stabilization intermediate check-in

etc-relay/postfix/main.cf

@@ -33,8 +33,8 @@ default_transport = smtp:
 
 # SMPTD (inbound) TLS parameters
 smtpd_tls_CApath = /etc/ssl/certs
-smtpd_tls_CAfile = /etc/ssl/certs/kopano-ca.crt
+smtpd_tls_CAfile = /usr/local/share/ca-certificates/kopano-ca.crt
-smtpd_tls_key_file=/etc/ssl/private/pf-relay.key
+smtpd_tls_key_file=/etc/ssl/private/relay.key
 smtpd_tls_cert_file=/etc/ssl/relay-full-chain.pem
 smtpd_tls_security_level=may
 smtpd_tls_loglevel = 1
@@ -47,7 +47,7 @@ smtpd_relay_restrictions = permit_mynetworks reject_unauth_destination
 
 # SMTP (outbound)
 smtp_tls_CApath=/etc/ssl/certs
-smtp_tls_key_file=/etc/ssl/private/pf-relay.key
+smtp_tls_key_file=/etc/ssl/private/relay.key
 smtp_tls_cert_file=/etc/ssl/relay-full-chain.pem
 smtp_tls_security_level=may
 smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

etc-zntrl/postfix/main.cf

@@ -35,19 +35,20 @@ virtual_transport = lmtp:dagent:2003
 default_transport = smtp:[relay.zntrl.de]:465
 
 # SMTPD (inbound) TLS parameters
-smtpd_tls_key_file = /etc/postfix/ssl/private/nuc0.lan.key
-smtpd_tls_cert_file = /etc/postfix/ssl/nuc0-full-chain.pem
 smtpd_tls_CApath = /etc/ssl/certs
-smtpd_tls_CAfile = /etc/postfix/ssl/certs/balusign-signing-ca.pem
+smtpd_tls_CAfile = /usr/local/share/ca-certificates/kopano-ca.crt
-smtpd_tls_security_level=may
+smtpd_tls_key_file = /etc/ssl/private/zntrl.key
+smtpd_tls_cert_file = /etc/ssl/zntrl.crt
+smtpd_tls_security_level = may
 smtpd_tls_loglevel = 1
 
 smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
 
 # SMTP (outbound)
-smtp_tls_key_file = /etc/postfix/ssl/private/nuc0.lan.key
-smtp_tls_cert_file = /etc/postfix/ssl/nuc0-full-chain.pem
 smtp_tls_CApath=/etc/ssl/certs
+smtd_tls_CAfile = /usr/local/share/ca-certificates/kopano-ca.crt
+smtd_tls_key_file = /etc/ssl/private/zntrl.key
+smtd_tls_cert_file = /etc/ssl/zntrl.crt
 smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
 smtp_tls_wrappermode = yes
 smtp_tls_security_level = encrypt

etc-zntrl/postfix/relay_clientcerts

@@ -1,2 +1,3 @@
-57:6c:b5:f6:49:0e:9d:62:cc:c5:63:80:e5:64:58:ed relay.de
+59:60:7e:df:d6:b9:96:2a:38:b3:71:a2:7b:5d:bc:44 relay
-d4:16:18:1e:21:37:45:fa:a9:ad:d7:7f:0c:37:8f:7c zntrl.de
+14:38:ee:53:a2:9f:7d:3a:75:f3:e7:11:99:dd:85:5d zntrl
+3b:ad:6d:65:38:a9:0a:63:89:41:3a:95:96:e0:e6:65 baloghs

postfix/Dockerfile

@@ -10,6 +10,7 @@ apt-get autoclean
 rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* ~/.cache ~/.npm
 EOF
 COPY etc/postfix/ /etc/postfix/
+COPY etc/ssl/ /etc/ssl/
 COPY --chmod=0775 entrypoint.sh /entrypoint.sh
 EXPOSE 25
 VOLUME /var/spool/postfix

postfix/entrypoint.sh

@@ -1,7 +1,12 @@
 #!/usr/bin/env sh
 set -e
+# https://github.com/moby/moby/issues/31243
+chmod o+w /dev/stdout
 # https://serverfault.com/questions/1003885/postfix-in-docker-host-or-domain-name-not-found-dns-and-docker
 cp /etc/resolv.conf /var/spool/postfix/etc/resolv.conf
 postmap /etc/postfix/virtual
 postmap /etc/postfix/vmailbox
+postmap /etc/postfix/relay_clientcerts
+cp -r /etc/ssl/usr-local-share-ca-certificates/* /usr/local/share/ca-certificates/
+update-ca-certificates
 exec "$@"

postfix/etc/postfix/main.cf

@@ -35,19 +35,19 @@ virtual_transport = lmtp:dagent:2003
 default_transport = smtp:[relay.zntrl.de]:465
 
 # SMTPD (inbound) TLS parameters
-smtpd_tls_key_file = /etc/postfix/ssl/private/nuc0.lan.key
-smtpd_tls_cert_file = /etc/postfix/ssl/nuc0-full-chain.pem
 smtpd_tls_CApath = /etc/ssl/certs
-smtpd_tls_CAfile = /etc/postfix/ssl/certs/balusign-signing-ca.pem
+smtpd_tls_CAfile = /usr/local/share/ca-certificates/kopano-ca.crt
+smtpd_tls_key_file=/etc/ssl/private/zntrl.key
+smtpd_tls_cert_file=/etc/ssl/zntrl.crt
 smtpd_tls_security_level=may
 smtpd_tls_loglevel = 1
 
 smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
 
 # SMTP (outbound)
-smtp_tls_key_file = /etc/postfix/ssl/private/nuc0.lan.key
-smtp_tls_cert_file = /etc/postfix/ssl/nuc0-full-chain.pem
 smtp_tls_CApath=/etc/ssl/certs
+smtd_tls_key_file=/etc/ssl/private/zntrl.key
+smtd_tls_cert_file=/etc/ssl/zntrl.crt
 smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
 smtp_tls_wrappermode = yes
 smtp_tls_security_level = encrypt

postfix/etc/postfix/ssl/certs/balusign-signing-ca.pem

@@ -1,106 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIJgTCCBamgAwIBAgIBAjANBgkqhkiG9w0BAQwFADCBjzESMBAGCgmSJomT8ixk
-ARkWAmRlMRcwFQYKCZImiZPyLGQBGRYHYmFsb2doczEeMBwGA1UECgwVQmFsdVNp
-Z24gUHJpdmF0ZSBTaXRlMRUwEwYDVQQLDAxQS0kgU2VydmljZXMxKTAnBgNVBAMM
-IEJhbHVTaWduIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIzMDQwNzA5NTIx
-MFoXDTMzMDQwNjA5NTIxMFowgY8xEjAQBgoJkiaJk/IsZAEZFgJkZTEXMBUGCgmS
-JomT8ixkARkWB2JhbG9naHMxHjAcBgNVBAoMFUJhbHVTaWduIFByaXZhdGUgU2l0
-ZTEiMCAGA1UECwwZSW5mb3JtYXRpb24gU2VjdXJpdHkgVW5pdDEcMBoGA1UEAwwT
-QmFsdVNpZ24gU2lnbmluZyBDQTCCA+IwDQYJKoZIhvcNAQEBBQADggPPADCCA8oC
-ggPBAKeU5NqQjKgTDVUYWwJanWyDiOLR7RyobQeFAVeGogwZQ/hOy+INl5VAps+7
-7YB6PnjXOa6tCFdJW+tQaXJxqsdU51W4LE6Iq5BpWGx9ltnqDcksXww7iIdHgblv
-4db0ErZM3CogOF3Sr2jYo28OmpqsEFMrbvJ2FDxgBG4/NIGUIqZumY8Aq9JyqA2a
-8yOKPiFyjeiABlNdyvoGNF0RnzxOeErO2loKtUuW5hfLxnUvzin1WnVtipEy1TOd
-E/eRoBfUpexyUXH2/DKw9CvH/ZGGz8oApe8SWSJlO4xSOgxONkuaybs+VzaMxtPU
-ACeeyOILVbQ25BhWSVOW9CfcUeQwqf7pViCUPx7kBSR/RpiLN1JGpEACW6B1D4wy
-OsOq55I0qSou7lJSJtkplSSzS1OxbK+SW1yq/FdPOJvqMIB88OuvrKlve4tDG7tQ
-hfbGrLnF0BKcBE3H2qkkujQ5zULptX1WpklBDnPvxcmlCGwW0XzrRHpOPQDTPbkh
-pH4a4Sph2rWFK7A0Qft8j2eMis7D1Wc30miV4DFYekQc5C3PernGwci3BM7qX4Xt
-5oNbjMk53N2VB5MjT1aVLWlW66+M9vPZ9Y+VCTfSs0p+rUwtyLoYPKulQRhg7zcS
-im6VnQatsiPZM6ssUNFu3602f6E6t0wdIOr1/WAuaIN0WWMWATkPhJ6tpcRSbu3e
-PpOwSbjbwxEPfk5q73xyJZ63XCfFAKihK2KpDOM2D2n0QhKyWOBa5Yw9BZaouSQz
-kBVFYYLm26wfOwvUKwLXX76BDOW33YO61EwV5Jswwp6L+x4Jn6CD4oloBR35ix9t
-aFXTmKA0zoRgrf7SiV38O6GCK3fIxGCz3YC3WRBWoZ519fM7YqqtG71LFPr5cTa8
-EU2QAxizw82Rp0e06yWCFGbfq+8eJB4r8f4+NM6Nqc/4IZZVcmMX3k/R9bOXw7L9
-7HI68QIa34KhQs9KFHUedr5QDS5yU2Ts1mpgzAkCvNqVYGbovm19OTwglDCrb6+i
-KQ29wi1CK9VJUSJx2RaOufh9COndNi640clgSWqClLPChCyhgosuwVPFOQYko6Ez
-nWl5LCvnLh3ieAqVys61t98ll9ueoVyD4HIcseuu9+h7xh02i/SVpD34CZlNwT+u
-BkhSzCoVoj2yp5RZeJFSqXT/99avmbI99O5RGxpTzB3MtADrX0zD1LK2jzvumRrv
-HIPGfB8TTl6aN1dDZ7aA67SnI7cybxhja+52DECwWCnxXx6MTM86/0ZNG6hZe/wu
-SQ3Q0QIDAQABo2YwZDAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIB
-ADAdBgNVHQ4EFgQUypuBBCYN5ViDw4UBxZtTxzBXbBAwHwYDVR0jBBgwFoAU+o8o
-2baOIFDraC5/jXb/T0MRzrYwDQYJKoZIhvcNAQEMBQADggPBAKK6zoKmVe5FxVaP
-85TgjvbVQWZdaejlma9xZuSJPxicHuaEjuSrcthaqQ6rhdccLcniuY3+heKAjKqU
-fdGzOhjwyfAGFjP/xd/xb4c7eh7EQ/NnYPM82Miiw1pd4sA+8hJnDoLlK1dO+SAw
-5N0UrJLl+N33DT95fjykxNysCOxPSnNihKI86QlkpCUJ1GgupoRFRNJ7ditW8Fcu
-vWfZw3GSwWQNFAzBL0/xbiVh1/mZRnaKRK8APVT70M40UtIzu/Rr8D9TfoyDzuy5
-pkjQXhclz/tuctnvkwOEwmeOYHtozdg4SZlePJ4hrUkLIwgEcN1xk4XueioTT5+d
-VouUg6kg7YdpRiJH4PvLudUnoGs8+277gQZIyQgMoF0iR9IYXMBcDcaOnb6fcmKD
-Pxiu395c0a3alnugmkqRoJboiGFPbU0BUOXTV0uRLkXVFSs5FSccfUGrnPP+Kk73
-ePfOLVazmsiSF0J+k0ngh9U6I067FdAEqEFyqLj7nLT9B8Wd6YR1mCFzPUNg5k70
-pXeyap1Y+kW03+bsw/uakqTSf6aCFa+vXwyHoMsC1Pb8hCRtYh/FisON9IcGe0em
-A3JAwoiwLyAQT94/fNm+kf7LiM+lQP0Odj/dos9yBBqu5oZ2J0f+AAGpOqOy9zez
-hC8lEtn14y9QMmEoEHUdNPMIHS3W859ejF+tmZ+rpfLgL1VHmiv162gw0tRz1hX7
-NDNhqlNNBygC83hi+BzHLgfZIqTumRVIQulwzyhX6tqtG4TGvxQ3MXluKH2RA9Yk
-SM2Shm8l6RVaadA0gGmfmd97WVnd0jUJXFMpZSZCsLuI9PesTkW59cIloVvl6AXM
-csVJqGCiuElHZDAjGmGvHJJEnnckZCTC0czaoRSEN8GmDCWnewPn7VAUTR+Qv30G
-26yVOQWcNr7h8I7dkXEF9DfJRz/5p3+Tu0T7HCi8vwz4dAaB4YPm1Zl5TZSIF8U5
-TgV15BFN1nXSyLLdZsn1wcGjjFKR22kdyKonZjh2M+9ZGHDLAhY5abHzvK08d1av
-NvgPcddVAJCWxgabjdrA/gB4GDeNRSLYWPmvb5O4H/FfYteAVbbasoSmc+4zhv4D
-ZXsQvYwuyLuv6dDIlGeiHM8+u1wSP2Dp8PdE1E0xSg0kYp8AmwCTsjoKowMH8A7A
-wm/eGWZED2yoZLmIalE1ps76kfBBzNbJQMyioE0nrfU+0RF/RSAv/AzH6fz2pTta
-9lzdU5OOIo4HNAwaHyxla5gW6P0N+i1mUAq/z7ZLVrI7DvuRww==
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
-MIIJfjCCBaagAwIBAgIBATANBgkqhkiG9w0BAQwFADCBjzESMBAGCgmSJomT8ixk
-ARkWAmRlMRcwFQYKCZImiZPyLGQBGRYHYmFsb2doczEeMBwGA1UECgwVQmFsdVNp
-Z24gUHJpdmF0ZSBTaXRlMRUwEwYDVQQLDAxQS0kgU2VydmljZXMxKTAnBgNVBAMM
-IEJhbHVTaWduIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIzMDQwNzA5NTA1
-OFoXDTMzMDQwNjA5NTA1OFowgY8xEjAQBgoJkiaJk/IsZAEZFgJkZTEXMBUGCgmS
-JomT8ixkARkWB2JhbG9naHMxHjAcBgNVBAoMFUJhbHVTaWduIFByaXZhdGUgU2l0
-ZTEVMBMGA1UECwwMUEtJIFNlcnZpY2VzMSkwJwYDVQQDDCBCYWx1U2lnbiBDZXJ0
-aWZpY2F0aW9uIEF1dGhvcml0eTCCA+IwDQYJKoZIhvcNAQEBBQADggPPADCCA8oC
-ggPBAOWJ0SL/yhWvkUlqKyAvDKKa5BFEAgUci1LYMUya0nm1SZZCg5J/PCr459LQ
-pLfzQCRKZsLlx3EDxvsw6hMtFzGKIUGVtEkNpxWcbKZhhln0jScdsyyVrdbYSXp3
-BwXtP2iC843Mk6vSSl7VKDmLAellR8Z3W3mjb6LXOBx3imitFNUDZpKv2jBrvHiv
-XeLcym6KuQ8EWZKGZNYUCrlQCpvbuAaHKF1C7KlKhR1LRZl7NcvFvnlrl4uUopSt
-TsZcK3Kb6jaiYr/19RNxDy/4GXbTsCtC9/lpo42iPm8KzNlTapZ2zGbmDeCzveDg
-N9NWNXyO5mYpnkFXTSEkmiwIdyWVLcomvyVKW0cyTUcET1s1D6NZokqvjolscyno
-Ff8Ez24IWbfRxT+OFHSqJwSHc7rXPGftoB1KBP7UP2K1EYYnC+vxDejRkdC0IFuv
-KrzonogkDDaJb6A0+hWSBSGMQpKfCbayTkU8nBzo8ilSM9S+dW0SIbWkptNdXZqL
-AQjT8hJe3vGejGXyGC7zLd0kEGBz098+JpbZLVyStakpJcn0HkZzUjxh7DSS3vtp
-3QV5IUZ4jBxp5/lRvCQ/Uz0re4KSXPXOMpEQwD1Ay7uPzADXv0ibMFfE22PT80fr
-r1YsJjT01C0QUbM4j++1w2kVara9wRaa/x2eEpCDHRRbvtNZ8K4YxqXxhoc7POOo
-X3/w9keXobo4BmH9uV2t2twg/lHiyBrQfSfsAr2+3/5Tt/pv6wuVCVJcxwFSm0ey
-ighWD5WUAvMvShFkGr8D/tyTulq33IySbh7tZFj40Fh88TD2Z1VWFWK+5OHWjsK0
-GSuOANw8Mj5Seq2RH8CkbrALok547YGLfls7pw4PTXkW/rmPallQLLLs8VT6MDwg
-SPk6sIMVOFF6rq9q5QV8EQliSYQ/vS4rh0qAG0zltaoWS40rTPsOGBJCftDOJFJp
-06XuLTyKrFRtCWP6dSuh+ju6EGTYk0rcBLeiKhFptB9HZtwE5Cd1khysfE3pDMiw
-ksGEjMnzhbLuTeBH9QlcYLZWqmH9ZK35qZ9cKvsHf0jlHYZOASnEaPX8CXhGWXKn
-skzOq4ihc6gZXKlSjX9Mglkfzru6hwg8f4i7L20wySrl/HOc8kuPZZ/UqLulBCI2
-yr6TKlvJXu5BkRUJZ0EGnpRCLaxWiNah+DcpbKeoHVIj5Z9Xq5p78N+d4LD9dKw0
-6VwcH74LJDT4jHVKu2zTuqyKTWw0jitqWjeexxPbeZTV4KBiIDYMEYVsr/Swx+u7
-4dU8YQIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAd
-BgNVHQ4EFgQU+o8o2baOIFDraC5/jXb/T0MRzrYwHwYDVR0jBBgwFoAU+o8o2baO
-IFDraC5/jXb/T0MRzrYwDQYJKoZIhvcNAQEMBQADggPBAAjgeEvyz2I/ZW81OIl2
-VsEMLuxq7GnCXabsKTklhHygjHPs1hr5/pn9fWo8pSSQGAOBFL/EnnHW+qYvzswY
-XSzIBVi2j7oUDRL2T9t3pBi0gNO9LYhAhSExocN9KStqQlxHZ5ei0QTbWCA6uArk
-lcwKhAihV7GvbPGYfRPSg95a/UXwyGAY8IffEL4J9Qn2LtyT57izErP3uPW8d3w7
-bNe2+Yqzd69Nk2CzSvIqtMSOoEFzTgvmzVoQdU9pi7zulkQYxIFmWvXxUnO2v+Jc
-exZ/CsJzCJBP8eQGY+5FUsunncnm16VS7bHoD5ZtWFcXsiM8xTt6mt7lMbjSl5px
-7N+FUPJHOpokXyX3Y/JK0KJCTcuJtyoZK81uJN6tgRaNN7GXn3Mlg0cmsG4d+Fib
-zxNAyhgtX6P0SpIfWLNBpdDWyjl6BnX4A7UtuH3eIEbYlms/kTm2ty0xJQiDrZkT
-yc9xNs+k9C8XKmPEnDK0BSObMmyEIz+lox32GS6vbNq18jLsjs+jk/1Zs72XAdNK
-AlU7+DrgbE3oulqKjTMqruuG/8WoF9s70ds1WUYwBGXzbjq6zR1xWb+vNGQ9ePpP
-KiTdJIPg0GO25MrZPVsHURsrFVTgdB5qfRj6RhDRrdMXuZ/mWMCetRd1EETzRIO0
-GgkGFHUFAWwiQDkmJYLrGB5t55Nq2JetAvwiUZuco8krUUQXcUu+sFrNjencctnX
-MHWYRERKMOB/eqhWdeTG04c94nV8BlpHAT3Iee8FfWA4zm0RxVreXICNOCPtxNXH
-aSEsgWBWw8/Zmk6VCEhuX6CernSmyqUc6PzREZRHFZD18lTRL5JxjXdm+qh8Nrxt
-puj2FaXSotGQZywm8hmqMU8hCti3m93FQDpcsgoSqiilmnLRIAWXVrSKRlXXTxKs
-Lpq3x9ZoARYbLEyxhRTdoMeU95OE64R1c6mcCcWPu53v59wYKmVMBOi4blTAXFn2
-9KEbwtgDcAdXTn6SGAOvrdibEG2GnBhTw689vJfC7Z2imGoDxwMKToCnK9tgwAwO
-/lv7oKpnA3GxzYojGZcKMGGGlfKFftZd36X/NZDmn9nmIGCqR0P04YWoX3utJOJH
-03bK11O62l9DQNEJSQ5Zjow5HMuhxTfhka4I0edjsoIekxePAR11riIHpfwLQWmF
-OybPqyC9MHzTLzSsISdZV1SDRQzCfpGbRtQSYAPF/T/hr2E2g+L+1tduQ07LICB0
-+yKYtwF1rXkWwD4NvVYrk94fTCBPHK5SaMol8YlPer1ZUw==
------END CERTIFICATE-----

