPOSE_IMAGES}\" ]; then\n echo \"Warning: No image definitions found in docker-compose.yml\"\n exit 1\n fi\n\n # Get all local Docker images (excluding images)\n # echo \"Getting all local Docker images...\"\n ALL_IMAGES=$(docker images --format \"{{.Repository}}:{{.Tag}}\" | grep -v \":\")\n\n # Find outdated images to remove\n IMAGES_TO_REMOVE=\"\"\n\n while IFS= read -r compose_image; do\n # Extract image name (without tag)\n image_name=$(echo \"${compose_image}\" | awk -F: '{print $1}')\n \n # Extract tag defined in compose file\n compose_tag=$(echo \"${compose_image}\" | awk -F: '{print $2}')\n \n # Find all local images with the same name\n local_images=$(echo \"${ALL_IMAGES}\" | grep \"^${image_name}:\")\n \n # Filter images with different tags\n for local_image in ${local_images}; do\n local_tag=$(echo \"${local_image}\" | awk -F: '{print $2}')\n \n # If local tag differs from compose tag, add to removal list\n if [ \"${local_tag}\" != \"${compose_tag}\" ]; then\n IMAGES_TO_REMOVE=\"${IMAGES_TO_REMOVE} ${local_image}\"\n fi\n done\n done <<< \"${COMPOSE_IMAGES}\"\n\n # Display results\n if [ -z \"${IMAGES_TO_REMOVE}\" ]; then\n echo \"\"\n echo \"No outdated images found to remove\"\n exit 0\n fi\n\n echo -e \"\\n--- Outdated images to remove ---\"\n echo \"${IMAGES_TO_REMOVE}\" | tr ' ' '\\n' | grep -v '^$'\n IMAGE_COUNT=$(echo \"${IMAGES_TO_REMOVE}\" | wc -w)\n echo -e \"\\nTotal: ${IMAGE_COUNT} outdated images to remove\"\n\n # Ask for confirmation\n read -p \"Remove these outdated images? (y/n): \" confirm\n if [ \"${confirm}\" = \"y\" ] || [ \"${confirm}\" = \"Y\" ]; then\n sleep 5\n for image in ${IMAGES_TO_REMOVE}; do\n echo \"Removing image: ${image}\"\n docker rmi \"${image}\" || echo \"Warning: Failed to remove ${image}\"\n done\n echo \"Outdated images removed successfully\"\n echo -e \"For deeper Docker system cleanup, ensure all containers to keep are running before executing:\\n docker system prune\"\n else\n echo \"Operation cancelled\"\n fi\n}\n\n# Turn off IP access whitelist restrictions\nCANCEL_IP_WHITELIST_LIMIT() { \n\n # Perform modification\n sed -i 's/^IP_WHITELIST_ENABLE=.*/IP_WHITELIST_ENABLE=false/' .env\n \n echo -e \"The BillionMail IP access whitelist Restrictions: Closed \\n Restart the container, please wait...\"\n sleep 3\n CONTAINER=\"core\"\n GET_CONTAINER_ID ${CONTAINER}\n if [ \"${CONTAINER_ID}\" ]; then\n echo \"Rebuilding Manage Container...\"\n docker stop ${CONTAINER_ID}\n docker rm -f ${CONTAINER_ID}\n ${DOCKER_COMPOSE} up -d\n else\n echo \"The \"core\" container does not exist\"\n echo \"Starting BillionMail...\"\n ${DOCKER_COMPOSE} up -d\n fi\n}\n\n\nAPPLY_MULTI_IP() {\n echo \"🚀 Starting multi-IP configuration application...\"\n\n # Initialize_Project\n\n echo \"📁 Current directory: $PWD_d\"\n PROJECT_DIR=\"$PWD_d\"\n\n # Temporary backup path (under project root)\n BACKUP_COMPOSE=\"docker-compose.yml.bak.$(date +%Y%m%d-%H%M%S)\"\n\n # 🔐 Load .env file\n ENV_FILE=\"./.env\"\n if [ -f \"$ENV_FILE\" ]; then\n echo \"🔐 Loading environment variables: $ENV_FILE\"\n source \"$ENV_FILE\"\n if [ -z \"${DBUSER}\" ] || [ -z \"${DBNAME}\" ] || [ -z \"${DBPASS}\" ]; then\n Red_Error \"❌ .env configuration error, database settings are empty\"\n fi\n else\n Red_Error \"❌ .env file not found: $ENV_FILE, please ensure configuration exists\"\n fi\n\n # Database configuration\n DB_HOST=\"127.0.0.1\"\n DB_PORT=\"25432\"\n DB_NAME=\"${DBNAME}\"\n DB_USER=\"${DBUSER}\"\n DB_PASS=\"${DBPASS}\"\n\n # Record initial state for rollback\n ORIGINAL_COMPOSE=\"docker-compose.yml\"\n ADDNETWORK_COMPOSE=\"docker-compose_addnetwork.yml\"\n\n # Create temporary file\n TEMP_FILE=$(mktemp) || { Red_Error \"❌ Unable to create temporary file\"; }\n\n # ============ Cleanup and rollback functions ============\n cleanup_apply() {\n if [[ -n \"$TEMP_FILE\" && -f \"$TEMP_FILE\" ]]; then\n rm -f \"$TEMP_FILE\"\n fi\n }\n\n rollback_compose() {\n echo \"⚠️ Error detected, rolling back docker-compose.yml...\"\n if [[ -f \"$BACKUP_COMPOSE\" ]]; then\n cp \"$BACKUP_COMPOSE\" \"$ORIGINAL_COMPOSE\"\n echo \"✅ Successfully rolled back to original configuration\"\n else\n echo \"❌ Backup file $BACKUP_COMPOSE does not exist, unable to rollback!\"\n fi\n }\n\n # Set trap to handle exceptions and cleanup\n trap 'echo \"💥 Script execution failed, triggering rollback\"; rollback_compose; cleanup_apply; exit 1' ERR\n trap 'cleanup_apply' EXIT\n\n # ============ 1. Check if new compose file exists ============\n echo \"🔍 Checking if docker-compose_addnetwork.yml exists...\"\n if [ ! -f \"${ADDNETWORK_COMPOSE}\" ]; then\n Red_Error \"❌ Error: ${ADDNETWORK_COMPOSE} file does not exist, please verify\"\n fi\n\n # ============ 2. Backup and replace docker-compose.yml ============\n echo \"🔄 Backing up and replacing docker-compose.yml\"\n if [[ -f \"$ORIGINAL_COMPOSE\" ]]; then\n cp \"$ORIGINAL_COMPOSE\" \"$BACKUP_COMPOSE\"\n echo \"✅ Backup created as: $BACKUP_COMPOSE\"\n fi\n\n # Use cp instead of mv to keep original file for repeated execution\n cp \"$ADDNETWORK_COMPOSE\" \"$ORIGINAL_COMPOSE\"\n echo \"✅ docker-compose.yml has been updated\"\n\n # ============ 3. Insert domain → smtp_name mapping into bm_domain_smtp_transport ============\n echo \"🔄 Reading data from bm_multi_ip_domain and inserting into bm_domain_smtp_transport...\"\n\n # Query database for domain and smtp_server_name using secure query method\n if ! docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -t -A -F'|' \\\n -c \"SELECT domain, smtp_server_name FROM bm_multi_ip_domain WHERE active = 1;\" > \"$TEMP_FILE\"; then\n Red_Error \"❌ Database query failed, please check connection or table structure\"\n fi\n\n # Check if temporary file has content\n if [[ ! -s \"$TEMP_FILE\" ]]; then\n echo \"⚠️ No active multi-IP domain configurations found, skipping sender rule setup\"\n else\n echo \"📋 Found $(wc -l < \"$TEMP_FILE\") configuration records\"\n\n # Safely process query results\n while IFS='|' read -r domain smtp_name; do\n # Clean whitespace and validate\n domain=$(echo \"$domain\" | xargs)\n smtp_name=$(echo \"$smtp_name\" | xargs)\n\n # Skip empty lines or invalid data\n [[ -z \"$domain\" || -z \"$smtp_name\" ]] && continue\n\n # Validate domain format (basic security check)\n if [[ ! \"$domain\" =~ ^[a-zA-Z0-9.-]+$ ]]; then\n echo \"⚠️ Skipping invalid domain format: $domain\"\n continue\n fi\n\n atype=\"dedicated_ip\"\n domain_with_at=\"@${domain}\"\n\n echo \"🔍 Checking if sender rule exists for domain: $domain_with_at...\"\n\n # Use secure SQL query\n escaped_domain=$(printf '%s\\n' \"$domain_with_at\" | sed \"s/'/''/g\")\n EXISTS=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -t -A \\\n -c \"SELECT 1 FROM bm_domain_smtp_transport WHERE domain = '$escaped_domain';\")\n\n # If exists, delete it\n if [[ -n \"$EXISTS\" && \"$EXISTS\" != \"\" ]]; then\n echo \"🟡 Sender rule already exists for domain: $domain_with_at, deleting...\"\n if ! docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} \\\n -c \"DELETE FROM bm_domain_smtp_transport WHERE domain = '$escaped_domain';\"; then\n Red_Error \"❌ Failed to delete old record: $domain_with_at\"\n fi\n echo \"✅ Old rule deleted: $domain_with_at\"\n fi\n\n # Execute insertion (using secure string escaping)\n echo \"📝 Inserting: $domain_with_at → $smtp_name\"\n escaped_smtp=$(printf '%s\\n' \"$smtp_name\" | sed \"s/'/''/g\")\n escaped_atype=$(printf '%s\\n' \"$atype\" | sed \"s/'/''/g\")\n if ! docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} \\\n -c \"INSERT INTO bm_domain_smtp_transport (atype, domain, smtp_name) VALUES ('$escaped_atype', '$escaped_domain', '$escaped_smtp');\"; then\n Red_Error \"❌ Insertion failed: $domain_with_at\"\n fi\n\n echo \"✅ Successfully inserted: $domain_with_at → $smtp_name\"\n\n done < \"$TEMP_FILE\"\n\n echo \"📝 All domain mappings have been successfully written to bm_domain_smtp_transport\"\n fi\n\n # Update status of all records in bm_multi_ip_domain table to 'applied'\n echo \"🔄 Resetting multi-IP domain status to 'applied'...\"\n\n # First, query how many records need updating\n CURRENT_DOMAIN_COUNT=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -t -A \\\n -c \"SELECT COUNT(*) FROM bm_multi_ip_domain WHERE status != 'applied';\" 2>/dev/null || echo \"0\")\n\n echo \"📊 Current number of domains needing status reset: ${CURRENT_DOMAIN_COUNT}\"\n\n if [[ \"${CURRENT_DOMAIN_COUNT}\" -gt 0 ]]; then\n # Execute update operation\n if docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} \\\n -c \"UPDATE bm_multi_ip_domain SET status = 'applied';\" >/dev/null 2>&1; then\n echo \"✅ Successfully reset ${CURRENT_DOMAIN_COUNT} multi-IP domain statuses to 'applied'\"\n else\n echo \"❌ Failed to reset multi-IP domain statuses\"\n exit 1\n fi\n else\n echo \"✅ All multi-IP domain statuses are already 'applied'\"\n fi\n\n # ============ 4. Restart services ============\n echo \"🔄 Restarting BillionMail services\"\n if ! ${DOCKER_COMPOSE} down; then\n Red_Error \"❌ docker-compose down failed\"\n fi\n\n if ! ${DOCKER_COMPOSE} up -d; then\n Red_Error \"❌ docker-compose up -d failed: docker-compose.yml has errors, please check\"\n fi\n\n # Wait for services to start and check health status\n echo \"🔄 Waiting for services to start...\"\n sleep 5\n\n echo \"📊 Checking service status...