@maildock/mailctl 0.1.0-rc.2

package/assets/Caddyfile

@@ -0,0 +1,17 @@
+# Bootstrap config only: serves the Setup Wizard and API over plain HTTP until setup provides a hostname and
+# TLS mode, after which the API pushes the full JSON config through the admin endpoint
+# (packages/engine-postfix-dovecot/src/caddy.ts) — same routing, plus TLS.
+{
+	admin 0.0.0.0:2019 {
+		origins caddy:2019 localhost:2019 127.0.0.1:2019
+	}
+	auto_https off
+}
+:80 {
+	handle /api/* {
+		reverse_proxy api:3000
+	}
+	handle {
+		reverse_proxy web:8080
+	}
+}

package/assets/compose.yaml

@@ -0,0 +1,176 @@
+# Mail server stack. Used unchanged for local development, CI smoke and customer installs (`mailctl install`);
+# only `.env` differs (secrets, ports, paths, image tag — ADR 0005). Daemon configuration is rendered by the API
+# into the `mailconfig` volume and applied by the in-container config watcher (ADR 0006).
+name: mailserver
+services:
+  postgres:
+    image: postgres:16-alpine
+    environment:
+      POSTGRES_USER: ${DB_ADMIN_USER:-mail}
+      POSTGRES_PASSWORD: ${DB_ADMIN_PASSWORD:-mail}
+      POSTGRES_DB: ${DB_NAME:-mail}
+    volumes: [pgdata:/var/lib/postgresql/data]
+    ports: ['${DB_BIND:-127.0.0.1}:${DB_PORT:-5432}:5432']
+    healthcheck:
+      test: ['CMD-SHELL', 'pg_isready -U ${DB_ADMIN_USER:-mail} -d ${DB_NAME:-mail}']
+      interval: 5s
+      timeout: 3s
+      retries: 10
+    restart: unless-stopped
+
+  redis:
+    image: redis:7-alpine
+    command: ['redis-server', '--save', '', '--appendonly', 'no']
+    healthcheck:
+      test: ['CMD', 'redis-cli', 'ping']
+      interval: 5s
+      timeout: 3s
+      retries: 10
+    restart: unless-stopped
+
+  rspamd:
+    image: ${IMAGE_REGISTRY:-mailserver}/rspamd:${IMAGE_TAG:-dev}
+    build: { context: ../docker, dockerfile: rspamd/Dockerfile }
+    depends_on:
+      redis: { condition: service_healthy }
+    volumes: [mailconfig:/var/lib/mailserver/config]
+    healthcheck:
+      test: ['CMD-SHELL', 'rspamadm control stat >/dev/null 2>&1 || exit 1']
+      interval: 10s
+      timeout: 5s
+      retries: 6
+    restart: unless-stopped
+
+  dovecot:
+    image: ${IMAGE_REGISTRY:-mailserver}/dovecot:${IMAGE_TAG:-dev}
+    build: { context: ../docker, dockerfile: dovecot/Dockerfile }
+    environment:
+      DB_HOST: postgres
+      DB_NAME: ${DB_NAME:-mail}
+      DB_USER: ${DB_DAEMON_USER:-mail_daemon}
+      DB_PASSWORD: ${DB_DAEMON_PASSWORD:-change-me-at-install}
+      MASTER_USER: mailserver-api
+      MASTER_PASSWORD: ${DOVECOT_MASTER_PASSWORD:-change-me-at-install}
+    volumes:
+      - vmail:/var/vmail
+      - mailconfig:/var/lib/mailserver/config
+      - certs:/certs:ro
+    ports:
+      - '${IMAP_PORT:-143}:143'
+      - '${IMAPS_PORT:-993}:993'
+      - '${POP3_PORT:-110}:110'
+      - '${POP3S_PORT:-995}:995'
+      - '${SIEVE_PORT:-4190}:4190'
+    depends_on:
+      postgres: { condition: service_healthy }
+      cert-sync: { condition: service_started }
+    restart: unless-stopped
+
+  postfix:
+    image: ${IMAGE_REGISTRY:-mailserver}/postfix:${IMAGE_TAG:-dev}
+    build: { context: ../docker, dockerfile: postfix/Dockerfile }
+    hostname: ${MAIL_HOSTNAME:-mail.example.test}
+    environment:
+      SRS_SECRET: ${SRS_SECRET:-change-me-at-install}
+      MAIL_HOSTNAME: ${MAIL_HOSTNAME:-mail.example.test}
+      DB_HOST: postgres
+      DB_NAME: ${DB_NAME:-mail}
+      DB_USER: ${DB_DAEMON_USER:-mail_daemon}
+      DB_PASSWORD: ${DB_DAEMON_PASSWORD:-change-me-at-install}
+    volumes:
+      - maillog:/var/log/mail
+      - vmail:/var/vmail
+      - mailconfig:/var/lib/mailserver/config
+      - certs:/certs:ro
+    ports:
+      - '${SMTP_PORT:-25}:25'
+      - '${SMTPS_PORT:-465}:465'
+      - '${SUBMISSION_PORT:-587}:587'
