~dricottone/container-images#1: 
postfix with SMTPD authentication/encryption

registry.intra.dominic-ricottone.com/postfix:latest should be an unencrypted/unauthenticated relay server.

registry.intra.dominic-ricottone.com/postfix:dovecot should be an encrypted/authenticated server like what is described here or here

Edit 6/21/2023: Change of plans. See below.

Status
RESOLVED CLOSED
Submitter
~dricottone
Assigned to
No-one
Submitted
1 year, 5 months ago
Updated
1 year, 4 months ago
Labels
No labels applied.

~dricottone 1 year, 5 months ago*

The exposed ports should be cut down: just :25 for :latest :tls-out, and just :587 :25 and :465 for :dovecot :latest and :tls-in.

Edit 6/21/2023: Good idea, but the image tags have been reworked significantly and I am preferring SMTPS over Submission and I discovered that keeping :25 open is pretty important.

~dricottone 1 year, 5 months ago

Obviously depends on #2

~dricottone 1 year, 5 months ago

Adopt some details from here

~dricottone 1 year, 5 months ago

No longer doing the Dovecot route, so no longer depends on #2. Cyrus is pretty simple for small installations.

~dricottone REPORTED CLOSED 1 year, 4 months ago

postfix:latest and postfix:tls-in have been deployed for a week now, no issues. Will be deploying postfix:tls-out shortly. Closing for now.

Register here or Log in to comment, or comment via email.