diff --git a/etc-relay/postfix/main.cf b/etc-relay/postfix/main.cf index 76a74ed..ff058ea 100644 --- a/etc-relay/postfix/main.cf +++ b/etc-relay/postfix/main.cf @@ -33,8 +33,8 @@ default_transport = smtp: # SMPTD (inbound) TLS parameters smtpd_tls_CApath = /etc/ssl/certs -smtpd_tls_CAfile = /etc/ssl/certs/kopano-ca.crt -smtpd_tls_key_file=/etc/ssl/private/pf-relay.key +smtpd_tls_CAfile = /usr/local/share/ca-certificates/kopano-ca.crt +smtpd_tls_key_file=/etc/ssl/private/relay.key smtpd_tls_cert_file=/etc/ssl/relay-full-chain.pem smtpd_tls_security_level=may smtpd_tls_loglevel = 1 @@ -47,7 +47,7 @@ smtpd_relay_restrictions = permit_mynetworks reject_unauth_destination # SMTP (outbound) smtp_tls_CApath=/etc/ssl/certs -smtp_tls_key_file=/etc/ssl/private/pf-relay.key +smtp_tls_key_file=/etc/ssl/private/relay.key smtp_tls_cert_file=/etc/ssl/relay-full-chain.pem smtp_tls_security_level=may smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache diff --git a/etc-zntrl/postfix/main.cf b/etc-zntrl/postfix/main.cf index 6e573bb..ab53dc0 100644 --- a/etc-zntrl/postfix/main.cf +++ b/etc-zntrl/postfix/main.cf @@ -35,19 +35,20 @@ virtual_transport = lmtp:dagent:2003 default_transport = smtp:[relay.zntrl.de]:465 # SMTPD (inbound) TLS parameters -smtpd_tls_key_file = /etc/postfix/ssl/private/nuc0.lan.key -smtpd_tls_cert_file = /etc/postfix/ssl/nuc0-full-chain.pem smtpd_tls_CApath = /etc/ssl/certs -smtpd_tls_CAfile = /etc/postfix/ssl/certs/balusign-signing-ca.pem -smtpd_tls_security_level=may +smtpd_tls_CAfile = /usr/local/share/ca-certificates/kopano-ca.crt +smtpd_tls_key_file = /etc/ssl/private/zntrl.key +smtpd_tls_cert_file = /etc/ssl/zntrl.crt +smtpd_tls_security_level = may smtpd_tls_loglevel = 1 smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination # SMTP (outbound) -smtp_tls_key_file = /etc/postfix/ssl/private/nuc0.lan.key -smtp_tls_cert_file = /etc/postfix/ssl/nuc0-full-chain.pem smtp_tls_CApath=/etc/ssl/certs +smtd_tls_CAfile = /usr/local/share/ca-certificates/kopano-ca.crt +smtd_tls_key_file = /etc/ssl/private/zntrl.key +smtd_tls_cert_file = /etc/ssl/zntrl.crt smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_tls_wrappermode = yes smtp_tls_security_level = encrypt diff --git a/etc-zntrl/postfix/relay_clientcerts b/etc-zntrl/postfix/relay_clientcerts index 192f3b1..2bfbc90 100644 --- a/etc-zntrl/postfix/relay_clientcerts +++ b/etc-zntrl/postfix/relay_clientcerts @@ -1,2 +1,3 @@ -57:6c:b5:f6:49:0e:9d:62:cc:c5:63:80:e5:64:58:ed relay.de -d4:16:18:1e:21:37:45:fa:a9:ad:d7:7f:0c:37:8f:7c zntrl.de +59:60:7e:df:d6:b9:96:2a:38:b3:71:a2:7b:5d:bc:44 relay +14:38:ee:53:a2:9f:7d:3a:75:f3:e7:11:99:dd:85:5d zntrl +3b:ad:6d:65:38:a9:0a:63:89:41:3a:95:96:e0:e6:65 baloghs diff --git a/etc-zntrl/postfix/virtual.db b/etc-zntrl/postfix/virtual.db new file mode 100644 index 0000000..b82c97a Binary files /dev/null and b/etc-zntrl/postfix/virtual.db differ diff --git a/etc-zntrl/postfix/vmailbox.db b/etc-zntrl/postfix/vmailbox.db new file mode 100644 index 0000000..c103053 Binary files /dev/null and b/etc-zntrl/postfix/vmailbox.db differ diff --git a/postfix/Dockerfile b/postfix/Dockerfile index 2c606f0..72d1856 100644 --- a/postfix/Dockerfile +++ b/postfix/Dockerfile @@ -10,6 +10,7 @@ apt-get autoclean rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* ~/.cache ~/.npm EOF COPY etc/postfix/ /etc/postfix/ +COPY etc/ssl/ /etc/ssl/ COPY --chmod=0775 entrypoint.sh /entrypoint.sh EXPOSE 25 VOLUME /var/spool/postfix diff --git a/postfix/entrypoint.sh b/postfix/entrypoint.sh index 5df19be..1f8b328 100644 --- a/postfix/entrypoint.sh +++ b/postfix/entrypoint.sh @@ -1,7 +1,12 @@ #!/usr/bin/env sh set -e +# https://github.com/moby/moby/issues/31243 +chmod o+w /dev/stdout # https://serverfault.com/questions/1003885/postfix-in-docker-host-or-domain-name-not-found-dns-and-docker cp /etc/resolv.conf /var/spool/postfix/etc/resolv.conf postmap /etc/postfix/virtual postmap /etc/postfix/vmailbox +postmap /etc/postfix/relay_clientcerts +cp -r /etc/ssl/usr-local-share-ca-certificates/* /usr/local/share/ca-certificates/ +update-ca-certificates exec "$@" diff --git a/postfix/etc/postfix/main.cf b/postfix/etc/postfix/main.cf index 6e573bb..7a181b7 100644 --- a/postfix/etc/postfix/main.cf +++ b/postfix/etc/postfix/main.cf @@ -35,19 +35,19 @@ virtual_transport = lmtp:dagent:2003 default_transport = smtp:[relay.zntrl.de]:465 # SMTPD (inbound) TLS parameters -smtpd_tls_key_file = /etc/postfix/ssl/private/nuc0.lan.key -smtpd_tls_cert_file = /etc/postfix/ssl/nuc0-full-chain.pem