X-Git-Url: https://plomlompom.com/repos/?a=blobdiff_plain;f=buster%2Fsetup_scripts%2Fsetup_mail.sh;h=09ae762dda88f387f03080d7e2114f039b4244fa;hb=d9ca3676e409eb87156bfe1be3f34666830b077d;hp=925d433beb601a2d337be96c178b66fa67ae2ee8;hpb=1e122e234af3af5a644fa85c03690101618f5313;p=config diff --git a/buster/setup_scripts/setup_mail.sh b/buster/setup_scripts/setup_mail.sh index 925d433..09ae762 100755 --- a/buster/setup_scripts/setup_mail.sh +++ b/buster/setup_scripts/setup_mail.sh @@ -1,11 +1,12 @@ #!/bin/sh set -e -if [ "$#" -ne 1 ]; then - echo 'Need mail for letsencrypt.' +if [ "$#" -lt 1 ]; then + echo 'Need mail for letsencrypt (and optionally old server IP).' false fi mail="$1" +old_server="$2" config_tree_prefix="${HOME}/config/buster" echo "postfix postfix/main_mailer_type string 'Internet Site'" | debconf-set-selections @@ -13,9 +14,10 @@ echo "postfix postfix/mailname string $(hostname -f)" | debconf-set-selections ./install_for_target.sh mail ./copy_dirtree.sh "${config_tree_prefix}/etc_files" "" mail nft -f /etc/nftables.conf +newaliases cat "${config_tree_prefix}/other_files/append_postfix_main.cf" >> /etc/postfix/main.cf -cat "${config_tree_prefix}/other_files/append_postfix_master.cf" >> /etc/postfix/main.cf +cat "${config_tree_prefix}/other_files/append_postfix_master.cf" >> /etc/postfix/master.cf cat "${config_tree_prefix}/other_files/append_opendkim.conf" >> /etc/opendkim.conf # Set up letsencrypt certificate. We need this for STARTTLS on port @@ -37,6 +39,14 @@ sed -i "s/REPLACE_selector_ECALPER/${selector}/g" /etc/opendkim.conf cp "${config_tree_prefix}/other_files/dovecot.sieve" /home/plom/.dovecot.sieve chown plom:plom /home/plom/.dovecot.sieve +cp "${config_tree_prefix}/other_files/fetchmailrc" /home/plom/.fetchmailrc +chown plom:plom /home/plom/.fetchmailrc +chmod 0700 /home/plom/.fetchmailrc +cp "${config_tree_prefix}/other_files/pingmailrc" /home/plom/.pingmailrc +chown plom:plom /home/plom/.pingmailrc +su -lc "cd && git clone https://plomlompom.com/repos/clone/pingmail" plom +systemctl daemon-reload + # To allow IMAPS access. echo "ssl_cert = /etc/dovecot/conf.d/99-ssl-certs.conf echo "ssl_key = > /etc/dovecot/conf.d/99-ssl-certs.conf @@ -44,6 +54,26 @@ password=$(pwgen -s 100 1) #echo 'mail_privileged_group = mail' >> /etc/dovecot/conf.d/99-mail.conf echo "plom:${password}" | chpasswd +# Get old mail data, shutdown old postfix server. +if [ "${old_server}" != "" ]; then + cp "${config_tree_prefix}/setup_scripts/prepare_to_meet_server.sh" /home/plom/ + #chown plom:plom /home/plom/prepare_to_meet_server.sh + su -lc "./prepare_to_meet_server.sh ${old_server}" plom + read -p'Hit Enter when you are done.' ignore + rm /home/plom/prepare_to_meet_server.sh + su -lc "scp plom@${old_server}:.dovecot.sieve ~" plom + su -lc "scp plom@${old_server}:.fetchmailrc ~" plom + su -lc "scp plom@${old_server}:.pingmailrc ~" plom + su -lc "ssh plom@${old_server} \"su -lc 'service postfix stop'\"" plom + cp "${config_tree_prefix}/setup_scripts/mirror_dir.sh" /home/plom/ + su -lc "./mirror_dir.sh ${old_server} /home/plom/mail" plom + rm /home/plom/mirror_dir.sh + touch /var/mail/plom + chown plom:mail /var/mail/plom + chmod 0600 /var/mail/plom + su -lc "scp plom@${old_server}:/var/mail/plom /var/mail/plom" plom +fi + service opendkim restart service postfix restart service dovecot restart @@ -52,7 +82,7 @@ echo "To put into DNS:" cat "/etc/dkimkeys/${selector}.txt" echo "If subdomain, append .subdomain to _domainkeys!" echo "Also ensure DMARC record of 'v=DMARC1; p=none; rua=mailto:plom+dmarc@plomlompom.com;' as TXT entry at _dmarc or, if subdomain, _dmarc.subdomain" -echo "Also ensure SPF record of 'v=spf1 mx -all' at @ or subdomain" +echo "Also ensure SPF record of 'v=spf1 mx -all' as TXT entry at @ or subdomain" echo "Also ensure reverse DNS lookup for our IP points to $(hostname -f)" echo "Also ensure MX record of priority 10 for @ or subdomain pointing to $(hostname -f)" echo "IMAPS password for user plom is: ${password}"