\"\n ${DOCKER_COMPOSE} ps\n\n # Check if critical services are running properly\n CORE_STATUS=$(${DOCKER_COMPOSE} ps core-billionmail --format \"{{.State}}\" 2>/dev/null || echo \"missing\")\n POSTFIX_STATUS=$(${DOCKER_COMPOSE} ps postfix-billionmail --format \"{{.State}}\" 2>/dev/null || echo \"missing\")\n\n if [[ \"$CORE_STATUS\" != \"running\" || \"$POSTFIX_STATUS\" != \"running\" ]]; then\n echo \"⚠️ Warning: Some critical services may not have started properly\"\n echo \" Core status: $CORE_STATUS\"\n echo \" Postfix status: $POSTFIX_STATUS\"\n echo \"💡 Please check 'docker compose logs' for details\"\n fi\n\n # ============ 5. Execution Summary ============\n echo \"\"\n echo \"🎉 =============== Execution Summary ===============\"\n echo \"✅ All operations completed! Services have been successfully restarted\"\n echo \"📁 Original configuration backed up as: $BACKUP_COMPOSE\"\n echo \"🔄 New configuration applied: $ORIGINAL_COMPOSE\"\n echo \"📋 Source configuration file preserved: $ADDNETWORK_COMPOSE\"\n echo \"🕐 Completion time: $(date '+%Y-%m-%d %H:%M:%S')\"\n\n # Optional: Clean up old backups (keep latest 3)\n OLD_BACKUPS=$(find . -name 'docker-compose.yml.bak.*' -type f | wc -l)\n if [[ $OLD_BACKUPS -gt 3 ]]; then\n echo \"🧹 Cleaning up old backup files (keeping latest 3)...\"\n find . -name 'docker-compose.yml.bak.*' -type f | sort -r | tail -n +4 | xargs rm -f 2>/dev/null || true\n fi\n\n echo \"=========================================\"\n\n # Successfully completed, remove ERR trap\n trap - ERR\n}\n\n\nFIX_MULTI_IP() {\n echo \"🔧 Starting multi-IP configuration fix...\"\n\n # ============ Initialization: Automatically locate project root directory ============\n # Initialize_Project\n\n # Load environment variables\n if [ ! -f \".env\" ]; then\n Red_Error \"❌ .env file not found, please ensure execution from project root directory\"\n fi\n\n source .env\n if [ -z \"${DBUSER}\" ] || [ -z \"${DBNAME}\" ] || [ -z \"${DBPASS}\" ]; then\n Red_Error \"❌ .env configuration error, database settings are empty\"\n fi\n\n echo \"📁 Project directory: ${PWD_d}\"\n\n # ============ 1. Find the latest backup file ============\n echo \"🔍 Searching for the latest docker-compose.yml backup file...\"\n LATEST_BACKUP=$(find . -name 'docker-compose.yml.bak.*' -type f | sort -r | head -n 1)\n\n if [ -z \"${LATEST_BACKUP}\" ]; then\n echo \"⚠️ No docker-compose.yml backup file found\"\n echo \"📋 List of available backup files:\"\n find . -name 'docker-compose.yml.bak.*' -type f 2>/dev/null || echo \" No backup files\"\n\n read -p \"Proceed with database cleanup operation? (y/n): \" continue_cleanup\n if [[ \"$continue_cleanup\" != \"y\" && \"$continue_cleanup\" != \"Y\" ]]; then\n echo \"❌ Operation cancelled\"\n exit 1\n fi\n else\n echo \"✅ Found latest backup: ${LATEST_BACKUP}\"\n echo \"🔄 Restoring docker-compose.yml...\"\n\n # Create a backup of current file (in case rollback fails)\n cp docker-compose.yml \"docker-compose.yml.before-fix.$(date +%Y%m%d-%H%M%S)\" 2>/dev/null || true\n\n # Restore from backup\n if cp \"${LATEST_BACKUP}\" docker-compose.yml; then\n echo \"✅ docker-compose.yml has been restored\"\n else\n Red_Error \"❌ Failed to restore docker-compose.yml\"\n fi\n fi\n\n # ============ 2. Clean up multi-IP configurations in database ============\n echo \"🗄️ Starting database configuration cleanup...\"\n\n # Check database connection (using container method)\n echo \"🔗 Testing database connection...\"\n if ! docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -c \"SELECT 1;\" >/dev/null 2>&1; then\n Red_Error \"❌ Database connection failed, please check if service is running properly\"\n fi\n echo \"✅ Database connection is normal\"\n\n # Delete records with atype=\"dedicated_ip\" from bm_domain_smtp_transport table\n echo \"🗑️ Deleting dedicated IP records from bm_domain_smtp_transport table...\"\n\n # First, query the current number of records\n CURRENT_SMTP_COUNT=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -t -A \\\n -c \"SELECT COUNT(*) FROM bm_domain_smtp_transport WHERE atype = 'dedicated_ip';\" 2>/dev/null || echo \"0\")\n\n echo \"📊 Current number of dedicated IP sender rules: ${CURRENT_SMTP_COUNT}\"\n\n if [[ \"${CURRENT_SMTP_COUNT}\" -gt 0 ]]; then\n # Execute deletion\n if docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} \\\n -c \"DELETE FROM bm_domain_smtp_transport WHERE atype = 'dedicated_ip';\" >/dev/null 2>&1; then\n echo \"✅ Deleted ${CURRENT_SMTP_COUNT} dedicated IP sender rules\"\n else\n echo \"❌ Failed to delete dedicated IP sender rules\"\n exit 1\n fi\n else\n echo \"✅ No dedicated IP sender rules found to delete\"\n fi\n\n # Update status of all records in bm_multi_ip_domain table to 'pending'\n echo \"🔄 Resetting multi-IP domain status to 'pending'...\"\n\n # First, query the current number of records needing update\n CURRENT_DOMAIN_COUNT=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -t -A \\\n -c \"SELECT COUNT(*) FROM bm_multi_ip_domain WHERE status != 'pending';\" 2>/dev/null || echo \"0\")\n\n echo \"📊 Current number of domains needing status reset: ${CURRENT_DOMAIN_COUNT}\"\n\n if [[ \"${CURRENT_DOMAIN_COUNT}\" -gt 0 ]]; then\n # Execute update operation\n if docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} \\\n -c \"UPDATE bm_multi_ip_domain SET status = 'pending';\" >/dev/null 2>&1; then\n echo \"✅ Reset ${CURRENT_DOMAIN_COUNT} multi-IP domain statuses to 'pending'\"\n else\n echo \"❌ Failed to reset multi-IP domain statuses\"\n exit 1\n fi\n else\n echo \"✅ All multi-IP domain statuses are already 'pending'\"\n fi\n\n # ============ 3. Verify cleanup results ============\n echo \"🔍 Verifying cleanup results...\"\n\n # Verify dedicated IP sender rules have been cleaned\n REMAINING_SMTP_COUNT=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -t -A \\\n -c \"SELECT COUNT(*) FROM bm_domain_smtp_transport WHERE atype = 'dedicated_ip';\" 2>/dev/null || echo \"unknown\")\n\n # Verify multi-IP domain statuses have been reset\n REMAINING_APPLIED_COUNT=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -t -A \\\n -c \"SELECT COUNT(*) FROM bm_multi_ip_domain WHERE status = 'applied';\" 2>/dev/null || echo \"unknown\")\n\n echo \"📊 Verification results:\"\n echo \" Remaining dedicated IP sender rules: ${REMAINING_SMTP_COUNT}\"\n echo \" Remaining applied status domains: ${REMAINING_APPLIED_COUNT}\"\n\n # ============ 4. Restart services ============\n echo \"🔄 Restarting BillionMail services...\"\n\n echo \"🛑 Stopping services...\"\n if ! ${DOCKER_COMPOSE} down; then\n echo \"⚠️ Warning during service stop, continuing execution...\"\n fi\n\n echo \"🚀 Starting services...\"\n if ! ${DOCKER_COMPOSE} up -d; then\n Red_Error \"❌ Failed to start services, please check docker-compose.yml configuration\"\n fi\n\n # Wait for services to start\n echo \"⏳ Waiting for services to start...\"\n sleep 5\n\n # Check service status\n echo \"📊 Checking service status...\"\n ${DOCKER_COMPOSE} ps\n\n # ============ 5. Final verification ============\n echo \"🔍 Final verification of database status...\"\n sleep 2\n\n # Final verification of dedicated IP sender rules\n FINAL_SMTP_COUNT=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -t -A \\\n -c \"SELECT COUNT(*) FROM bm_domain_smtp_transport WHERE atype = 'dedicated_ip';\" 2>/dev/null || echo \"unknown\")\n\n # Final verification of multi-IP domain statuses\n FINAL_APPLIED_COUNT=$(docker exec -i -e PGPASSWORD=${DBPASS} ${PGSQL_CONTAINER_NAME} psql -U ${DBUSER} -d ${DBNAME} -t -A \\\n -c \"SELECT COUNT(*) FROM bm_multi_ip_domain WHERE status = 'applied';\" 2>/dev/null || echo \"unknown\")\n\n # ============ 6. Execution Summary ============\n echo \"\"\n echo \"🎉 =============== Fix Summary ===============\"\n echo \"✅ Multi-IP configuration fix completed!\"\n if [ -n \"${LATEST_BACKUP}\" ]; then\n echo \"📁 Restored backup: ${LATEST_BACKUP} → docker-compose.yml\"\n fi\n echo \"🗑️ Dedicated IP sender rule cleanup result: ${CURRENT_SMTP_COUNT} → ${FINAL_SMTP_COUNT}\"\n echo \"🔄 applied status domain reset result: ${CURRENT_DOMAIN_COUNT} → ${FINAL_APPLIED_COUNT}\"\n echo \"🚀 Services restarted\"\n echo \"🕐 Completion time: $(date '+%Y-%m-%d %H:%M:%S')\"\n echo \"=========================================\"\n\n # Provide detailed verification information\n if [[ \"${FINAL_SMTP_COUNT}\" == \"0\" && \"${FINAL_APPLIED_COUNT}\" == \"0\" ]]; then\n echo \"\"\n echo \"🎉 Congratulations! Database cleanup completed successfully:\"\n echo \" ✅ All dedicated IP sender rules have been deleted\"\n echo \" ✅ All multi-IP domain statuses have been reset to pending\"\n else\n echo \"\"\n echo \"⚠️ Note: Some data may not have been fully cleaned:\"\n if [[ \"${FINAL_SMTP_COUNT}\" != \"0\" ]]; then\n echo \" ❌ Still ${FINAL_SMTP_COUNT} dedicated IP sender rules remaining\"\n fi\n if [[ \"${FINAL_APPLIED_COUNT}\" != \"0\" ]]; then\n echo \" ❌ Still ${FINAL_APPLIED_COUNT} domains with applied status\"\n fi\n echo \" 💡 Suggest manually checking the database or re-running the fix command\"\n fi\n\n echo \"\"\n echo \"💡 Tips:\"\n echo \" 1. To reconfigure multi-IP, please re-run: bm.sh multi_ip\"\n echo \" 2. Suggest checking email sending functionality\"\n echo \" 3. If issues occur, check container logs: bm.sh l-c core\"\n}\n\n\n\nSHOW_HELP() {\n echo \"Help Information:\"\n echo \" default - Show BillionMail login default info: $0 default\"\n echo \" update - Update BillionMail: $0 update\"\n echo \" change-port - Modify BillionMail access management port: $0 change-port\"\n echo \" change-tz - Modify BillionMail time zone: $0 change-tz\"\n echo \" change-user - Modify BillionMail Administrator user: $0 change-user\"\n echo \" change-password - Modify BillionMail Administrator password: $0 change-password\"\n echo \" change-safe-path - Modify BillionMail security entrance path: $0 change-safe-path\"\n echo \" change-apply-ssl-port - Modify BillionMail apply ssl port: $0 change-apply-ssl-port\"\n echo \" start - Start BillionMail: $0 start\"\n echo \" stop - Stop BillionMail: $0 stop\"\n echo \" restart - Restart BillionMail: $0 restart\"\n echo \" status - Show BillionMail containers running status : $0 status\"\n echo \" down - Stop and remove containers, networks: $0 down\"\n echo \" rebuild - Rebuild all BillionMail containers: $0 rebuild\"\n echo \" top - Show all BillionMail processes: $0 top\"\n echo \" ps - Show all BillionMail containers: $0 ps\"\n echo \" service-top - Show processes of a specific BillionMail service: $0 s-t postfix\"\n echo \" log-file - View logs of a specific service: $0 l-f postfix\"\n echo \" log-container - View logs of a specific container: $0 l-c postfix\"\n echo \" restart-service - Restart a specific service and its container: $0 r-s postfix\"\n echo \" clear - Clear BillionMail old images: $0 clear\"\n echo \" cancel-ip-limit - Cancel IP access limit : $0 c-i-l\"\n # echo \" add-domain - Add domain. Example: $0 add-domain example.com\"\n # echo \" del-domain - Delete domain. Example: $0 del-domain example.com\"\n # echo \" add-email - Add email. Example: $0 add-email user@example.com\"\n # echo \" del-email - Delete email. Example: $0 del-email user@example.com\"\n echo \" show-domain - Show domain data.\"\n echo \" show-email - Show email data.\"\n # echo \" show-record - Show domain DNS record.\"\n \n exit\n}\n\n\ncase \"$1\" in\n h | -h | help | --help | -help)\n SHOW_HELP\n ;;\n default | info)\n Default_info\n ;;\n update)\n Update_BillionMail\n ;;\n add-domain)\n Init_Domain \"$@\"\n Add_Domain\n ;;\n del-domain)\n Init_Domain \"$@\"\n Del_Domain\n ;;\n add-email)\n Init_Email \"$@\"\n Add_Email\n ;;\n del-email)\n Init_Email \"$@\"\n Del_Email\n ;;\n show-domain)\n Select_Domain_data\n ;;\n show-email)\n Select_Email_data\n ;;\n show-record|show_dns_record)\n Init_Domain \"$@\"\n Domain_record\n ;;\n MODIFY_HTTP_PORT|modify_http_port|change-apply-ssl-port)\n MODIFY_HTTP_SSL_PORT\n ;;\n MODIFY_HTTPS_PORT|modify_https_port|change-port)\n MODIFY_HTTPS_PORT\n ;;\n MODIFY_TZ|modify_tz|change-tz)\n MODIFY_TZ\n ;;\n MODIFY_ADMIN_USERNAME|modify_user|change-user)\n MODIFY_ADMIN_USERNAME\n ;;\n MODIFY_ADMIN_PASSWORD|modify_password|change-password)\n MODIFY_ADMIN_PASSWORD\n ;;\n MODIFY_SAFE_ENTRANCE|modify_safe_path|change-safe-path)\n MODIFY_SAFE_ENTRANCE\n ;;\n REBUILD_PROJECT|rebuild_project|rebuild)\n REBUILD_PROJECT\n ;;\n RESTART_PROJECT|restart_project|restart)\n RESTART_PROJECT\n ;;\n START_PROJECT|start_project|start)\n START_PROJECT\n ;;\n STOP_PROJECT|stop_project|stop)\n STOP_PROJECT\n ;;\n GET_CONTAINER_STATUS|get_container_status|status)\n GET_CONTAINER_STATUS\n ;;\n DOWN_PROJECT|down_project|down)\n DOWN_PROJECT\n ;;\n RESTART_SERVICE|restart_service|restart-service|r-s)\n RESTART_SERVICE \"$@\"\n ;;\n GET_CONTAINER_LOG|log_container|log-container|l-c)\n GET_CONTAINER_LOG \"$@\"\n ;;\n GET_FILE_LOG|log_file|log-file|l-f)\n GET_FILE_LOG \"$@\"\n ;;\n GET_SERVICE_TOP|service_top|service-top|s-t)\n GET_SERVICE_TOP \"$@\"\n ;;\n GET_SERVICE_TOP_ALL|service_top_all|service-top-all|top)\n GET_SERVICE_TOP_ALL\n ;; \n GET_SERVICE_PS|service-ps|ps)\n GET_SERVICE_PS\n ;; \n RESTART_SERVICE_ADMIN|restart_service_admin|restart-service-admin|restart-admin)\n RESTART_SERVICE_ADMIN\n ;;\n clear)\n CLEAR_OLD_IMAGE\n ;; \n cancel-ip-limit|c-i-l)\n CANCEL_IP_WHITELIST_LIMIT\n ;; \n\n\n Domain_multi_send_IP|apply_multi_ip|multi_ip)\n APPLY_MULTI_IP\n ;;\n\n fix_multi_ip|fix-multi-ip)\n FIX_MULTI_IP\n ;;\n\n\n *)\n echo \"=============== BillionMail CLI ==================\"\n echo \"1) Restart BillionMail 2) View login info\"\n echo \"\"\n echo \"3) View running status 4) Stop BillionMail\"\n echo \"\"\n echo \"5) Start BillionMail 6) Restart manage only (mail unaffected)\"\n echo \"\"\n echo \"7) Change manage password 8) Change manage username\"\n echo \"\"\n echo \"9) Change secure entry 10) Change manage access port\"\n echo \"\"\n echo \"11) View all processes 12) Update BillionMail\"\n echo \"\"\n echo \"13) Cancel IP access limit \"\n echo \"\"\n echo \"0) Exit For more commands: help\"\n echo \"==================================================\"\n read -p \"Enter number to execute command [0-12]: \" input \n case ${input} in\n 1)\n RESTART_PROJECT\n ;;\n 2)\n Default_info\n ;;\n 3)\n GET_CONTAINER_STATUS\n ;;\n 4)\n STOP_PROJECT\n ;;\n 5)\n START_PROJECT\n ;;\n 6)\n RESTART_SERVICE_ADMIN\n ;;\n 7)\n MODIFY_ADMIN_PASSWORD\n ;;\n 8)\n MODIFY_ADMIN_USERNAME\n ;;\n 9)\n MODIFY_SAFE_ENTRANCE\n ;;\n 10)\n MODIFY_HTTPS_PORT\n ;;\n 11)\n GET_SERVICE_TOP_ALL\n ;;\n 12)\n Update_BillionMail\n ;;\n 13)\n CANCEL_IP_WHITELIST_LIMIT\n ;; \n help)\n SHOW_HELP\n ;;\n 0 | * )\n echo \"Cancelled!\"\n exit\n ;;\n esac\n ;;\nesac" }, { "path": "conf/core/fail2ban_init/filter.d/core-limit-filter.conf", "content": "[Definition]\nfailregex = ^.*? \\d+ \"(GET|POST|HEAD|PUT|DELETE|PATCH|OPTIONS|CONNECT|TRACE) (http|https) [^ ]+ \\S+ HTTP.*\" .*, , \".*?\", \".*?\"$\n\nignoreregex = .*/roundcube.*\n" }, { "path": "conf/core/fail2ban_init/filter.d/roundcube-limit-filter.conf", "content": "[Definition]\n# Only match roundcube logs\nfailregex = ^.*? \\d+ \"(GET|POST|HEAD|PUT|DELETE|PATCH|OPTIONS|CONNECT|TRACE) (http|https) [^ ]+ /roundcube(?:[/?][^ \\\"]*)? HTTP.*\" .*, , \".*?\", \".*?\"$\n# Exclude static resource interference\nignoreregex = ^.* /roundcube/(?:skins|plugins|assets|images)/" }, { "path": "conf/core/fail2ban_init/jail.d/core-accesslimit.conf", "content": "[core-accesslimit]\nignoreip = 127.0.0.1/8\nenabled = true\nport = 80,443\nfilter = core-limit-filter\nlogpath = /opt/billionmail/core/logs/access-*.log\nmaxretry = 1000\nfindtime = 60\nbantime = 60\naction = %(action_)s\n" }, { "path": "conf/core/fail2ban_init/jail.d/roundcube-accesslimit.conf", "content": "[roundcube-accesslimit]\nignoreip = 127.0.0.1/8\nenabled = true\nport = 80,443\nfilter = roundcube-limit-filter\nlogpath = /opt/billionmail/core/logs/access-*.log\nmaxretry = 600\nfindtime = 60\nbantime = 60\naction = %(action_)s" }, { "path": "conf/dovecot/conf.d/10-auth.conf", "content": "##\n## Authentication processes\n##\n\n# Disable LOGIN command and all other plaintext authentications unless\n# SSL/TLS is used (LOGINDISABLED capability). Note that if the remote IP\n# matches the local IP (ie. you're connecting from the same computer), the\n# connection is considered secure and plaintext authentication is allowed.\n# See also ssl=required setting.\ndisable_plaintext_auth = no\n\n# Authentication cache size (e.g. 10M). 0 means it's disabled. Note that\n# bsdauth, PAM and vpopmail require cache_key to be set for caching to be used.\n#auth_cache_size = 0\n# Time to live for cached data. After TTL expires the cached record is no\n# longer used, *except* if the main database lookup returns internal failure.\n# We also try to handle password changes automatically: If user's previous\n# authentication was successful, but this one wasn't, the cache isn't used.\n# For now this works only with plaintext authentication.\n#auth_cache_ttl = 1 hour\n# TTL for negative hits (user not found, password mismatch).\n# 0 disables caching them completely.\n#auth_cache_negative_ttl = 1 hour\n\n# Space separated list of realms for SASL authentication mechanisms that need\n# them. You can leave it empty if you don't want to support multiple realms.\n# Many clients simply use the first one listed here, so keep the default realm\n# first.\n#auth_realms =\n\n# Default realm/domain to use if none was specified. This is used for both\n# SASL realms and appending @domain to username in plaintext logins.\n#auth_default_realm = \n\n# List of allowed characters in username. If the user-given username contains\n# a character not listed in here, the login automatically fails. This is just\n# an extra check to make sure user can't exploit any potential quote escaping\n# vulnerabilities with SQL/LDAP databases. If you want to allow all characters,\n# set this value to empty.\n#auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@\n\n# Username character translations before it's looked up from databases. The\n# value contains series of from -> to characters. For example \"#@/@\" means\n# that '#' and '/' characters are translated to '@'.\n#auth_username_translation =\n\n# Username formatting before it's looked up from databases. You can use\n# the standard variables here, eg. %Lu would lowercase the username, %n would\n# drop away the domain if it was given, or \"%n-AT-%d\" would change the '@' into\n# \"-AT-\". This translation is done after auth_username_translation changes.\n#auth_username_format = %Lu\n\n# If you want to allow master users to log in by specifying the master\n# username within the normal username string (ie. not using SASL mechanism's\n# support for it), you can specify the separator character here. The format\n# is then . UW-IMAP uses \"*\" as the\n# separator, so that could be a good choice.\n#auth_master_user_separator =\n\n# Username to use for users logging in with ANONYMOUS SASL mechanism\n#auth_anonymous_username = anonymous\n\n# Maximum number of dovecot-auth worker processes. They're used to execute\n# blocking passdb and userdb queries (eg. MySQL and PAM). They're\n# automatically created and destroyed as needed.\n#auth_worker_max_count = 30\n\n# Host name to use in GSSAPI principal names. The default is to use the\n# name returned by gethostname(). Use \"$ALL\" (with quotes) to allow all keytab\n# entries.\n#auth_gssapi_hostname =\n\n# Kerberos keytab to use for the GSSAPI mechanism. Will use the system\n# default (usually /etc/krb5.keytab) if not specified. You may need to change\n# the auth service to run as root to be able to read this file.\n#auth_krb5_keytab = \n\n# Do NTLM and GSS-SPNEGO authentication using Samba's winbind daemon and\n# ntlm_auth helper. \n#auth_use_winbind = no\n\n# Path for Samba's ntlm_auth helper binary.\n#auth_winbind_helper_path = /usr/bin/ntlm_auth\n\n# Time to delay before replying to failed authentications.\n#auth_failure_delay = 2 secs\n\n# Require a valid SSL client certificate or the authentication fails.\n#auth_ssl_require_client_cert = no\n\n# Take the username from client's SSL certificate, using \n# X509_NAME_get_text_by_NID() which returns the subject's DN's\n# CommonName. \n#auth_ssl_username_from_cert = no\n\n# Space separated list of wanted authentication mechanisms:\n# plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi otp skey\n# gss-spnego\n# NOTE: See also disable_plaintext_auth setting.\nauth_mechanisms = plain login\n\n##\n## Password and user databases\n##\n\n#\n# Password database is used to verify user's password (and nothing more).\n# You can have multiple passdbs and userdbs. This is useful if you want to\n# allow both system users (/etc/passwd) and virtual users to login without\n# duplicating the system users into virtual database.\n#\n# \n#\n# User database specifies where mails are located and what user/group IDs\n# own them. For single-UID configuration use \"static\" userdb.\n#\n# \n\n#!include auth-deny.conf.ext\n#!include auth-master.conf.ext\n\n#!include auth-system.conf.ext\n!include auth-sql.conf.ext\n#!include auth-ldap.conf.ext\n#!include auth-passwdfile.conf.ext\n#!include auth-checkpassword.conf.ext\n#!include auth-vpopmail.conf.ext\n#!include auth-static.conf.ext\n" }, { "path": "conf/dovecot/conf.d/10-director.conf", "content": "##\n## Director-specific settings.\n##\n\n# Director can be used by Dovecot proxy to keep a temporary user -> mail server\n# mapping. As long as user has simultaneous connections, the user is always\n# redirected to the same server. Each proxy server is running its own director\n# process, and the directors are communicating the state to each others.\n# Directors are mainly useful with NFS-like setups.\n\n# List of IPs or hostnames to all director servers, including ourself.\n# Ports can be specified as ip:port. The default port is the same as\n# what director service's inet_listener is using.\n#director_servers = \n\n# List of IPs or hostnames to all backend mail servers. Ranges are allowed\n# too, like 10.0.0.10-10.0.0.30.\n#director_mail_servers = \n\n# How long to redirect users to a specific server after it no longer has\n# any connections.\n#director_user_expire = 15 min\n\n# How the username is translated before being hashed. Useful values include\n# %Ln if user can log in with or without @domain, %Ld if mailboxes are shared\n# within domain.\n#director_username_hash = %Lu\n\n# To enable director service, uncomment the modes and assign a port.\nservice director {\n unix_listener login/director {\n #mode = 0666\n }\n fifo_listener login/proxy-notify {\n #mode = 0666\n }\n unix_listener director-userdb {\n #mode = 0600\n }\n inet_listener {\n #port = \n }\n}\n\n# Enable director for the wanted login services by telling them to\n# connect to director socket instead of the default login socket:\nservice imap-login {\n #executable = imap-login director\n}\nservice pop3-login {\n #executable = pop3-login director\n}\nservice submission-login {\n #executable = submission-login director\n}\n\n# Enable director for LMTP proxying:\nprotocol lmtp {\n #auth_socket_path = director-userdb\n}\n" }, { "path": "conf/dovecot/conf.d/10-logging.conf", "content": "##\n## Log destination.\n##\n\n# Log file to use for error messages. \"syslog\" logs to syslog,\n# /dev/stderr logs to stderr.\n#log_path = syslog\n\n# Log file to use for informational messages. Defaults to log_path.\n#info_log_path = \n# Log file to use for debug messages. Defaults to info_log_path.\n#debug_log_path = \n\n# Syslog facility to use if you're logging to syslog. Usually if you don't\n# want to use \"mail\", you'll use local0..local7. Also other standard\n# facilities are supported.\n#syslog_facility = mail\n\n##\n## Logging verbosity and debugging.\n##\n\n# Log filter is a space-separated list conditions. If any of the conditions\n# match, the log filter matches (i.e. they're ORed together). Parenthesis\n# are supported if multiple conditions need to be matched together.\n#\n# See https://doc.dovecot.org/configuration_manual/event_filter/ for details.\n#\n# For example: event=http_request_* AND category=error AND category=storage\n#\n# Filter to specify what debug logging to enable. This will eventually replace\n# mail_debug and auth_debug settings.\n#log_debug = \n\n# Crash after logging a matching event. For example category=error will crash\n# any time an error is logged, which can be useful for debugging.\n#log_core_filter = \n\n# Log unsuccessful authentication attempts and the reasons why they failed.\n#auth_verbose = no\n\n# In case of password mismatches, log the attempted password. Valid values are\n# no, plain and sha1. sha1 can be useful for detecting brute force password\n# attempts vs. user simply trying the same password over and over again.\n# You can also truncate the value to n chars by appending \":n\" (e.g. sha1:6).\n#auth_verbose_passwords = no\n\n# Even more verbose logging for debugging purposes. Shows for example SQL\n# queries.\n#auth_debug = no\n\n# In case of password mismatches, log the passwords and used scheme so the\n# problem can be debugged. Enabling this also enables auth_debug.\n#auth_debug_passwords = no\n\n# Enable mail process debugging. This can help you figure out why Dovecot\n# isn't finding your mails.\n#mail_debug = no\n\n# Show protocol level SSL errors.\n#verbose_ssl = no\n\n# mail_log plugin provides more event logging for mail processes.\nplugin {\n # Events to log. Also available: flag_change append\n #mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename\n # Available fields: uid, box, msgid, from, subject, size, vsize, flags\n # size and vsize are available only for expunge and copy events.\n #mail_log_fields = uid box msgid size\n}\n\n##\n## Log formatting.\n##\n\n# Prefix for each line written to log file. % codes are in strftime(3)\n# format.\n#log_timestamp = \"%b %d %H:%M:%S \"\n\n# Space-separated list of elements we want to log. The elements which have\n# a non-empty variable value are joined together to form a comma-separated\n# string.\n#login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c\n\n# Login log format. %s contains login_log_format_elements string, %$ contains\n# the data we want to log.\n#login_log_format = %$: %s\n \n# Log prefix for mail processes. See doc/wiki/Variables.txt for list of\n# possible variables you can use.\n#mail_log_prefix = \"%s(%u)<%{pid}><%{session}>: \"\n\n# Format to use for logging mail deliveries:\n# %$ - Delivery status message (e.g. \"saved to INBOX\")\n# %m / %{msgid} - Message-ID\n# %s / %{subject} - Subject\n# %f / %{from} - From address\n# %p / %{size} - Physical size\n# %w / %{vsize} - Virtual size\n# %e / %{from_envelope} - MAIL FROM envelope\n# %{to_envelope} - RCPT TO envelope\n# %{delivery_time} - How many milliseconds it took to deliver the mail\n# %{session_time} - How long LMTP session took, not including delivery_time\n# %{storage_id} - Backend-specific ID for mail, e.g. Maildir filename\n#deliver_log_format = msgid=%m: %$\n" }, { "path": "conf/dovecot/conf.d/10-mail.conf", "content": "##\n## Mailbox locations and namespaces\n##\n\n# Location for users' mailboxes. The default is empty, which means that Dovecot\n# tries to find the mailboxes automatically. This won't work if the user\n# doesn't yet have any mail, so you should explicitly tell Dovecot the full\n# location.\n#\n# If you're using mbox, giving a path to the INBOX file (eg. /var/mail/%u)\n# isn't enough. You'll also need to tell Dovecot where the other mailboxes are\n# kept. This is called the \"root mail directory\", and it must be the first\n# path given in the mail_location setting.\n#\n# There are a few special variables you can use, eg.:\n#\n# %u - username\n# %n - user part in user@domain, same as %u if there's no domain\n# %d - domain part in user@domain, empty if there's no domain\n# %h - home directory\n#\n# See doc/wiki/Variables.txt for full list. Some examples:\n#\n# mail_location = maildir:~/Maildir\n# mail_location = mbox:~/mail:INBOX=/var/mail/%u\n# mail_location = mbox:/var/mail/%d/%1n/%n:INDEX=/var/indexes/%d/%1n/%n\n#\n# \n#\nmail_location = maildir:/var/vmail/%d/%n\n\n# If you need to set multiple mailbox locations or want to change default\n# namespace settings, you can do it by defining namespace sections.\n#\n# You can have private, shared and public namespaces. Private namespaces\n# are for user's personal mails. Shared namespaces are for accessing other\n# users' mailboxes that have been shared. Public namespaces are for shared\n# mailboxes that are managed by sysadmin. If you create any shared or public\n# namespaces you'll typically want to enable ACL plugin also, otherwise all\n# users can access all the shared mailboxes, assuming they have permissions\n# on filesystem level to do so.