postfix/etc/postfix/ssl/nuc0-full-chain.pem

@@ -1,148 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIHWDCCA4CgAwIBAgIBBTANBgkqhkiG9w0BAQwFADCBjzESMBAGCgmSJomT8ixk
-ARkWAmRlMRcwFQYKCZImiZPyLGQBGRYHYmFsb2doczEeMBwGA1UECgwVQmFsdVNp
-Z24gUHJpdmF0ZSBTaXRlMSIwIAYDVQQLDBlJbmZvcm1hdGlvbiBTZWN1cml0eSBV
-bml0MRwwGgYDVQQDDBNCYWx1U2lnbiBTaWduaW5nIENBMB4XDTIzMDQwNzEyMzQx
-OVoXDTI0MDQwNjEyMzQxOVowbjESMBAGCgmSJomT8ixkARkWAmRlMRcwFQYKCZIm
-iZPyLGQBGRYHYmFsb2doczEeMBwGA1UECgwVQmFsdVNpZ24gUHJpdmF0ZSBTaXRl
-MRAwDgYDVQQLDAdJbmZvU2VjMQ0wCwYDVQQDDARudWMwMIIBojANBgkqhkiG9w0B
-AQEFAAOCAY8AMIIBigKCAYEAvv/1KE8n8T7QhGENHBXG0w+1cp9kQkw3J0JbIkl7
-Xc/Bprn0qBAqytLbS0/xsLyFO3VOaxLlHSKOV9QSfZfnJbOO6lYek3meT7e+ODvq
-B7OSd97JdVLKJj9u66hoBZ2AY7lBpgiSRbYhPJiXPVxIxMenlTe83ngBxGaQtN+j
-5MphdC1Pr4zAIv6/oNBJP1AX1yc0r1R9Z31mI/CPBNJqWjTYn2YUoleOYJZzgCB9
-82NDlABhoyX4MyCHYbOzPrXqptBysakWEsq/6iQuOYUAicE7rnyFWh9+6MzmKSyU
-RDRRL7iCUHNYYl6LLVQo9PSB50sMztGWwQcurOCwuC0N1KjTTDrrMQQnJSb+6afc
-sbp9upzRmRiC+9RmZjR3+fuhZRU8QWAv29dSibmoWa+5Pp3k49CYY1GYDTlVvE+B
-J1hmrxNCuC2yp/k4wwLzB94Uoxf//AP42ALDuIevZ6SCyWkYa7sO6G4rhcmvCcZ1
-36MF7CqQA+4AL6qjYFXhMC6hAgMBAAGjgZ4wgZswDgYDVR0PAQH/BAQDAgWgMAkG
-A1UdEwQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQW
-BBS+FF4438wQU2NNWLjGchDVcElwwDAfBgNVHSMEGDAWgBTKm4EEJg3lWIPDhQHF
-m1PHMFdsEDAfBgNVHREEGDAWggRudWMwgg5udWMwLmZyaXR6LmJveDANBgkqhkiG
-9w0BAQwFAAOCA8EALXeN36Nf2Zs1aVMYnUTHvjJUTSwyg9TFhJypXNajC4lg4Fn/
-/ekYYxgBWDosf6Vi171jpvQySfY374mb44nhLBje3qgVOKlxMUKRd2Pr+aRAXYan
-kMhnycn/R/lQe/4twu5h2r9hTBJuZAT5J+5fCqaDgWIsMdryBM9Im0rKqlS7W1Kf
-OXXniHBP3YABMN4XEGAUMtV9oCr894RcmtRwu4RQktB/7fXEb6TiZ00Fe/3ek3oJ
-OsBind5zPvZkXflJbJDKACMLO2lWS10giktQoItjl1leD/lKtD4fCs5byNWlWrHb
-XXWleVLB3ylhGarvNex6tWHPIRtasLUQfh94BCE5zQthjcUN0M9lTF5/x8ajdD7g
-xSorx8mjnPBEL/rrv9JxMro6IM8gyQ5ZUxxN0a5c5xGyFTREf7RstEszsvTJWctw
-QFkNb5RWBEI8kynjwMJhBWRKIqNGltwatN+Vw5F7jfQYiFJuMrmbLzDXYOH7AI6G
-rIMHJywdw/u0uE/SbTHycH6GjKiq+TidSe7Yd47pDIEYzARpiZ1tY7L/Tsrk/Czs
-CyEu1g2K5WRVw6bzrGr6x3kkvo0jKwE1hE967s17TGj35fbqYQk74mtgNcJNjo4+
-FsVbNB/0PEjIBUzNdjTf/QqX10GUtzHyf0ZMTAaBTfucAKyMx3Z1LWLd+oqtjItW
-vEBgWIsDJOQe4jmFkt2oFrFWFKesFXMG5muuq0z/CoddOhlw7outH/6VnjnU2p3p
-HeZ6Acg6qojNUvqB0CpHMpm0FArwenc4NHOQJ6VsESDd4XytA8hrwuNZvG1nZ2R7
-U3O2GLBdZcmtbyLQXE3UjIAmpHF5z/ir5dmuagbRiO1IGlFlyzOSAvf9lqYfZz2w
-ar3e9IOMpGIbFTBYDSmQr8a6pY/E9sTyf4oVgQiz2qpIHFITHdj1QpgoucC1pzJ1
-+EQ5PixNIi8f92dO00Wjet6m8zjx78MBJxeNA5aQl46f1oEBDXxkWPiK3THFfjlm
-WuMp+URjffvFc93s9hZgetvHmE3kEDtTG5hxbjumwdhlGuLnnPsLNj8Po3PJ6hI2
-olFtSBcRthls1DDe+DTrwaKzgvP0W9p+uLK6N+m7xewMvBKsxDjk2cKRct8Riyms
-0yJcQzxnKB8BeAUXBQ5WhP/ARFBS46VEL3TG0tXfsMP+d4fuCW1tySv9RmTpgBYz
-PuCOMiJUH1v3/s9GsWQdCCnG5lOwFz1mKmY0umXEp5o5l027zhPiPsyfqp3s/opw
-skdJhgg7vvo5x15J
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
-MIIJgTCCBamgAwIBAgIBAjANBgkqhkiG9w0BAQwFADCBjzESMBAGCgmSJomT8ixk
-ARkWAmRlMRcwFQYKCZImiZPyLGQBGRYHYmFsb2doczEeMBwGA1UECgwVQmFsdVNp
-Z24gUHJpdmF0ZSBTaXRlMRUwEwYDVQQLDAxQS0kgU2VydmljZXMxKTAnBgNVBAMM
-IEJhbHVTaWduIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIzMDQwNzA5NTIx
-MFoXDTMzMDQwNjA5NTIxMFowgY8xEjAQBgoJkiaJk/IsZAEZFgJkZTEXMBUGCgmS
-JomT8ixkARkWB2JhbG9naHMxHjAcBgNVBAoMFUJhbHVTaWduIFByaXZhdGUgU2l0
-ZTEiMCAGA1UECwwZSW5mb3JtYXRpb24gU2VjdXJpdHkgVW5pdDEcMBoGA1UEAwwT
-QmFsdVNpZ24gU2lnbmluZyBDQTCCA+IwDQYJKoZIhvcNAQEBBQADggPPADCCA8oC
-ggPBAKeU5NqQjKgTDVUYWwJanWyDiOLR7RyobQeFAVeGogwZQ/hOy+INl5VAps+7
-7YB6PnjXOa6tCFdJW+tQaXJxqsdU51W4LE6Iq5BpWGx9ltnqDcksXww7iIdHgblv
-4db0ErZM3CogOF3Sr2jYo28OmpqsEFMrbvJ2FDxgBG4/NIGUIqZumY8Aq9JyqA2a
-8yOKPiFyjeiABlNdyvoGNF0RnzxOeErO2loKtUuW5hfLxnUvzin1WnVtipEy1TOd
-E/eRoBfUpexyUXH2/DKw9CvH/ZGGz8oApe8SWSJlO4xSOgxONkuaybs+VzaMxtPU
-ACeeyOILVbQ25BhWSVOW9CfcUeQwqf7pViCUPx7kBSR/RpiLN1JGpEACW6B1D4wy
-OsOq55I0qSou7lJSJtkplSSzS1OxbK+SW1yq/FdPOJvqMIB88OuvrKlve4tDG7tQ
-hfbGrLnF0BKcBE3H2qkkujQ5zULptX1WpklBDnPvxcmlCGwW0XzrRHpOPQDTPbkh
-pH4a4Sph2rWFK7A0Qft8j2eMis7D1Wc30miV4DFYekQc5C3PernGwci3BM7qX4Xt
-5oNbjMk53N2VB5MjT1aVLWlW66+M9vPZ9Y+VCTfSs0p+rUwtyLoYPKulQRhg7zcS
-im6VnQatsiPZM6ssUNFu3602f6E6t0wdIOr1/WAuaIN0WWMWATkPhJ6tpcRSbu3e
-PpOwSbjbwxEPfk5q73xyJZ63XCfFAKihK2KpDOM2D2n0QhKyWOBa5Yw9BZaouSQz
-kBVFYYLm26wfOwvUKwLXX76BDOW33YO61EwV5Jswwp6L+x4Jn6CD4oloBR35ix9t
-aFXTmKA0zoRgrf7SiV38O6GCK3fIxGCz3YC3WRBWoZ519fM7YqqtG71LFPr5cTa8
-EU2QAxizw82Rp0e06yWCFGbfq+8eJB4r8f4+NM6Nqc/4IZZVcmMX3k/R9bOXw7L9
-7HI68QIa34KhQs9KFHUedr5QDS5yU2Ts1mpgzAkCvNqVYGbovm19OTwglDCrb6+i
-KQ29wi1CK9VJUSJx2RaOufh9COndNi640clgSWqClLPChCyhgosuwVPFOQYko6Ez
-nWl5LCvnLh3ieAqVys61t98ll9ueoVyD4HIcseuu9+h7xh02i/SVpD34CZlNwT+u
-BkhSzCoVoj2yp5RZeJFSqXT/99avmbI99O5RGxpTzB3MtADrX0zD1LK2jzvumRrv
-HIPGfB8TTl6aN1dDZ7aA67SnI7cybxhja+52DECwWCnxXx6MTM86/0ZNG6hZe/wu
-SQ3Q0QIDAQABo2YwZDAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIB
-ADAdBgNVHQ4EFgQUypuBBCYN5ViDw4UBxZtTxzBXbBAwHwYDVR0jBBgwFoAU+o8o
-2baOIFDraC5/jXb/T0MRzrYwDQYJKoZIhvcNAQEMBQADggPBAKK6zoKmVe5FxVaP
-85TgjvbVQWZdaejlma9xZuSJPxicHuaEjuSrcthaqQ6rhdccLcniuY3+heKAjKqU
-fdGzOhjwyfAGFjP/xd/xb4c7eh7EQ/NnYPM82Miiw1pd4sA+8hJnDoLlK1dO+SAw
-5N0UrJLl+N33DT95fjykxNysCOxPSnNihKI86QlkpCUJ1GgupoRFRNJ7ditW8Fcu
-vWfZw3GSwWQNFAzBL0/xbiVh1/mZRnaKRK8APVT70M40UtIzu/Rr8D9TfoyDzuy5
-pkjQXhclz/tuctnvkwOEwmeOYHtozdg4SZlePJ4hrUkLIwgEcN1xk4XueioTT5+d
-VouUg6kg7YdpRiJH4PvLudUnoGs8+277gQZIyQgMoF0iR9IYXMBcDcaOnb6fcmKD
-Pxiu395c0a3alnugmkqRoJboiGFPbU0BUOXTV0uRLkXVFSs5FSccfUGrnPP+Kk73
-ePfOLVazmsiSF0J+k0ngh9U6I067FdAEqEFyqLj7nLT9B8Wd6YR1mCFzPUNg5k70
-pXeyap1Y+kW03+bsw/uakqTSf6aCFa+vXwyHoMsC1Pb8hCRtYh/FisON9IcGe0em
-A3JAwoiwLyAQT94/fNm+kf7LiM+lQP0Odj/dos9yBBqu5oZ2J0f+AAGpOqOy9zez
-hC8lEtn14y9QMmEoEHUdNPMIHS3W859ejF+tmZ+rpfLgL1VHmiv162gw0tRz1hX7
-NDNhqlNNBygC83hi+BzHLgfZIqTumRVIQulwzyhX6tqtG4TGvxQ3MXluKH2RA9Yk
-SM2Shm8l6RVaadA0gGmfmd97WVnd0jUJXFMpZSZCsLuI9PesTkW59cIloVvl6AXM
-csVJqGCiuElHZDAjGmGvHJJEnnckZCTC0czaoRSEN8GmDCWnewPn7VAUTR+Qv30G
-26yVOQWcNr7h8I7dkXEF9DfJRz/5p3+Tu0T7HCi8vwz4dAaB4YPm1Zl5TZSIF8U5
-TgV15BFN1nXSyLLdZsn1wcGjjFKR22kdyKonZjh2M+9ZGHDLAhY5abHzvK08d1av
-NvgPcddVAJCWxgabjdrA/gB4GDeNRSLYWPmvb5O4H/FfYteAVbbasoSmc+4zhv4D
-ZXsQvYwuyLuv6dDIlGeiHM8+u1wSP2Dp8PdE1E0xSg0kYp8AmwCTsjoKowMH8A7A
-wm/eGWZED2yoZLmIalE1ps76kfBBzNbJQMyioE0nrfU+0RF/RSAv/AzH6fz2pTta
-9lzdU5OOIo4HNAwaHyxla5gW6P0N+i1mUAq/z7ZLVrI7DvuRww==
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
-MIIJfjCCBaagAwIBAgIBATANBgkqhkiG9w0BAQwFADCBjzESMBAGCgmSJomT8ixk
-ARkWAmRlMRcwFQYKCZImiZPyLGQBGRYHYmFsb2doczEeMBwGA1UECgwVQmFsdVNp
-Z24gUHJpdmF0ZSBTaXRlMRUwEwYDVQQLDAxQS0kgU2VydmljZXMxKTAnBgNVBAMM
-IEJhbHVTaWduIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIzMDQwNzA5NTA1
-OFoXDTMzMDQwNjA5NTA1OFowgY8xEjAQBgoJkiaJk/IsZAEZFgJkZTEXMBUGCgmS
-JomT8ixkARkWB2JhbG9naHMxHjAcBgNVBAoMFUJhbHVTaWduIFByaXZhdGUgU2l0
-ZTEVMBMGA1UECwwMUEtJIFNlcnZpY2VzMSkwJwYDVQQDDCBCYWx1U2lnbiBDZXJ0
-aWZpY2F0aW9uIEF1dGhvcml0eTCCA+IwDQYJKoZIhvcNAQEBBQADggPPADCCA8oC
-ggPBAOWJ0SL/yhWvkUlqKyAvDKKa5BFEAgUci1LYMUya0nm1SZZCg5J/PCr459LQ
-pLfzQCRKZsLlx3EDxvsw6hMtFzGKIUGVtEkNpxWcbKZhhln0jScdsyyVrdbYSXp3
-BwXtP2iC843Mk6vSSl7VKDmLAellR8Z3W3mjb6LXOBx3imitFNUDZpKv2jBrvHiv
-XeLcym6KuQ8EWZKGZNYUCrlQCpvbuAaHKF1C7KlKhR1LRZl7NcvFvnlrl4uUopSt
-TsZcK3Kb6jaiYr/19RNxDy/4GXbTsCtC9/lpo42iPm8KzNlTapZ2zGbmDeCzveDg
-N9NWNXyO5mYpnkFXTSEkmiwIdyWVLcomvyVKW0cyTUcET1s1D6NZokqvjolscyno
-Ff8Ez24IWbfRxT+OFHSqJwSHc7rXPGftoB1KBP7UP2K1EYYnC+vxDejRkdC0IFuv
-KrzonogkDDaJb6A0+hWSBSGMQpKfCbayTkU8nBzo8ilSM9S+dW0SIbWkptNdXZqL
-AQjT8hJe3vGejGXyGC7zLd0kEGBz098+JpbZLVyStakpJcn0HkZzUjxh7DSS3vtp
-3QV5IUZ4jBxp5/lRvCQ/Uz0re4KSXPXOMpEQwD1Ay7uPzADXv0ibMFfE22PT80fr
-r1YsJjT01C0QUbM4j++1w2kVara9wRaa/x2eEpCDHRRbvtNZ8K4YxqXxhoc7POOo
-X3/w9keXobo4BmH9uV2t2twg/lHiyBrQfSfsAr2+3/5Tt/pv6wuVCVJcxwFSm0ey
-ighWD5WUAvMvShFkGr8D/tyTulq33IySbh7tZFj40Fh88TD2Z1VWFWK+5OHWjsK0
-GSuOANw8Mj5Seq2RH8CkbrALok547YGLfls7pw4PTXkW/rmPallQLLLs8VT6MDwg
-SPk6sIMVOFF6rq9q5QV8EQliSYQ/vS4rh0qAG0zltaoWS40rTPsOGBJCftDOJFJp
-06XuLTyKrFRtCWP6dSuh+ju6EGTYk0rcBLeiKhFptB9HZtwE5Cd1khysfE3pDMiw
-ksGEjMnzhbLuTeBH9QlcYLZWqmH9ZK35qZ9cKvsHf0jlHYZOASnEaPX8CXhGWXKn
-skzOq4ihc6gZXKlSjX9Mglkfzru6hwg8f4i7L20wySrl/HOc8kuPZZ/UqLulBCI2
-yr6TKlvJXu5BkRUJZ0EGnpRCLaxWiNah+DcpbKeoHVIj5Z9Xq5p78N+d4LD9dKw0
-6VwcH74LJDT4jHVKu2zTuqyKTWw0jitqWjeexxPbeZTV4KBiIDYMEYVsr/Swx+u7
-4dU8YQIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAd
-BgNVHQ4EFgQU+o8o2baOIFDraC5/jXb/T0MRzrYwHwYDVR0jBBgwFoAU+o8o2baO
-IFDraC5/jXb/T0MRzrYwDQYJKoZIhvcNAQEMBQADggPBAAjgeEvyz2I/ZW81OIl2
-VsEMLuxq7GnCXabsKTklhHygjHPs1hr5/pn9fWo8pSSQGAOBFL/EnnHW+qYvzswY
-XSzIBVi2j7oUDRL2T9t3pBi0gNO9LYhAhSExocN9KStqQlxHZ5ei0QTbWCA6uArk
-lcwKhAihV7GvbPGYfRPSg95a/UXwyGAY8IffEL4J9Qn2LtyT57izErP3uPW8d3w7
-bNe2+Yqzd69Nk2CzSvIqtMSOoEFzTgvmzVoQdU9pi7zulkQYxIFmWvXxUnO2v+Jc
-exZ/CsJzCJBP8eQGY+5FUsunncnm16VS7bHoD5ZtWFcXsiM8xTt6mt7lMbjSl5px
-7N+FUPJHOpokXyX3Y/JK0KJCTcuJtyoZK81uJN6tgRaNN7GXn3Mlg0cmsG4d+Fib
-zxNAyhgtX6P0SpIfWLNBpdDWyjl6BnX4A7UtuH3eIEbYlms/kTm2ty0xJQiDrZkT
-yc9xNs+k9C8XKmPEnDK0BSObMmyEIz+lox32GS6vbNq18jLsjs+jk/1Zs72XAdNK
-AlU7+DrgbE3oulqKjTMqruuG/8WoF9s70ds1WUYwBGXzbjq6zR1xWb+vNGQ9ePpP
-KiTdJIPg0GO25MrZPVsHURsrFVTgdB5qfRj6RhDRrdMXuZ/mWMCetRd1EETzRIO0
-GgkGFHUFAWwiQDkmJYLrGB5t55Nq2JetAvwiUZuco8krUUQXcUu+sFrNjencctnX
-MHWYRERKMOB/eqhWdeTG04c94nV8BlpHAT3Iee8FfWA4zm0RxVreXICNOCPtxNXH
-aSEsgWBWw8/Zmk6VCEhuX6CernSmyqUc6PzREZRHFZD18lTRL5JxjXdm+qh8Nrxt
-puj2FaXSotGQZywm8hmqMU8hCti3m93FQDpcsgoSqiilmnLRIAWXVrSKRlXXTxKs
-Lpq3x9ZoARYbLEyxhRTdoMeU95OE64R1c6mcCcWPu53v59wYKmVMBOi4blTAXFn2
-9KEbwtgDcAdXTn6SGAOvrdibEG2GnBhTw689vJfC7Z2imGoDxwMKToCnK9tgwAwO
-/lv7oKpnA3GxzYojGZcKMGGGlfKFftZd36X/NZDmn9nmIGCqR0P04YWoX3utJOJH
-03bK11O62l9DQNEJSQ5Zjow5HMuhxTfhka4I0edjsoIekxePAR11riIHpfwLQWmF
-OybPqyC9MHzTLzSsISdZV1SDRQzCfpGbRtQSYAPF/T/hr2E2g+L+1tduQ07LICB0
-+yKYtwF1rXkWwD4NvVYrk94fTCBPHK5SaMol8YlPer1ZUw==
------END CERTIFICATE-----

