added snappymail

docker-compose.yaml

@@ -18,6 +18,7 @@ include:
   - ./nextcloud/docker-compose.yaml
   - ./audiobookshelf/docker-compose.yaml
   - ./dovecot/docker-compose.yaml
+  - ./snappymail/docker-compose.yaml
 #  - ./filebrowser/docker-compose.yaml
 #  - ./utility/docker-compose.yaml
 #./collabora

dockerdeploy.sh

@@ -55,6 +55,8 @@ sudo docker volume create audiobookshelf_config
 sudo docker volume create audiobookshelf_metadata
 sudo docker volume create havenuser_audiobooks
 sudo docker volume create havenuser_podcasts
+sudo docker volume create snappymail_mysql
+sudo docker volume create snappymail_data
 
 
 sudo docker network create haven_internal

homepage/services.yaml

@@ -3,6 +3,10 @@
 # https://gethomepage.dev/configs/services/
 
 - Communication:
+    - SnappyMail:
+        href: https://snappymail.hvn.nz/
+        siteMonitor: http://snappymail:8888/
+        description: Snappymail Email Client
     - Ollama AI:
         href: https://ollama.hvn.nz/
         siteMonitor: http://ollama:8181/

nginx/haven.conf

@@ -392,6 +392,39 @@ server {
         proxy_redirect          http:// https://;
    }
 }
+server {
+   listen 443 ssl;
+   server_name snappymail.hvn.nz;
+   access_log  /var/log/nginx/snappymail.access.log  haven-debug;
+   error_log   /var/log/nginx/snappymail.error.log  notice;
+
+   # client certificate
+   ssl_client_certificate /step-ca_data/certs/ca-chain.crt;
+   # make verification optional, so we can display a 403 message to those
+   # who fail authentication
+   # changed to on for troubleshooting
+   ssl_verify_client on;
+
+   location / {
+      # if the client-side certificate failed to authenticate, show a 403
+      # message to the client
+      # if ($ssl_client_verify != SUCCESS) {
+      #    return 403;
+      # }
+        proxy_pass http://snappymail:8888;
+
+        proxy_set_header        Host $host;
+        proxy_set_header        X-Real-IP $remote_addr;
+        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header        X-Forwarded-Proto $scheme;
+        proxy_set_header        Upgrade $http_upgrade;
+        proxy_set_header        Connection "upgrade";
+
+        proxy_http_version      1.1;
+
+        proxy_redirect          http:// https://;
+   }
+}
 # server {
 #    listen 443 ssl;
 #    server_name auth.hvn.nz;

redeploydocker.sh

@@ -39,6 +39,8 @@ sudo docker volume remove audiobookshelf_config
 sudo docker volume remove audiobookshelf_metadata
 sudo docker volume remove havenuser_audiobooks
 sudo docker volume remove havenuser_podcasts
+sudo docker volume remove snappymail_mysql
+sudo docker volume remove snappymail_data
 sudo docker volume create jellyfin_config
 sudo docker volume create jellyfin_cache
 sudo docker volume create havenuser_movies
@@ -58,6 +60,8 @@ sudo docker volume create audiobookshelf_config
 sudo docker volume create audiobookshelf_metadata
 sudo docker volume create havenuser_audiobooks
 sudo docker volume create havenuser_podcasts
+sudo docker volume create snappymail_mysql
+sudo docker volume create snappymail_data
 
 #sudo docker volume ls -q | xargs sudo docker volume rm
 sudo docker volume remove nginx_data

snappymail/docker-compose.yaml

@@ -0,0 +1,54 @@
+version: '2'
+services:
+  snappymail:
+    image: djmaze/snappymail:latest
+    ports:
+      - 8878:8888
+    # environment:
+    #   - DEBUG=true
+    volumes:
+      - snappymail_data:/var/lib/snappymail
+    networks:
+      - haven_internal
+    restart: unless-stopped
+
+  # This provides prometheus metrics for snappymail's php-fpm
+  # php-fpm-exporter:
+  #   image: hipages/php-fpm_exporter:2.2.0
+  #   ports:
+  #     - 9253:9253
+  #   environment:
+  #     - PHP_FPM_SCRAPE_URI=tcp://snappymail:9000/status
+  #   networks:
+  #     - default
+
+  snappymail_mysql:
+    image: mariadb:10
+    environment:
+      - MYSQL_ROOT_PASSWORD=Swissbank01
+      - MYSQL_USER=snappymail
+      - MYSQL_PASSWORD=Swissbank01
+      - MYSQL_DATABASE=snappymail
+    volumes:
+      - snappymail_mysql:/var/lib/mysql
+    networks:
+      - haven_internal
+    restart: unless-stopped
+
+  snappymail_redis:
+    image: redis:7-alpine
+    networks:
+      - haven_internal
+    restart: unless-stopped
+
+networks:
+    haven_internal:
+        name: haven_internal
+        external: true
+volumes:
+    snappymail_mysql:
+        name: snappymail_mysql
+        external: true
+    snappymail_data:
+        name: snappymail_data
+        external: true