rmails 0.1.1

data/system/dist/dspam/pgsql.conf

@@ -0,0 +1,33 @@
+# --- PostgreSQL ---
+
+# For PgSQLServer you can Use a TCP/IP address or a socket. If your socket is
+# in /var/run/postgresql/.s.PGSQL.5432 specify just the path where the socket
+# resits (without .s.PGSQL.5432).
+
+PgSQLServer	127.0.0.1
+PgSQLPort	5432
+PgSQLUser	_DBC_DBUSER_
+PgSQLPass	_DBC_DBPASS_
+PgSQLDb		_DBC_DBNAME_
+
+# If you're running DSPAM in client/server (daemon) mode, uncomment the
+# setting below to override the default connection cache size (the number
+# of connections the server pools between all clients).
+#
+#PgSQLConnectionCache	3
+
+# UIDInSignature: PgSQL supports the insertion of the user id into the DSPAM
+# signature. This allows you to create one single spam or fp alias
+# (pointing to some arbitrary user), and the uid in the signature will
+# switch to the correct user. Result: you need only one spam alias
+
+#PgSQLUIDInSignature	on
+
+# If you're using vpopmail or some other type of virtual setup and wish to
+# change the table dspam uses to perform username/uid lookups, you can over-
+# ride it below
+
+#PgSQLVirtualTable		dspam_virtual_uids
+#PgSQLVirtualUIDField		uid
+#PgSQLVirtualUsernameField	username
+

data/system/dist/nginx/awstats.erb

@@ -0,0 +1,17 @@
+server {
+  listen 80;
+  server_name stats.example.com;
+  access_log /var/log/nginx/stats.example.com-access_log main;
+  error_log /var/log/nginx/stats.example.com-error_log;
+  root /srv/www/stats.example.com/www;
+  index index.html;
+
+     location ~ ^/cgi-bin/(awredir|awstats)\.pl {
+         gzip off;
+         fastcgi_pass 127.0.0.1:9000;
+         fastcgi_param SCRIPT_FILENAME $document_root/cgi-bin.php;
+         fastcgi_param X_SCRIPT_FILENAME /srv/www/stats.example.com/awstats/wwwroot$fastcgi_script_name;
+         fastcgi_param X_SCRIPT_NAME $fastcgi_script_name;
+         include fastcgi_params;
+     }
+}

data/system/dist/nginx/rmails.erb

@@ -0,0 +1,40 @@
+upstream thin_cluster {
+  server unix:/tmp/thin.0.sock;
+# server unix:/tmp/thin.1.sock;
+}
+<% hostname = hostnames.split('_')[0] %>
+server {
+  listen 443;
+
+  #ssl on;
+  #ssl_certificate /etc/ssl/certs/https.pem
+  #ssl_certificate_key /etc/ssl/private/https.pem
+
+  server_name <%= hostnames %>;
+
+  access_log /var/log/nginx/<%= hostname %>/access.log;
+
+  root /var/www/<%= hostname %>/public;
+
+  error_page   500 502 504  /500.html;
+
+  if ($request_method !~ ^(GET|HEAD|PUT|POST|DELETE|OPTIONS)$ ){
+    return 405;
+  }
+  #if ($host = '<%#= subhostname %><%= hostname %>' ) {
+  #  rewrite  ^/(.*)$  http://<%= '' %><%= hostname %>/$1  permanent;
+  #}
+
+  location ~* \.(gz|ico|pdf|jpg|jpeg|gif|png|css|js|swf|html)$ {
+    if (-f $request_filename) {
+      expires max;
+      break;
+    }
+  }
+  #location / {
+  #  @cluster;
+  #}
+  location @cluster {
+    proxy_pass http://thin_cluster;
+  }
+}

data/system/dist/postfix/email2email.cf.erb

@@ -0,0 +1,5 @@
+user = <%= user %>
+password = <%= password %>
+hosts = <%= host %>
+dbname = <%= name %>
+query = SELECT email FROM virtual_users WHERE email='%s'

data/system/dist/postfix/main.cf.erb

@@ -0,0 +1,118 @@
+
+#
+# Network
+#
+myhostname = <%= myhostname %>
+mydomain = <%= mydomain %>
+# list of IPs I trust
+mynetworks = 192.168.0.0/16 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
+mydestination = $mydomain, $myhostname, localhost.$mydomain, localhost, <%= `hostname -f` %>
+#inet_interfaces = loopback-only
+#inet_protocols = ipv4
+disable_dns_lookups = no
+relayhost =
+
+#
+# System
+#
+mail_name = <%= mail_name %>
+smtpd_banner = <%= smtpd_banner %>
+biff = yes
+bounce_queue_lifetime = 5d
+maximal_queue_lifetime = 5d
+message_size_limit = <%= message_size_limit %>
+
+# TOTO XXX: appending .domain is the MUA's job.
+append_dot_mydomain = no
+
+#
+# Authentication
+#
+smtpd_sasl_type = dovecot
+smtpd_sasl_path = private/auth
+smtpd_sasl_auth_enable = yes
+smtpd_sasl_security_options = noanonymous
+#smtpd_sasl_local_domain = $mydomain
+unknown_local_recipient_reject_code = 450
+
+#
+# TLS parameters
+#
+smtpd_use_tls = yes
+smtpd_tls_auth_only = yes
+smtpd_tls_cert_file=/etc/ssl/certs/smtpd.pem
+smtpd_tls_key_file=/etc/ssl/private/smtpd.pem
+#smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
+#smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
+smtpd_tls_loglevel = 0
+smtpd_tls_received_header = yes
+smtpd_tls_session_cache_timeout = 3600s
+tls_random_source = dev:/dev/urandom
+#smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem
+
+
+#
+# Local
+#
+myorigin = /etc/mailname
+mydestination = $mydomain, localhost
+alias_maps = hash:/etc/aliases
+local_recipient_maps = $alias_maps
+
+#
+# Mailbox
+#
+mailbox_command = <%= dovecot %>
+mailbox_size_limit = 0
+mail_spool_directory = /var/spool/postfix
+recipient_delimiter = +
+
+
+# XXX
+#default_transport = error
+#relay_transport = error
+
+#
+# Virtual
+#
+
+## if DSPAM active
+#virtual_transport  = lmtp:inet:localhost:2424
+## else - use dovecot
+virtual_transport = dovecot
+
+dovecot_destination_recipient_limit = 1
+
+virtual_mailbox_domains = <%= "#{adapter}:#{root_path}/#{adapter}/virtual_mailbox_domains.cf" %>
+virtual_mailbox_maps = <%= "#{adapter}:#{root_path}/#{adapter}/virtual_mailbox_maps.cf" %>
+virtual_alias_maps = <%= "#{adapter}:#{root_path}/#{adapter}/virtual_alias_maps.cf" %>,<%= "#{adapter}:#{root_path}/#{adapter}/email2email.cf" %>
+smtpd_sender_login_maps = <%= "#{adapter}:#{root_path}/#{adapter}/sender_login_maps.cf" %>
+
+#
+# Restrictions
+#
+
+# Relay control: local or authenticated clients may specify any domain.
+smtpd_relay_restrictions = permit_mynetworks,
+	permit_sasl_authenticated,
+	reject_unauth_destination
+
+smtpd_recipient_restrictions = \
+    permit_mynetworks           \
+#    reject_rbl_client dnsbl.sorbs.net \
+#    reject_rbl_client bl.spamcop.net \
+#    reject_rbl_client zen.spamhaus.org    \
+    permit_sasl_authenticated   \
+    reject_unauth_destination
+
+
+# Don't accept mail from domains that don't exist.
+smtpd_sender_restrictions = reject_unknown_sender_domain
+
+# Block clients that speak too early.
+#smtpd_data_restrictions = reject_unauth_pipelining
+
+
+#
+# Appends from AutomateIt
+#