postfix/etc/postfix/ssl/private/nuc0.lan.key

@@ -1,40 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIG/QIBADANBgkqhkiG9w0BAQEFAASCBucwggbjAgEAAoIBgQC+//UoTyfxPtCE
-YQ0cFcbTD7Vyn2RCTDcnQlsiSXtdz8GmufSoECrK0ttLT/GwvIU7dU5rEuUdIo5X
-1BJ9l+cls47qVh6TeZ5Pt744O+oHs5J33sl1UsomP27rqGgFnYBjuUGmCJJFtiE8
-mJc9XEjEx6eVN7zeeAHEZpC036PkymF0LU+vjMAi/r+g0Ek/UBfXJzSvVH1nfWYj
-8I8E0mpaNNifZhSiV45glnOAIH3zY0OUAGGjJfgzIIdhs7M+teqm0HKxqRYSyr/q
-JC45hQCJwTuufIVaH37ozOYpLJRENFEvuIJQc1hiXostVCj09IHnSwzO0ZbBBy6s
-4LC4LQ3UqNNMOusxBCclJv7pp9yxun26nNGZGIL71GZmNHf5+6FlFTxBYC/b11KJ
-uahZr7k+neTj0JhjUZgNOVW8T4EnWGavE0K4LbKn+TjDAvMH3hSjF//8A/jYAsO4
-h69npILJaRhruw7obiuFya8JxnXfowXsKpAD7gAvqqNgVeEwLqECAwEAAQKCAYEA
-hKjkzzWDaZUWYQvDfkFF0myzu0Qn78BeAl+dSsg87mCRgUrhOiXYgv1HIR0KopWd
-+Dk22TnLdpv8v9XlbeQmwNHhLrPYEthC892MOiSrHORFlApiZKG3FC+0y+sxLM1D
-UoBmr3p+lfq1RRA643yIcly18fc/sEkr+Qy/71Dx1cQXQgkCssyQ2v2TfY+NgHMR
-y/dIKYsGeu3nFolL3K6E/dh8qOHO7R7hHgcBe/mVYYoNcut85UNHC8PJJDwbADB6
-8mwnqHBD9g5idqdnU17YE+N/iNYJfcROG6joP+mglp0rQp3i5Mkz3lroSBrM1ArG
-Ciw20ct+FFdwc3hmlLTUS2GSUtUKuvs2RsXrUyV+53Gzt4GUuWd+4ZDWvOhoAIgD
-fzlDywAJNS3giB/4Knix4Me716kuRncIkWbAXDu43Fm88k8Z14JrfTF9JxR/LmIa
-kH8gjSZU5M25dT1oQVjC2bspztT9jDnWt/+XvYqVJbX/cgKHQSJkic/Zu2xmcA69
-AoHBAN29CHV7b9Ux9nmeS4kIEpROxr+FPBmpgzOUqrp91O/sC+9n28k/vNHOmPH7
-HOSZByhnjB+hiPT5SdDYJm7wbZdZPWRAO5EctKuL+NFNt/HM8QmIgq26SnIYYi52
-emxYjKWvrDLaiVL5Brdx43hhHNMtb/dR0d29h1iqXx0rKbKeg5mk/1F9zYVitXrP
-pGWRtRHDvgJHOP5MDTpHpSmmR5Dwf4Jn6BEX7JL2sH6SVOMMi1ebUM+pofVRzM0i
-GcoQVwKBwQDcgwu5wfJxwIjY7wssIwnIRv3uziZyILZkWJlTk1PTGv4AbN/mkVEv
-D1DIajCFC/6ijayqBentkJ63mJxMmnInsWC2PQHKn9/XA46YcLfVzr7yY7OLZ3FR
-Xc0Uyyx1PtxarWpIxtTxYQ5vZsuQiR2j5quU3I0DM1OCulCPpyZ51cIPJf5kEgjI
-SHjOkOO0fv7WMnIge1vPPQHqy2rdQoARL+uuI4IrIfiMQ0HHOh7E500CQC1fTdit
-vRPnSUwVfccCgcB6XwB0FZM6TUCBDeMR1Oqr/m2g9J6eavaFWN5/3UHOxq4viVm6
-Tvqdry6pHLRtVCanHb4vFq7Gw20BXMiZIQbaJ93BndFB3F247p56pDGHuFqtsDCu
-P8kl/l7w1WHquVOlfLXDuudeayBRzQCERtPpl4HbM8RmY1p2jE/BgTiZ4vEtselV
-x9/MZRVSmZVYmHkdPLF4AGZrsPz71N5JhgKo8pDsHvvrsxBUauAsegVu6FVeG9EV
-ScCf6mzkKJWi9jECgcBRAUbub0Pr66mZ336AMULnssSX1F0lMcUu6akxnX5+n3zN
-lTFPFvT2z66CYRf/2B8rgdX7A38iySy1DzfjoBztXejEKXceA0sMRn88mrO9tFxK
-2LtdK5viIw4yZEypqXTzTp8rqvcQ0PGnlOCU8PnVeuhvH/IhSdqUvHLZwrKMsSy/
-udpQ0pstUAoo/+rWJIzjDNcF/asFX0j0AtP4AfTf23W9m8e2pp0SkaZ5VG13Me0F
-NaQ1TXiaoknMfg2YG4MCgcBNcn6QnttlGQShf1Ds9YAD1iLkTe0rYi7KSZ+Sh40T
-5Y5HPMniA/ufiMJsdWQ6rgtJ9yjFw7uC3RlwNIdfTTzS1CkawK47kVIfsZ9BDTtC
-uW2tBTm0aABUewNSmnrOxxAE12alD2gmmU1gz/c2FkZ21bLmcF+RjIzgJhyCD7rQ
-3CsN3IvSLLlup9ig2W7KpLJ/SzFXCF3Q62TprJuGF3Y/+Xu9kfVNGd4rSNZSo8NZ
-GAo61UauOk2kSB6B9crXzYo=
------END PRIVATE KEY-----

