Improve config to prepare for mail server

This commit is contained in:
Jade Ellis
2024-10-20 18:03:34 +01:00
parent 1f9584ca11
commit 8f6420e2d0
8 changed files with 57 additions and 8 deletions
@@ -3,6 +3,7 @@
[Unit]
Description=Conduwuit testing (matrix)
Wants=network-online.target
Wants=traefik.service
After=network-online.target
Documentation=https://conduwuit.puppyirl.gay/
+1
View File
@@ -3,6 +3,7 @@
[Unit]
Description=Conduwuit (matrix)
Wants=network-online.target
Wants=traefik.service
After=network-online.target
Documentation=https://conduwuit.puppyirl.gay/
+1
View File
@@ -4,6 +4,7 @@
Description=Maubot
Wants=network-online.target
After=network-online.target
After=conduwuit.service
Documentation=https://docs.mau.fi/maubot/index.html
[Container]
@@ -0,0 +1,19 @@
[Unit]
Description=traefik cert dumper
After=traefik.service
[Container]
ContainerName=traefik-cert-dumper
NoNewPrivileges=true
Image=ghcr.io/kereis/traefik-certs-dumper:latest
Volume=/etc/localtime:/etc/localtime:ro
Volume=/var/srv/traefik:/traefik:ro
Volume=traefik-certs.volume:/output
# AutoUpdate=registry
[Service]
Restart=unless-stopped
[Install]
WantedBy=default.target
+1
View File
@@ -0,0 +1 @@
[Volume]
+25 -1
View File
@@ -12,6 +12,12 @@ ContainerName=traefik
PodmanArgs=--privileged
NoNewPrivileges=true
Image=docker.io/library/traefik:3.0
# Static IPs assigned for proxy-protocol trust
IP=10.89.0.21
IP6=fd76:6f6d:f45e:ea1a::15
# HTTP(S)
PublishPort=0.0.0.0:80:80/tcp
PublishPort=0.0.0.0:443:443/tcp
PublishPort=0.0.0.0:443:443/udp
@@ -26,9 +32,27 @@ PublishPort=0.0.0.0:8448:8448/udp
PublishPort=[::]:8448:8448/tcp
PublishPort=[::]:8448:8448/udp
# PublishPort=8448:8448/tcp
# SMTP
PublishPort=0.0.0.0:25:25/tcp
PublishPort=0.0.0.0:25:25/udp
PublishPort=[::]:25:25/tcp
PublishPort=[::]:25:25/udp
# SMTPS
PublishPort=0.0.0.0:465:465/tcp
PublishPort=0.0.0.0:465:465/udp
PublishPort=[::]:465:465/tcp
PublishPort=[::]:465:465/udp
# IMAPS
PublishPort=0.0.0.0:465:465/tcp
PublishPort=0.0.0.0:465:465/udp
PublishPort=[::]:465:465/tcp
PublishPort=[::]:465:465/udp
ReadOnly=true
Volume=/run/podman/podman.sock:/var/run/docker.sock:z
Volume=/etc/localtime:/etc/localtime:ro
Volume=/var/srv/traefik:/certificates:z
Volume=/etc/traefik:/etc/traefik:ro,z
Volume=kanidm-certs.volume:/kanidm_certs:ro,z