data/system/dist/postfix/master.cf.erb

@@ -0,0 +1,74 @@
+#
+# Postfix master process configuration file.  For details on the format
+# of the file, see the master(5) manual page (command: "man 5 master").
+#
+# Do not forget to execute "postfix reload" after editing this file.
+#
+# ==========================================================================
+# service type  private unpriv  chroot  wakeup  maxproc command + args
+#               (yes)   (yes)   (yes)   (never) (100)
+# ==========================================================================
+
+# SMTP port 25 for recieving mail
+smtp      inet  n       -       -       -       -       smtpd
+#  -o content_filter=lmtp:unix:/var/run/dspam/dspam.sock
+
+# Submission port 587 for sending mails from authenticated users
+submission inet n       -       -       -       -       smtpd
+  -o smtpd_tls_security_level=encrypt
+  -o smtpd_sasl_auth_enable=yes
+  -o smtpd_sasl_security_options=noanonymous
+  -o smtpd_sasl_local_domain=$myhostname
+  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
+  -o smtpd_sender_restrictions=reject_sender_login_mismatch
+
+# Local SMTP port 7711 for reinjection from dspam after scanning
+localhost:7711 inet  n -       n       -       -        smtpd   -o content_filter=smtp-amavis:[127.0.0.1]:3377  -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks  -o smtpd_helo_restrictions=  -o smtpd_client_restrictions=  -o smtpd_sender_restrictions=  -o smtpd_recipient_restrictions=permit_mynetworks,reject  -o mynetworks=127.0.0.0/8  -o smtpd_authorized_xforward_hosts=127.0.0.0/8
+## FI DSPAM
+
+# Local SMTP port 7733 for reinjection from amavis after scanning
+localhost:7733 inet  n -       n       -       -        smtpd   -o content_filter=  -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks  -o local_recipient_maps=  -o relay_recipient_maps=  -o smtpd_helo_restrictions=  -o smtpd_client_restrictions=  -o smtpd_restriction_classes=  -o smtpd_sender_restrictions=  -o smtpd_recipient_restrictions=permit_mynetworks,reject  -o mynetworks=127.0.0.0/8  -o strict_rfc821_envelopes=yes
+## FI AMAVIS
+
+
+# not strictly necessary, but is a good idea to have. It defines a service to use when sending the mail into amavisd-new
+smtp-amavis   unix  -    -       y       -       2       smtp     -o smtp_data_done_timeout=1200    -o disable_dns_lookups=yes
+## FI AMAVIS
+
+
+#smtps     inet  n       -       -       -       -       smtpd
+#  -o smtpd_tls_wrappermode=yes
+#  -o smtpd_sasl_auth_enable=yes
+#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
+#  -o milter_macro_daemon_name=ORIGINATING
+#628       inet  n       -       -       -       -       qmqpd
+pickup    fifo  n       -       -       60      1       pickup
+cleanup   unix  n       -       -       -       0       cleanup
+qmgr      fifo  n       -       n       300     1       qmgr
+#qmgr     fifo  n       -       -       300     1       oqmgr
+tlsmgr    unix  -       -       -       1000?   1       tlsmgr
+rewrite   unix  -       -       -       -       -       trivial-rewrite
+bounce    unix  -       -       -       -       0       bounce
+defer     unix  -       -       -       -       0       bounce
+trace     unix  -       -       -       -       0       bounce
+verify    unix  -       -       -       -       1       verify
+flush     unix  n       -       -       1000?   0       flush
+proxymap  unix  -       -       n       -       -       proxymap
+proxywrite unix -       -       n       -       1       proxymap
+smtp      unix  -       -       -       -       -       smtp
+# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
+relay     unix  -       -       -       -       -       smtp
+	-o smtp_fallback_relay=
+#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
+showq     unix  n       -       -       -       -       showq
+error     unix  -       -       -       -       -       error
+retry     unix  -       -       -       -       -       error
+discard   unix  -       -       -       -       -       discard
+local     unix  -       n       n       -       -       local
+virtual   unix  -       n       n       -       -       virtual
+lmtp      unix  -       -       -       -       -       lmtp
+anvil     unix  -       -       -       -       1       anvil
+scache    unix  -       -       -       -       1       scache
+
+dovecot   unix  -       n       n       -       -       pipe
+    flags=DRhu user=vmail:vmail argv=<%= dovecot %> -d ${recipient}

data/system/dist/postfix/sasl.conf.erb

@@ -0,0 +1,3 @@
+pwcheck_method: saslauthd
+saslauthd_path: /etc/mux
+mech_list: login plain

data/system/dist/postfix/sender_login_maps.cf.erb

@@ -0,0 +1,5 @@
+user = <%= user %>
+password = <%= password %>
+hosts = <%= host %>
+dbname = <%= name %>
+query = SELECT email FROM virtual_users WHERE email = '%s' UNION SELECT destination FROM virtual_aliases WHERE source = '%s'

data/system/dist/postfix/virtual_alias_maps.cf.erb

@@ -0,0 +1,5 @@
+user = <%= user %>
+password = <%= password %>
+hosts = <%= host %>
+dbname = <%= name %>
+query = SELECT destination FROM virtual_aliases WHERE source='%s'

data/system/dist/postfix/virtual_mailbox_domains.cf.erb

@@ -0,0 +1,5 @@
+user = <%= user %>
+password = <%= password %>
+hosts = <%= host %>
+dbname = <%= name %>
+query = SELECT 1 FROM virtual_domains WHERE name='%s'

data/system/dist/postfix/virtual_mailbox_maps.cf.erb

@@ -0,0 +1,5 @@
+user = <%= user %>
+password = <%= password %>
+hosts = <%= host %>
+dbname = <%= name %>
+query = SELECT 1 FROM virtual_users WHERE email='%s'