\nnamespace inbox {\n # Namespace type: private, shared or public\n #type = private\n\n # Hierarchy separator to use. You should use the same separator for all\n # namespaces or some clients get confused. '/' is usually a good one.\n # The default however depends on the underlying mail storage format.\n #separator = \n\n # Prefix required to access this namespace. This needs to be different for\n # all namespaces. For example \"Public/\".\n #prefix = \n\n # Physical location of the mailbox. This is in same format as\n # mail_location, which is also the default for it.\n #location =\n\n # There can be only one INBOX, and this setting defines which namespace\n # has it.\n inbox = yes\n\n # If namespace is hidden, it's not advertised to clients via NAMESPACE\n # extension. You'll most likely also want to set list=no. This is mostly\n # useful when converting from another server with different namespaces which\n # you want to deprecate but still keep working. For example you can create\n # hidden namespaces with prefixes \"~/mail/\", \"~%u/mail/\" and \"mail/\".\n #hidden = no\n\n # Show the mailboxes under this namespace with LIST command. This makes the\n # namespace visible for clients that don't support NAMESPACE extension.\n # \"children\" value lists child mailboxes, but hides the namespace prefix.\n #list = yes\n\n # Namespace handles its own subscriptions. If set to \"no\", the parent\n # namespace handles them (empty prefix should always have this as \"yes\")\n #subscriptions = yes\n\n # See 15-mailboxes.conf for definitions of special mailboxes.\n}\n\n# Example shared namespace configuration\n#namespace {\n #type = shared\n #separator = /\n\n # Mailboxes are visible under \"shared/user@domain/\"\n # %%n, %%d and %%u are expanded to the destination user.\n #prefix = shared/%%u/\n\n # Mail location for other users' mailboxes. Note that %variables and ~/\n # expands to the logged in user's data. %%n, %%d, %%u and %%h expand to the\n # destination user's data.\n #location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u\n\n # Use the default namespace for saving subscriptions.\n #subscriptions = no\n\n # List the shared/ namespace only if there are visible shared mailboxes.\n #list = children\n#}\n# Should shared INBOX be visible as \"shared/user\" or \"shared/user/INBOX\"?\n#mail_shared_explicit_inbox = no\n\n# System user and group used to access mails. If you use multiple, userdb\n# can override these by returning uid or gid fields. You can use either numbers\n# or names. \nmail_uid = vmail\nmail_gid = mail\n\n# Group to enable temporarily for privileged operations. Currently this is\n# used only with INBOX when either its initial creation or dotlocking fails.\n# Typically this is set to \"mail\" to give access to /var/mail.\nmail_privileged_group = mail\n\n# Grant access to these supplementary groups for mail processes. Typically\n# these are used to set up access to shared mailboxes. Note that it may be\n# dangerous to set these if users can create symlinks (e.g. if \"mail\" group is\n# set here, ln -s /var/mail ~/mail/var could allow a user to delete others'\n# mailboxes, or ln -s /secret/shared/box ~/mail/mybox would allow reading it).\n#mail_access_groups =\nmail_access_groups = mail\n\n# Allow full filesystem access to clients. There's no access checks other than\n# what the operating system does for the active UID/GID. It works with both\n# maildir and mboxes, allowing you to prefix mailboxes names with eg. /path/\n# or ~user/.\n#mail_full_filesystem_access = no\n\n# Dictionary for key=value mailbox attributes. This is used for example by\n# URLAUTH and METADATA extensions.\n#mail_attribute_dict =\n\n# A comment or note that is associated with the server. This value is\n# accessible for authenticated users through the IMAP METADATA server\n# entry \"/shared/comment\". \n#mail_server_comment = \"\"\n\n# Indicates a method for contacting the server administrator. According to\n# RFC 5464, this value MUST be a URI (e.g., a mailto: or tel: URL), but that\n# is currently not enforced. Use for example mailto:admin@example.com. This\n# value is accessible for authenticated users through the IMAP METADATA server\n# entry \"/shared/admin\".\n#mail_server_admin = \n\n##\n## Mail processes\n##\n\n# Don't use mmap() at all. This is required if you store indexes to shared\n# filesystems (NFS or clustered filesystem).\n#mmap_disable = no\n\n# Rely on O_EXCL to work when creating dotlock files. NFS supports O_EXCL\n# since version 3, so this should be safe to use nowadays by default.\n#dotlock_use_excl = yes\n\n# When to use fsync() or fdatasync() calls:\n# optimized (default): Whenever necessary to avoid losing important data\n# always: Useful with e.g. NFS when write()s are delayed\n# never: Never use it (best performance, but crashes can lose data)\n#mail_fsync = optimized\n\n# Locking method for index files. Alternatives are fcntl, flock and dotlock.\n# Dotlocking uses some tricks which may create more disk I/O than other locking\n# methods. NFS users: flock doesn't work, remember to change mmap_disable.\n#lock_method = fcntl\n\n# Directory in which LDA/LMTP temporarily stores incoming mails >128 kB.\n#mail_temp_dir = /tmp\n\n# Valid UID range for users, defaults to 500 and above. This is mostly\n# to make sure that users can't log in as daemons or other system users.\n# Note that denying root logins is hardcoded to dovecot binary and can't\n# be done even if first_valid_uid is set to 0.\nfirst_valid_uid = 150\nlast_valid_uid = 150\n\n# Valid GID range for users, defaults to non-root/wheel. Users having\n# non-valid GID as primary group ID aren't allowed to log in. If user\n# belongs to supplementary groups with non-valid GIDs, those groups are\n# not set.\n#first_valid_gid = 1\n#last_valid_gid = 0\n\n# Maximum allowed length for mail keyword name. It's only forced when trying\n# to create new keywords.\n#mail_max_keyword_length = 50\n\n# ':' separated list of directories under which chrooting is allowed for mail\n# processes (ie. /var/mail will allow chrooting to /var/mail/foo/bar too).\n# This setting doesn't affect login_chroot, mail_chroot or auth chroot\n# settings. If this setting is empty, \"/./\" in home dirs are ignored.\n# WARNING: Never add directories here which local users can modify, that\n# may lead to root exploit. Usually this should be done only if you don't\n# allow shell access for users. \n#valid_chroot_dirs = \n\n# Default chroot directory for mail processes. This can be overridden for\n# specific users in user database by giving /./ in user's home directory\n# (eg. /home/./user chroots into /home). Note that usually there is no real\n# need to do chrooting, Dovecot doesn't allow users to access files outside\n# their mail directory anyway. If your home directories are prefixed with\n# the chroot directory, append \"/.\" to mail_chroot. \n#mail_chroot = \n\n# UNIX socket path to master authentication server to find users.\n# This is used by imap (for shared users) and lda.\n#auth_socket_path = /var/run/dovecot/auth-userdb\n\n# Directory where to look up mail plugins.\n#mail_plugin_dir = /usr/lib/dovecot\n\n# Space separated list of plugins to load for all services. Plugins specific to\n# IMAP, LDA, etc. are added to this list in their own .conf files.\n#mail_plugins = \n\n##\n## Mailbox handling optimizations\n##\n\n# Mailbox list indexes can be used to optimize IMAP STATUS commands. They are\n# also required for IMAP NOTIFY extension to be enabled.\n#mailbox_list_index = no\n\n# Trust mailbox list index to be up-to-date. This reduces disk I/O at the cost\n# of potentially returning out-of-date results after e.g. server crashes.\n# The results will be automatically fixed once the folders are opened.\n#mailbox_list_index_very_dirty_syncs = yes\n\n# Should INBOX be kept up-to-date in the mailbox list index? By default it's\n# not, because most of the mailbox accesses will open INBOX anyway.\n#mailbox_list_index_include_inbox = no\n\n# The minimum number of mails in a mailbox before updates are done to cache\n# file. This allows optimizing Dovecot's behavior to do less disk writes at\n# the cost of more disk reads.\n#mail_cache_min_mail_count = 0\n\n# When IDLE command is running, mailbox is checked once in a while to see if\n# there are any new mails or other changes. This setting defines the minimum\n# time to wait between those checks. Dovecot can also use inotify and\n# kqueue to find out immediately when changes occur.\n#mailbox_idle_check_interval = 30 secs\n\n# Save mails with CR+LF instead of plain LF. This makes sending those mails\n# take less CPU, especially with sendfile() syscall with Linux and FreeBSD.\n# But it also creates a bit more disk I/O which may just make it slower.\n# Also note that if other software reads the mboxes/maildirs, they may handle\n# the extra CRs wrong and cause problems.\n#mail_save_crlf = no\n\n# Max number of mails to keep open and prefetch to memory. This only works with\n# some mailbox formats and/or operating systems.\n#mail_prefetch_count = 0\n\n# How often to scan for stale temporary files and delete them (0 = never).\n# These should exist only after Dovecot dies in the middle of saving mails.\n#mail_temp_scan_interval = 1w\n\n# How many slow mail accesses sorting can perform before it returns failure.\n# With IMAP the reply is: NO [LIMIT] Requested sort would have taken too long.\n# The untagged SORT reply is still returned, but it's likely not correct.\n#mail_sort_max_read_count = 0\n\nprotocol !indexer-worker {\n # If folder vsize calculation requires opening more than this many mails from\n # disk (i.e. mail sizes aren't in cache already), return failure and finish\n # the calculation via indexer process. Disabled by default. This setting must\n # be 0 for indexer-worker processes.\n #mail_vsize_bg_after_count = 0\n}\n\n##\n## Maildir-specific settings\n##\n\n# By default LIST command returns all entries in maildir beginning with a dot.\n# Enabling this option makes Dovecot return only entries which are directories.\n# This is done by stat()ing each entry, so it causes more disk I/O.\n# (For systems setting struct dirent->d_type, this check is free and it's\n# done always regardless of this setting)\n#maildir_stat_dirs = no\n\n# When copying a message, do it with hard links whenever possible. This makes\n# the performance much better, and it's unlikely to have any side effects.\n#maildir_copy_with_hardlinks = yes\n\n# Assume Dovecot is the only MUA accessing Maildir: Scan cur/ directory only\n# when its mtime changes unexpectedly or when we can't find the mail otherwise.\n#maildir_very_dirty_syncs = no\n\n# If enabled, Dovecot doesn't use the S= in the Maildir filenames for\n# getting the mail's physical size, except when recalculating Maildir++ quota.\n# This can be useful in systems where a lot of the Maildir filenames have a\n# broken size. The performance hit for enabling this is very small.\n#maildir_broken_filename_sizes = no\n\n# Always move mails from new/ directory to cur/, even when the \\Recent flags\n# aren't being reset.\n#maildir_empty_new = no\n\n##\n## mbox-specific settings\n##\n\n# Which locking methods to use for locking mbox. There are four available:\n# dotlock: Create .lock file. This is the oldest and most NFS-safe\n# solution. If you want to use /var/mail/ like directory, the users\n# will need write access to that directory.\n# dotlock_try: Same as dotlock, but if it fails because of permissions or\n# because there isn't enough disk space, just skip it.\n# fcntl : Use this if possible. Works with NFS too if lockd is used.\n# flock : May not exist in all systems. Doesn't work with NFS.\n# lockf : May not exist in all systems. Doesn't work with NFS.\n#\n# You can use multiple locking methods; if you do the order they're declared\n# in is important to avoid deadlocks if other MTAs/MUAs are using multiple\n# locking methods as well. Some operating systems don't allow using some of\n# them simultaneously.\n#mbox_read_locks = fcntl\n#mbox_write_locks = dotlock fcntl\nmbox_write_locks = fcntl\n\n# Maximum time to wait for lock (all of them) before aborting.\n#mbox_lock_timeout = 5 mins\n\n# If dotlock exists but the mailbox isn't modified in any way, override the\n# lock file after this much time.\n#mbox_dotlock_change_timeout = 2 mins\n\n# When mbox changes unexpectedly we have to fully read it to find out what\n# changed. If the mbox is large this can take a long time. Since the change\n# is usually just a newly appended mail, it'd be faster to simply read the\n# new mails. If this setting is enabled, Dovecot does this but still safely\n# fallbacks to re-reading the whole mbox file whenever something in mbox isn't\n# how it's expected to be. The only real downside to this setting is that if\n# some other MUA changes message flags, Dovecot doesn't notice it immediately.\n# Note that a full sync is done with SELECT, EXAMINE, EXPUNGE and CHECK \n# commands.\n#mbox_dirty_syncs = yes\n\n# Like mbox_dirty_syncs, but don't do full syncs even with SELECT, EXAMINE,\n# EXPUNGE or CHECK commands. If this is set, mbox_dirty_syncs is ignored.\n#mbox_very_dirty_syncs = no\n\n# Delay writing mbox headers until doing a full write sync (EXPUNGE and CHECK\n# commands and when closing the mailbox). This is especially useful for POP3\n# where clients often delete all mails. The downside is that our changes\n# aren't immediately visible to other MUAs.\n#mbox_lazy_writes = yes\n\n# If mbox size is smaller than this (e.g. 100k), don't write index files.\n# If an index file already exists it's still read, just not updated.\n#mbox_min_index_size = 0\n\n# Mail header selection algorithm to use for MD5 POP3 UIDLs when\n# pop3_uidl_format=%m. For backwards compatibility we use apop3d inspired\n# algorithm, but it fails if the first Received: header isn't unique in all\n# mails. An alternative algorithm is \"all\" that selects all headers.\n#mbox_md5 = apop3d\n\n##\n## mdbox-specific settings\n##\n\n# Maximum dbox file size until it's rotated.\n#mdbox_rotate_size = 2M\n\n# Maximum dbox file age until it's rotated. Typically in days. Day begins\n# from midnight, so 1d = today, 2d = yesterday, etc. 0 = check disabled.\n#mdbox_rotate_interval = 0\n\n# When creating new mdbox files, immediately preallocate their size to\n# mdbox_rotate_size. This setting currently works only in Linux with some\n# filesystems (ext4, xfs).\n#mdbox_preallocate_space = no\n\n##\n## Mail attachments\n##\n\n# sdbox and mdbox support saving mail attachments to external files, which\n# also allows single instance storage for them. Other backends don't support\n# this for now.\n\n# Directory root where to store mail attachments. Disabled, if empty.\n#mail_attachment_dir =\n\n# Attachments smaller than this aren't saved externally. It's also possible to\n# write a plugin to disable saving specific attachments externally.\n#mail_attachment_min_size = 128k\n\n# Filesystem backend to use for saving attachments:\n# posix : No SiS done by Dovecot (but this might help FS's own deduplication)\n# sis posix : SiS with immediate byte-by-byte comparison during saving\n# sis-queue posix : SiS with delayed comparison and deduplication\n#mail_attachment_fs = sis posix\n\n# Hash format to use in attachment filenames. You can add any text and\n# variables: %{md4}, %{md5}, %{sha1}, %{sha256}, %{sha512}, %{size}.\n# Variables can be truncated, e.g. %{sha256:80} returns only first 80 bits\n#mail_attachment_hash = %{sha1}\n\n# Settings to control adding $HasAttachment or $HasNoAttachment keywords.\n# By default, all MIME parts with Content-Disposition=attachment, or inlines\n# with filename parameter are consired attachments.\n# add-flags-on-save - Add the keywords when saving new mails.\n# content-type=type or !type - Include/exclude content type. Excluding will\n# never consider the matched MIME part as attachment. Including will only\n# negate an exclusion (e.g. content-type=!foo/* content-type=foo/bar).\n# exclude-inlined - Exclude any Content-Disposition=inline MIME part.\n#mail_attachment_detection_options =\n" }, { "path": "conf/dovecot/conf.d/10-master.conf", "content": "#default_process_limit = 100\n#default_client_limit = 1000\n\n# Default VSZ (virtual memory size) limit for service processes. This is mainly\n# intended to catch and kill processes that leak memory before they eat up\n# everything.\n#default_vsz_limit = 256M\n\n# Login user is internally used by login processes. This is the most untrusted\n# user in Dovecot system. It shouldn't have access to anything at all.\n#default_login_user = dovenull\n\n# Internal user is used by unprivileged processes. It should be separate from\n# login user, so that login processes can't disturb other processes.\n#default_internal_user = dovecot\n\nservice imap-login {\n inet_listener imap {\n #port = 143\n }\n inet_listener imaps {\n #port = 993\n #ssl = yes\n }\n\n # Number of connections to handle before starting a new process. Typically\n # the only useful values are 0 (unlimited) or 1. 1 is more secure, but 0\n # is faster. \n #service_count = 1\n\n # Number of processes to always keep waiting for more connections.\n #process_min_avail = 0\n\n # If you set service_count=0, you probably need to grow this.\n #vsz_limit = $default_vsz_limit\n}\n\nservice pop3-login {\n inet_listener pop3 {\n #port = 110\n }\n inet_listener pop3s {\n #port = 995\n #ssl = yes\n }\n}\n\n# service lmtp {\n# unix_listener /var/spool/postfix/private/dovecot-lmtp {\n# #mode = 0666\n# mode = 0600\n# user = postfix\n# group = postfix\n# }\nservice lmtp {\n inet_listener lmtp-inet {\n port = 26\n }\n user = vmail\n}\n\n # Create inet listener only if you can't use the above UNIX socket\n #inet_listener lmtp {\n # Avoid making LMTP visible for the entire internet\n #address =\n #port = \n #}\n\n\nservice imap {\n # Most of the memory goes to mmap()ing files. You may need to increase this\n # limit if you have huge mailboxes.\n #vsz_limit = $default_vsz_limit\n\n # Max. number of IMAP processes (connections)\n #process_limit = 1024\n}\n\nservice pop3 {\n # Max. number of POP3 processes (connections)\n #process_limit = 1024\n}\nservice auth {\n inet_listener auth-inet {\n port = 10002\n }\n unix_listener auth-master {\n mode = 0600\n user = vmail\n }\n unix_listener auth-userdb {\n mode = 0600\n user = vmail\n }\n vsz_limit = 2G\n}\n# service auth {\n# # auth_socket_path points to this userdb socket by default. It's typically\n# # used by dovecot-lda, doveadm, possibly imap process, etc. Users that have\n# # full permissions to this socket are able to get a list of all usernames and\n# # get the results of everyone's userdb lookups.