postfix/etc/ssl/private/zntrl.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

postfix/etc/ssl/usr-local-share-ca-certificates/kopano-ca.crt

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

postfix/etc/ssl/zntrl-full-chain.pem

@@ -0,0 +1,48 @@
+-----BEGIN CERTIFICATE-----
+MIID8zCCAtugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBiDESMBAGCgmSJomT8ixk
+ARkWAmRlMRMwEQYKCZImiZPyLGQBGRYDZHRzMSAwHgYDVQQKDBdEaWdpdGFsIFRy
+dXN0IFNvbHV0aW9uczEiMCAGA1UECwwZSW5mb3JtYXRpb24gU2VjdXJpdHkgVW5p
+dDEXMBUGA1UEAwwORFRTIFNpZ25pbmcgQ0EwHhcNMjMxMDI0MjA1MTEzWhcNMzMx
+MDIzMjA1MTEzWjCBiDESMBAGCgmSJomT8ixkARkWAmRlMRMwEQYKCZImiZPyLGQB
+GRYDZHRzMSAwHgYDVQQKDBdEaWdpdGFsIFRydXN0IFNvbHV0aW9uczEiMCAGA1UE
+CwwZSW5mb3JtYXRpb24gU2VjdXJpdHkgVW5pdDEXMBUGA1UEAwwORFRTIFNpZ25p
+bmcgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHI+5QRobGGxk
+FEBEY77e4ZnY5tYbrcSYHu6cXhIiQya/0Ed/Ea5DtmHfvW2dkZVSkmbRvlC5zwr2
+XZ0YwMgjNBaM3Zs4PhW4VABE5BQKwaW/BdMnFHn3TGEhKbdiplc7gROwq7TmpO9g
+BO9BdN6cGqy8QbwJVxhrPNKL9cEMem07RRj9+cMnWauhSTiyu6F+ASBY6iml5u7D
+b9162NyFoJFt9rhl5iEowo8deRGS2oe5gd3VsrsGviVWlcchwQKQRaO0jpV3Ds1w
+Yqo0cHVapWsSepKJ8A83FFhyY/hw2i7wgZjjNK6Dvp+zJUMJ4o+EkWGMyHk/O4b2
+N67AQeMlAgMBAAGjZjBkMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/
+AgEAMB0GA1UdDgQWBBTF6kCeOmUyXj+ru8Si4K69M48JOjAfBgNVHSMEGDAWgBTF
+6kCeOmUyXj+ru8Si4K69M48JOjANBgkqhkiG9w0BAQsFAAOCAQEAA0JrFlEKuFc/
+eCdZGwVN5Za4iZLBCc4Lz18yqeGfcDlCZ5zWo5/QoGbFnfJLFgp+R2wskdUMLRM5
+LCTsdd+0DUCuNkfYArDi7tTvkRKTYsSBZ7IRrPLzohB3Dm7N8npDJzJBo66lTIFJ
+0vkDKs/XM02KgxQFUtCIPZ+a7y8P/U4nPkoFXm1LUdIpiBbTlhi0P0CMf3Ip3vWg
+ufgqGvU8Nj24HQ2NXJ6JhLhEopj9wnJc71nYmGbtgzPM0Cco+v8PSKD+7CxhV+pE
+JsmNSXdIwGFQzG+Ml5yWPkF5Rxu++JeoZZfvlB9Dhi90pH/AFmDX4+8+c/38e1Pc
+JzT+f0FFqg==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

postfix/etc/ssl/zntrl.crt

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

postfix/scratchpad.sh

@@ -1,7 +1,11 @@
 #!/usr/bin/bash
 # export DOCKER_BUILDKIT=1
 # docker run -d --name apache -p80:80 -v/root/kopano/dist:/var/www httpd
-docker build -t postfix .
+rm -rf etc
+mkdir etc
+cp -r ~/kopano-docker/etc-zntrl/postfix etc
+cp -r ~/kopano-docker/etc-zntrl/ssl etc
+docker build -t baloan/postfix .
 docker run -d --name postfix -v/root/kopano/postfix/etc/postfix:/etc/postfix -p8025:25 postfix 
 docker logs -f postfix
 docker exec -it postfix sh

spampd/entrypoint.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env sh
 set -e
+# https://github.com/moby/moby/issues/31243
+chmod o+w /dev/stdout
 /usr/sbin/rsyslogd
-su spamd -c "sa-update --gpghomedir /var/lib/spamassassin/sa-update-keys"
+# su spamd -c "sa-update --gpghomedir /var/lib/spamassassin/sa-update-keys"
 exec "$@"

spampd/scratchpad.sh

@@ -4,6 +4,7 @@
 docker rm spampd
 docker build -t spampd .
 docker run -it --rm --name spampd spampd
+docker run --rm --name spampd spampd
 docker logs -f spampd
 docker exec -it spampd sh
 

ssl/create-postfix-certs

@@ -7,7 +7,8 @@ pushd certs
 # https://www.postfix.org/postconf.5.html#relay_clientcerts
 openssl x509 -in $CN.crt -noout -pubkey | openssl pkey -pubin -outform DER | openssl dgst -md5 -c | ( read D FP; echo $FP $CN ) >>relay_clientcerts
 cp $CN.key ~/kopano-docker/etc-$CN/ssl/private
+cat $CN.key $CN.crt kopano-ca.crt >~/kopano-docker/etc-$CN/ssl/private/$CN-key-certs.pem
 # https://ubuntu.com/server/docs/security-trust-store
 cp kopano-ca.crt ~/kopano-docker/etc-$CN/ssl/usr-local-share-ca-certificates
-cat kopano-ca.crt $CN.crt >~/kopano-docker/etc-$CN/ssl/$CN-full-chain.pem
+cat kopano-ca.crt $CN.crt >~/kopano-docker/etc-$CN/ssl/$CN-cert-chain.pem
 popd