data/system/dist/postgresql/postgresql.conf.erb

@@ -0,0 +1,54 @@
+# -----------------------------
+# PostgreSQL configuration file
+# -----------------------------
+
+# - Connection Settings -
+
+listen_addresses = 'localhost'		# what IP address(es) to listen on;
+					# comma-separated list of addresses;
+					# defaults to 'localhost', '*' = all
+					# (change requires restart)
+port = <%= port %>				# (change requires restart)
+max_connections = <%= max_connections %>			# (change requires restart)
+# Note:  Increasing max_connections costs ~400 bytes of shared memory per
+# connection slot, plus lock space (see max_locks_per_transaction).
+
+
+# - Memory -
+
+shared_buffers = 32MB			# min 128kB
+					# (change requires restart)
+#temp_buffers = 8MB			# min 800kB
+#max_prepared_transactions = 0		# zero disables the feature
+					# (change requires restart)
+# Note:  Increasing max_prepared_transactions costs ~600 bytes of shared memory
+# per transaction slot, plus lock space (see max_locks_per_transaction).
+# It is not advisable to set max_prepared_transactions nonzero unless you
+# actively intend to use prepared transactions.
+#work_mem = 1MB				# min 64kB
+#maintenance_work_mem = 16MB		# min 1MB
+#max_stack_depth = 2MB			# min 100kB
+
+
+# - Kernel Resource Usage -
+
+#max_files_per_process = 1000		# min 25
+					# (change requires restart)
+#shared_preload_libraries = ''		# (change requires restart)
+ssl=false
+
+# - Locale and Formatting -
+
+#datestyle = 'iso, mdy'
+data_directory = '/var/lib/postgresql/9.1/main'
+# These settings are initialized by initdb, but they can be changed.
+lc_messages = 'en_US.UTF-8'			# locale for system error message
+					# strings
+lc_monetary = 'en_US.UTF-8'			# locale for monetary formatting
+lc_numeric = 'en_US.UTF-8'			# locale for number formatting
+lc_time = 'en_US.UTF-8'				# locale for time formatting
+
+# default configuration for text search
+default_text_search_config = 'pg_catalog.english'
+
+shared_buffers = 300kB

data/system/dist/rmails/Gemfile.1

@@ -0,0 +1,8 @@
+source 'https://rubygems.org'
+
+gem 'hoe'
+gem 'open4'
+gem 'rails', '~> 3.2'
+gem 'devise'
+
+gem 'automateit', '0.0.0', :path => "vendor/gems/automateit"

data/system/dist/rmails/Gemfile.2

@@ -0,0 +1,24 @@
+source 'https://rubygems.org'
+
+gem 'hoe'
+gem 'open4'
+gem 'rails', '~> 3.2'
+gem 'devise'
+gem 'thin'
+gem 'pg'
+
+gem 'automateit', '0.0.0', :path => "vendor/gems/automateit"
+
+gem 'simple_form'
+gem 'paper_trail'
+
+['haml', 'jquery', 'chosen'].each do |g|
+  gem "#{g}-rails"
+end
+
+#group :assets do
+  gem 'sass-rails',   '~> 3.2.3'
+  gem 'coffee-rails', '~> 3.2.1'
+  gem 'therubyracer', :platforms => :ruby
+  gem 'uglifier', '>= 1.0.3'
+#end

data/system/dist/rmails/database.yml.erb

@@ -0,0 +1,15 @@
+development:
+  adapter: postgresql
+  database: rmails
+  username: rmails_app
+  password: <%= password %>
+  host: <%= dbhost %>
+  port: <%= dbport %>
+
+production:
+  adapter: postgresql
+  database: rmails
+  username: rmails_app
+  password: <%= password %>
+  host: <%= dbhost %>
+  port: <%= dbport %>

data/system/dist/sudoers

@@ -0,0 +1,37 @@
+Defaults	env_reset
+Defaults	secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+
+# Host alias specification
+
+# User alias specification
+
+# Cmnd alias specification
+
+# User privilege specification
+root	ALL=(ALL:ALL) ALL
+
+# Members of the admin group may gain root privileges
+%admin ALL=(ALL) ALL
+
+# Allow members of group sudo to execute any command
+%sudo	ALL=(ALL:ALL) ALL
+
+%rmails ALL = NOPASSWD: /etc/init.d/postfix start,  \
+                        /etc/init.d/postfix stop,   \
+                        /etc/init.d/dovecot start,  \
+                        /etc/init.d/dovecot stop,   \
+                        /etc/init.d/nginx start,    \
+                        /etc/init.d/nginx stop,     \
+                        /etc/init.d/dspam start,    \
+                        /etc/init.d/dspam stop,     \
+                        /etc/init.d/opendkim start, \
+                        /etc/init.d/opendkim stop   \
+                        /etc/init.d/amavis start,   \
+                        /etc/init.d/amavis stop     \
+                        /etc/init.d/spamassassin start, \
+                        /etc/init.d/spamassassin stop
+
+
+
+# See sudoers(5) for more information on "#include" directives:
+#includedir /etc/sudoers.d