smtpd_tls_CApath = /etc/ssl/certs -smtpd_tls_CAfile = /etc/postfix/ssl/certs/balusign-signing-ca.pem +smtpd_tls_CAfile = /usr/local/share/ca-certificates/kopano-ca.crt +smtpd_tls_key_file=/etc/ssl/private/zntrl.key +smtpd_tls_cert_file=/etc/ssl/zntrl.crt smtpd_tls_security_level=may smtpd_tls_loglevel = 1 smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination # SMTP (outbound) -smtp_tls_key_file = /etc/postfix/ssl/private/nuc0.lan.key -smtp_tls_cert_file = /etc/postfix/ssl/nuc0-full-chain.pem smtp_tls_CApath=/etc/ssl/certs +smtd_tls_key_file=/etc/ssl/private/zntrl.key +smtd_tls_cert_file=/etc/ssl/zntrl.crt smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_tls_wrappermode = yes smtp_tls_security_level = encrypt diff --git a/postfix/etc/postfix/ssl/certs/balusign-signing-ca.pem b/postfix/etc/postfix/ssl/certs/balusign-signing-ca.pem deleted file mode 100644 index 10c08d7..0000000 --- a/postfix/etc/postfix/ssl/certs/balusign-signing-ca.pem +++ /dev/null @@ -1,106 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIJgTCCBamgAwIBAgIBAjANBgkqhkiG9w0BAQwFADCBjzESMBAGCgmSJomT8ixk -ARkWAmRlMRcwFQYKCZImiZPyLGQBGRYHYmFsb2doczEeMBwGA1UECgwVQmFsdVNp -Z24gUHJpdmF0ZSBTaXRlMRUwEwYDVQQLDAxQS0kgU2VydmljZXMxKTAnBgNVBAMM -IEJhbHVTaWduIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIzMDQwNzA5NTIx -MFoXDTMzMDQwNjA5NTIxMFowgY8xEjAQBgoJkiaJk/IsZAEZFgJkZTEXMBUGCgmS -JomT8ixkARkWB2JhbG9naHMxHjAcBgNVBAoMFUJhbHVTaWduIFByaXZhdGUgU2l0 -ZTEiMCAGA1UECwwZSW5mb3JtYXRpb24gU2VjdXJpdHkgVW5pdDEcMBoGA1UEAwwT -QmFsdVNpZ24gU2lnbmluZyBDQTCCA+IwDQYJKoZIhvcNAQEBBQADggPPADCCA8oC -ggPBAKeU5NqQjKgTDVUYWwJanWyDiOLR7RyobQeFAVeGogwZQ/hOy+INl5VAps+7 -7YB6PnjXOa6tCFdJW+tQaXJxqsdU51W4LE6Iq5BpWGx9ltnqDcksXww7iIdHgblv -4db0ErZM3CogOF3Sr2jYo28OmpqsEFMrbvJ2FDxgBG4/NIGUIqZumY8Aq9JyqA2a -8yOKPiFyjeiABlNdyvoGNF0RnzxOeErO2loKtUuW5hfLxnUvzin1WnVtipEy1TOd -E/eRoBfUpexyUXH2/DKw9CvH/ZGGz8oApe8SWSJlO4xSOgxONkuaybs+VzaMxtPU -ACeeyOILVbQ25BhWSVOW9CfcUeQwqf7pViCUPx7kBSR/RpiLN1JGpEACW6B1D4wy -OsOq55I0qSou7lJSJtkplSSzS1OxbK+SW1yq/FdPOJvqMIB88OuvrKlve4tDG7tQ -hfbGrLnF0BKcBE3H2qkkujQ5zULptX1WpklBDnPvxcmlCGwW0XzrRHpOPQDTPbkh -pH4a4Sph2rWFK7A0Qft8j2eMis7D1Wc30miV4DFYekQc5C3PernGwci3BM7qX4Xt -5oNbjMk53N2VB5MjT1aVLWlW66+M9vPZ9Y+VCTfSs0p+rUwtyLoYPKulQRhg7zcS -im6VnQatsiPZM6ssUNFu3602f6E6t0wdIOr1/WAuaIN0WWMWATkPhJ6tpcRSbu3e -PpOwSbjbwxEPfk5q73xyJZ63XCfFAKihK2KpDOM2D2n0QhKyWOBa5Yw9BZaouSQz -kBVFYYLm26wfOwvUKwLXX76BDOW33YO61EwV5Jswwp6L+x4Jn6CD4oloBR35ix9t -aFXTmKA0zoRgrf7SiV38O6GCK3fIxGCz3YC3WRBWoZ519fM7YqqtG71LFPr5cTa8 -EU2QAxizw82Rp0e06yWCFGbfq+8eJB4r8f4+NM6Nqc/4IZZVcmMX3k/R9bOXw7L9 -7HI68QIa34KhQs9KFHUedr5QDS5yU2Ts1mpgzAkCvNqVYGbovm19OTwglDCrb6+i -KQ29wi1CK9VJUSJx2RaOufh9COndNi640clgSWqClLPChCyhgosuwVPFOQYko6Ez -nWl5LCvnLh3ieAqVys61t98ll9ueoVyD4HIcseuu9+h7xh02i/SVpD34CZlNwT+u -BkhSzCoVoj2yp5RZeJFSqXT/99avmbI99O5RGxpTzB3MtADrX0zD1LK2jzvumRrv -HIPGfB8TTl6aN1dDZ7aA67SnI7cybxhja+52DECwWCnxXx6MTM86/0ZNG6hZe/wu -SQ3Q0QIDAQABo2YwZDAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIB -ADAdBgNVHQ4EFgQUypuBBCYN5ViDw4UBxZtTxzBXbBAwHwYDVR0jBBgwFoAU+o8o -2baOIFDraC5/jXb/T0MRzrYwDQYJKoZIhvcNAQEMBQADggPBAKK6zoKmVe5FxVaP -85TgjvbVQWZdaejlma9xZuSJPxicHuaEjuSrcthaqQ6rhdccLcniuY3+heKAjKqU -fdGzOhjwyfAGFjP/xd/xb4c7eh7EQ/NnYPM82Miiw1pd4sA+8hJnDoLlK1dO+SAw -5N0UrJLl+N33DT95fjykxNysCOxPSnNihKI86QlkpCUJ1GgupoRFRNJ7ditW8Fcu -vWfZw3GSwWQNFAzBL0/xbiVh1/mZRnaKRK8APVT70M40UtIzu/Rr8D9TfoyDzuy5 -pkjQXhclz/tuctnvkwOEwmeOYHtozdg4SZlePJ4hrUkLIwgEcN1xk4XueioTT5+d -VouUg6kg7YdpRiJH4PvLudUnoGs8+277gQZIyQgMoF0iR9IYXMBcDcaOnb6fcmKD -Pxiu395c0a3alnugmkqRoJboiGFPbU0BUOXTV0uRLkXVFSs5FSccfUGrnPP+Kk73 -ePfOLVazmsiSF0J+k0ngh9U6I067FdAEqEFyqLj7nLT9B8Wd6YR1mCFzPUNg5k70 -pXeyap1Y+kW03+bsw/uakqTSf6aCFa+vXwyHoMsC1Pb8hCRtYh/FisON9IcGe0em -A3JAwoiwLyAQT94/fNm+kf7LiM+lQP0Odj/dos9yBBqu5oZ2J0f+AAGpOqOy9zez -hC8lEtn14y9QMmEoEHUdNPMIHS3W859ejF+tmZ+rpfLgL1VHmiv162gw0tRz1hX7 -NDNhqlNNBygC83hi+BzHLgfZIqTumRVIQulwzyhX6tqtG4TGvxQ3MXluKH2RA9Yk -SM2Shm8l6RVaadA0gGmfmd97WVnd0jUJXFMpZSZCsLuI9PesTkW59cIloVvl6AXM -csVJqGCiuElHZDAjGmGvHJJEnnckZCTC0czaoRSEN8GmDCWnewPn7VAUTR+Qv30G -26yVOQWcNr7h8I7dkXEF9DfJRz/5p3+Tu0T7HCi8vwz4dAaB4YPm1Zl5TZSIF8U5 -TgV15BFN1nXSyLLdZsn1wcGjjFKR22kdyKonZjh2M+9ZGHDLAhY5abHzvK08d1av -NvgPcddVAJCWxgabjdrA/gB4GDeNRSLYWPmvb5O4H/FfYteAVbbasoSmc+4zhv4D -ZXsQvYwuyLuv6dDIlGeiHM8+u1wSP2Dp8PdE1E0xSg0kYp8AmwCTsjoKowMH8A7A -wm/eGWZED2yoZLmIalE1ps76kfBBzNbJQMyioE0nrfU+0RF/RSAv/AzH6fz2pTta -9lzdU5OOIo4HNAwaHyxla5gW6P0N+i1mUAq/z7ZLVrI7DvuRww== ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- -MIIJfjCCBaagAwIBAgIBATANBgkqhkiG9w0BAQwFADCBjzESMBAGCgmSJomT8ixk -ARkWAmRlMRcwFQYKCZImiZPyLGQBGRYHYmFsb2doczEeMBwGA1UECgwVQmFsdVNp -Z24gUHJpdmF0ZSBTaXRlMRUwEwYDVQQLDAxQS0kgU2VydmljZXMxKTAnBgNVBAMM -IEJhbHVTaWduIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIzMDQwNzA5NTA1 -OFoXDTMzMDQwNjA5NTA1OFowgY8xEjAQBgoJkiaJk/IsZAEZFgJkZTEXMBUGCgmS -JomT8ixkARkWB2JhbG9naHMxHjAcBgNVBAoMFUJhbHVTaWduIFByaXZhdGUgU2l0 -ZTEVMBMGA1UECwwMUEtJIFNlcnZpY2VzMSkwJwYDVQQDDCBCYWx1U2lnbiBDZXJ0 -aWZpY2F0aW9uIEF1dGhvcml0eTCCA+IwDQYJKoZIhvcNAQEBBQADggPPADCCA8oC -ggPBAOWJ0SL/yhWvkUlqKyAvDKKa5BFEAgUci1LYMUya0nm1SZZCg5J/PCr459LQ -pLfzQCRKZsLlx3EDxvsw6hMtFzGKIUGVtEkNpxWcbKZhhln0jScdsyyVrdbYSXp3 -BwXtP2iC843Mk6vSSl7VKDmLAellR8Z3W3mjb6LXOBx3imitFNUDZpKv2jBrvHiv -XeLcym6KuQ8EWZKGZNYUCrlQCpvbuAaHKF1C7KlKhR1LRZl7NcvFvnlrl4uUopSt -TsZcK3Kb6jaiYr/19RNxDy/4GXbTsCtC9/lpo42iPm8KzNlTapZ2zGbmDeCzveDg -N9NWNXyO5mYpnkFXTSEkmiwIdyWVLcomvyVKW0cyTUcET1s1D6NZokqvjolscyno -Ff8Ez24IWbfRxT+OFHSqJwSHc7rXPGftoB1KBP7UP2K1EYYnC+vxDejRkdC0IFuv -KrzonogkDDaJb6A0+hWSBSGMQpKfCbayTkU8nBzo8ilSM9S+dW0SIbWkptNdXZqL -AQjT8hJe3vGejGXyGC7zLd0kEGBz098+JpbZLVyStakpJcn0HkZzUjxh7DSS3vtp -3QV5IUZ4jBxp5/lRvCQ/Uz0re4KSXPXOMpEQwD1Ay7uPzADXv0ibMFfE22PT80fr -r1YsJjT01C0QUbM4j++1w2kVara9wRaa/x2eEpCDHRRbvtNZ8K4YxqXxhoc7POOo -X3/w9keXobo4BmH9uV2t2twg/lHiyBrQfSfsAr2+3/5Tt/pv6wuVCVJcxwFSm0ey -ighWD5WUAvMvShFkGr8D/tyTulq33IySbh7tZFj40Fh88TD2Z1VWFWK+5OHWjsK0 -GSuOANw8Mj5Seq2RH8CkbrALok547YGLfls7pw4PTXkW/rmPallQLLLs8VT6MDwg -SPk6sIMVOFF6rq9q5QV8EQliSYQ/vS4rh0qAG0zltaoWS40rTPsOGBJCftDOJFJp -06XuLTyKrFRtCWP6dSuh+ju6EGTYk0rcBLeiKhFptB9HZtwE5Cd1khysfE3pDMiw -ksGEjMnzhbLuTeBH9QlcYLZWqmH9ZK35qZ9cKvsHf0jlHYZOASnEaPX8CXhGWXKn -skzOq4ihc6gZXKlSjX9Mglkfzru6hwg8f4i7L20wySrl/HOc8kuPZZ/UqLulBCI2 -yr6TKlvJXu5BkRUJZ0EGnpRCLaxWiNah+DcpbKeoHVIj5Z9Xq5p78N+d4LD9dKw0 -6VwcH74LJDT4jHVKu2zTuqyKTWw0jitqWjeexxPbeZTV4KBiIDYMEYVsr/Swx+u7 -4dU8YQIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAd -BgNVHQ4EFgQU+o8o2baOIFDraC5/jXb/T0MRzrYwHwYDVR0jBBgwFoAU+o8o2baO -IFDraC5/jXb/T0MRzrYwDQYJKoZIhvcNAQEMBQADggPBAAjgeEvyz2I/ZW81OIl2 -VsEMLuxq7GnCXabsKTklhHygjHPs1hr5/pn9fWo8pSSQGAOBFL/EnnHW+qYvzswY -XSzIBVi2j7oUDRL2T9t3pBi0gNO9LYhAhSExocN9KStqQlxHZ5ei0QTbWCA6uArk -lcwKhAihV7GvbPGYfRPSg95a/UXwyGAY8IffEL4J9Qn2LtyT57izErP3uPW8d3w7 -bNe2+Yqzd69Nk2CzSvIqtMSOoEFzTgvmzVoQdU9pi7zulkQYxIFmWvXxUnO2v+Jc -exZ/CsJzCJBP8eQGY+5FUsunncnm16VS7bHoD5ZtWFcXsiM8xTt6mt7lMbjSl5px -7N+FUPJHOpokXyX3Y/JK0KJCTcuJtyoZK81uJN6tgRaNN7GXn3Mlg0cmsG4d+Fib -zxNAyhgtX6P0SpIfWLNBpdDWyjl6BnX4A7UtuH3eIEbYlms/kTm2ty0xJQiDrZkT -yc9xNs+k9C8XKmPEnDK0BSObMmyEIz+lox32GS6vbNq18jLsjs+jk/1Zs72XAdNK -AlU7+DrgbE3oulqKjTMqruuG/8WoF9s70ds1WUYwBGXzbjq6zR1xWb+vNGQ9ePpP -KiTdJIPg0GO25MrZPVsHURsrFVTgdB5qfRj6RhDRrdMXuZ/mWMCetRd1EETzRIO0 -GgkGFHUFAWwiQDkmJYLrGB5t55Nq2JetAvwiUZuco8krUUQXcUu+sFrNjencctnX -MHWYRERKMOB/eqhWdeTG04c94nV8BlpHAT3Iee8FfWA4zm0RxVreXICNOCPtxNXH -aSEsgWBWw8/Zmk6VCEhuX6CernSmyqUc6PzREZRHFZD18lTRL5JxjXdm+qh8Nrxt -puj2FaXSotGQZywm8hmqMU8hCti3m93FQDpcsgoSqiilmnLRIAWXVrSKRlXXTxKs -Lpq3x9ZoARYbLEyxhRTdoMeU95OE64R1c6mcCcWPu53v59wYKmVMBOi4blTAXFn2 -9KEbwtgDcAdXTn6SGAOvrdibEG2GnBhTw689vJfC7Z2imGoDxwMKToCnK9tgwAwO -/lv7oKpnA3GxzYojGZcKMGGGlfKFftZd36X/NZDmn9nmIGCqR0P04YWoX3utJOJH -03bK11O62l9DQNEJSQ5Zjow5HMuhxTfhka4I0edjsoIekxePAR11riIHpfwLQWmF -OybPqyC9MHzTLzSsISdZV1SDRQzCfpGbRtQSYAPF/T/hr2E2g+L+1tduQ07LICB0 -+yKYtwF1rXkWwD4NvVYrk94fTCBPHK5SaMol8YlPer1ZUw== ------END CERTIFICATE----- diff --git a/postfix/etc/postfix/ssl/nuc0-full-chain.pem b/postfix/etc/postfix/ssl/nuc0-full-chain.pem deleted file mode 100644 index ea3b47a..0000000 --- a/postfix/etc/postfix/ssl/nuc0-full-chain.pem +++ /dev/null @@ -1,148 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIHWDCCA4CgAwIBAgIBBTANBgkqhkiG9w0BAQwFADCBjzESMBAGCgmSJomT8ixk -ARkWAmRlMRcwFQYKCZImiZPyLGQBGRYHYmFsb2doczEeMBwGA1UECgwVQmFsdVNp -Z24gUHJpdmF0ZSBTaXRlMSIwIAYDVQQLDBlJbmZvcm1hdGlvbiBTZWN1cml0eSBV -bml0MRwwGgYDVQQDDBNCYWx1U2lnbiBTaWduaW5nIENBMB4XDTIzMDQwNzEyMzQx -OVoXDTI0MDQwNjEyMzQxOVowbjESMBAGCgmSJomT8ixkARkWAmRlMRcwFQYKCZIm -iZPyLGQBGRYHYmFsb2doczEeMBwGA1UECgwVQmFsdVNpZ24gUHJpdmF0ZSBTaXRl -MRAwDgYDVQQLDAdJbmZvU2VjMQ0wCwYDVQQDDARudWMwMIIBojANBgkqhkiG9w0B -AQEFAAOCAY8AMIIBigKCAYEAvv/1KE8n8T7QhGENHBXG0w+1cp9kQkw3J0JbIkl7 -Xc/Bprn0qBAqytLbS0/xsLyFO3VOaxLlHSKOV9QSfZfnJbOO6lYek3meT7e+ODvq -B7OSd97JdVLKJj9u66hoBZ2AY7lBpgiSRbYhPJiXPVxIxMenlTe83ngBxGaQtN+j -5MphdC1Pr4zAIv6/oNBJP1AX1yc0r1R9Z31mI/CPBNJqWjTYn2YUoleOYJZzgCB9 -82NDlABhoyX4MyCHYbOzPrXqptBysakWEsq/6iQuOYUAicE7rnyFWh9+6MzmKSyU -RDRRL7iCUHNYYl6LLVQo9PSB50sMztGWwQcurOCwuC0N1KjTTDrrMQQnJSb+6afc -sbp9upzRmRiC+9RmZjR3+fuhZRU8QWAv29dSibmoWa+5Pp3k49CYY1GYDTlVvE+B -J1hmrxNCuC2yp/k4wwLzB94Uoxf//AP42ALDuIevZ6SCyWkYa7sO6G4rhcmvCcZ1 -36MF7CqQA+4AL6qjYFXhMC6hAgMBAAGjgZ4wgZswDgYDVR0PAQH/BAQDAgWgMAkG -A1UdEwQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQW -BBS+FF4438wQU2NNWLjGchDVcElwwDAfBgNVHSMEGDAWgBTKm4EEJg3lWIPDhQHF -m1PHMFdsEDAfBgNVHREEGDAWggRudWMwgg5udWMwLmZyaXR6LmJveDANBgkqhkiG -9w0BAQwFAAOCA8EALXeN36Nf2Zs1aVMYnUTHvjJUTSwyg9TFhJypXNajC4lg4Fn/ -/ekYYxgBWDosf6Vi171jpvQySfY374mb44nhLBje3qgVOKlxMUKRd2Pr+aRAXYan -kMhnycn/R/lQe/4twu5h2r9hTBJuZAT5J+5fCqaDgWIsMdryBM9Im0rKqlS7W1Kf -OXXniHBP3YABMN4XEGAUMtV9oCr894RcmtRwu4RQktB/7fXEb6TiZ00Fe/3ek3oJ -OsBind5zPvZkXflJbJDKACMLO2lWS10giktQoItjl1leD/lKtD4fCs5byNWlWrHb -XXWleVLB3ylhGarvNex6tWHPIRtasLUQfh94BCE5zQthjcUN0M9lTF5/x8ajdD7g -xSorx8mjnPBEL/rrv9JxMro6IM8gyQ5ZUxxN0a5c5xGyFTREf7RstEszsvTJWctw -QFkNb5RWBEI8kynjwMJhBWRKIqNGltwatN+Vw5F7jfQYiFJuMrmbLzDXYOH7AI6G -rIMHJywdw/u0uE/SbTHycH6GjKiq+TidSe7Yd47pDIEYzARpiZ1tY7L/Tsrk/Czs -CyEu1g2K5WRVw6bzrGr6x3kkvo0jKwE1hE967s17TGj35fbqYQk74mtgNcJNjo4+ -FsVbNB/0PEjIBUzNdjTf/QqX10GUtzHyf0ZMTAaBTfucAKyMx3Z1LWLd+oqtjItW -vEBgWIsDJOQe4jmFkt2oFrFWFKesFXMG5muuq0z/CoddOhlw7outH/6VnjnU2p3p -HeZ6Acg6qojNUvqB0CpHMpm0FArwenc4NHOQJ6VsESDd4XytA8hrwuNZvG1nZ2R7 -U3O2GLBdZcmtbyLQXE3UjIAmpHF5z/ir5dmuagbRiO1IGlFlyzOSAvf9lqYfZz2w -ar3e9IOMpGIbFTBYDSmQr8a6pY/E9sTyf4oVgQiz2qpIHFITHdj1QpgoucC1pzJ1 -+EQ5PixNIi8f92dO00Wjet6m8zjx78MBJxeNA5aQl46f1oEBDXxkWPiK3THFfjlm -WuMp+URjffvFc93s9hZgetvHmE3kEDtTG5hxbjumwdhlGuLnnPsLNj8Po3PJ6hI2 -olFtSBcRthls1DDe+DTrwaKzgvP0W9p+uLK6N+m7xewMvBKsxDjk2cKRct8Riyms -0yJcQzxnKB8BeAUXBQ5WhP/ARFBS46VEL3TG0tXfsMP+d4fuCW1tySv9RmTpgBYz -PuCOMiJUH1v3/s9GsWQdCCnG5lOwFz1mKmY0umXEp5o5l027zhPiPsyfqp3s/opw -skdJhgg7vvo5x15J ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- -MIIJgTCCBamgAwIBAgIBAjANBgkqhkiG9w0BAQwFADCBjzESMBAGCgmSJomT8ixk -ARkWAmRlMRcwFQYKCZImiZPyLGQBGRYHYmFsb2doczEeMBwGA1UECgwVQmFsdVNp -Z24gUHJpdmF0ZSBTaXRlMRUwEwYDVQQLDAxQS0kgU2VydmljZXMxKTAnBgNVBAMM -IEJhbHVTaWduIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIzMDQwNzA5NTIx -MFoXDTMzMDQwNjA5NTIxMFowgY8xEjAQBgoJkiaJk/IsZAEZFgJkZTEXMBUGCgmS -JomT8ixkARkWB2JhbG9naHMxHjAcBgNVBAoMFUJhbHVTaWduIFByaXZhdGUgU2l0 -ZTEiMCAGA1UECwwZSW5mb3JtYXRpb24gU2VjdXJpdHkgVW5pdDEcMBoGA1UEAwwT -QmFsdVNpZ24gU2lnbmluZyBDQTCCA+IwDQYJKoZIhvcNAQEBBQADggPPADCCA8oC -ggPBAKeU5NqQjKgTDVUYWwJanWyDiOLR7RyobQeFAVeGogwZQ/hOy+INl5VAps+7 -7YB6PnjXOa6tCFdJW+tQaXJxqsdU51W4LE6Iq5BpWGx9ltnqDcksXww7iIdHgblv -4db0ErZM3CogOF3Sr2jYo28OmpqsEFMrbvJ2FDxgBG4/NIGUIqZumY8Aq9JyqA2a -8yOKPiFyjeiABlNdyvoGNF0RnzxOeErO2loKtUuW5hfLxnUvzin1WnVtipEy1TOd -E/eRoBfUpexyUXH2/DKw9CvH/ZGGz8oApe8SWSJlO4xSOgxONkuaybs+VzaMxtPU -ACeeyOILVbQ25BhWSVOW9CfcUeQwqf7pViCUPx7kBSR/RpiLN1JGpEACW6B1D4wy -OsOq55I0qSou7lJSJtkplSSzS1OxbK+SW1yq/FdPOJvqMIB88OuvrKlve4tDG7tQ -hfbGrLnF0BKcBE3H2qkkujQ5zULptX1WpklBDnPvxcmlCGwW0XzrRHpOPQDTPbkh -pH4a4Sph2rWFK7A0Qft8j2eMis7D1Wc30miV4DFYekQc5C3PernGwci3BM7qX4Xt -5oNbjMk53N2VB5MjT1aVLWlW66+M9vPZ9Y+VCTfSs0p+rUwtyLoYPKulQRhg7zcS -im6VnQatsiPZM6ssUNFu3602f6E6t0wdIOr1/WAuaIN0WWMWATkPhJ6tpcRSbu3e -PpOwSbjbwxEPfk5q73xyJZ63XCfFAKihK2KpDOM2D2n0QhKyWOBa5Yw9BZaouSQz -kBVFYYLm26wfOwvUKwLXX76BDOW33YO61EwV5Jswwp6L+x4Jn6CD4oloBR35ix9t -aFXTmKA0zoRgrf7SiV38O6GCK3fIxGCz3YC3WRBWoZ519fM7YqqtG71LFPr5cTa8 -EU2QAxizw82Rp0e06yWCFGbfq+8eJB4r8f4+NM6Nqc/4IZZVcmMX3k/R9bOXw7L9 -7HI68QIa34KhQs9KFHUedr5QDS5yU2Ts1mpgzAkCvNqVYGbovm19OTwglDCrb6+i -KQ29wi1CK9VJUSJx2RaOufh9COndNi640clgSWqClLPChCyhgosuwVPFOQYko6Ez -nWl5LCvnLh3ieAqVys61t98ll9ueoVyD4HIcseuu9+h7xh02i/SVpD34CZlNwT+u -BkhSzCoVoj2yp5RZeJFSqXT/99avmbI99O5RGxpTzB3MtADrX0zD1LK2jzvumRrv -HIPGfB8TTl6aN1dDZ7aA67SnI7cybxhja+52DECwWCnxXx6MTM86/0ZNG6hZe/wu -SQ3Q0QIDAQABo2YwZDAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIB -ADAdBgNVHQ4EFgQUypuBBCYN5ViDw4UBxZtTxzBXbBAwHwYDVR0jBBgwFoAU+o8o -2baOIFDraC5/jXb/T0MRzrYwDQYJKoZIhvcNAQEMBQADggPBAKK6zoKmVe5FxVaP -85TgjvbVQWZdaejlma9xZuSJPxicHuaEjuSrcthaqQ6rhdccLcniuY3+heKAjKqU -fdGzOhjwyfAGFjP/xd/xb4c7eh7EQ/NnYPM82Miiw1pd4sA+8hJnDoLlK1dO+SAw -5N0UrJLl+N33DT95fjykxNysCOxPSnNihKI86QlkpCUJ1GgupoRFRNJ7ditW8Fcu -vWfZw3GSwWQNFAzBL0/xbiVh1/mZRnaKRK8APVT70M40UtIzu/Rr8D9TfoyDzuy5 -pkjQXhclz/tuctnvkwOEwmeOYHtozdg4SZlePJ4hrUkLIwgEcN1xk4XueioTT5+d -VouUg6kg7YdpRiJH4PvLudUnoGs8+277gQZIyQgMoF0iR9IYXMBcDcaOnb6fcmKD -Pxiu395c0a3alnugmkqRoJboiGFPbU0BUOXTV0uRLkXVFSs5FSccfUGrnPP+Kk73 -ePfOLVazmsiSF0J+k0ngh9U6I067FdAEqEFyqLj7nLT9B8Wd6YR1mCFzPUNg5k70 -pXeyap1Y+kW03+bsw/uakqTSf6aCFa+vXwyHoMsC1Pb8hCRtYh/FisON9IcGe0em -A3JAwoiwLyAQT94/fNm+kf7LiM+lQP0Odj/dos9yBBqu5oZ2J0f+AAGpOqOy9zez -hC8lEtn14y9QMmEoEHUdNPMIHS3W859ejF+tmZ+rpfLgL1VHmiv162gw0tRz1hX7 -NDNhqlNNBygC83hi+BzHLgfZIqTumRVIQulwzyhX6tqtG4TGvxQ3MXluKH2RA9Yk -SM2Shm8l6RVaadA0gGmfmd97WVnd0jUJXFMpZSZCsLuI9PesTkW59cIloVvl6AXM -csVJqGCiuElHZDAjGmGvHJJEnnckZCTC0czaoRSEN8GmDCWnewPn7VAUTR+Qv30G -26yVOQWcNr7h8I7dkXEF9DfJRz/5p3+Tu0T7HCi8vwz4dAaB4YPm1Zl5TZSIF8U5 -TgV15BFN1nXSyLLdZsn1wcGjjFKR22kdyKonZjh2M+9ZGHDLAhY5abHzvK08d1av -NvgPcddVAJCWxgabjdrA/gB4GDeNRSLYWPmvb5O4H/FfYteAVbbasoSmc+4zhv4D -ZXsQvYwuyLuv6dDIlGeiHM8+u1wSP2Dp8PdE1E0xSg0kYp8AmwCTsjoKowMH8A7A -wm/eGWZED2yoZLmIalE1ps76kfBBzNbJQMyioE0nrfU+0RF/RSAv/AzH6fz2pTta -9lzdU5OOIo4HNAwaHyxla5gW6P0N+i1mUAq/z7ZLVrI7DvuRww== ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- -MIIJfjCCBaagAwIBAgIBATANBgkqhkiG9w0BAQwFADCBjzESMBAGCgmSJomT8ixk -ARkWAmRlMRcwFQYKCZImiZPyLGQBGRYHYmFsb2doczEeMBwGA1UECgwVQmFsdVNp -Z24gUHJpdmF0ZSBTaXRlMRUwEwYDVQQLDAxQS0kgU2VydmljZXMxKTAnBgNVBAMM -IEJhbHVTaWduIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIzMDQwNzA5NTA1 -OFoXDTMzMDQwNjA5NTA1OFowgY8xEjAQBgoJkiaJk/IsZAEZFgJkZTEXMBUGCgmS -JomT8ixkARkWB2JhbG9naHMxHjAcBgNVBAoMFUJhbHVTaWduIFByaXZhdGUgU2l0 -ZTEVMBMGA1UECwwMUEtJIFNlcnZpY2VzMSkwJwYDVQQDDCBCYWx1U2lnbiBDZXJ0 -aWZpY2F0aW9uIEF1dGhvcml0eTCCA+IwDQYJKoZIhvcNAQEBBQADggPPADCCA8oC -ggPBAOWJ0SL/yhWvkUlqKyAvDKKa5BFEAgUci1LYMUya0nm1SZZCg5J/PCr459LQ -pLfzQCRKZsLlx3EDxvsw6hMtFzGKIUGVtEkNpxWcbKZhhln0jScdsyyVrdbYSXp3 -BwXtP2iC843Mk6vSSl7VKDmLAellR8Z3W3mjb6LXOBx3imitFNUDZpKv2jBrvHiv -XeLcym6KuQ8EWZKGZNYUCrlQCpvbuAaHKF1C7KlKhR1LRZl7NcvFvnlrl4uUopSt -TsZcK3Kb6jaiYr/19RNxDy/4GXbTsCtC9/lpo42iPm8KzNlTapZ2zGbmDeCzveDg -N9NWNXyO5mYpnkFXTSEkmiwIdyWVLcomvyVKW0cyTUcET1s1D6NZokqvjolscyno -Ff8Ez24IWbfRxT+OFHSqJwSHc7rXPGftoB1KBP7UP2K1EYYnC+vxDejRkdC0IFuv -KrzonogkDDaJb6A0+hWSBSGMQpKfCbayTkU8nBzo8ilSM9S+dW0SIbWkptNdXZqL -AQjT8hJe3vGejGXyGC7zLd0kEGBz098+JpbZLVyStakpJcn0HkZzUjxh7DSS3vtp -3QV5IUZ4jBxp5/lRvCQ/Uz0re4KSXPXOMpEQwD1Ay7uPzADXv0ibMFfE22PT80fr -r1YsJjT01C0QUbM4j++1w2kVara9wRaa/x2eEpCDHRRbvtNZ8K4YxqXxhoc7POOo -X3/w9keXobo4BmH9uV2t2twg/lHiyBrQfSfsAr2+3/5Tt/pv6wuVCVJcxwFSm0ey -ighWD5WUAvMvShFkGr8D/tyTulq33IySbh7tZFj40Fh88TD2Z1VWFWK+5OHWjsK0 -GSuOANw8Mj5Seq2RH8CkbrALok547YGLfls7pw4PTXkW/rmPallQLLLs8VT6MDwg -SPk6sIMVOFF6rq9q5QV8EQliSYQ/vS4rh0qAG0zltaoWS40rTPsOGBJCftDOJFJp -06XuLTyKrFRtCWP6dSuh+ju6EGTYk0rcBLeiKhFptB9HZtwE5Cd1khysfE3pDMiw -ksGEjMnzhbLuTeBH9QlcYLZWqmH9ZK35qZ9cKvsHf0jlHYZOASnEaPX8CXhGWXKn -skzOq4ihc6gZXKlSjX9Mglkfzru6hwg8f4i7L20wySrl/HOc8kuPZZ/UqLulBCI2 -yr6TKlvJXu5BkRUJZ0EGnpRCLaxWiNah+DcpbKeoHVIj5Z9Xq5p78N+d4LD9dKw0 -6VwcH74LJDT4jHVKu2zTuqyKTWw0jitqWjeexxPbeZTV4KBiIDYMEYVsr/Swx+u7 -4dU8YQIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAd -BgNVHQ4EFgQU+o8o2baOIFDraC5/jXb/T0MRzrYwHwYDVR0jBBgwFoAU+o8o2baO -IFDraC5/jXb/T0MRzrYwDQYJKoZIhvcNAQEMBQADggPBAAjgeEvyz2I/ZW81OIl2 -VsEMLuxq7GnCXabsKTklhHygjHPs1hr5/pn9fWo8pSSQGAOBFL/EnnHW+qYvzswY -XSzIBVi2j7oUDRL2T9t3pBi0gNO9LYhAhSExocN9KStqQlxHZ5ei0QTbWCA6uArk -lcwKhAihV7GvbPGYfRPSg95a/UXwyGAY8IffEL4J9Qn2LtyT57izErP3uPW8d3w7 -bNe2+Yqzd69Nk2CzSvIqtMSOoEFzTgvmzVoQdU9pi7zulkQYxIFmWvXxUnO2v+Jc -exZ/CsJzCJBP8eQGY+5FUsunncnm16VS7bHoD5ZtWFcXsiM8xTt6mt7lMbjSl5px -7N+FUPJHOpokXyX3Y/JK0KJCTcuJtyoZK81uJN6tgRaNN7GXn3Mlg0cmsG4d+Fib -zxNAyhgtX6P0SpIfWLNBpdDWyjl6BnX4A7UtuH3eIEbYlms/kTm2ty0xJQiDrZkT -yc9xNs+k9C8XKmPEnDK0BSObMmyEIz+lox32GS6vbNq18jLsjs+jk/1Zs72XAdNK -AlU7+DrgbE3oulqKjTMqruuG/8WoF9s70ds1WUYwBGXzbjq6zR1xWb+vNGQ9ePpP -KiTdJIPg0GO25MrZPVsHURsrFVTgdB5qfRj6RhDRrdMXuZ/mWMCetRd1EETzRIO0 -GgkGFHUFAWwiQDkmJYLrGB5t55Nq2JetAvwiUZuco8krUUQXcUu+sFrNjencctnX -MHWYRERKMOB/eqhWdeTG04c94nV8BlpHAT3Iee8FfWA4zm0RxVreXICNOCPtxNXH -aSEsgWBWw8/Zmk6VCEhuX6CernSmyqUc6PzREZRHFZD18lTRL5JxjXdm+qh8Nrxt -puj2FaXSotGQZywm8hmqMU8hCti3m93FQDpcsgoSqiilmnLRIAWXVrSKRlXXTxKs -Lpq3x9ZoARYbLEyxhRTdoMeU95OE64R1c6mcCcWPu53v59wYKmVMBOi4blTAXFn2 -9KEbwtgDcAdXTn6SGAOvrdibEG2GnBhTw689vJfC7Z2imGoDxwMKToCnK9tgwAwO -/lv7oKpnA3GxzYojGZcKMGGGlfKFftZd36X/NZDmn9nmIGCqR0P04YWoX3utJOJH -03bK11O62l9DQNEJSQ5Zjow5HMuhxTfhka4I0edjsoIekxePAR11riIHpfwLQWmF -OybPqyC9MHzTLzSsISdZV1SDRQzCfpGbRtQSYAPF/T/hr2E2g+L+1tduQ07LICB0 -+yKYtwF1rXkWwD4NvVYrk94fTCBPHK5SaMol8YlPer1ZUw== ------END CERTIFICATE----- diff --git a/postfix/etc/postfix/ssl/private/nuc0.lan.key b/postfix/etc/postfix/ssl/private/nuc0.lan.key deleted file mode 100644 index f64176b..0000000 --- a/postfix/etc/postfix/ssl/private/nuc0.lan.key +++ /dev/null @@ -1,40 +0,0 @@ ------BEGIN PRIVATE KEY----- -MIIG/QIBADANBgkqhkiG9w0BAQEFAASCBucwggbjAgEAAoIBgQC+//UoTyfxPtCE -YQ0cFcbTD7Vyn2RCTDcnQlsiSXtdz8GmufSoECrK0ttLT/GwvIU7dU5rEuUdIo5X -1BJ9l+cls47qVh6TeZ5Pt744O+oHs5J33sl1UsomP27rqGgFnYBjuUGmCJJFtiE8 -mJc9XEjEx6eVN7zeeAHEZpC036PkymF0LU+vjMAi/r+g0Ek/UBfXJzSvVH1nfWYj -8I8E0mpaNNifZhSiV45glnOAIH3zY0OUAGGjJfgzIIdhs7M+teqm0HKxqRYSyr/q -JC45hQCJwTuufIVaH37ozOYpLJRENFEvuIJQc1hiXostVCj09IHnSwzO0ZbBBy6s -4LC4LQ3UqNNMOusxBCclJv7pp9yxun26nNGZGIL71GZmNHf5+6FlFTxBYC/b11KJ -uahZr7k+neTj0JhjUZgNOVW8T4EnWGavE0K4LbKn+TjDAvMH3hSjF//8A/jYAsO4 -h69npILJaRhruw7obiuFya8JxnXfowXsKpAD7gAvqqNgVeEwLqECAwEAAQKCAYEA -hKjkzzWDaZUWYQvDfkFF0myzu0Qn78BeAl+dSsg87mCRgUrhOiXYgv1HIR0KopWd -+Dk22TnLdpv8v9XlbeQmwNHhLrPYEthC892MOiSrHORFlApiZKG3FC+0y+sxLM1D -UoBmr3p+lfq1RRA643yIcly18fc/sEkr+Qy/71Dx1cQXQgkCssyQ2v2TfY+NgHMR -y/dIKYsGeu3nFolL3K6E/dh8qOHO7R7hHgcBe/mVYYoNcut85UNHC8PJJDwbADB6 -8mwnqHBD9g5idqdnU17YE+N/iNYJfcROG6joP+mglp0rQp3i5Mkz3lroSBrM1ArG -Ciw20ct+FFdwc3hmlLTUS2GSUtUKuvs2RsXrUyV+53Gzt4GUuWd+4ZDWvOhoAIgD -fzlDywAJNS3giB/4Knix4Me716kuRncIkWbAXDu43Fm88k8Z14JrfTF9JxR/LmIa -kH8gjSZU5M25dT1oQVjC2bspztT9jDnWt/+XvYqVJbX/cgKHQSJkic/Zu2xmcA69 -AoHBAN29CHV7b9Ux9nmeS4kIEpROxr+FPBmpgzOUqrp91O/sC+9n28k/vNHOmPH7 -HOSZByhnjB+hiPT5SdDYJm7wbZdZPWRAO5EctKuL+NFNt/HM8QmIgq26SnIYYi52 -emxYjKWvrDLaiVL5Brdx43hhHNMtb/dR0d29h1iqXx0rKbKeg5mk/1F9zYVitXrP -pGWRtRHDvgJHOP5MDTpHpSmmR5Dwf4Jn6BEX7JL2sH6SVOMMi1ebUM+pofVRzM0i -GcoQVwKBwQDcgwu5wfJxwIjY7wssIwnIRv3uziZyILZkWJlTk1PTGv4AbN/mkVEv -D1DIajCFC/6ijayqBentkJ63mJxMmnInsWC2PQHKn9/XA46YcLfVzr7yY7OLZ3FR -Xc0Uyyx1PtxarWpIxtTxYQ5vZsuQiR2j5quU3I0DM1OCulCPpyZ51cIPJf5kEgjI -SHjOkOO0fv7WMnIge1vPPQHqy2rdQoARL+uuI4IrIfiMQ0HHOh7E500CQC1fTdit -vRPnSUwVfccCgcB6XwB0FZM6TUCBDeMR1Oqr/m2g9J6eavaFWN5/3UHOxq4viVm6 -Tvqdry6pHLRtVCanHb4vFq7Gw20BXMiZIQbaJ93BndFB3F247p56pDGHuFqtsDCu -P8kl/l7w1WHquVOlfLXDuudeayBRzQCERtPpl4HbM8RmY1p2jE/BgTiZ4vEtselV -x9/MZRVSmZVYmHkdPLF4AGZrsPz71N5JhgKo8pDsHvvrsxBUauAsegVu6FVeG9EV -ScCf6mzkKJWi9jECgcBRAUbub0Pr66mZ336AMULnssSX1F0lMcUu6akxnX5+n3zN -lTFPFvT2z66CYRf/2B8rgdX7A38iySy1DzfjoBztXejEKXceA0sMRn88mrO9tFxK -2LtdK5viIw4yZEypqXTzTp8rqvcQ0PGnlOCU8PnVeuhvH/IhSdqUvHLZwrKMsSy/ -udpQ0pstUAoo/+rWJIzjDNcF/asFX0j0AtP4AfTf23W9m8e2pp0SkaZ5VG13Me0F -NaQ1TXiaoknMfg2YG4MCgcBNcn6QnttlGQShf1Ds9YAD1iLkTe0rYi7KSZ+Sh40T -5Y5HPMniA/ufiMJsdWQ6rgtJ9yjFw7uC3RlwNIdfTTzS1CkawK47kVIfsZ9BDTtC -uW2tBTm0aABUewNSmnrOxxAE12alD2gmmU1gz/c2FkZ21bLmcF+RjIzgJhyCD7rQ -3CsN3IvSLLlup9ig2W7KpLJ/SzFXCF3Q62TprJuGF3Y/+Xu9kfVNGd4rSNZSo8NZ -GAo61UauOk2kSB6B9crXzYo= ------END PRIVATE KEY----- \ No newline at end of file diff --git a/postfix/etc/postfix/virtual.db b/postfix/etc/postfix/virtual.db new file mode 100644 index 0000000..b82c97a Binary files /dev/null and b/postfix/etc/postfix/virtual.db differ diff --git a/postfix/etc/postfix/vmailbox.db b/postfix/etc/postfix/vmailbox.db new file mode 100644 index 0000000..c103053 Binary files /dev/null and b/postfix/etc/postfix/vmailbox.db differ diff --git a/postfix/etc/ssl/private/zntrl.key b/postfix/etc/ssl/private/zntrl.key new file mode 100644 index 0000000..e4fd4a3 --- /dev/null +++ b/postfix/etc/ssl/private/zntrl.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQCsW2Y5dguEpUKq +mlVH9IlaKz2bYg4h0NLrRQlHiVn60zDCvk5wYpAGbjYK/G2ztNKYaM8Alx+ErWES +Q8VPTm3kfeMWAvk5wlKPdfdZ9j2mLt0nJsn3YbjZS1CswbrloEro5CeuYQRk8Vi8 +52vTpqV/m5mgZ8O7/Gq8kXhbGnq/If9nZnVf880q7ANZaZUcllWpWXx0B8GvkU6K +BvUaKHD7IvEbUjx5FFjpjp4r0IoofnLFQD4Fn/Mqm5SX0vzY8ceYV8Ab1ivIPM0/ +VtANMEtkkql18KCATwlGlBWaeidJFnG7UMPZvCc0rOqTTxxG33k4zFb6ACfttiuA +8w3ZnZStAgMBAAECggEAVChMwcHh3eLTqnmxKnE8n8p9SmGWhOxyEG6lGUj3poF4 +TZ6erkFyEbG+sZ6P8i9YpRKIAMHJof8GZuSwcwjYn7jYKOdKyekYZvQy0rppX7uC +QJuwAhq1J2Se/7uYhoa+DPlaZsr4WlF+Ar7851t3c9eGK8x+xkt50pk1K0bCqJAk +AxLKykJcXorCXGUGvAqx+dgQCf7AsNnXggYAPRz5gEfioNB4SZpLT1f+J7dJO0td +7oWRchS687H2E1wrHUzWwqiv1cDZqUS9xvjWq4lcAv+Tua3sejJ4RlVkfFIAcJof +gKNB7L+WJGHcJUufXhdVajyoPU/ezHXKBQNKIj8gAQKBgQDS0mJ6nS03rbQsz4M2 +xEZxodIMlLpDJJJ43S2vPQWpOXUdqoAkpWHD6/XWh/lZjJiLVg3p6i3mL/OwJ9/q +6C6FZF4oLSztYz7WIaw2sXBVQBOZY0pbk385rzBL48Xzsj8ayYS5nKEfg6FDXn1v +yLIOj5vbkbl9A0gFSZYoaSm1pQKBgQDRStlfZHZnJVpkDKgisDyUHwAwn7JF15VL +uWmjiO8ktN4vyX/45fseYrC8YNph3ksUBvoCQQcxxpWjXuhUjX/FJqragTczTjiI +biAfNh4b7oQAQTpxqPrtWE3w/vjV31UprKeq4O75lHAAPLFhaDxdVhnOZkqJ680z +keFiESWEaQKBgQCXUr2vJxyqx3r5YyXa7L1nmPCNaT/dK+Ya7R96lkF2+zAOUDDU +nQT0vWzjRQx884cXFHi+OwIhJLA09BosoeWqh6VyDyMdbcxPpTHYvDpWZrzqr7NS +0idS/2WaQ272Ai57isRC+qNIXJInKi69SwBLpVcJHqtWiUFr0ir+7KUspQKBgQCX +XL+Kmth6zmvp8bFjrPuS0DzN7aD7m+dwZX6989moPVp3Sw5PTtxnZE6XXqBxqVe4 ++zayjJ8MY6dzCL+T7uXaCpYEAvGOHGMMYEDA8d2iq8QxfvsqmmAnaPatdWk3HBa2 +VhTIo3aRb8X0lfBfFwiZJBzzxczgpHW6dyV+TBJLCQKBgQCBWYyXE41rel5baKu5 +IHCziXVwxh2Vv/xcL4YGDXAXvZ1wbtfYWu8K3Brxn/LMdEYZ+RLDGk5Tr5Vp25AD +4a4CxQffTSjaF86Ggda0O+cOKgnsNmEiFqwqnstVonY1pZyctA9stjyi66lmG/0n +/3Hx0yfA8f+7za/1VkFq+hfrow== +-----END PRIVATE KEY----- diff --git a/postfix/etc/ssl/usr-local-share-ca-certificates/kopano-ca.crt b/postfix/etc/ssl/usr-local-share-ca-certificates/kopano-ca.crt new file mode 100644 index 0000000..d7954ce --- /dev/null +++ b/postfix/etc/ssl/usr-local-share-ca-certificates/kopano-ca.crt @@ -0,0 +1,24 @@ +-----BEGIN CERTIFICATE----- +MIID8zCCAtugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBiDESMBAGCgmSJomT8ixk +ARkWAmRlMRMwEQYKCZImiZPyLGQBGRYDZHRzMSAwHgYDVQQKDBdEaWdpdGFsIFRy +dXN0IFNvbHV0aW9uczEiMCAGA1UECwwZSW5mb3JtYXRpb24gU2VjdXJpdHkgVW5p +dDEXMBUGA1UEAwwORFRTIFNpZ25pbmcgQ0EwHhcNMjMxMDI0MjA1MTEzWhcNMzMx +MDIzMjA1MTEzWjCBiDESMBAGCgmSJomT8ixkARkWAmRlMRMwEQYKCZImiZPyLGQB +GRYDZHRzMSAwHgYDVQQKDBdEaWdpdGFsIFRydXN0IFNvbHV0aW9uczEiMCAGA1UE +CwwZSW5mb3JtYXRpb24gU2VjdXJpdHkgVW5pdDEXMBUGA1UEAwwORFRTIFNpZ25p +bmcgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHI+5QRobGGxk +FEBEY77e4ZnY5tYbrcSYHu6cXhIiQya/0Ed/Ea5DtmHfvW2dkZVSkmbRvlC5zwr2 +XZ0YwMgjNBaM3Zs4PhW4VABE5BQKwaW/BdMnFHn3TGEhKbdiplc7gROwq7TmpO9g +BO9BdN6cGqy8QbwJVxhrPNKL9cEMem07RRj9+cMnWauhSTiyu6F+ASBY6iml5u7D +b9162NyFoJFt9rhl5iEowo8deRGS2oe5gd3VsrsGviVWlcchwQKQRaO0jpV3Ds1w +Yqo0cHVapWsSepKJ8A83FFhyY/hw2i7wgZjjNK6Dvp+zJUMJ4o+EkWGMyHk/O4b2 +N67AQeMlAgMBAAGjZjBkMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/ +AgEAMB0GA1UdDgQWBBTF6kCeOmUyXj+ru8Si4K69M48JOjAfBgNVHSMEGDAWgBTF +6kCeOmUyXj+ru8Si4K69M48JOjANBgkqhkiG9w0BAQsFAAOCAQEAA0JrFlEKuFc/ +eCdZGwVN5Za4iZLBCc4Lz18yqeGfcDlCZ5zWo5/QoGbFnfJLFgp+R2wskdUMLRM5 +LCTsdd+0DUCuNkfYArDi7tTvkRKTYsSBZ7IRrPLzohB3Dm7N8npDJzJBo66lTIFJ +0vkDKs/XM02KgxQFUtCIPZ+a7y8P/U4nPkoFXm1LUdIpiBbTlhi0P0CMf3Ip3vWg +ufgqGvU8Nj24HQ2NXJ6JhLhEopj9wnJc71nYmGbtgzPM0Cco+v8PSKD+7CxhV+pE +JsmNSXdIwGFQzG+Ml5yWPkF5Rxu++JeoZZfvlB9Dhi90pH/AFmDX4+8+c/38e1Pc +JzT+f0FFqg== +-----END CERTIFICATE----- diff --git a/postfix/etc/ssl/zntrl-full-chain.pem b/postfix/etc/ssl/zntrl-full-chain.pem new file mode 100644 index 0000000..60c035d --- /dev/null +++ b/postfix/etc/ssl/zntrl-full-chain.pem @@ -0,0 +1,48 @@ +-----BEGIN CERTIFICATE----- +MIID8zCCAtugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBiDESMBAGCgmSJomT8ixk +ARkWAmRlMRMwEQYKCZImiZPyLGQBGRYDZHRzMSAwHgYDVQQKDBdEaWdpdGFsIFRy +dXN0IFNvbHV0aW9uczEiMCAGA1UECwwZSW5mb3JtYXRpb24gU2VjdXJpdHkgVW5p +dDEXMBUGA1UEAwwORFRTIFNpZ25pbmcgQ0EwHhcNMjMxMDI0MjA1MTEzWhcNMzMx +MDIzMjA1MTEzWjCBiDESMBAGCgmSJomT8ixkARkWAmRlMRMwEQYKCZImiZPyLGQB +GRYDZHRzMSAwHgYDVQQKDBdEaWdpdGFsIFRydXN0IFNvbHV0aW9uczEiMCAGA1UE +CwwZSW5mb3JtYXRpb24gU2VjdXJpdHkgVW5pdDEXMBUGA1UEAwwORFRTIFNpZ25p +bmcgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHI+5QRobGGxk +FEBEY77e4ZnY5tYbrcSYHu6cXhIiQya/0Ed/Ea5DtmHfvW2dkZVSkmbRvlC5zwr2 +XZ0YwMgjNBaM3Zs4PhW4VABE5BQKwaW/BdMnFHn3TGEhKbdiplc7gROwq7TmpO9g +BO9BdN6cGqy8QbwJVxhrPNKL9cEMem07RRj9+cMnWauhSTiyu6F+ASBY6iml5u7D +b9162NyFoJFt9rhl5iEowo8deRGS2oe5gd3VsrsGviVWlcchwQKQRaO0jpV3Ds1w +Yqo0cHVapWsSepKJ8A83FFhyY/hw2i7wgZjjNK6Dvp+zJUMJ4o+EkWGMyHk/O4b2 +N67AQeMlAgMBAAGjZjBkMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/ +AgEAMB0GA1UdDgQWBBTF6kCeOmUyXj+ru8Si4K69M48JOjAfBgNVHSMEGDAWgBTF +6kCeOmUyXj+ru8Si4K69M48JOjANBgkqhkiG9w0BAQsFAAOCAQEAA0JrFlEKuFc/ +eCdZGwVN5Za4iZLBCc4Lz18yqeGfcDlCZ5zWo5/QoGbFnfJLFgp+R2wskdUMLRM5 +LCTsdd+0DUCuNkfYArDi7tTvkRKTYsSBZ7IRrPLzohB3Dm7N8npDJzJBo66lTIFJ +0vkDKs/XM02KgxQFUtCIPZ+a7y8P/U4nPkoFXm1LUdIpiBbTlhi0P0CMf3Ip3vWg +ufgqGvU8Nj24HQ2NXJ6JhLhEopj9wnJc71nYmGbtgzPM0Cco+v8PSKD+7CxhV+pE +JsmNSXdIwGFQzG+Ml5yWPkF5Rxu++JeoZZfvlB9Dhi90pH/AFmDX4+8+c/38e1Pc +JzT+f0FFqg== +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIEEzCCAvugAwIBAgIBCTANBgkqhkiG9w0BAQsFADCBiDESMBAGCgmSJomT8ixk +ARkWAmRlMRMwEQYKCZImiZPyLGQBGRYDZHRzMSAwHgYDVQQKDBdEaWdpdGFsIFRy +dXN0IFNvbHV0aW9uczEiMCAGA1UECwwZSW5mb3JtYXRpb24gU2VjdXJpdHkgVW5p +dDEXMBUGA1UEAwwORFRTIFNpZ25pbmcgQ0EwHhcNMjMxMDI0MjA1MTE0WhcNMzMx +MDIzMjA1MTE0WjB/MRIwEAYKCZImiZPyLGQBGRYCZGUxEzARBgoJkiaJk/IsZAEZ +FgNkdHMxIDAeBgNVBAoMF0RpZ2l0YWwgVHJ1c3QgU29sdXRpb25zMSIwIAYDVQQL +DBlJbmZvcm1hdGlvbiBTZWN1cml0eSBVbml0MQ4wDAYDVQQDDAV6bnRybDCCASIw +DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKxbZjl2C4SlQqqaVUf0iVorPZti +DiHQ0utFCUeJWfrTMMK+TnBikAZuNgr8bbO00phozwCXH4StYRJDxU9ObeR94xYC ++TnCUo9191n2PaYu3ScmyfdhuNlLUKzBuuWgSujkJ65hBGTxWLzna9OmpX+bmaBn +w7v8aryReFsaer8h/2dmdV/zzSrsA1lplRyWValZfHQHwa+RTooG9RoocPsi8RtS +PHkUWOmOnivQiih+csVAPgWf8yqblJfS/Njxx5hXwBvWK8g8zT9W0A0wS2SSqXXw +oIBPCUaUFZp6J0kWcbtQw9m8JzSs6pNPHEbfeTjMVvoAJ+22K4DzDdmdlK0CAwEA +AaOBjzCBjDAOBgNVHQ8BAf8EBAMCBaAwCQYDVR0TBAIwADAdBgNVHSUEFjAUBggr +BgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFDh4xiNAE6GoEy/Gkazg2SI74yfT +MB8GA1UdIwQYMBaAFMXqQJ46ZTJeP6u7xKLgrr0zjwk6MBAGA1UdEQQJMAeCBXpu +dHJsMA0GCSqGSIb3DQEBCwUAA4IBAQCrezrrYsAeWzVNv1SGQCsC+Oc+Viyba78u +BRaYT4h41sxVMYMSqylIdq6gAmBZU1Zwrj1+abT0drlCZb+wK2rVzQqg7ldhpFI7 +Fq6bz7M6DBdOSf4aB7Uz7oSP72ACsrLd9v6GQ2LwlH4njZhYPJQR8gzi0ANyBCAI +W9Ih91D1xgq5R1DmQX/DC7WU1qQhrlzxzcN1LTWI+GNdpjP/ej3PGfg5FNVLrSKj +lcugumrchZZ6iVjCFCc2zlZZNlHPeh4dLkll8g8h2FLh1xnn9KA1/o5GMLm6Y69Q +vnW52LhdAuRW81AaU/Z2hdCZz0WenQO+dH1GaR/fMcSYlfWbk6uR +-----END CERTIFICATE----- diff --git a/postfix/etc/ssl/zntrl.crt b/postfix/etc/ssl/zntrl.crt new file mode 100644 index 0000000..182fbe6 --- /dev/null +++ b/postfix/etc/ssl/zntrl.crt @@ -0,0 +1,24 @@ +-----BEGIN CERTIFICATE----- +MIIEEzCCAvugAwIBAgIBCTANBgkqhkiG9w0BAQsFADCBiDESMBAGCgmSJomT8ixk +ARkWAmRlMRMwEQYKCZImiZPyLGQBGRYDZHRzMSAwHgYDVQQKDBdEaWdpdGFsIFRy +dXN0IFNvbHV0aW9uczEiMCAGA1UECwwZSW5mb3JtYXRpb24gU2VjdXJpdHkgVW5p +dDEXMBUGA1UEAwwORFRTIFNpZ25pbmcgQ0EwHhcNMjMxMDI0MjA1MTE0WhcNMzMx +MDIzMjA1MTE0WjB/MRIwEAYKCZImiZPyLGQBGRYCZGUxEzARBgoJkiaJk/IsZAEZ +FgNkdHMxIDAeBgNVBAoMF0RpZ2l0YWwgVHJ1c3QgU29sdXRpb25zMSIwIAYDVQQL +DBlJbmZvcm1hdGlvbiBTZWN1cml0eSBVbml0MQ4wDAYDVQQDDAV6bnRybDCCASIw +DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKxbZjl2C4SlQqqaVUf0iVorPZti +DiHQ0utFCUeJWfrTMMK+TnBikAZuNgr8bbO00phozwCXH4StYRJDxU9ObeR94xYC ++TnCUo9191n2PaYu3ScmyfdhuNlLUKzBuuWgSujkJ65hBGTxWLzna9OmpX+bmaBn +w7v8aryReFsaer8h/2dmdV/zzSrsA1lplRyWValZfHQHwa+RTooG9RoocPsi8RtS +PHkUWOmOnivQiih+csVAPgWf8yqblJfS/Njxx5hXwBvWK8g8zT9W0A0wS2SSqXXw +oIBPCUaUFZp6J0kWcbtQw9m8JzSs6pNPHEbfeTjMVvoAJ+22K4DzDdmdlK0CAwEA +AaOBjzCBjDAOBgNVHQ8BAf8EBAMCBaAwCQYDVR0TBAIwADAdBgNVHSUEFjAUBggr +BgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFDh4xiNAE6GoEy/Gkazg2SI74yfT +MB8GA1UdIwQYMBaAFMXqQJ46ZTJeP6u7xKLgrr0zjwk6MBAGA1UdEQQJMAeCBXpu +dHJsMA0GCSqGSIb3DQEBCwUAA4IBAQCrezrrYsAeWzVNv1SGQCsC+Oc+Viyba78u +BRaYT4h41sxVMYMSqylIdq6gAmBZU1Zwrj1+abT0drlCZb+wK2rVzQqg7ldhpFI7 +Fq6bz7M6DBdOSf4aB7Uz7oSP72ACsrLd9v6GQ2LwlH4njZhYPJQR8gzi0ANyBCAI +W9Ih91D1xgq5R1DmQX/DC7WU1qQhrlzxzcN1LTWI+GNdpjP/ej3PGfg5FNVLrSKj +lcugumrchZZ6iVjCFCc2zlZZNlHPeh4dLkll8g8h2FLh1xnn9KA1/o5GMLm6Y69Q +vnW52LhdAuRW81AaU/Z2hdCZz0WenQO+dH1GaR/fMcSYlfWbk6uR +-----END CERTIFICATE----- diff --git a/postfix/scratchpad.sh b/postfix/scratchpad.sh index 7150e81..91c2e4c 100644 --- a/postfix/scratchpad.sh +++ b/postfix/scratchpad.sh @@ -1,7 +1,11 @@ #!/usr/bin/bash # export DOCKER_BUILDKIT=1 # docker run -d --name apache -p80:80 -v/root/kopano/dist:/var/www httpd -docker build -t postfix . +rm -rf etc +mkdir etc +cp -r ~/kopano-docker/etc-zntrl/postfix etc +cp -r ~/kopano-docker/etc-zntrl/ssl etc +docker build -t baloan/postfix . docker run -d --name postfix -v/root/kopano/postfix/etc/postfix:/etc/postfix -p8025:25 postfix docker logs -f postfix docker exec -it postfix sh diff --git a/spampd/entrypoint.sh b/spampd/entrypoint.sh index bdd437e..877b4b7 100644 --- a/spampd/entrypoint.sh +++ b/spampd/entrypoint.sh @@ -1,5 +1,7 @@ #!/usr/bin/env sh set -e +# https://github.com/moby/moby/issues/31243 +chmod o+w /dev/stdout /usr/sbin/rsyslogd -su spamd -c "sa-update --gpghomedir /var/lib/spamassassin/sa-update-keys" +# su spamd -c "sa-update --gpghomedir /var/lib/spamassassin/sa-update-keys" exec "$@" diff --git a/spampd/scratchpad.sh b/spampd/scratchpad.sh index 91451e1..783cd40 100644 --- a/spampd/scratchpad.sh +++ b/spampd/scratchpad.sh @@ -4,6 +4,7 @@ docker rm spampd docker build -t spampd . docker run -it --rm --name spampd spampd +docker run --rm --name spampd spampd docker logs -f spampd docker exec -it spampd sh diff --git a/ssl/create-postfix-certs b/ssl/create-postfix-certs index 3b32847..4d4951f 100644 --- a/ssl/create-postfix-certs +++ b/ssl/create-postfix-certs @@ -7,7 +7,8 @@ pushd certs # https://www.postfix.org/postconf.5.html#relay_clientcerts openssl x509 -in $CN.crt -noout -pubkey | openssl pkey -pubin -outform DER | openssl dgst -md5 -c | ( read D FP; echo $FP $CN ) >>relay_clientcerts cp $CN.key ~/kopano-docker/etc-$CN/ssl/private +cat $CN.key $CN.crt kopano-ca.crt >~/kopano-docker/etc-$CN/ssl/private/$CN-key-certs.pem # https://ubuntu.com/server/docs/security-trust-store cp kopano-ca.crt ~/kopano-docker/etc-$CN/ssl/usr-local-share-ca-certificates -cat kopano-ca.crt $CN.crt >~/kopano-docker/etc-$CN/ssl/$CN-full-chain.pem +cat kopano-ca.crt $CN.crt >~/kopano-docker/etc-$CN/ssl/$CN-cert-chain.pem popd