| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566 |
- # https://hub.docker.com/r/morrisjobke/webdav/
- docker logs -f $(docker ps -f name=mailserver_mailserver -q)
- docker exec -ti $(docker ps -f name=mailserver_mailserver -q) bash
- ## ---------- meiliserverite sertifikaatide lugemine acme.json failist ------------
- # Python skripti kataloog
- app_dir=/opt/containers/programming/python/myapp
- # Meiliserverite list
- DOMAINS=(mail.iupe13.ee mail.mudija.com mail.odamus.com \
- myface.ph)
- DOMAINS=(mail.myface.ph mail.odamus.com)
- DOMAINS=(mail.odamus.com)
- # Meiliserveri jaoks vajalike sertifikaatide lugemine
- for DOMAIN in ${DOMAINS[*]}
- do
- echo "Renewing domains "$DOMAIN" certificate ..."
- docker run -it --rm --name my-running-script \
- -v ${app_dir}:/usr/src/myapp \
- -v traefik_certs:/srv \
- -w /usr/src/myapp \
- python:3 python acme-cert-dump.py \
- /srv/acme.json $DOMAIN /srv/owngenerated/$DOMAIN
- done;
- ## ---------- Kontrolli DNS kirjete seadistusi -------------
- mail.odamus.com. 3600 IN A 167.99.187.23
- odamus.com. 14400 IN MX 10 mail.odamus.com.
- _dmarc.odamus.com. 3600 IN TXT "v=DMARC1; p=reject; rua=mailto:postmaster@odamus.com; ruf=mailto:admin@odamus.com; fo=0; adkim=s; aspf=s; pct=100; rf=afrf; sp=rejectv=DMARC1; p=none; rua=mailto:postmaster@odamus.com"
- mail._domainkey.odamus.com. 3600 IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD5kplXRs5GNABs3WrgmvNetwAj8DPhJm1882Nqf5yOiJXEHmL6616VER9qTfvZsZtvmgVjNBR/x4Bqx6wU5XRFzGSlB+l/ifeAzfs8AdI0DU/QyLY9QwvJp2r+YhC0e+GcaOITyFnlJSVSufr7HsRtYUTCwY8Qv3sFRmfr0985+wIDAQAB"
- odamus.com. 3600 IN TXT "v=spf1 a mx ip4:128.199.55.31 ip4:128.199.55.31 ~all"
- # NB! DKIM p väärtuse leiad:
- cat /var/lib/docker/volumes/mailserver_mail/_data/dkim/odamus.com/public.key
- # Eelnevalt pead olema domeeni lisanud mailserveri docker-compose faili.
- v=DMARC1; p=none; rua=mailto:postmaster@odamus.com
- ## ----------- teiste domeeni hoidjate alamdomeenidele sertifikaatide genereerimine -----------
- # Dynamic configuration
- # Ardo
- tls:
- certificates:
- - certFile: /letsencrypt/owngenerated/mustikas.maastikuarhitekt.ee/mustikas.maastikuarhitekt.ee.cer
- keyFile: /letsencrypt/owngenerated/mustikas.maastikuarhitekt.ee/mustikas.maastikuarhitekt.ee.key
- #### !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
- ## See töötab
- ## Vaata abiks: https://github.com/acmesh-official/acme.sh
- ## Loo saidi juurkataloogi alamkataloogid
- # mkdir -p /var/lib/docker/volumes/drupal_mustikas-1-html/_data/.well-known/acme-challenge
- # acme.sh --issue -d mustikas.maastikuarhitekt.ee -w /var/lib/docker/volumes/drupal_mustikas-1-html/_data
- # cp -R /root/.acme.sh/mustikas.maastikuarhitekt.ee/* /var/lib/docker/volumes/traefik_certs/_data/owngenerated/mustikas.maastikuarhitekt.ee/
- # taaskäivita traefik ja vaata, et see fail on kah õiges kohas.
- ## Sertifikaatide värskendamine
- # toimub automaatselt iga 60 päeva järele.
|
