Fixes #1875 - Add Nginx SMTP dummy

Author: bwbroersma

docker/batch-test.env

@@ -81,6 +81,8 @@ WEBSERVER_PORT=80
 WEBSERVER_PORT_TLS=443
 WEBSERVER_PORT_IPV6=8080
 WEBSERVER_PORT_IPV6_TLS=4443
+SMTPSERVER_PORT=25
+SMTPSERVER_PORT_IPV6=2525
 UNBOUND_PORT_TCP=53/tcp
 UNBOUND_PORT_UDP=53/udp
 # use fake port numbers here so we don't end up with duplicates in the compose file which causes an error

docker/build.env

@@ -8,6 +8,8 @@ COMPOSE_PROFILES=monitoring,routinator,run-tests
 # don't expose HTTP(S) and DNS ports to the outside, this also causes issues due to being privileged ports
 WEBSERVER_PORT=80
 WEBSERVER_PORT_TLS=443
+SMTPSERVER_PORT=25
+SMTPSERVER_PORT_IPV6=2525
 UNBOUND_PORT_TCP=53/tcp
 UNBOUND_PORT_UDP=53/udp
 # use fake port numbers here so we don't end up with duplicates in the compose file which causes an error

docker/compose.yaml

@@ -27,6 +27,8 @@ services:
       - $WEBSERVER_PORT_IPV6/tcp
       - $WEBSERVER_PORT_IPV6_TLS/tcp
       - $WEBSERVER_PORT_IPV6_TLS/udp
+      - $SMTPSERVER_PORT
+      - $SMTPSERVER_PORT_IPV6
 
     environment:
       - INTERNETNL_DOMAINNAME

docker/defaults.env

@@ -172,6 +172,8 @@ WEBSERVER_PORT=0.0.0.0:80:80
 WEBSERVER_PORT_TLS=0.0.0.0:443:443
 WEBSERVER_PORT_IPV6=::0:80:80
 WEBSERVER_PORT_IPV6_TLS=::0:443:443
+SMTPSERVER_PORT=0.0.0.0:25:25
+SMTPSERVER_PORT_IPV6=::0:25:25
 UNBOUND_PORT_TCP=0.0.0.0:53:53/tcp
 UNBOUND_PORT_UDP=0.0.0.0:53:53/udp
 UNBOUND_PORT_IPV6_TCP=::0:53:53/tcp

docker/develop.env

@@ -49,6 +49,8 @@ WEBSERVER_PORT=80
 WEBSERVER_PORT_TLS=443
 WEBSERVER_PORT_IPV6=8080
 WEBSERVER_PORT_IPV6_TLS=4443
+SMTPSERVER_PORT=25
+SMTPSERVER_PORT_IPV6=2525
 UNBOUND_PORT_TCP=53/tcp
 UNBOUND_PORT_UDP=53/udp
 # use fake port numbers here so we don't end up with duplicates in the compose file which causes an error

docker/host-multi-dist.env

@@ -35,6 +35,9 @@ WEBSERVER_PORT_TLS=$IPV4_IP_PUBLIC:443:443
 WEBSERVER_PORT_IPV6=$IPV6_IP_PUBLIC:80:80
 WEBSERVER_PORT_IPV6_TLS=[$IPV6_IP_PUBLIC]:443:443
 
+SMTPSERVER_PORT=$IPV4_IP_PUBLIC:25:25
+SMTPSERVER_PORT_IPV6=[$IPV6_IP_PUBLIC]:25:25
+
 IPV4_SUBNET_PUBLIC=$IPV4_SUBNET_PUBLIC
 IPV4_SUBNET_INTERNAL=$IPV4_SUBNET_INTERNAL
 

docker/test.env

@@ -80,6 +80,8 @@ WEBSERVER_PORT=80
 WEBSERVER_PORT_TLS=443
 WEBSERVER_PORT_IPV6=8080
 WEBSERVER_PORT_IPV6_TLS=4443
+SMTPSERVER_PORT=25
+SMTPSERVER_PORT_IPV6=2525
 UNBOUND_PORT_TCP=53/tcp
 UNBOUND_PORT_UDP=53/udp
 # use fake port numbers here so we don't end up with duplicates in the compose file which causes an error

docker/webserver.Dockerfile

@@ -20,6 +20,7 @@ RUN mkdir -p /etc/nginx/htpasswd/
 RUN touch /etc/nginx/htpasswd/monitoring.htpasswd
 
 COPY docker/webserver/10-variables.envsh /docker-entrypoint.d/
+COPY docker/webserver/40-add-mail-include.sh /docker-entrypoint.d/
 COPY docker/webserver/tls_init.sh /docker-entrypoint.d/
 COPY docker/webserver/authentication.sh /docker-entrypoint.d/
 COPY docker/webserver/generate_quic_host_key.sh /docker-entrypoint.d/

docker/webserver/40-add-mail-include.sh

@@ -0,0 +1,11 @@
+#!/bin/sh
+
+set -eu
+
+LC_ALL=C
+ME=$(basename "$0")
+PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+touch /etc/nginx/nginx.conf 2>/dev/null || { echo >&2 "$ME: error: can not modify /etc/nginx/nginx.conf (read-only file system?)"; exit 0; }
+
+sed -i -r -z 's@(\}\n)$@\1# Added by '"$ME"' on '"$(date)"'\nmail {\n    include conf.d/*.mail-conf;\n}\n@' /etc/nginx/nginx.conf

docker/webserver/nginx_templates/smtp.mail-conf.template

@@ -0,0 +1,16 @@
+server_name ${SMTP_EHLO_DOMAIN};
+auth_http http://127.0.0.1:9090/;
+
+starttls only;
+
+include conf.d/letsencrypt.conf;
+
+ssl_protocols TLSv1.2 TLSv1.3;
+ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305;
+
+server {
+    listen        25;
+    listen   [::]:25;
+    protocol smtp;
+    smtp_capabilities "SIZE 1099511627776" ENHANCEDSTATUSCODES 8BITMIME DSN SMTPUTF8 REQUIRETLS;
+}