\n# #\n# # The default 0666 mode allows anyone to connect to the socket, but the\n# # userdb lookups will succeed only if the userdb returns an \"uid\" field that\n# # matches the caller process's UID. Also if caller's uid or gid matches the\n# # socket's uid or gid the lookup succeeds. Anything else causes a failure.\n# #\n# # To give the caller full permissions to lookup all users, set the mode to\n# # something else than 0666 and Dovecot lets the kernel enforce the\n# # permissions (e.g. 0777 allows everyone full permissions).\n# unix_listener auth-userdb {\n# mode = 0600\n# user = vmail\n# #group = vmail\n# }\n\n# # Postfix smtp-auth\n# unix_listener /var/spool/postfix/private/auth {\n# mode = 0666\n# user = postfix\n# group = postfix\n# }\n\n# # Auth process is run as this user.\n# #user = $default_internal_user\n# user = dovecot\n# }\n\nservice auth-worker {\n # Auth worker process is run as root by default, so that it can access\n # /etc/shadow. If this isn't necessary, the user should be changed to\n # $default_internal_user.\n #user = root\n user = vmail\n}\n\nservice dict {\n # If dict proxy is used, mail processes should have access to its socket.\n # For example: mode=0660, group=vmail and global mail_access_groups=vmail\n unix_listener dict {\n #mode = 0600\n #user = \n #group = \n }\n}\n" }, { "path": "conf/dovecot/conf.d/10-ssl.conf", "content": "##\n## SSL settings\n##\n\n# SSL/TLS support: yes, no, required. \n# disable plain pop3 and imap, allowed are only pop3+TLS, pop3s, imap+TLS and imaps\n# plain imap and pop3 are still allowed for local connections\nssl = yes\n\n# PEM encoded X.509 SSL/TLS certificate and private key. They're opened before\n# dropping root privileges, so keep the key file unreadable by anyone but\n# root. Included doc/mkcert.sh can be used to easily generate self-signed\n# certificate, just make sure to update the domains in dovecot-openssl.cnf\nssl_cert = was automatically rejected:%n%r\n\n# Delimiter character between local-part and detail in email address.\n#recipient_delimiter = +\n\n# Header where the original recipient address (SMTP's RCPT TO: address) is taken\n# from if not available elsewhere. With dovecot-lda -a parameter overrides this. \n# A commonly used header for this is X-Original-To.\n#lda_original_recipient_header =\n\n# Should saving a mail to a nonexistent mailbox automatically create it?\n#lda_mailbox_autocreate = no\n\n# Should automatically created mailboxes be also automatically subscribed?\n#lda_mailbox_autosubscribe = no\n\nprotocol lda {\n # Space separated list of plugins to load (default is global mail_plugins).\n #mail_plugins = $mail_plugins\n mail_plugins = $mail_plugins sieve\n}\n" }, { "path": "conf/dovecot/conf.d/15-mailboxes.conf", "content": "##\n## Mailbox definitions\n##\n\n# Each mailbox is specified in a separate mailbox section. The section name\n# specifies the mailbox name. If it has spaces, you can put the name\n# \"in quotes\". These sections can contain the following mailbox settings:\n#\n# auto:\n# Indicates whether the mailbox with this name is automatically created\n# implicitly when it is first accessed. The user can also be automatically\n# subscribed to the mailbox after creation. The following values are\n# defined for this setting:\n# \n# no - Never created automatically.\n# create - Automatically created, but no automatic subscription.\n# subscribe - Automatically created and subscribed.\n# \n# special_use:\n# A space-separated list of SPECIAL-USE flags (RFC 6154) to use for the\n# mailbox. There are no validity checks, so you could specify anything\n# you want in here, but it's not a good idea to use flags other than the\n# standard ones specified in the RFC:\n#\n# \\All - This (virtual) mailbox presents all messages in the\n# user's message store. \n# \\Archive - This mailbox is used to archive messages.\n# \\Drafts - This mailbox is used to hold draft messages.\n# \\Flagged - This (virtual) mailbox presents all messages in the\n# user's message store marked with the IMAP \\Flagged flag.\n# \\Junk - This mailbox is where messages deemed to be junk mail\n# are held.\n# \\Sent - This mailbox is used to hold copies of messages that\n# have been sent.\n# \\Trash - This mailbox is used to hold messages that have been\n# deleted.\n#\n# comment:\n# Defines a default comment or note associated with the mailbox. This\n# value is accessible through the IMAP METADATA mailbox entries\n# \"/shared/comment\" and \"/private/comment\". Users with sufficient\n# privileges can override the default value for entries with a custom\n# value.\n\n# NOTE: Assumes \"namespace inbox\" has been defined in 10-mail.conf.\nnamespace inbox {\n # These mailboxes are widely used and could perhaps be created automatically:\n mailbox Drafts {\n auto = subscribe\n special_use = \\Drafts\n }\n mailbox Junk {\n auto = subscribe\n special_use = \\Junk\n }\n mailbox Trash {\n auto = subscribe\n special_use = \\Trash\n }\n\n # For \\Sent mailboxes there are two widely used names. We'll mark both of\n # them as \\Sent. User typically deletes one of them if duplicates are created.\n mailbox Sent {\n auto = subscribe\n special_use = \\Sent\n }\n mailbox \"Sent Messages\" {\n special_use = \\Sent\n }\n\n # If you have a virtual \"All messages\" mailbox:\n #mailbox virtual/All {\n # special_use = \\All\n # comment = All my messages\n #}\n\n # If you have a virtual \"Flagged\" mailbox:\n #mailbox virtual/Flagged {\n # special_use = \\Flagged\n # comment = All my flagged messages\n #}\n}\n" }, { "path": "conf/dovecot/conf.d/20-imap.conf", "content": "##\n## IMAP specific settings\n##\n\n# If nothing happens for this long while client is IDLEing, move the connection\n# to imap-hibernate process and close the old imap process. This saves memory,\n# because connections use very little memory in imap-hibernate process. The\n# downside is that recreating the imap process back uses some resources.\n#imap_hibernate_timeout = 0\n\n# Maximum IMAP command line length. Some clients generate very long command\n# lines with huge mailboxes, so you may need to raise this if you get\n# \"Too long argument\" or \"IMAP command line too large\" errors often.\n#imap_max_line_length = 64k\n\n# IMAP logout format string:\n# %i - total number of bytes read from client\n# %o - total number of bytes sent to client\n# %{fetch_hdr_count} - Number of mails with mail header data sent to client\n# %{fetch_hdr_bytes} - Number of bytes with mail header data sent to client\n# %{fetch_body_count} - Number of mails with mail body data sent to client\n# %{fetch_body_bytes} - Number of bytes with mail body data sent to client\n# %{deleted} - Number of mails where client added \\Deleted flag\n# %{expunged} - Number of mails that client expunged, which does not\n# include automatically expunged mails\n# %{autoexpunged} - Number of mails that were automatically expunged after\n# client disconnected\n# %{trashed} - Number of mails that client copied/moved to the\n# special_use=\\Trash mailbox.\n# %{appended} - Number of mails saved during the session\n#imap_logout_format = in=%i out=%o deleted=%{deleted} expunged=%{expunged} \\\n# trashed=%{trashed} hdr_count=%{fetch_hdr_count} \\\n# hdr_bytes=%{fetch_hdr_bytes} body_count=%{fetch_body_count} \\\n# body_bytes=%{fetch_body_bytes}\n\n# Override the IMAP CAPABILITY response. If the value begins with '+',\n# add the given capabilities on top of the defaults (e.g. +XFOO XBAR).\n#imap_capability = \n\n# How long to wait between \"OK Still here\" notifications when client is\n# IDLEing.\n#imap_idle_notify_interval = 2 mins\n\n# ID field names and values to send to clients. Using * as the value makes\n# Dovecot use the default value. The following fields have default values\n# currently: name, version, os, os-version, support-url, support-email.\n#imap_id_send = \n\n# ID fields sent by client to log. * means everything.\n#imap_id_log =\n\n# Workarounds for various client bugs:\n# delay-newmail:\n# Send EXISTS/RECENT new mail notifications only when replying to NOOP\n# and CHECK commands. Some clients ignore them otherwise, for example OSX\n# Mail () instead of full path\n# syntax.\n#\n# The list is space-separated.\n#lmtp_client_workarounds =\n\nprotocol lmtp {\n # Space separated list of plugins to load (default is global mail_plugins).\n #mail_plugins = $mail_plugins\n mail_plugins = $mail_plugins sieve\n}\n" }, { "path": "conf/dovecot/conf.d/20-pop3.conf", "content": "##\n## POP3 specific settings\n##\n\n# Don't try to set mails non-recent or seen with POP3 sessions. This is\n# mostly intended to reduce disk I/O. With maildir it doesn't move files\n# from new/ to cur/, with mbox it doesn't write Status-header.\n#pop3_no_flag_updates = no\n\n# Support LAST command which exists in old POP3 specs, but has been removed\n# from new ones. Some clients still wish to use this though. Enabling this\n# makes RSET command clear all \\Seen flags from messages.\n#pop3_enable_last = no\n\n# If mail has X-UIDL header, use it as the mail's UIDL.\n#pop3_reuse_xuidl = no\n\n# Allow only one POP3 session to run simultaneously for the same user.\n#pop3_lock_session = no\n\n# POP3 requires message sizes to be listed as if they had CR+LF linefeeds.\n# Many POP3 servers violate this by returning the sizes with LF linefeeds,\n# because it's faster to get. When this setting is enabled, Dovecot still\n# tries to do the right thing first, but if that requires opening the\n# message, it fallbacks to the easier (but incorrect) size.\n#pop3_fast_size_lookups = no\n\n# POP3 UIDL (unique mail identifier) format to use. You can use following\n# variables, along with the variable modifiers described in\n# doc/wiki/Variables.txt (e.g. %Uf for the filename in uppercase)\n#\n# %v - Mailbox's IMAP UIDVALIDITY\n# %u - Mail's IMAP UID\n# %m - MD5 sum of the mailbox headers in hex (mbox only)\n# %f - filename (maildir only)\n# %g - Mail's GUID\n#\n# If you want UIDL compatibility with other POP3 servers, use:\n# UW's ipop3d : %08Xv%08Xu\n# Courier : %f or %v-%u (both might be used simultaneously)\n# Cyrus (<= 2.1.3) : %u\n# Cyrus (>= 2.1.4) : %v.%u\n# Dovecot v0.99.x : %v.%u\n# tpop3d : %Mf\n#\n# Note that Outlook 2003 seems to have problems with %v.%u format which was\n# Dovecot's default, so if you're building a new server it would be a good\n# idea to change this. %08Xu%08Xv should be pretty fail-safe.\n#\n#pop3_uidl_format = %08Xu%08Xv\n\n# Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes\n# won't change those UIDLs. Currently this works only with Maildir.\n#pop3_save_uidl = no\n\n# What to do about duplicate UIDLs if they exist?\n# allow: Show duplicates to clients.\n# rename: Append a temporary -2, -3, etc. counter after the UIDL.\n#pop3_uidl_duplicates = allow\n\n# This option changes POP3 behavior so that it's not possible to actually\n# delete mails via POP3, only hide them from future POP3 sessions. The mails\n# will still be counted towards user's quota until actually deleted via IMAP.\n# Use e.g. \"$POP3Deleted\" as the value (it will be visible as IMAP keyword).\n# Make sure you can legally archive mails before enabling this setting.\n#pop3_deleted_flag =\n\n# POP3 logout format string:\n# %i - total number of bytes read from client\n# %o - total number of bytes sent to client\n# %t - number of TOP commands\n# %p - number of bytes sent to client as a result of TOP command\n# %r - number of RETR commands\n# %b - number of bytes sent to client as a result of RETR command\n# %d - number of deleted messages\n# %{deleted_bytes} - number of bytes in deleted messages\n# %m - number of messages (before deletion)\n# %s - mailbox size in bytes (before deletion)\n# %u - old/new UIDL hash. may help finding out if UIDLs changed unexpectedly\n#pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s\n\n# Workarounds for various client bugs:\n# outlook-no-nuls:\n# Outlook and Outlook Express hang if mails contain NUL characters.\n# This setting replaces them with 0x80 character.\n# oe-ns-eoh:\n# Outlook Express and Netscape Mail breaks if end of headers-line is\n# missing. This option simply sends it if it's missing.\n# The list is space-separated.\n#pop3_client_workarounds = \n\nprotocol pop3 {\n # Space separated list of plugins to load (default is global mail_plugins).\n #mail_plugins = $mail_plugins\n\n # Maximum number of POP3 connections allowed for a user from each IP address.\n # NOTE: The username is compared case-sensitively.\n #mail_max_userip_connections = 10\n}\n" }, { "path": "conf/dovecot/conf.d/90-acl.conf", "content": "##\n## Mailbox access control lists.\n##\n\n# vfile backend reads ACLs from \"dovecot-acl\" file from mail directory.\n# You can also optionally give a global ACL directory path where ACLs are\n# applied to all users' mailboxes. The global ACL directory contains\n# one file for each mailbox, eg. INBOX or sub.mailbox. cache_secs parameter\n# specifies how many seconds to wait between stat()ing dovecot-acl file\n# to see if it changed.\nplugin {\n #acl = vfile:/etc/dovecot/global-acls:cache_secs=300\n}\n\n# To let users LIST mailboxes shared by other users, Dovecot needs a\n# shared mailbox dictionary. For example:\nplugin {\n #acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes\n}\n" }, { "path": "conf/dovecot/conf.d/90-plugin.conf", "content": "##\n## Plugin settings\n##\n\n# All wanted plugins must be listed in mail_plugins setting before any of the\n# settings take effect. See for list of plugins and\n# their configuration. Note that %variable expansion is done for all values.\n\nplugin {\n #setting_name = value\n sieve = /etc/dovecot/sieve/default.sieve\n}\n" }, { "path": "conf/dovecot/conf.d/90-quota.conf", "content": "##\n## Quota configuration.\n##\n\n# Note that you also have to enable quota plugin in mail_plugins setting.\n# \n\n##\n## Quota limits\n##\n\n# Quota limits are set using \"quota_rule\" parameters. To get per-user quota\n# limits, you can set/override them by returning \"quota_rule\" extra field\n# from userdb. It's also possible to give mailbox-specific limits, for example\n# to give additional 100 MB when saving to Trash:\n\nplugin {\n #quota_rule = *:storage=1G\n #quota_rule2 = Trash:storage=+100M\n\n # LDA/LMTP allows saving the last mail to bring user from under quota to\n # over quota, if the quota doesn't grow too high. Default is to allow as\n # long as quota will stay under 10% above the limit. Also allowed e.g. 10M.\n #quota_grace = 10%%\n\n # Quota plugin can also limit the maximum accepted mail size.\n #quota_max_mail_size = 100M\n}\n\n##\n## Quota warnings\n##\n\n# You can execute a given command when user exceeds a specified quota limit.\n# Each quota root has separate limits. Only the command for the first\n# exceeded limit is executed, so put the highest limit first.\n# The commands are executed via script service by connecting to the named\n# UNIX socket (quota-warning below).\n# Note that % needs to be escaped as %%, otherwise \"% \" expands to empty.\n\nplugin {\n #quota_warning = storage=95%% quota-warning 95 %u\n #quota_warning2 = storage=80%% quota-warning 80 %u\n}\n\n# Example quota-warning service. The unix listener's permissions should be\n# set in a way that mail processes can connect to it. Below example assumes\n# that mail processes run as vmail user. If you use mode=0666, all system users\n# can generate quota warnings to anyone.\n#service quota-warning {\n# executable = script /usr/local/bin/quota-warning.sh\n# user = dovecot\n# unix_listener quota-warning {\n# user = vmail\n# }\n#}\n\n##\n## Quota backends\n##\n\n# Multiple backends are supported:\n# dirsize: Find and sum all the files found from mail directory.\n# Extremely SLOW with Maildir. It'll eat your CPU and disk I/O.\n# dict: Keep quota stored in dictionary (eg. SQL)\n# maildir: Maildir++ quota\n# fs: Read-only support for filesystem quota\n\nplugin {\n #quota = dirsize:User quota\n #quota = maildir:User quota\n #quota = dict:User quota::proxy::quota\n #quota = fs:User quota\n}\n\n# Multiple quota roots are also possible, for example this gives each user\n# their own 100MB quota and one shared 1GB quota within the domain:\nplugin {\n #quota = dict:user::proxy::quota\n #quota2 = dict:domain:%d:proxy::quota_domain\n #quota_rule = *:storage=102400\n #quota2_rule = *:storage=1048576\n}\n" }, { "path": "conf/dovecot/conf.d/90-sieve-extprograms.conf", "content": "# Sieve Extprograms plugin configuration\n\n# Don't forget to add the sieve_extprograms plugin to the sieve_plugins setting.\n# Also enable the extensions you need (one or more of vnd.dovecot.pipe,\n# vnd.dovecot.filter and vnd.dovecot.execute) by adding these\tto the\n# sieve_extensions or sieve_global_extensions settings. Restricting these\n# extensions to a global context using sieve_global_extensions is recommended.\n\nplugin {\n\n # The directory where the program sockets are located for the\n # vnd.dovecot.pipe, vnd.dovecot.filter and vnd.dovecot.execute extension\n # respectively. The name of each unix socket contained in that directory\n # directly maps to a program-name referenced from the Sieve script.\n #sieve_pipe_socket_dir = sieve-pipe\n #sieve_filter_socket_dir = sieve-filter\n #sieve_execute_socket_dir = sieve-execute\n\n # The directory where the scripts are located for direct execution by the\n # vnd.dovecot.pipe, vnd.dovecot.filter and vnd.dovecot.execute extension\n # respectively. The name of each script contained in that directory\n # directly maps to a program-name referenced from the Sieve script.\n #sieve_pipe_bin_dir = /usr/lib/dovecot/sieve-pipe\n #sieve_filter_bin_dir = /usr/lib/dovecot/sieve-filter\n #sieve_execute_bin_dir = /usr/lib/dovecot/sieve-execute\n}\n\n# An example program service called 'do-something' to pipe messages to\n#service do-something {\n # Define the executed script as parameter to the sieve service\n #executable = script /usr/lib/dovecot/sieve-pipe/do-something.sh\n\n # Use some unprivileged user for executing the program\n #user = dovenull\n\n # The unix socket located in the sieve_pipe_socket_dir (as defined in the \n # plugin {} section above)\n #unix_listener sieve-pipe/do-something {\n # LDA/LMTP must have access\n # user = vmail \n # mode = 0600\n #}\n#}\n\n" }, { "path": "conf/dovecot/conf.d/90-sieve.conf", "content": "##\n## Settings for the Sieve interpreter\n##\n\n# Do not forget to enable the Sieve plugin in 15-lda.conf and 20-lmtp.conf\n# by adding it to the respective mail_plugins= settings.\n\n# The Sieve interpreter can retrieve Sieve scripts from several types of\n# locations. The default `file' location type is a local filesystem path\n# pointing to a Sieve script file or a directory containing multiple Sieve\n# script files. More complex setups can use other location types such as\n# `ldap' or `dict' to fetch Sieve scripts from remote databases.\n#\n# All settings that specify the location of one ore more Sieve scripts accept\n# the following syntax:\n#\n# location = [:]path[;