summaryrefslogtreecommitdiffstats
path: root/postfix/entrypoint.sh (follow)
AgeCommit message (Collapse)AuthorFilesLines
2024-06-15mlmmj: Integration with postfixMalfurious1-8/+37
Incoming mail for an mlmmj list is caught by a virtual mapping and directed via virtual transport to the mlmmj system for processing. Outgoing mail is implicitly allowed since it originates from the localhost. The postfix entrypoint script now dynamically generates these mailing list mappings on startup from data in the mlmmj spool directory, so user configuration is minimal. In addition, the script will now sync the user's mailing list parameters into the spool directory, thus automatically creating new lists and deleting old ones. The list creation logic is implemented in a new script `make_list.sh`. This is made necessary as the mlmmj built in tooling for this must be run interactively, so we duplicate the logic. This is separate from `entrypoint.sh` mainly because we need to drop privileges to the mlmmj user while creating files. Signed-off-by: Malfurious <m@lfurio.us>
2024-06-14postfix: Deny submission sender/login mismatchMalfurious1-2/+8
Prevent outgoing spoofed emails by requiring the MAIL FROM header to match the SASL login name. Specifically, the SASL user must "own" the address. `smtpd_sender_login_maps` defines a lookup table to determine ownership. We create a placeholder table that states each user simply owns their own email address (aka: the value of their username). Signed-off-by: Malfurious <m@lfurio.us>
2024-06-09postfix: Add service entrypoint scriptMalfurious1-0/+12
This is used to generate database files used by postfix daemons. In theory, this could also be performed at build-time by the Dockerfile. However, I intend to create only a single image that each service separately spawns from, since there will be several commonalities between them. Moving these postfix-specific tasks to an entrypoint script keeps the common Dockerfile more managable. Signed-off-by: Malfurious <m@lfurio.us>