@maildock/mailctl 0.1.0-rc.2 → 0.1.0-rc.3

package/assets/compose.yaml

@@ -98,9 +98,13 @@ services:
     environment:
       DATABASE_URL: postgres://${DB_ADMIN_USER:-mail}:${DB_ADMIN_PASSWORD:-mail}@postgres:5432/${DB_NAME:-mail}
       JWT_SECRET: ${JWT_SECRET:-dev-only-secret-change-me-please-32chars!!}
+      SECRET_ENCRYPTION_KEY: ${SECRET_ENCRYPTION_KEY:-dev-only-encryption-key-change-me-32chars!}
       DOVECOT_MASTER_USER: mailserver-api
       DOVECOT_MASTER_PASSWORD: ${DOVECOT_MASTER_PASSWORD:-change-me-at-install}
       APP_VERSION: ${IMAGE_TAG:-dev}
+      LICENSE_PUBLIC_KEY: ${LICENSE_PUBLIC_KEY:-}
+      # Seals migration source credentials (ADR 0018); shared with the worker, which opens them.
+      MIGRATION_SECRET_KEY: ${MIGRATION_SECRET_KEY:-dev-only-migration-key-change-me-42chars!!}
       PUBLIC_IP: ${PUBLIC_IP:-}
       COOKIE_SECURE: ${COOKIE_SECURE:-true}
       LOG_LEVEL: ${LOG_LEVEL:-info}
@@ -123,12 +127,25 @@ services:
       REPUTATION_CHECK_INTERVAL_MINUTES: ${REPUTATION_CHECK_INTERVAL_MINUTES:-60}
       DMARC_INGEST_INTERVAL_MINUTES: ${DMARC_INGEST_INTERVAL_MINUTES:-30}
       DELIVERY_LOG_RETENTION_DAYS: ${DELIVERY_LOG_RETENTION_DAYS:-30}
+      OUTBOUND_ABUSE_INTERVAL_MINUTES: ${OUTBOUND_ABUSE_INTERVAL_MINUTES:-10}
       DOVECOT_MASTER_USER: mailserver-api
       DOVECOT_MASTER_PASSWORD: ${DOVECOT_MASTER_PASSWORD:-change-me-at-install}
+      # Licence heartbeat: empty LICENSE_SERVER_URL disables it, which is what a dev stack wants.
+      LICENSE_SERVER_URL: ${LICENSE_SERVER_URL:-}
+      LICENSE_PUBLIC_KEY: ${LICENSE_PUBLIC_KEY:-}
+      LICENSE_HEARTBEAT_INTERVAL_MINUTES: ${LICENSE_HEARTBEAT_INTERVAL_MINUTES:-1440}
+      # Migration (Phase 6). The key must match the api's: the api seals credentials, the worker opens them.
+      MIGRATION_SECRET_KEY: ${MIGRATION_SECRET_KEY:-dev-only-migration-key-change-me-42chars!!}
+      MIGRATION_CONCURRENCY: ${MIGRATION_CONCURRENCY:-2}
+      MIGRATION_MAX_BYTES_PER_SECOND: ${MIGRATION_MAX_BYTES_PER_SECOND:-}
+      APP_VERSION: ${IMAGE_TAG:-dev}
       LOG_LEVEL: ${LOG_LEVEL:-info}
     volumes:
       - maillog:/var/log/mail
       - certs:/certs:ro
+      # imapsync's per-pair message-identity cache. Must outlive a single run, or a resumed migration
+      # re-examines every message it has already copied (ADR 0018).
+      - migration:/var/lib/mailserver/migration
     depends_on:
       api: { condition: service_healthy }
       redis: { condition: service_healthy }
@@ -174,3 +191,4 @@ volumes:
   certs:
   caddy_data:
   caddy_config:
+  migration: