「Google社・米国Yahoo社が2024年2月よりメール受信の厳格化」に対応するためのまとめ 【SPF、DKIM、DMARC、ARC、SRS全対応】 Poftfix

sudo yum -y install epel-release
sudo yum -y install https://rpms.remirepo.net/enterprise/remi-release-9.2.rpm

dnf config-manager --set-enabled crb

dnf repolist --all | grep crb
crb                           AlmaLinux 9 - CRB                         enabled
crb-debuginfo                 AlmaLinux 9 - CRB - Debug                 disabled
crb-source                    AlmaLinux 9 - CRB - Source                disabled

sudo yum -y install wget unzip php-mbstring
sudo yum -y install postfix-pcre

sudo yum -y install cpan
sudo yum -y install mariadb-devel

sudo cpan Switch
sudo cpan JSON
sudo cpan -T DBD::mysql
sudo cpan HTTP::Request

sudo dnf install -y bind-utils

sudo systemctl start firewalld
sudo systemctl enable firewalld

sudo firewall-cmd --add-service=pop3s --permanent
sudo firewall-cmd --add-service=imaps --permanent
sudo firewall-cmd --add-service=smtp --permanent
sudo firewall-cmd --add-service=smtps --permanent
sudo firewall-cmd --permanent --add-port=587/tcp

sudo firewall-cmd --reload

sudo yum -y update

sudo hostnamectl set-hostname sv1.blue.int-design.jp

sudo yum -y install cyrus-sasl cyrus-sasl-plain cyrus-sasl-md5

sudo systemctl enable saslauthd
sudo systemctl start saslauthd

sudo yum -y install postfix
sudo yum -y install postfix-mysql

sudo systemctl enable postfix
sudo systemctl start postfix

sudo yum -y install dovecot dovecot-mysql
sudo yum -y install dovecot-pigeonhole

sudo systemctl enable dovecot

## 設定が完了してから起動します。
# /run/dovecot/stats-writer の ownerに影響がでるため
#sudo systemctl start dovecot

sudo yum -y install opendkim opendkim-tools

sudo systemctl enable opendkim
sudo systemctl start opendkim

sudo yum -y installopendkim opendkim-tools
Last metadata expiration check: 0:16:00 ago on Mon 18 Dec 2023 06:43:26 PM JST.
Error: 
 Problem 1: conflicting requests
  - nothing provides libmilter.so.1.0()(64bit) needed by opendkim-2.11.0-0.36.el9.x86_64 from epel
  - nothing provides libmemcached.so.11()(64bit) needed by opendkim-2.11.0-0.36.el9.x86_64 from epel
 Problem 2: conflicting requests
  - nothing provides libmemcached.so.11()(64bit) needed by opendkim-tools-2.11.0-0.36.el9.x86_64 from epel
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

sudo yum -y install postsrsd

sudo systemctl enable postsrsd
sudo systemctl start postsrsd

sudo yum -y install openarc 

sudo systemctl enable openarc
sudo systemctl start openarc

sudo yum　-y install opendmarc

sudo systemctl enable opendmarc
sudo systemctl start opendmarc

mysql -u root -p

CREATE DATABASE opendmarc;
GRANT ALL ON opendmarc.* TO 'opendmarc'@'localhost' IDENTIFIED BY 'ここにパスワード';
FLUSH PRIVILEGES;

mysql -u opendmarc -p opendmarc < /usr/share/opendmarc/db/schema.mysql
Enter password: 
ERROR 1067 (42000) at line 58: Invalid default value for 'lastsent'

sudo vi /usr/share/opendmarc/db/schema.mysql

-- A table for logging reporting requests
CREATE TABLE IF NOT EXISTS requests (
        id INT NOT NULL AUTO_INCREMENT,
        domain INT NOT NULL,
        repuri VARCHAR(255) NOT NULL DEFAULT '',
        adkim TINYINT NOT NULL DEFAULT '0',
        aspf TINYINT NOT NULL DEFAULT '0',
        policy TINYINT NOT NULL DEFAULT '0',
        spolicy TINYINT NOT NULL DEFAULT '0',
        pct TINYINT NOT NULL DEFAULT '0',
        locked TINYINT NOT NULL DEFAULT '0',
        firstseen TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
        lastsent DATETIME NOT NULL DEFAULT '1970-01-01 00:00:00',

        PRIMARY KEY(id),
        KEY(lastsent),
        UNIQUE KEY(domain)
);

mysql -u opendmarc -p opendmarc < /usr/share/opendmarc/db/schema.mysql

sudo vi /etc/opendmarc.conf

AuthservID blue.int-design.jp
PidFile /var/run/opendmarc/opendmarc.pid

Syslog true
TrustedAuthservIDs blue.int-design.jp
UMask 0002

UserID opendmarc:opendmarc

#IgnoreHosts /etc/opendmarc/ignore.hosts
HistoryFile /var/run/opendmarc/opendmarc.dat

Socket inet:8893@localhost
SoftwareHeader true

# systemctl status opendmarc.service 
● opendmarc.service - Domain-based Message Authentication, Reporting & Conformance (DMARC) Milter
     Loaded: loaded (/usr/lib/systemd/system/opendmarc.service; enabled; preset: disabled)
     Active: active (running) since Mon 2023-12-18 23:20:22 JST; 7s ago
       Docs: man:opendmarc(8)
             man:opendmarc.conf(5)
             man:opendmarc-import(8)
             man:opendmarc-reports(8)
             http://www.trusteddomain.org/opendmarc/
   Main PID: 122599 (opendmarc)
      Tasks: 3 (limit: 11135)
     Memory: 2.5M
        CPU: 4ms
     CGroup: /system.slice/opendmarc.service
             └─122599 /usr/sbin/opendmarc -f -c /etc/opendmarc.conf

Dec 18 23:20:22 sv1.blue.int-design.jp systemd[1]: Started Domain-based Message Authentication, Reporting & Conformance (DMARC) Milter.
Dec 18 23:20:22 sv1.blue.int-design.jp opendmarc[122599]: OpenDMARC Filter v1.4.2 starting (args: -f -c /etc/opendmarc.conf)
Dec 18 23:20:22 sv1.blue.int-design.jp opendmarc[122599]: additional trusted authentication services: blue.int-design.jp

_dmarc.blue.int-design.jp.  IN TXT "v=DMARC1; p=none; rua=mailto:dmarc@blue.int-design.jp; ruf=mailto:dmarc@blue.int-design.jp; fo=1"

sudo vi /etc/opendkim.conf

Domain                  blue.int-design.jp

#Canonicalization       relaxed/relaxed
Canonicalization        relaxed/simple

ExternalIgnoreList      refile:/etc/opendkim/TrustedHosts
InternalHosts           refile:/etc/opendkim/TrustedHosts
KeyTable                refile:/etc/opendkim/KeyTable
SigningTable            refile:/etc/opendkim/SigningTable

#Mode                   v
Mode                    sv
PidFile                 /var/run/opendkim/opendkim.pid

Socket                  inet:8891@localhost

##コメントアウトOversignHeaders
#OversignHeaders        From
##追加
SignHeaders Date,From,To,Subject,Message-ID

# 転送メール目的 追加
On-BadSignature         accept
RemoveOldSignatures     no
#PreserveExistingSignature no

# systemctl status opendkim
● opendkim.service - DomainKeys Identified Mail (DKIM) Milter
     Loaded: loaded (/usr/lib/systemd/system/opendkim.service; enabled; preset: disabled)
     Active: active (running) since Mon 2023-12-18 23:19:34 JST; 1min 48s ago
       Docs: man:opendkim(8)
             man:opendkim.conf(5)
             man:opendkim-genkey(8)
             man:opendkim-genzone(8)
             man:opendkim-testadsp(8)
             man:opendkim-testkey
             http://www.opendkim.org/docs.html
   Main PID: 122499 (opendkim)
      Tasks: 3 (limit: 11135)
     Memory: 1.5M
        CPU: 8ms
     CGroup: /system.slice/opendkim.service
             └─122499 /usr/sbin/opendkim -f -x /etc/opendkim.conf

Dec 18 23:19:34 sv1.blue.int-design.jp systemd[1]: Started DomainKeys Identified Mail (DKIM) Milter.
Dec 18 23:19:34 sv1.blue.int-design.jp opendkim[122499]: OpenDKIM Filter v2.11.0 starting (args: -f -x /etc/opendkim.conf)

sudo mkdir /etc/opendkim
sudo chown opendkim:opendkim /etc/opendkim

sudo mkdir /etc/opendkim/keys
sudo chown opendkim:opendkim /etc/opendkim/keys

sudo touch /etc/opendkim/SigningTable
sudo touch /etc/opendkim/KeyTable
sudo touch /etc/opendkim/TrustedHosts

sudo chown opendkim:opendkim /etc/opendkim/{KeyTable,SigningTable,TrustedHosts}

sudo vi /etc/opendkim/TrustedHosts

127.0.0.1
localhost
::1
*.blue.int-design.jp
*.red.int-design.jp
*.green.int-design.jp

## 転送メールに強制的に再署名を行う場合
## 強制再署名するには、更に　/etc/opendkim/SigningTable で ワイルドカードで特定の証明書にマッチさせる必要があります。
0.0.0.0/0

sudo -u opendkim mkdir -p /etc/opendkim/keys/<your_domain>

## 複数ドメインで Virtual運用する場合は、SNIで個別の証明書をを設定することもできます。
## 1つの証明書で全てのドメインを署名することもできます。
sudo -u opendkim mkdir -p /etc/opendkim/keys/blue.int-design.jp
sudo -u opendkim mkdir -p /etc/opendkim/keys/red.int-design.jp
sudo -u opendkim mkdir -p /etc/opendkim/keys/green.int-design.jp

sudo -u opendkim opendkim-genkey -b 2048 -d <your_domain> -D /etc/opendkim/keys/<your_domain> -s <selector> -v

## 複数ドメインで Virtual運用する場合は、SNIで個別の証明書をを設定することもできます。
## 1つの証明書で全てのドメインを署名することもできます。
sudo -u opendkim opendkim-genkey -b 2048 -d blue.int-design.jp -D /etc/opendkim/keys/blue.int-design.jp -s default -v
sudo -u opendkim opendkim-genkey -b 2048 -d red.int-design.jp -D /etc/opendkim/keys/red.int-design.jp -s default -v
sudo -u opendkim opendkim-genkey -b 2048 -d green.int-design.jp -D /etc/opendkim/keys/green.int-design.jp -s default -v

 ll /etc/opendkim/keys/blue.int-design.jp
total 8
-rw------- 1 opendkim opendkim 1704 Dec 18 23:54 default.private
-rw------- 1 opendkim opendkim  504 Dec 18 23:54 default.txt

<selector>._domainkey.<your_domain> <your_domain>:<selector>:/etc/opendkim/keys/<your_domain>/<selector>.private

sudo vi /etc/opendkim/KeyTable

<selector>._domainkey.<your_domain> <your_domain>:<selector>:/etc/opendkim/keys/<your_domain>/<selector>.private

default._domainkey.blue.int-design.jp blue.int-design.jp:default:/etc/opendkim/keys/blue.int-design.jp/default.private
default._domainkey.red.int-design.jp blue.int-design.jp:default:/etc/opendkim/keys/red.int-design.jp/default.private
default._domainkey.green.int-design.jp blue.int-design.jp:default:/etc/opendkim/keys/green.int-design.jp/default.private

sudo vi /etc/opendkim/SigningTable

*@<your_domain> <selector>._domainkey.<your_domain>

##自ドメインから送信するメールにだけ署名する場合
*@blue.int-design.jp default._domainkey.blue.int-design.jp
*@red.int-design.jp default._domainkey.red.int-design.jp
*@green.int-design.jp default._domainkey.green.int-design.jp

## 転送メールに再署名する場合はワイルドカードにする
* default._domainkey.blue.int-design.jp

sudo cat /etc/opendkim/keys/<your_domain>/<selector>.txt

sudo cat /etc/opendkim/keys/blue.int-design.jp/default.txt

default._domainkey      IN      TXT     "v=DKIM1; k=rsa;""p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GCczxhT+nmdkQcmyhnCF3aZzGBK4N9+Nmuqm5L3nllXSUwwZdHmPThsqiBujLKoiMSZzc""zdh4zvvgJxlm+Z/mqjr8AZ67RTaserdvUkaJDMlJFdJGJkhooAm+DrKPbCDHVf9exg/+JpmuLwLUOyKXRp2F74xL0XTl6glgBT""GuhPEwufLY/CMC+NVhQ0PguYAuOJJz8didQkWa15jpYWQjfUq5xrU7D9JLL3ElBQ+sQ9r+c1RxTqrmoXjjnkZFPvQKhR4qzzNf""7EAd/kZC73H36fQUS5wu1dDm1dt945J/0FiGf0EDbFzPD5U/VwgUFpzh8nwNkGQmJz9rClRUKgCQIDAQAB"

v=DKIM1; k=rsa; p=ASDF...(255文字)...ZXCV

"v=DKIM1; k=rsa; p=ASDF...(一部)..."
"...(残りの部分)...ZXCV"

sudo vi /etc/openarc.conf

PidFile /var/run/openarc/openarc.pid
Socket  inet:8892@localhost
Mode    sv

AuthservID blue.int-design.jp
Selector   default
Domain     blue.int-design.jp
KeyFile /etc/openarc/keys/blue.int-design.jp/default.private

SignHeaders to,subject,message-id,date,from,mime-version,dkim-signature
PeerList /etc/openarc/PeerList
MilterDebug 6
EnableCoredumps yes

mkdir /etc/ssl/private/
openssl genrsa -out /etc/ssl/private/arc.key.pem 2048

sudo cp -r /etc/opendkim/keys/ /etc/openarc
sudo chown -R openarc.openarc /etc/openarc/keys

<selector>._domainkey IN TXT "v=DKIM1; k=rsa; p=<your_public_key>"

default._domainkey IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybKP7Xq1j607g1y/8JJR+zIQqzYU5cGx0wguZJwk39JLjukFSlfY8Nsdj 37QDGtKz0HuWxPM3xauLfYEY0kJv0s0V3706y/1glvHcx5YnkRnDbktoYWmL+KGOvXsAPyduy/9mY8eT9incFsUgbYp8EFUArWrb0oubaMHOc6uEhU FW6XMinYZkRsKZpmLEl9" "y6elmu/8TJAGBzBAEBoMqJJcPajTUV6fiCcDwJ3c4J/g/yW4cCDRdfwTPWgWSGyW1uDxjzxSzkkKDP1GCMxvCn8OGwYArs+BufPIZfnhtHNHQ+VMeZyve0 o4N/BFzBx2javjDXM8jPqih1VK7l+CEfwIDAQAB"

sudo su -s /bin/bash openarc -c "openarc -n"

sudo su -s /bin/bash openarc -c "openarc -n"
openarc: /etc/openarc.conf: /etc/openarc/keys/blue.int-design.jp/default.private: open(): No such file or directory

systemctl status openarc
● openarc.service - Authenticated Receive Chain (ARC) Milter
     Loaded: loaded (/usr/lib/systemd/system/openarc.service; disabled; preset: disabled)
     Active: active (running) since Tue 2023-12-19 00:09:06 JST; 29s ago
       Docs: man:openarc(8)
             man:openarc.conf(5)
             http://www.trusteddomain.org/openarc/
    Process: 123136 ExecStartPost=/sbin/restorecon -r -F /run/openarc (code=exited, status=0/SUCCESS)
   Main PID: 123135 (openarc)
      Tasks: 3 (limit: 11135)
     Memory: 2.9M
        CPU: 13ms
     CGroup: /system.slice/openarc.service
             └─123135 /usr/sbin/openarc -f

Dec 19 00:09:06 sv1.blue.int-design.jp systemd[1]: Starting Authenticated Receive Chain (ARC) Milter...
Dec 19 00:09:06 sv1.blue.int-design.jp systemd[1]: Started Authenticated Receive Chain (ARC) Milter.
Dec 19 00:09:06 sv1.blue.int-design.jp openarc[123135]: OpenARC Filter: Opening listen socket on conn inet:8892@localhost
Dec 19 00:09:06 sv1.blue.int-design.jp openarc[123135]: OpenARC Filter v1.0.0 starting (args: -f

example.com. IN TXT "v=spf1 ip4:192.168.0.1 include:_spf.example.net -all"

example.com. IN TXT "v=spf1 ip4:192.168.0.0/24 ip6:2001:db8::/32 -all"

sudo vi /etc/default/postsrsd

SRS_DOMAIN=blue.int-design.jp

#VirtualDomain運用の場合、/etc/default/excluded_domainsに全てのドメインを追加
SRS_EXCLUDE_DOMAINS="$(cat /etc/default/excluded_domains)"

CHROOT=/var/spool/postsrsd

RUN_AS=postsrsd

SRS_SECRET_LENGTH=24

sudo vi /etc/default/excluded_domains

blue.int-design.jp

sudo groupadd -r postsrsd
sudo useradd -r -g postsrsd -d /var/spool/postsrsd -s /sbin/nologin postsrsd

sudo mkdir -p /var/spool/postsrsd
sudo chown -R postsrsd:postsrsd /var/spool/postsrsd
sudo chmod 0750 /var/spool/postsrsd

sudo groupadd -g 10000 mailuser
sudo useradd -u 10000 -g 10000 -d /home/mailuser -s /sbin/nologin mailuser

auth_debug_passwords = no
auth_verbose = no
auth_debug = no

listen = *

###from 10-auth.conf
#ここの環境にあわせて
disable_plaintext_auth = no
auth_mechanisms = CRAM-MD5 login plain
#auth_mechanisms = plain login

###from 10-mail.conf
mail_location = maildir:/home/mailuser/%d/%n/Maildir
#mail_location = maildir:~/Maildir

mail_uid = mailuser
mail_gid = mailuser
mail_privileged_group = mailuser
first_valid_uid = 10000
first_valid_gid = 10000
#mail_plugins=$mail_plugins quota imap_quota

###from 10-ssl.conf
ssl = yes
ssl_cert = </usr/local/ssl/example.net.fullchain
ssl_key = </usr/local/ssl/example.net.key
#ssl_ca = </usr/local/ssl/example.net.ca

#複数ドメイン対応する場合は列挙する
local_name example.com {
  ssl_cert = </usr/local/ssl/example.com.fullchain
  ssl_key = </usr/local/ssl/example.com.key
}

ssl_dh = </etc/dovecot/dh.pem
ssl_min_protocol = TLSv1.2
ssl_cipher_list = !SHA1:!SHA256:!SHA384:!SSLv3:!DSS:AESGCM+ECDHE:AESGCM+EDH
ssl_prefer_server_ciphers = yes

###from 10-master.conf
service imap-login {
  inet_listener imap {
    port = 143
  }
  inet_listener imaps {
    port = 993
    ssl = yes
  }
}
service pop3-login {
  inet_listener pop3 {
    port = 110
  }
  inet_listener pop3s {
    port = 995
    ssl = yes
  }
}
service lmtp {
  unix_listener /var/spool/postfix/private/dovecot-lmtp {
    mode = 0600
    group = postfix
    user = postfix
  }
}
service auth {
  unix_listener /var/spool/postfix/private/auth {
    mode = 0666
    user = postfix
    group = postfix
  }
#   unix_listener auth-userdb {
#     mode = 0600
#     user = mailuser
#     group = mailuser
#   }
  user = dovecot
}

service auth-worker {
  user = mailuser
}
#service managesieve-login {
#  inet_listener sieve {
#    port = 4190
#  }
#}

###from auth-sql.conf.ext
protocol imap {
 imap_client_workarounds = delay-newmail tb-extra-mailbox-sep
#  mail_plugins = $mail_plugins imap_quota
}
protocol pop3 {
  pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
}
passdb {
  driver = sql
  args = /etc/dovecot/dovecot-sql.conf.ext
}
userdb {
  driver = sql
  args = /etc/dovecot/dovecot-sql.conf.ext
}
service auth {
  unix_listener /var/spool/postfix/private/auth {
    mode = 0666
  }
}

###from 15-lda.conf
#protocol lda {
#  # Space separated list of plugins to load (default is global mail_plugins).
#  #mail_plugins = $mail_plugins
#  mail_plugins = $mail_plugins sieve
#}

###from 20-managesieve.conf
#protocol sieve {
#  protocols = $protocols sieve
#}

###from 20-lmtp.conf
protocol lmtp {
  mail_plugins = $mail_plugins sieve
}

###from 90-sieve.conf
#plugin {
#  sieve = /home/mailuser/%d/%n/.dovecot.sieve
#  sieve_dir = /home/mailuser/%d/%n/sieve
#  sieve_user_log = /home/mailuser/%d/%n/.dovecot.sieve.log
#}

sudo vi /etc/dovecot/dovecot.conf

protocols = imap lmtp pop3 sieve
listen = *

sudo vi /etc/dovecot/conf.d/10-mail.conf

mail_location = maildir:/home/mailuser/%d/%n/Maildir
#mail_location = maildir:~/Maildir

mail_uid = mailuser
mail_gid = mailuser
mail_privileged_group = mailuser
first_valid_uid = 10000
first_valid_gid = 10000
#mail_plugins=$mail_plugins quota imap_quota

sudo vi /etc/dovecot/conf.d/10-auth.conf

##どちらでもお好みで
##disable_plaintext_auth = yes
disable_plaintext_auth = no

auth_mechanisms = CRAM-MD5 login plain

#コメントアウト
#!include auth-system.conf.ext

#コメントアウト解除
!include auth-sql.conf.ext

sudo vi /etc/dovecot/conf.d/10-ssl.conf

#証明書を必須としない場合は
#ssl = required

ssl = yes
ssl_cert = </etc/letsencrypt/live/example.com/fullchain.pem
ssl_key = </etc/letsencrypt/live/example.com/privkey.pem
#ssl_ca = </etc/letsencrypt/live/example.com/chain.pem 

local_name mail.example.net {
  ssl_cert = </etc/letsencrypt/live/example.net/fullchain.pem
  ssl_key = </etc/letsencrypt/live/example.net/privkey.pem
}
local_name mail.xxxxxx.net {
  ssl_cert = </etc/letsencrypt/live/xxxxxx.net/fullchain.pem
  ssl_key = </etc/letsencrypt/live/xxxxxx.net/privkey.pem
}

#/etc/dovecot/dh.pemはこの後の手順により作成します。
ssl_dh = </etc/dovecot/dh.pem
ssl_min_protocol = TLSv1.2
ssl_cipher_list = !SHA1:!SHA256:!SHA384:!SSLv3:!DSS:AESGCM+ECDHE:AESGCM+EDH
ssl_prefer_server_ciphers = yes

sudo openssl dhparam -out /etc/dovecot/dh.pem 2048

##sudo chmod 600 /etc/dovecot/dh.pem
sudo chmod 644 /etc/dovecot/dh.pem
sudo chown root:root /etc/dovecot/dh.pem

sudo vi /etc/dovecot/conf.d/auth-sql.conf.ext

protocol imap {
 imap_client_workarounds = delay-newmail tb-extra-mailbox-sep
#  mail_plugins = $mail_plugins imap_quota
}
protocol pop3 {
  pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
}
passdb {
  driver = sql
  args = /etc/dovecot/dovecot-sql.conf.ext
}
userdb {
  driver = sql
  args = /etc/dovecot/dovecot-sql.conf.ext
}
service auth {
  unix_listener /var/spool/postfix/private/auth {
    mode = 0666
  }
}

sudo vi /etc/dovecot/dovecot.conf 

service stats {
  unix_listener stats-reader {
    group = apache
    mode = 0660
  }
  unix_listener stats-writer {
    group = apache
    mode = 0660
  }
}

sudo vi /etc/dovecot/dovecot-sql.conf.ext

driver = mysql
#パスワードを平文であえて保存したい場合はCRAM-MD5をPLAINにする
default_pass_scheme = CRAM-MD5
connect = host=/var/lib/mysql/mysql.sock dbname=postfix user=postfix password=ここにパスワード
password_query = SELECT username as user, password FROM mailbox WHERE username = '%u' AND active = '1'
user_query = SELECT concat('/home/mailuser/', maildir) as home, 10000 as uid, 10000 as gid FROM mailbox WHERE username = '%u' AND active = '1'
iterate_query = SELECT userid AS username, domain FROM users

sudo vi /etc/dovecot/conf.d/15-lda.conf

#protocol lda {
#  # Space separated list of plugins to load (default is global mail_plugins).
#  #mail_plugins = $mail_plugins
#  mail_plugins = $mail_plugins sieve
#}

sudo vi /etc/dovecot/conf.d/20-managesieve.conf

#protocol sieve {
#  protocols = $protocols sieve
#}

sudo vi /etc/dovecot/conf.d/20-lmtp.conf

protocol lmtp {
  mail_plugins = $mail_plugins sieve
}

sudo vi /etc/dovecot/conf.d/90-sieve.conf

#plugin {
#  sieve = /home/mailuser/%d/%n/.dovecot.sieve
#  sieve_dir = /home/mailuser/%d/%n/sieve
#  sieve_user_log = /home/mailuser/%d/%n/.dovecot.sieve.log
#}

sudo vi /etc/dovecot/conf.d/10-master.conf

service imap-login {
  inet_listener imap {
    port = 143
  }
  inet_listener imaps {
    port = 993
    ssl = yes
  }
}
service pop3-login {
  inet_listener pop3 {
    port = 110
  }
  inet_listener pop3s {
    port = 995
    ssl = yes
  }
}
service lmtp {
  unix_listener /var/spool/postfix/private/dovecot-lmtp {
    mode = 0600
    group = postfix
    user = postfix
  }
}
service auth {
  unix_listener /var/spool/postfix/private/auth {
    mode = 0666
    user = postfix
    group = postfix
  }
#   unix_listener auth-userdb {
#     mode = 0600
#     user = mailuser
#     group = mailuser
#   }
  user = dovecot
}
service auth-worker {
  user = mailuser
}

sudo systemctl restart dovecot
sudo systemctl enable dovecot

sudo vi /etc/dovecot/conf.d/10-logging.conf

#auth_debug_passwords = no
#auth_verbose = no
#auth_debug = no

auth_debug_passwords = yes
auth_verbose = yes
auth_debug = yes
log_path = /var/log/dovecot.log

grep -v "^#" /etc/postfix/main.cf

compatibility_level = 2
queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix

mail_owner = postfix

myhostname = sv1.blue.int-design.jp
mydomain = blue.int-design.jp
myorigin = $myhostname

inet_interfaces = all
inet_protocols = ipv4

mydestination = $myhostname, localhost.$mydomain, localhost

unknown_local_recipient_reject_code = 550

mynetworks = 127.0.0.0/8

alias_maps = hash:/etc/aliases,proxy:mysql:/etc/postfix/mysql_alias_maps.cf

alias_database = hash:/etc/aliases

home_mailbox = Maildir/
 
mailbox_command = /usr/libexec/dovecot/deliver
allow_mail_to_commands = alias,forward,include

debug_peer_level = 2

debugger_command =
	 PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
	 ddd $daemon_directory/$process_name $process_id & sleep 5

sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
setgid_group = postdrop
html_directory = no
manpage_directory = /usr/share/man
sample_directory = /usr/share/doc/postfix/samples
readme_directory = /usr/share/doc/postfix/README_FILES

## Let's Encryptの証明書を使用しています。
smtpd_tls_cert_file = /etc/letsencrypt/live/blue.int-design.jp/fullchain.pem
smtpd_tls_key_file = /etc/letsencrypt/live/blue.int-design.jp/privkey.pem
smtpd_tls_security_level = may
smtp_tls_CApath = /etc/pki/tls/certs
smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt

smtp_tls_security_level = may
meta_directory = /etc/postfix
shlib_directory = /usr/lib64/postfix

smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_local_domain = $mydomain
smtpd_client_restrictions = reject_rbl_client bl.spamcop.net,
        reject_rbl_client cbl.abuseat.org,
        reject_rbl_client truncate.gbudb.net,
        check_client_access hash:/etc/postfix/reject_client,
        permit
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes


tls_server_sni_maps=hash:/etc/postfix/tls_server_sni_maps
virtual_transport = lmtp:unix:private/dovecot-lmtp
virtual_mailbox_base = /home/mailuser
virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 10000
virtual_uid_maps = static:10000
virtual_gid_maps = static:10000
virtual_mailbox_limit = 0


smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_received_header = yes
smtpd_tls_loglevel = 0


milter_default_action = accept
milter_protocol = 6
smtpd_milters = inet:localhost:8891,inet:localhost:8892,inet:localhost:8893
non_smtpd_milters = inet:localhost:8891,inet:localhost:8892,inet:localhost:8893

recipient_canonical_maps = tcp:localhost:10002

header_checks=regexp:/etc/postfix/header_checks

sudo vi /etc/postfix/main.cf

## myhostname に設定するホスト名は Linux のホスト名に設定されているか確認してください。
## myhostnameとmydomainに同じものを設定しないようにします。
myhostname = sv1.blue.int-design.jp
mydomain = blue.int-design.jp
inet_interfaces = all
inet_protocols = ipv4
##mydestination = $myhostname, localhost.$mydomain, localhost
mydestination =
mynetworks = 127.0.0.0/8
home_mailbox = Maildir/

####mailbox_command = /usr/libexec/dovecot/deliver
## 追加
allow_mail_to_commands = alias,forward,include

# Let's Encrypt証明書などを指定する
##smtpd_tls_cert_file = /etc/letsencrypt/live/blue.int-design.jp/fullchain.pem
##smtpd_tls_key_file = /etc/letsencrypt/live/blue.int-design.jp/privkey.pem

smtpd_tls_cert_file = /etc/pki/tls/certs/blue.int-design.jp.crt
smtpd_tls_key_file = /etc/pki/tls/private/blue.int-design.jp.key

# 追加
#
### SMTP-Auth
#
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_local_domain = $mydomain
smtpd_client_restrictions = reject_rbl_client bl.spamcop.net,
        reject_rbl_client cbl.abuseat.org,
        reject_rbl_client truncate.gbudb.net,
        check_client_access hash:/etc/postfix/reject_client,
        permit
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes

#
### Virtual Domains
#
tls_server_sni_maps=hash:/etc/postfix/tls_server_sni_maps
##local_transport = virtual
##virtual_transport = virtual
virtual_transport = lmtp:unix:private/dovecot-lmtp
virtual_mailbox_base = /home/mailuser
virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
##virtual_alias_domains = $virtual_alias_maps
virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 10000
virtual_uid_maps = static:10000
virtual_gid_maps = static:10000
# Mailbox limit（クォーターの設定はなし）
##virtual_mailbox_limit = 0

#
### SSL/TLS Settings
#
smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_received_header = yes
smtpd_tls_loglevel = 0

#
# OpenDKIM:8891 & OpenARC:8892 & OpenDMARC:8893 
#
milter_default_action = accept
milter_protocol = 6
smtpd_milters = inet:localhost:8891,inet:localhost:8892,inet:localhost:8893
non_smtpd_milters = inet:localhost:8891,inet:localhost:8892,inet:localhost:8893

#
### SRS (Sender Rewriting Scheme)
# SRSを無効にする場合は、sender_canonical_mapsをコメントアウト
sender_canonical_maps = hash:/etc/postfix/canonical,tcp:localhost:10001
recipient_canonical_maps = tcp:localhost:10002

#
### その他
#
#disable_vrfy_command = yes
#sender_canonical_maps = hash:/etc/postfix/canonical

grep -v "^#" /etc/postfix/master.cf

smtp      inet  n       -       n       -       -       smtpd
submission inet n       -       n       -       -       smtpd
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
smtps     inet  n       -       n       -       -       smtpd
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
pickup    unix  n       -       n       60      1       pickup
cleanup   unix  n       -       n       -       0       cleanup
qmgr      unix  n       -       n       300     1       qmgr
tlsmgr    unix  -       -       n       1000?   1       tlsmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
flush     unix  n       -       n       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       n       -       -       smtp
relay     unix  -       -       n       -       -       smtp
        -o syslog_name=postfix/$service_name
showq     unix  n       -       n       -       -       showq
error     unix  -       -       n       -       -       error
retry     unix  -       -       n       -       -       error
discard   unix  -       -       n       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
scache    unix  -       -       n       -       1       scache
postlog   unix-dgram n  -       n       -       1       postlogd

sudo vi /etc/postfix/master.cf

submission inet n       -       n       -       -       smtpd
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject

smtps     inet  n       -       n       -       -       smtpd
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject

sudo vi /etc/postfix/mysql_virtual_domains_maps.cf 

user = postfix
password = ここにパスワード
dbname = postfix
hosts = localhost
table = domain
# query = SELECT domain FROM domain WHERE domain='%s'
select_field = domain
where_field = domain
additional_conditions = and active = '1'

sudo vi /etc/postfix/mysql_virtual_alias_maps.cf

user = postfix
password = [パスワード]
dbname = postfix
hosts = localhost
#query = SELECT goto as address FROM virtual_aliases WHERE address=_utf8'%s'
table = alias
select_field = goto
where_field = address

sudo vi /etc/postfix/mysql_virtual_mailbox_maps.cf

user = postfix
password = [パスワード]
hosts = localhost
dbname = postfix
table = mailbox
select_field = maildir
where_field = username

sudo vi /etc/postfix/tls_server_sni_maps

blue.int-design.jp /etc/letsencrypt/live/blue.int-design.jp/fullchain.pem /etc/letsencrypt/live/blue.int-design.jp/privkey.pem 
blredue.int-design.jp /etc/letsencrypt/live/red.int-design.jp/fullchain.pem /etc/letsencrypt/live/red.int-design.jp/privkey.pem 
green.int-design.jp /etc/letsencrypt/live/green.int-design.jp/fullchain.pem /etc/letsencrypt/live/green.int-design.jp/privkey.pem 

sudo postmap -F /etc/postfix/tls_server_sni_maps

#空ファイル
touch /etc/postfix/reject_client

sudo postmap /etc/postfix/canonical
sudo postmap /etc/postfix/reject_client
sudo postmap /etc/postfix/virtual

sudo postfix check

sudo systemctl enable postfix
sudo systemctl start postfix

sudo systemctl restart postfix

systemctl status postfix

● postfix.service - Postfix Mail Transport Agent
     Loaded: loaded (/usr/lib/systemd/system/postfix.service; enabled; preset: disabled)
     Active: active (running) since Tue 2023-12-19 12:28:12 JST; 1s ago
    Process: 130719 ExecStartPre=/usr/sbin/restorecon -R /var/spool/postfix/pid (code=exited, status=0/SUCCESS)
    Process: 130722 ExecStartPre=/usr/libexec/postfix/aliasesdb (code=exited, status=0/SUCCESS)
    Process: 130724 ExecStartPre=/usr/libexec/postfix/chroot-update (code=exited, status=0/SUCCESS)
    Process: 130725 ExecStart=/usr/sbin/postfix start (code=exited, status=0/SUCCESS)
   Main PID: 130793 (master)
      Tasks: 3 (limit: 11135)
     Memory: 3.1M
        CPU: 263ms
     CGroup: /system.slice/postfix.service
             ├─130793 /usr/libexec/postfix/master -w
             ├─130794 pickup -l -t unix -u
             └─130795 qmgr -l -t unix -u

Dec 19 12:28:12 sv1.blue.int-design.jp systemd[1]: Starting Postfix Mail Transport Agent...
Dec 19 12:28:12 sv1.blue.int-design.jp postfix/postfix-script[130791]: starting the Postfix mail system
Dec 19 12:28:12 sv1.blue.int-design.jp postfix/master[130793]: daemon started -- version 3.5.9, configuration /etc/postfix
Dec 19 12:28:12 sv1.blue.int-design.jp systemd[1]: Started Postfix Mail Transport Agent.

mysql -u root -p

CREATE DATABASE postfix;
GRANT ALL PRIVILEGES ON postfix.* TO 'postfix'@'localhost' IDENTIFIED BY 'ここにパスワード';
FLUSH PRIVILEGES;

SET SQL_MODE = "NO_AUTO_VALUE_ON_ZERO";
START TRANSACTION;
SET time_zone = "+00:00";

--
-- データベース: `postfix`
--

-- --------------------------------------------------------

--
-- テーブルの構造 `admin`
--

CREATE TABLE `admin` (
  `username` varchar(255) NOT NULL,
  `password` varchar(255) NOT NULL,
  `created` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `modified` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `active` tinyint(1) NOT NULL DEFAULT 1,
  `superadmin` tinyint(1) NOT NULL DEFAULT 0,
  `phone` varchar(30) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT '',
  `email_other` varchar(255) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT '',
  `token` varchar(255) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT '',
  `token_validity` datetime NOT NULL DEFAULT '2000-01-01 00:00:00'
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci COMMENT='Postfix Admin - Virtual Admins';

-- --------------------------------------------------------

--
-- テーブルの構造 `alias`
--

CREATE TABLE `alias` (
  `address` varchar(255) NOT NULL,
  `goto` text NOT NULL,
  `domain` varchar(255) NOT NULL,
  `created` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `modified` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `active` tinyint(1) NOT NULL DEFAULT 1
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci COMMENT='Postfix Admin - Virtual Aliases';

-- --------------------------------------------------------

--
-- テーブルの構造 `alias_domain`
--

CREATE TABLE `alias_domain` (
  `alias_domain` varchar(255) NOT NULL DEFAULT '',
  `target_domain` varchar(255) NOT NULL DEFAULT '',
  `created` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `modified` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `active` tinyint(1) NOT NULL DEFAULT 1
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci COMMENT='Postfix Admin - Domain Aliases';

-- --------------------------------------------------------

--
-- テーブルの構造 `config`
--

CREATE TABLE `config` (
  `id` int(11) NOT NULL,
  `name` varchar(20) CHARACTER SET latin1 COLLATE latin1_general_ci NOT NULL DEFAULT '',
  `value` varchar(20) CHARACTER SET latin1 COLLATE latin1_general_ci NOT NULL DEFAULT ''
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COLLATE=latin1_swedish_ci COMMENT='PostfixAdmin settings';

--
-- テーブルのデータのダンプ `config`
--

INSERT INTO `config` (`id`, `name`, `value`) VALUES
(1, 'version', '1843');

-- --------------------------------------------------------

--
-- テーブルの構造 `domain`
--

CREATE TABLE `domain` (
  `domain` varchar(255) NOT NULL,
  `description` varchar(255) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL,
  `aliases` int(10) NOT NULL DEFAULT 0,
  `mailboxes` int(10) NOT NULL DEFAULT 0,
  `maxquota` bigint(20) NOT NULL DEFAULT 0,
  `quota` bigint(20) NOT NULL DEFAULT 0,
  `transport` varchar(255) NOT NULL,
  `backupmx` tinyint(1) NOT NULL DEFAULT 0,
  `created` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `modified` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `active` tinyint(1) NOT NULL DEFAULT 1,
  `password_expiry` int(11) DEFAULT 0
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci COMMENT='Postfix Admin - Virtual Domains';

-- --------------------------------------------------------

--
-- テーブルの構造 `domain_admins`
--

CREATE TABLE `domain_admins` (
  `username` varchar(255) NOT NULL,
  `domain` varchar(255) NOT NULL,
  `created` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `active` tinyint(1) NOT NULL DEFAULT 1
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci COMMENT='Postfix Admin - Domain Admins';

-- --------------------------------------------------------

--
-- テーブルの構造 `fetchmail`
--

CREATE TABLE `fetchmail` (
  `id` int(11) UNSIGNED NOT NULL,
  `mailbox` varchar(255) NOT NULL,
  `src_server` varchar(255) NOT NULL,
  `src_auth` enum('password','kerberos_v5','kerberos','kerberos_v4','gssapi','cram-md5','otp','ntlm','msn','ssh','any') CHARACTER SET latin1 COLLATE latin1_swedish_ci DEFAULT NULL,
  `src_user` varchar(255) NOT NULL,
  `src_password` varchar(255) NOT NULL,
  `src_folder` varchar(255) NOT NULL,
  `poll_time` int(11) UNSIGNED NOT NULL DEFAULT 10,
  `fetchall` tinyint(1) UNSIGNED NOT NULL DEFAULT 0,
  `keep` tinyint(1) UNSIGNED NOT NULL DEFAULT 0,
  `protocol` enum('POP3','IMAP','POP2','ETRN','AUTO') CHARACTER SET latin1 COLLATE latin1_swedish_ci DEFAULT NULL,
  `usessl` tinyint(1) UNSIGNED NOT NULL DEFAULT 0,
  `extra_options` text DEFAULT NULL,
  `returned_text` text DEFAULT NULL,
  `mda` varchar(255) NOT NULL,
  `date` timestamp NOT NULL DEFAULT '1999-12-31 15:00:00',
  `sslcertck` tinyint(1) NOT NULL DEFAULT 0,
  `sslcertpath` varchar(255) CHARACTER SET utf8 COLLATE utf8_general_ci DEFAULT '',
  `sslfingerprint` varchar(255) DEFAULT '',
  `domain` varchar(255) DEFAULT '',
  `active` tinyint(1) NOT NULL DEFAULT 0,
  `created` timestamp NOT NULL DEFAULT '1999-12-31 15:00:00',
  `modified` timestamp NOT NULL DEFAULT current_timestamp(),
  `src_port` int(11) NOT NULL DEFAULT 0
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci;

-- --------------------------------------------------------

--
-- テーブルの構造 `log`
--

CREATE TABLE `log` (
  `timestamp` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `username` varchar(255) NOT NULL,
  `domain` varchar(255) NOT NULL,
  `action` varchar(255) NOT NULL,
  `data` text NOT NULL,
  `id` int(11) NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci COMMENT='Postfix Admin - Log';

-- --------------------------------------------------------

--
-- テーブルの構造 `mailbox`
--

CREATE TABLE `mailbox` (
  `username` varchar(255) NOT NULL,
  `password` varchar(255) NOT NULL,
  `name` varchar(255) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL,
  `maildir` varchar(255) NOT NULL,
  `quota` bigint(20) NOT NULL DEFAULT 0,
  `local_part` varchar(255) NOT NULL,
  `domain` varchar(255) NOT NULL,
  `created` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `modified` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `active` tinyint(1) NOT NULL DEFAULT 1,
  `phone` varchar(30) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT '',
  `email_other` varchar(255) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT '',
  `token` varchar(255) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT '',
  `token_validity` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `password_expiry` datetime NOT NULL DEFAULT '2000-01-01 00:00:00'
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci COMMENT='Postfix Admin - Virtual Mailboxes';

-- --------------------------------------------------------

--
-- テーブルの構造 `quota`
--

CREATE TABLE `quota` (
  `username` varchar(255) NOT NULL,
  `path` varchar(100) NOT NULL,
  `current` bigint(20) NOT NULL DEFAULT 0
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci;

-- --------------------------------------------------------

--
-- テーブルの構造 `quota2`
--

CREATE TABLE `quota2` (
  `username` varchar(100) CHARACTER SET latin1 COLLATE latin1_general_ci NOT NULL,
  `bytes` bigint(20) NOT NULL DEFAULT 0,
  `messages` int(11) NOT NULL DEFAULT 0
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COLLATE=latin1_swedish_ci;

-- --------------------------------------------------------

--
-- テーブルの構造 `vacation`
--

CREATE TABLE `vacation` (
  `email` varchar(255) NOT NULL,
  `subject` varchar(255) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL,
  `body` text CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL,
  `cache` text NOT NULL,
  `domain` varchar(255) NOT NULL,
  `created` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `active` tinyint(1) NOT NULL DEFAULT 1,
  `modified` timestamp NOT NULL DEFAULT current_timestamp(),
  `activefrom` timestamp NOT NULL DEFAULT '1999-12-31 15:00:00',
  `activeuntil` timestamp NOT NULL DEFAULT '2038-01-17 15:00:00',
  `interval_time` int(11) NOT NULL DEFAULT 0
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci COMMENT='Postfix Admin - Virtual Vacation';

-- --------------------------------------------------------

--
-- テーブルの構造 `vacation_notification`
--

CREATE TABLE `vacation_notification` (
  `on_vacation` varchar(255) CHARACTER SET latin1 COLLATE latin1_general_ci NOT NULL,
  `notified` varchar(255) CHARACTER SET latin1 COLLATE latin1_general_ci NOT NULL DEFAULT '',
  `notified_at` timestamp NOT NULL DEFAULT current_timestamp()
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_general_ci COMMENT='Postfix Admin - Virtual Vacation Notifications';

--
-- ダンプしたテーブルのインデックス
--

--
-- テーブルのインデックス `admin`
--
ALTER TABLE `admin`
  ADD PRIMARY KEY (`username`);

--
-- テーブルのインデックス `alias`
--
ALTER TABLE `alias`
  ADD PRIMARY KEY (`address`),
  ADD KEY `domain` (`domain`);

--
-- テーブルのインデックス `alias_domain`
--
ALTER TABLE `alias_domain`
  ADD PRIMARY KEY (`alias_domain`),
  ADD KEY `active` (`active`),
  ADD KEY `target_domain` (`target_domain`);

--
-- テーブルのインデックス `config`
--
ALTER TABLE `config`
  ADD PRIMARY KEY (`id`),
  ADD UNIQUE KEY `name` (`name`);

--
-- テーブルのインデックス `domain`
--
ALTER TABLE `domain`
  ADD PRIMARY KEY (`domain`);

--
-- テーブルのインデックス `domain_admins`
--
ALTER TABLE `domain_admins`
  ADD KEY `username` (`username`);

--
-- テーブルのインデックス `fetchmail`
--
ALTER TABLE `fetchmail`
  ADD PRIMARY KEY (`id`);

--
-- テーブルのインデックス `log`
--
ALTER TABLE `log`
  ADD PRIMARY KEY (`id`),
  ADD KEY `timestamp` (`timestamp`),
  ADD KEY `domain_timestamp` (`domain`,`timestamp`);

--
-- テーブルのインデックス `mailbox`
--
ALTER TABLE `mailbox`
  ADD PRIMARY KEY (`username`),
  ADD KEY `domain` (`domain`);

--
-- テーブルのインデックス `quota`
--
ALTER TABLE `quota`
  ADD PRIMARY KEY (`username`,`path`);

--
-- テーブルのインデックス `quota2`
--
ALTER TABLE `quota2`
  ADD PRIMARY KEY (`username`);

--
-- テーブルのインデックス `vacation`
--
ALTER TABLE `vacation`
  ADD PRIMARY KEY (`email`),
  ADD KEY `email` (`email`);

--
-- テーブルのインデックス `vacation_notification`
--
ALTER TABLE `vacation_notification`
  ADD PRIMARY KEY (`on_vacation`,`notified`);

--
-- ダンプしたテーブルの AUTO_INCREMENT
--

--
-- テーブルの AUTO_INCREMENT `config`
--
ALTER TABLE `config`
  MODIFY `id` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=2;

--
-- テーブルの AUTO_INCREMENT `fetchmail`
--
ALTER TABLE `fetchmail`
  MODIFY `id` int(11) UNSIGNED NOT NULL AUTO_INCREMENT;

--
-- テーブルの AUTO_INCREMENT `log`
--
ALTER TABLE `log`
  MODIFY `id` int(11) NOT NULL AUTO_INCREMENT;

--
-- ダンプしたテーブルの制約
--

--
-- テーブルの制約 `vacation_notification`
--
ALTER TABLE `vacation_notification`
  ADD CONSTRAINT `vacation_notification_pkey` FOREIGN KEY (`on_vacation`) REFERENCES `vacation` (`email`) ON DELETE CASCADE;
COMMIT;

sudo yum install wget unzip php-mbstring

cd /var/www
wget https://sourceforge.net/projects/postfixadmin/files/postfixadmin-3.3.8/PostfixAdmin%203.3.8.tar.gz
tar zxvf 'PostfixAdmin 3.3.8.tar.gz'
rm 'PostfixAdmin 3.3.8.tar.gz'

sudo mv postfixadmin-postfixadmin-7d04685 postfixadmin

cd /var/www/postfixadmin/
php -r "require_once('functions.inc.php'); echo password_hash('セットアップのパスワード', PASSWORD_DEFAULT) . PHP_EOL;"

#このようなhashが出力されます。
$2y$10$ftuBtmmgiYBN.RqakFt9W.zrNECBw5dO0WiAQ/Tm5.qhgbWgDVAsa

cd /var/www/postfixadmin/

sudo vi config.local.php

<?php

$CONF['configured'] = true;
$CONF['database_type'] = 'mysqli';
$CONF['database_host'] = 'localhost';
$CONF['database_user'] = 'postfix';
$CONF['database_password'] = 'ここにパスワード(MariaDB postfixユーザー))';
$CONF['database_name'] = 'postfix';

$CONF['alias_control'] = 'NO';
$CONF['setup_password'] = 'セットアップのパスワードのhash';

$CONF['encrypt'] = 'dovecot:CRAM-MD5';
$CONF['authlib_default_flavor'] = '';

$CONF['min_password_length'] = '4';

$CONF['maildir_name_hook'] = 'maildir_name_hook_custom';

function maildir_name_hook_custom($domain, $user) {
  preg_match("/^(.+)@[^@]+$/", $user, $matches);
  return $domain . '/' . $matches[1] . '/Maildir/';
}

sudo vi /etc/httpd/conf.d/postfixadmin.conf

Alias /postfixadmin /var/www/postfixadmin/public

<Directory "/var/www/postfixadmin/public">
    Require all granted
</Directory>

sudo systemctl restart httpd

ERROR: the templates_c directory doesn't exist or isn't writeable for the webserver

cd /var/www/postfixadmin/

mkdir -p templates_c
chown -R apache templates_c

service stats {
  unix_listener stats-reader {
    group = apache
    mode = 0660
  }
  unix_listener stats-writer {
    group = apache
    mode = 0660
  }
}

sudo systemctl restart openarc
sudo systemctl restart opendkim
sudo systemctl restart opendmarc
sudo systemctl restart postfix