+    depends_on:
+      postgres: { condition: service_healthy }
+      dovecot: { condition: service_started }
+      rspamd: { condition: service_started }
+    restart: unless-stopped
+
+  api:
+    image: ${IMAGE_REGISTRY:-mailserver}/api:${IMAGE_TAG:-dev}
+    build: { context: .., dockerfile: docker/api/Dockerfile }
+    environment:
+      DATABASE_URL: postgres://${DB_ADMIN_USER:-mail}:${DB_ADMIN_PASSWORD:-mail}@postgres:5432/${DB_NAME:-mail}
+      JWT_SECRET: ${JWT_SECRET:-dev-only-secret-change-me-please-32chars!!}
+      DOVECOT_MASTER_USER: mailserver-api
+      DOVECOT_MASTER_PASSWORD: ${DOVECOT_MASTER_PASSWORD:-change-me-at-install}
+      APP_VERSION: ${IMAGE_TAG:-dev}
+      PUBLIC_IP: ${PUBLIC_IP:-}
+      COOKIE_SECURE: ${COOKIE_SECURE:-true}
+      LOG_LEVEL: ${LOG_LEVEL:-info}
+    volumes:
+      - mailconfig:/var/lib/mailserver/config
+      - certs:/certs
+    ports: ['${API_BIND:-127.0.0.1}:${API_PORT:-3000}:3000']
+    depends_on:
+      postgres: { condition: service_healthy }
+    restart: unless-stopped
+
+  worker:
+    image: ${IMAGE_REGISTRY:-mailserver}/worker:${IMAGE_TAG:-dev}
+    build: { context: .., dockerfile: docker/worker/Dockerfile }
+    environment:
+      DATABASE_URL: postgres://${DB_ADMIN_USER:-mail}:${DB_ADMIN_PASSWORD:-mail}@postgres:5432/${DB_NAME:-mail}
+      REDIS_URL: redis://redis:6379
+      PUBLIC_IP: ${PUBLIC_IP:-}
+      DNS_CHECK_INTERVAL_MINUTES: ${DNS_CHECK_INTERVAL_MINUTES:-15}
+      REPUTATION_CHECK_INTERVAL_MINUTES: ${REPUTATION_CHECK_INTERVAL_MINUTES:-60}
+      DMARC_INGEST_INTERVAL_MINUTES: ${DMARC_INGEST_INTERVAL_MINUTES:-30}
+      DELIVERY_LOG_RETENTION_DAYS: ${DELIVERY_LOG_RETENTION_DAYS:-30}
+      DOVECOT_MASTER_USER: mailserver-api
+      DOVECOT_MASTER_PASSWORD: ${DOVECOT_MASTER_PASSWORD:-change-me-at-install}
+      LOG_LEVEL: ${LOG_LEVEL:-info}
+    volumes:
+      - maillog:/var/log/mail
+      - certs:/certs:ro
+    depends_on:
+      api: { condition: service_healthy }
+      redis: { condition: service_healthy }
+      dovecot: { condition: service_healthy }
+    restart: unless-stopped
+
+  web:
+    image: ${IMAGE_REGISTRY:-mailserver}/web:${IMAGE_TAG:-dev}
+    build: { context: .., dockerfile: docker/web/Dockerfile }
+    restart: unless-stopped
+
+  caddy:
+    image: caddy:2-alpine
+    volumes:
+      - ../docker/caddy/Caddyfile:/etc/caddy/Caddyfile:ro
+      - caddy_data:/data
+      - caddy_config:/config
+      - certs:/certs:ro
+    ports:
+      - '${HTTP_PORT:-80}:80'
+      - '${HTTPS_PORT:-443}:443'
+    depends_on:
+      api: { condition: service_started }
+      web: { condition: service_started }
+    restart: unless-stopped
+
+  cert-sync:
+    image: ${IMAGE_REGISTRY:-mailserver}/cert-sync:${IMAGE_TAG:-dev}
+    build: ../docker/cert-sync
+    environment:
+      MAIL_HOSTNAME: ${MAIL_HOSTNAME:-mail.example.test}
+    volumes:
+      - caddy_data:/caddy-data:ro
+      - certs:/certs
+      - mailconfig:/var/lib/mailserver/config
+    restart: unless-stopped
+
+volumes:
+  pgdata:
+  maillog:
+  vmail:
+  mailconfig:
+  certs:
+  caddy_data:
+  caddy_config:

package/bin/dev.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env -S node --import tsx
+import { execute } from '@oclif/core';
+await execute({ development: true, dir: import.meta.url });

package/bin/run.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import { execute } from '@oclif/core';
+await execute({ dir: import.meta.url });

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+// Generated by scripts/bundle.mjs. mailctl is consumed as a binary; these are the exported
+// helpers only.
+export declare const PACKAGE_NAME: '@maildock/mailctl';
+export declare const COMMANDS: Record<string, unknown>;