stalwart: add

Author: akilli

.github/workflows/release.yml

@@ -21,6 +21,7 @@ jobs:
       postgres: ${{ steps.filter.outputs.postgres }}
       redis: ${{ steps.filter.outputs.redis }}
       registry: ${{ steps.filter.outputs.registry }}
+      stalwart: ${{ steps.filter.outputs.stalwart }}
       traefik: ${{ steps.filter.outputs.traefik }}
     steps:
       - name: checkout
@@ -50,6 +51,8 @@ jobs:
               - 'redis/**'
             registry:
               - 'registry/**'
+            stalwart:
+              - 'stalwart/**'
             traefik:
               - 'traefik/**'
   base:
@@ -132,6 +135,14 @@ jobs:
       image: akilli/registry
       context: "{{defaultContext}}:registry"
     secrets: inherit
+  stalwart:
+    needs: [ changes, base ]
+    if: (success() && needs.base.if == 'true') || (always() && needs.changes.outputs.stalwart == 'true')
+    uses: akilli/docker/.github/workflows/dockerhub.yml@master
+    with:
+      image: akilli/stalwart
+      context: "{{defaultContext}}:stalwart"
+    secrets: inherit
   traefik:
     needs: [changes, base]
     if: (success() && needs.base.if == 'true') || (always() && needs.changes.outputs.traefik == 'true')

stalwart/compose.yml

@@ -0,0 +1,17 @@
+volumes:
+  data: {}
+services:
+  stalwart:
+    image: akilli/stalwart
+    restart: unless-stopped
+    ports:
+      - "25:25"
+      - "443:443"
+      - "465:465"
+      - "993:993"
+#    environment:
+#      STALWART_HOST: mail.example.com
+    volumes:
+      - data:/data
+#      - /path/to/app.crt:/ssl/app.crt:ro
+#      - /path/to/app.key:/ssl/app.key:ro

stalwart/config.toml

@@ -0,0 +1,48 @@
+storage.data = "rocksdb"
+storage.fts = "rocksdb"
+storage.blob = "rocksdb"
+storage.lookup = "rocksdb"
+storage.directory = "internal"
+
+store.rocksdb.type = "rocksdb"
+store.rocksdb.path = "/data"
+store.rocksdb.compression = "lz4"
+
+directory.internal.type = "internal"
+directory.internal.store = "rocksdb"
+
+authentication.fallback-admin.user = "admin"
+authentication.fallback-admin.secret = "%{env:STALWART_PASSWORD}%"
+
+tracer.stdout.enable = true
+tracer.stdout.type = "stdout"
+tracer.stdout.level = "info"
+tracer.stdout.ansi = false
+
+certificate.default.default = true
+certificate.default.cert = "%{file:/ssl/app.crt}%"
+certificate.default.private-key = "%{file:/ssl/app.key}%"
+
+server.hostname = "%{env:STALWART_HOST}%"
+http.hsts = true
+http.permissive-cors = false
+http.url = "protocol + '://' + config_get('server.hostname') + ':' + local_port"
+http.use-x-forwarded = true
+
+server.listener.http.bind = "[::]:8080"
+server.listener.http.protocol = "http"
+
+server.listener.https.bind = "[::]:443"
+server.listener.https.protocol = "http"
+server.listener.https.tls.implicit = true
+
+server.listener.imaptls.bind = "[::]:993"
+server.listener.imaptls.protocol = "imap"
+server.listener.imaptls.tls.implicit = true
+
+server.listener.smtp.bind = "[::]:25"
+server.listener.smtp.protocol = "smtp"
+
+server.listener.submissions.bind = "[::]:465"
+server.listener.submissions.protocol = "smtp"
+server.listener.submissions.tls.implicit = true

stalwart/dockerfile

@@ -0,0 +1,17 @@
+FROM akilli/base
+LABEL maintainer="Ayhan Akilli"
+
+ENV STALWART_HOST=mail.example.com
+ENV STALWART_PASSWORD=admin
+
+# @todo install regular `rocksdb` package once `stalwart-mail` dependencies are updated
+RUN echo "@old https://dl-cdn.alpinelinux.org/alpine/v3.23/community" >> /etc/apk/repositories && \
+    apk add --no-cache \
+        rocksdb@old \
+        stalwart-cli \
+        stalwart-mail && \
+    app-user && \
+    app-chown
+COPY config.toml /app/config.toml
+
+CMD ["su-exec", "app", "stalwart", "--config", "/app/config.toml"]

stalwart/readme.md

@@ -0,0 +1,14 @@
+# `akilli/stalwart`
+
+[akilli/base](../base) based stalwart image.
+
+The default config 
+
+- expects the TLS certificate file at `/ssl/app.crt`
+- expects the TLS private key file at `/ssl/app.key`
+- uses `STALWART_HOST` environment variable to set server hostname
+- uses `STALWART_PASSWORD` environment variable to set `admin` user password
+
+Alternatively, you can mount your own config to `/app/config.toml`.
+
+You can use the example [compose.yml](compose.yml) as a starting point for your configuration.