services:
  mailserver:
    image: mailserver/docker-mailserver:latest
    container_name: mailserver
    hostname: mail.crabs-games.art
    ports:
      - "25:25"      # SMTP
      - "465:465"    # SMTPS
      - "587:587"    # SMTP с STARTTLS
      - "993:993"    # IMAPS
    environment:
      - SSL_TYPE=manual
      - SSL_DOMAIN=mail.crabs-games.art
      - SSL_CERT_PATH=/etc/letsencrypt/mail.crabs-games.art.crt
      - SSL_KEY_PATH=/etc/letsencrypt/mail.crabs-games.art.key
      - PERMIT_DOCKER=host # Необходимо для работы с прокси в той же сети
      - POSTMASTER_ADDRESS=admin@crabs-games.art
      - ENABLE_SPAMASSASSIN=1
      - ENABLE_CLAMAV=1
      - ENABLE_FAIL2BAN=1
      - POSTFIX_INET_PROTOCOLS=ipv4
      - POSTFIX_MASTER_CF_INET=172.26.0.5:25 inet n - n - - smtpd -o smtpd_upstream_proxy_protocol=haproxy
      - POSTFIX_MASTER_CF_SUBMISSION=172.26.0.5:587 inet n - n - - smtpd -o smtpd_upstream_proxy_protocol=haproxy -o smtpd_tls_security_level=may
    volumes:
      - mail-data:/var/mail
      - mail-state:/var/mail-state
      - mail-logs:/var/log/mail
      - /Users/vladimir/reproxy/var/ssl/certificates/acme-v02.api.letsencrypt.org-directory/mail.crabs-games.art:/etc/letsencrypt
    restart: always
    networks:
      - crabs-network
    labels:
      - reproxy.enabled=true
      - reproxy.server=mailserver
      - reproxy.tcp.25=:25,proto=haproxy
      - reproxy.tcp.465=:465,proto=haproxy
      - reproxy.tcp.587=:587,proto=haproxy
      - reproxy.tcp.993=:993,proto=haproxy

networks:
  crabs-network:
    name: crabs-network
    external: true

volumes:
  mail-data:
  mail-state:
  mail-logs: