@rakay-technology/kraft 0.7.4

package/dist/server/engine/functions/packages_freebsd.sh

@@ -0,0 +1,179 @@
+#!/usr/bin/env bash
+
+# Author: Zhang Huangbin <zhb _at_ iredmail.org>
+
+#---------------------------------------------------------------------
+# This file is part of iRedMail, which is an open source mail server
+# solution for Red Hat(R) Enterprise Linux, CentOS, Debian and Ubuntu.
+#
+# iRedMail is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# iRedMail is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with iRedMail.  If not, see <http://www.gnu.org/licenses/>.
+#---------------------------------------------------------------------
+
+install_all()
+{
+    export OPENLDAP_VER='26'
+    export MYSQL_VER='84'
+    export PHP_VER='83'
+    export PY3_VER='3.11'
+    export PY_FLAVOR='py311'
+
+    if [ X"${WEB_SERVER}" == X'NGINX' ]; then
+        export IREDMAIL_USE_PHP='YES'
+    fi
+
+    ALL_PKGS="${PY_FLAVOR}-sqlalchemy14"
+
+    if [ X"${BACKEND}" == X'OPENLDAP' ]; then
+        ALL_PKGS="${ALL_PKGS} openldap${OPENLDAP_VER}-server"
+        ALL_PKGS="${ALL_PKGS} mysql${MYSQL_VER}-server"
+
+        # Python modules.
+        ALL_PKGS="${ALL_PKGS} ${PY_FLAVOR}-python-ldap ${PY_FLAVOR}-pymysql"
+
+        # Perl modules.
+        ALL_PKGS="${ALL_PKGS} p5-DBD-LDAP p5-DBD-mysql"
+
+    elif [ X"${BACKEND}" == X'MYSQL' ]; then
+        ALL_PKGS="${ALL_PKGS} mysql${MYSQL_VER}-client"
+
+        if [ X"${USE_EXISTING_MYSQL}" != X'YES' ]; then
+            ALL_PKGS="${ALL_PKGS} mysql${MYSQL_VER}-server"
+        fi
+
+        # Python modules.
+        ALL_PKGS="${ALL_PKGS} ${PY_FLAVOR}-pymysql"
+
+        # Perl modules.
+        ALL_PKGS="${ALL_PKGS} p5-DBD-mysql"
+
+    elif [ X"${BACKEND}" == X'PGSQL' ]; then
+        ALL_PKGS="${ALL_PKGS} postgresql${PGSQL_VERSION}-server postgresql${PGSQL_VERSION}-contrib"
+
+        # Python modules.
+        ALL_PKGS="${ALL_PKGS} ${PY_FLAVOR}-psycopg2"
+
+        # Perl modules.
+        ALL_PKGS="${ALL_PKGS} p5-DBD-Pg"
+    fi
+
+    # Dovecot
+    if [[ "${BACKEND}" == "OPENLDAP" ]]; then
+        # We need both LDAP and MySQL support.
+        ALL_PKGS="${ALL_PKGS} dovecot-mysql dovecot-pigeonhole-mysql"
+    elif [[ "${BACKEND}" == "MYSQL" ]]; then
+        ALL_PKGS="${ALL_PKGS} dovecot-mysql dovecot-pigeonhole-mysql"
+    elif [[ "${BACKEND}" == "PGSQL" ]]; then
+        ALL_PKGS="${ALL_PKGS} dovecot-pgsql dovecot-pigeonhole-pgsql"
+    fi
+
+    # SpamAssassin
+    ALL_PKGS="${ALL_PKGS} spamassassin"
+
+    # Amavisd-new.
+    ALL_PKGS="${ALL_PKGS} amavisd-new"
+
+    # Postfix.
+    if [[ "${BACKEND}" == 'OPENLDAP' ]]; then
+        ALL_PKGS="${ALL_PKGS} postfix-ldap"
+    elif [[ "${BACKEND}" == 'MYSQL' ]]; then
+        ALL_PKGS="${ALL_PKGS} postfix-mysql"
+    elif [[ "${BACKEND}" == 'PGSQL' ]]; then
+        ALL_PKGS="${ALL_PKGS} postfix-pgsql p5-Class-DBI-Pg"
+    fi
+
+    if [ X"${WEB_SERVER}" == X'NGINX' ]; then
+        ALL_PKGS="${ALL_PKGS} nginx uwsgi-${PY_FLAVOR}"
+    fi
+
+    # PHP and extensions
+    if [ X"${IREDMAIL_USE_PHP}" == X'YES' ]; then
+        ALL_PKGS="${ALL_PKGS} php${PHP_VER} php${PHP_VER}-extensions"
+
+        if [ X"${BACKEND}" == X'OPENLDAP' ]; then
+            ALL_PKGS="${ALL_PKGS} php${PHP_VER}-ldap php${PHP_VER}-mysqli"
+        elif [ X"${BACKEND}" == X'MYSQL' ]; then
+            ALL_PKGS="${ALL_PKGS} php${PHP_VER}-mysqli"
+        elif [ X"${BACKEND}" == X'PGSQL' ]; then
+            ALL_PKGS="${ALL_PKGS} php${PHP_VER}-pdo_pgsql"
+        fi
+    fi
+
+    ALL_PKGS="${ALL_PKGS} p5-Exporter-Tiny ca_root_nss clamav"
+
+    # mlmmj: mailing list manager
+    ALL_PKGS="${ALL_PKGS} mlmmj"
+
+    # Roundcube webmail.
+    if [ X"${USE_ROUNDCUBE}" == X'YES' ]; then
+        [ X"${BACKEND}" == X'OPENLDAP' ] && ALL_PKGS="${ALL_PKGS} php${PHP_VER}-pear-Net_LDAP2"
+        ALL_PKGS="${ALL_PKGS} roundcube-php${PHP_VER} mod_php${PHP_VER}"
+    fi
+
+    # SOGo groupware.
+    if [ X"${USE_SOGO}" == X'YES' ]; then
+        if [ X"${BACKEND}" == X'OPENLDAP' -o X"${BACKEND}" == X'MYSQL' ]; then
+            ALL_PKGS="${ALL_PKGS} sope-mysql sogo-mysqlactivesync"
+        elif [ X"${BACKEND}" == X'PGSQL' ]; then
+            ALL_PKGS="${ALL_PKGS} sope-pgsql sogo-pgsqlactivesync"
+        fi
+    fi
+
+    # iRedAPD
+    ALL_PKGS="${ALL_PKGS} ${PY_FLAVOR}-dnspython ${PY_FLAVOR}-multipart"
+
+    # iRedAdmin dependencies.
+    ALL_PKGS="${ALL_PKGS} ${PY_FLAVOR}-Jinja2 ${PY_FLAVOR}-bcrypt ${PY_FLAVOR}-simplejson ${PY_FLAVOR}-requests ${PY_FLAVOR}-netifaces ${PY_FLAVOR}-more-itertools ${PY_FLAVOR}-passlib"
+
+    # Fail2ban.
+    if [ X"${USE_FAIL2BAN}" == X'YES' ]; then
+        ALL_PKGS="${ALL_PKGS} ${PY_FLAVOR}-fail2ban"
+    fi
+
+    # netdata
+    if [ X"${USE_NETDATA}" == X'YES' ]; then
+        ALL_PKGS="${ALL_PKGS} netdata"
+    fi
+
+    # Misc
+    ALL_PKGS="${ALL_PKGS} logwatch"
+
+#    ECHO_INFO "Set pkg repo to: ${FREEBSD_PKG_MIRROR_URL}."
+#    [[ -d /usr/local/etc/pkg/repos ]] || mkdir -p /usr/local/etc/pkg/repos
+#    cat > /usr/local/etc/pkg/repos/FreeBSD.conf <<EOF
+#FreeBSD: {
+#  url: "${FREEBSD_PKG_MIRROR_URL}",
+#EOF
+#
+#    if [[ ${FREEBSD_PKG_MIRROR_TYPE} != "" ]]; then
+#        cat >> /usr/local/etc/pkg/repos/FreeBSD.conf <<EOF
+#  mirror_type: "${FREEBSD_PKG_MIRROR_TYPE}",
+#EOF
+#    fi
+#
+#echo "}" >> /usr/local/etc/pkg/repos/FreeBSD.conf
+
+    ECHO_INFO "Run: pkg update -f"
+    pkg update -f || exit 255
+
+    # Install all packages.
+    ECHO_INFO "Install packages: pkg install -y ${ALL_PKGS}"
+    pkg install -y ${ALL_PKGS} || exit 255
+
+    ECHO_DEBUG "Create symbol links for python3."
+    ln -sf /usr/local/bin/python${PY3_VER} /usr/local/bin/python3
+
+    # Create syslog.d and logrotate.d
+    mkdir -p ${SYSLOG_CONF_DIR} >> ${INSTALL_LOG} 2>&1
+    mkdir -p ${LOGROTATE_DIR} >> ${INSTALL_LOG} 2>&1
+}

package/dist/server/engine/functions/postfix.sh

@@ -0,0 +1,457 @@
+#!/usr/bin/env bash
+
+# Author: Zhang Huangbin <zhb _at_ iredmail.org>
+
+#---------------------------------------------------------------------
+# This file is part of iRedMail, which is an open source mail server
+# solution for Red Hat(R) Enterprise Linux, CentOS, Debian and Ubuntu.
+#
+# iRedMail is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# iRedMail is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with iRedMail.  If not, see <http://www.gnu.org/licenses/>.
+#---------------------------------------------------------------------
+
+# -------------------------------------------------------
+# ---------------------- Postfix ------------------------
+# -------------------------------------------------------
+
+postfix_config_basic()
+{
+    ECHO_INFO "Configure Postfix (MTA)."
+
+    if [ X"${DISTRO}" == "DEBIAN" -o X"${DISTRO}" == X"UBUNTU" ]; then
+        # Store FQDN in /etc/mailname.
+        # FYI: https://wiki.debian.org/EtcMailName
+        echo "${HOSTNAME}" > /etc/mailname
+    fi
+
+    #
+    # main.cf
+    #
+    export queue_directory="$(postconf -d queue_directory | awk '{print $NF}')"
+    export command_directory="$(postconf -d command_directory | awk '{print $NF}')"
+    export daemon_directory="$(postconf -d daemon_directory | awk '{print $NF}')"
+    export data_directory="$(postconf -d data_directory | awk '{print $NF}')"
+
+    export sendmail_path="$(postconf -d sendmail_path | awk '{print $NF}')"
+    export newaliases_path="$(postconf -d newaliases_path | awk '{print $NF}')"
+    export mailq_path="$(postconf -d mailq_path | awk '{print $NF}')"
+    export mail_owner="$(postconf -d mail_owner | awk '{print $NF}')"
+    export setgid_group="$(postconf -d setgid_group | awk '{print $NF}')"
+
+    if [ X"${DISTRO}" == X'FREEBSD' ]; then
+        export setgid_group='maildrop'
+    elif [ X"${DISTRO}" == X'OPENBSD' ]; then
+        export command_directory='/usr/local/sbin'
+        export daemon_directory='/usr/local/libexec/postfix'
+        export mail_owner='_postfix'
+        export setgid_group='_postdrop'
+    fi
+
+    # Copy sample main.cf and update values.
+    backup_file ${POSTFIX_FILE_MAIN_CF} ${POSTFIX_FILE_MASTER_CF}
+    cp ${SAMPLE_DIR}/postfix/main.cf ${POSTFIX_FILE_MAIN_CF}
+
+    ECHO_DEBUG "Enable submission and additional transports required by Amavisd and Dovecot."
+    cat ${SAMPLE_DIR}/postfix/master.cf >> ${POSTFIX_FILE_MASTER_CF}
+
+    perl -pi -e 's#PH_POSTFIX_DEFAULT_DB_TYPE#$ENV{POSTFIX_DEFAULT_DB_TYPE}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_QUEUE_DIRECTORY#$ENV{queue_directory}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_COMMAND_DIRECTORY#$ENV{command_directory}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_DAEMON_DIRECTORY#$ENV{daemon_directory}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_DATA_DIRECTORY#$ENV{data_directory}#g' ${POSTFIX_FILE_MAIN_CF}
+
+    perl -pi -e 's#PH_SENDMAIL_PATH#$ENV{sendmail_path}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_NEWALIASES_PATH#$ENV{newaliases_path}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_MAILQ_PATH#$ENV{mailq_path}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_MAIL_OWNER#$ENV{mail_owner}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_SETGID_GROUP#$ENV{setgid_group}#g' ${POSTFIX_FILE_MAIN_CF}
+
+    unset queue_directory command_directory daemon_directory data_directory
+    unset mail_owner sendmail_path newaliases_path mailq_path setgid_group
+
+    # Append LOCAL_ADDRESS in `mynetworks`
+    if [ X"${LOCAL_ADDRESS}" != X'127.0.0.1' ]; then
+        perl -pi -e 's#^(mynetworks.*)#${1} $ENV{LOCAL_ADDRESS}#g' ${POSTFIX_FILE_MAIN_CF}
+    fi
+
+    if [ X"${IREDMAIL_HAS_IPV6}" == X'YES' ]; then
+        # Append local IPv6 address in `mynetworks`
+        perl -pi -e 's#^(mynetworks.*)#${1} [::1]#g' ${POSTFIX_FILE_MAIN_CF}
+    else
+        # Disable ipv6 protocol
+        perl -pi -e 's#^(inet_protocols.*=).*#${1} ipv4#g' ${POSTFIX_FILE_MAIN_CF}
+    fi
+
+    # Update normal settings.
+    perl -pi -e 's#PH_HOSTNAME#$ENV{HOSTNAME}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_MESSAGE_SIZE_LIMIT_BYTES#$ENV{MESSAGE_SIZE_LIMIT_BYTES}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_STORAGE_BASE_DIR#$ENV{STORAGE_BASE_DIR}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_SYS_USER_VMAIL_UID#$ENV{SYS_USER_VMAIL_UID}#g' ${POSTFIX_FILE_MAIN_CF}
+
+    perl -pi -e 's#PH_SYS_GROUP_VMAIL_GID#$ENV{SYS_GROUP_VMAIL_GID}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_SYS_USER_VMAIL_UID#$ENV{SYS_USER_VMAIL_UID}#g' ${POSTFIX_FILE_MAIN_CF}
+
+    perl -pi -e 's#PH_SSL_DH512_PARAM_FILE#$ENV{SSL_DH512_PARAM_FILE}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_SSL_DH1024_PARAM_FILE#$ENV{SSL_DH1024_PARAM_FILE}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_SSL_CERT_FILE#$ENV{SSL_CERT_FILE}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_SSL_KEY_FILE#$ENV{SSL_KEY_FILE}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_SSL_CERT_DIR#$ENV{SSL_CERT_DIR}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_SSL_CA_FILE#$ENV{SSL_CA_FILE}#g' ${POSTFIX_FILE_MAIN_CF}
+
+    if [ X"${DISTRO}" == X'FREEBSD' -o X"${DISTRO}" == X'OPENBSD' ]; then
+        perl -pi -e 's#^(smtpd_tls_CApath=).*#${1}#g' ${POSTFIX_FILE_MAIN_CF}
+        perl -pi -e 's#^(smtpd_tls_dh1024_param_file.*)##g' ${POSTFIX_FILE_MAIN_CF}
+    fi
+
+    # Replace deprecated parameters on Postfix >= 3.7.
+    if [ X"${DISTRO_CODENAME}" == X'trixie' -o X"${DISTRO_CODENAME}" == X'resolute' ]; then
+        # main.cf
+        perl -pi -e 's#^(smtpd_tls_dh1024_param_file.*)##g' ${POSTFIX_FILE_MAIN_CF}
+    elif [[ X"${DISTRO}" == X'FREEBSD' ]]; then
+        # main.cf
+        perl -pi -e 's#^(smtpd_tls_dh1024_param_file.*)##g' ${POSTFIX_FILE_MAIN_CF}
+
+        # master.cf
+        perl -pi -e 's#disable_dns_lookups=yes#smtp_dns_support_level=disabled#g' ${POSTFIX_FILE_MASTER_CF}
+    fi
+
+    perl -pi -e 's#PH_POSTFIX_FILE_ALIASES#$ENV{POSTFIX_FILE_ALIASES}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_POSTFIX_FILE_HELO_ACCESS#$ENV{POSTFIX_FILE_HELO_ACCESS}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_POSTFIX_FILE_HEADER_CHECKS#$ENV{POSTFIX_FILE_HEADER_CHECKS}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_POSTFIX_FILE_BODY_CHECKS#$ENV{POSTFIX_FILE_BODY_CHECKS}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_POSTFIX_FILE_SENDER_ACCESS#$ENV{POSTFIX_FILE_SENDER_ACCESS}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_POSTFIX_FILE_SMTPD_COMMAND_FILTER#$ENV{POSTFIX_FILE_SMTPD_COMMAND_FILTER}#g' ${POSTFIX_FILE_MAIN_CF}
+
+    # Create required files and set correct owner + permission
+    _files="${POSTFIX_FILE_HELO_ACCESS} ${POSTFIX_FILE_HEADER_CHECKS} ${POSTFIX_FILE_BODY_CHECKS} ${POSTFIX_FILE_SENDER_ACCESS}"
+    touch ${_files}
+    chown ${SYS_USER_ROOT}:${SYS_GROUP_POSTFIX} ${_files}
+    chmod 0640 ${_files}
+    unset _files
+
+    # iRedAPD
+    perl -pi -e 's#PH_IREDAPD_SERVER_ADDRESS#$ENV{IREDAPD_SERVER_ADDRESS}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_IREDAPD_LISTEN_PORT#$ENV{IREDAPD_LISTEN_PORT}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_IREDAPD_SRS_FORWARD_PORT#$ENV{IREDAPD_SRS_FORWARD_PORT}#g' ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_IREDAPD_SRS_REVERSE_PORT#$ENV{IREDAPD_SRS_REVERSE_PORT}#g' ${POSTFIX_FILE_MAIN_CF}
+
+    # Dovecot quota-status service
+    perl -pi -e 's#PH_DOVECOT_SERVICE_QUOTA_STATUS_PORT#$ENV{DOVECOT_SERVICE_QUOTA_STATUS_PORT}#g' ${POSTFIX_FILE_MAIN_CF}
+
+    # Distro releases ship Postfix 3.6+.
+    #   - Ubuntu 22.04
+    #   - Debian 12
+    #   - OpenBSD
+    #   - FreeBSD
+    if [[ X"${DISTRO}" == X'RHEL' ]]; then
+        if [[ X"${DISTRO_VERSION}" == X'10' ]]; then
+            # Postfix 3.8.5
+            postconf -e compatibility_level=3.6
+            postconf -e default_database_type=${POSTFIX_DEFAULT_DB_TYPE}
+        else
+            # Postfix 3.5.x
+            postconf -e compatibility_level=2
+        fi
+    elif [[ X"${DISTRO}" == X'FREEBSD' ]]; then
+        postconf -e compatibility_level=3.11
+    else
+        postconf -e compatibility_level=3.6
+    fi
+
+    perl -pi -e 's/^(smtp.*inet)(.*)(n)(.*)(n)(.*smtpd)$/${1}${2}${3}${4}-${6}/' ${POSTFIX_FILE_MASTER_CF}
+
+    # set smtp server
+    perl -pi -e 's#PH_SMTP_SERVER#$ENV{SMTP_SERVER}#g' ${POSTFIX_FILE_MASTER_CF}
+    perl -pi -e 's#PH_AMAVISD_CONTENT_FILTER_ORIGINATING#$ENV{AMAVISD_CONTENT_FILTER_ORIGINATING}#g' ${POSTFIX_FILE_MASTER_CF}
+
+    # set mailbox owner: user/group
+    perl -pi -e 's#PH_SYS_USER_VMAIL#$ENV{SYS_USER_VMAIL}#g' ${POSTFIX_FILE_MASTER_CF}
+    perl -pi -e 's#PH_SYS_GROUP_VMAIL#$ENV{SYS_GROUP_VMAIL}#g' ${POSTFIX_FILE_MASTER_CF}
+
+    # Amavisd integration.
+    perl -pi -e 's#PH_LOCAL_ADDRESS#$ENV{LOCAL_ADDRESS}#g' ${POSTFIX_FILE_MASTER_CF}
+    perl -pi -e 's#PH_AMAVISD_MAX_SERVERS#$ENV{AMAVISD_MAX_SERVERS}#g' ${POSTFIX_FILE_MASTER_CF}
+    perl -pi -e 's#PH_AMAVISD_MYNETWORKS#$ENV{AMAVISD_MYNETWORKS}#g' ${POSTFIX_FILE_MASTER_CF}
+    perl -pi -e 's#PH_POSTFIX_MAIL_REINJECT_PORT#$ENV{POSTFIX_MAIL_REINJECT_PORT}#g' ${POSTFIX_FILE_MASTER_CF}
+    perl -pi -e 's#PH_AMAVISD_ORIGINATING_PORT#$ENV{AMAVISD_ORIGINATING_PORT}#g' ${POSTFIX_FILE_MASTER_CF}
+
+    # Enable `content_filter` for `pickup` transport:
+    #   - Treat all emails generated locally as outbound
+    #   - sign DKIM signature
+    #   - do spam/virus scanning
+    _pickup_orig="$(postconf -M |grep '^pickup')"
+    echo ${_pickup_orig} | grep 'content_filter=' &>/dev/null
+    if [ X"$?" != X'0' ]; then
+        postconf -M "pickup/unix=${_pickup_orig}"
+        postconf -P "pickup/unix/content_filter=${AMAVISD_CONTENT_FILTER_ORIGINATING}"
+    fi
+
+    _postfix_version="$(postconf -d mail_version | awk '{print $NF}')"
+    if echo ${_postfix_version} | grep '^3' &>/dev/null; then
+        # The master.cf chroot default value has changed from "y" (yes) to "n" (no).
+        for i in $(postconf -Mf | grep '^[0-9a-zA-Z]' | awk '{print $1"/"$2"/chroot=n"}'); do
+            postconf -F $i
+        done
+
+        # Disable smtputf8 if EAI support is not compiled in.
+        if postconf -m 2>&1 |grep 'warning: smtputf8_enable' &>/dev/null; then
+            postconf -e smtputf8_enable=no
+        fi
+    fi
+
+    ECHO_DEBUG "Enable chroot."
+    # mlmmj integration.
+    perl -pi -e 's#PH_POSTFIX_MLMMJ_REINJECT_PORT#$ENV{POSTFIX_MLMMJ_REINJECT_PORT}#g' ${POSTFIX_FILE_MASTER_CF}
+
+    # Dovecot LDA
+    perl -pi -e 's#PH_DOVECOT_DELIVER_BIN#$ENV{DOVECOT_DELIVER_BIN}#g' ${POSTFIX_FILE_MASTER_CF}
+
+    # mlmmj
+    perl -pi -e 's#PH_SYS_USER_MLMMJ#$ENV{SYS_USER_MLMMJ}#g' ${POSTFIX_FILE_MASTER_CF}
+    perl -pi -e 's#PH_SYS_GROUP_MLMMJ#$ENV{SYS_GROUP_MLMMJ}#g' ${POSTFIX_FILE_MASTER_CF}
+    perl -pi -e 's#PH_CMD_MLMMJ_AMIME_RECEIVE#$ENV{CMD_MLMMJ_AMIME_RECEIVE}#g' ${POSTFIX_FILE_MASTER_CF}
+    perl -pi -e 's#PH_MLMMJ_SPOOL_DIR#$ENV{MLMMJ_SPOOL_DIR}#g' ${POSTFIX_FILE_MASTER_CF}
+
+    ECHO_DEBUG "Copy: /etc/{hosts,resolv.conf,localtime,services} -> ${POSTFIX_CHROOT_DIR}/etc/"
+    mkdir -p ${POSTFIX_CHROOT_DIR}/etc/ >> ${INSTALL_LOG} 2>&1
+    for i in /etc/hosts /etc/resolv.conf /etc/localtime /etc/services; do
+        [[ -f $i ]] && cp ${i} ${POSTFIX_CHROOT_DIR}/etc/
+    done
+
+    backup_file ${POSTFIX_FILE_HELO_ACCESS}
+    cp -f ${SAMPLE_DIR}/postfix/helo_access.pcre ${POSTFIX_FILE_HELO_ACCESS}
+
+    backup_file ${POSTFIX_FILE_SMTPD_COMMAND_FILTER}
+    cp -f ${SAMPLE_DIR}/postfix/command_filter.pcre ${POSTFIX_FILE_SMTPD_COMMAND_FILTER}
+
+    # Update Postfix aliases file.
+    add_postfix_alias nobody ${SYS_USER_ROOT}
+    add_postfix_alias ${SYS_USER_VMAIL} ${SYS_USER_ROOT}
+    add_postfix_alias ${SYS_USER_ROOT} ${DOMAIN_ADMIN_EMAIL}
+
+    if [ X"${DISTRO}" == X'DEBIAN' -o X"${DISTRO}" == X'UBUNTU' ]; then
+        # Since `mail.*` is logged to /var/log/mail.log, no need to log
+        # `mail.err` to /var/log/mail.err separately.
+        ECHO_DEBUG "Disable duplicate log entries (mail.{info,warn,err}) in syslog config file."
+
+        for f in ${SYSLOG_CONF} ${SYSLOG_CONF_DIR}/50-default.conf; do
+            if [ -f ${f} ]; then
+                perl -pi -e 's/^(mail.info.*mail.info)$/#${1}/' ${f}
+                perl -pi -e 's/^(mail.warn.*mail.warn)$/#${1}/' ${f}
+                perl -pi -e 's/^(mail.err.*mail.err)$/#${1}/' ${f}
+            fi
+        done
+    elif [ X"${DISTRO}" == X'FREEBSD' ]; then
+        # FreeBSD: Start postfix when system start up.
+        backup_file /etc/mail/mailer.conf
+        cp -f ${SAMPLE_DIR}/postfix/freebsd/mailer.conf /etc/mail/mailer.conf
+        chmod +r /etc/mail/mailer.conf
+
+        # Start service when system start up.
+        service_control enable 'postfix_enable' 'YES'
+        service_control enable 'sendmail_enable' 'NO'
+        service_control enable 'sendmail_submit_enable' 'NO'
+        service_control enable 'sendmail_outbound_enable' 'NO'
+        service_control enable 'sendmail_msp_queue_enable' 'NO'
+        service_control enable 'daily_clean_hoststat_enable' 'NO'
+        service_control enable 'daily_status_mail_rejects_enable' 'NO'
+        service_control enable 'daily_status_include_submit_mailq' 'NO'
+        service_control enable 'daily_submit_queuerun' 'NO'
+
+    elif [ X"${DISTRO}" == X'OPENBSD' ]; then
+        # Replace sendmail, opensmtpd by Postfix
+        echo 'sendmail_flags=NO' >> ${RC_CONF_LOCAL}
+        echo 'smtpd_flags=NO' >> ${RC_CONF_LOCAL}
+        /usr/local/sbin/postfix-enable >> ${INSTALL_LOG} 2>&1
+        perl -pi -e 's/(.*sendmail -L sm-msp-queue.*)/#${1}/' ${CRON_FILE_ROOT}
+    fi
+
+    # Update /etc/host.conf to solve warning message in Postfix like this:
+    # "warning: hostname xxx does not resolve to address 127.0.0.1"
+    if [ -f /etc/host.conf ]; then
+        if ! grep '^multi on$' /etc/host.conf &>/dev/null; then
+            echo 'multi on' >> /etc/host.conf
+        fi
+    fi
+
+    # Create symbol link: /var/log/mail.log -> maillog
+    # So that all linux/bsd distributions have the same maillog file.
+    if [ X"${DISTRO}" == X'DEBIAN' -o X"${DISTRO}" == X'UBUNTU' ]; then
+        if [ -f ${MAILLOG} -a ! -f /var/log/maillog ]; then
+            ln -s ${MAILLOG} /var/log/maillog
+        fi
+    fi
+
+    echo 'export status_postfix_config_basic="DONE"' >> ${STATUS_FILE}
+}
+
+postfix_config_vhost()
+{
+    ECHO_DEBUG "Configure Postfix for SQL/LDAP lookup."
+
+    # Create directory which used to store sql/ldap lookup files.
+    [[ -d ${POSTFIX_LOOKUP_DIR} ]] || mkdir -p ${POSTFIX_LOOKUP_DIR}
+
+    cat ${SAMPLE_DIR}/postfix/main.cf.${POSTFIX_LOOKUP_DB} >> ${POSTFIX_FILE_MAIN_CF}
+    perl -pi -e 's#PH_POSTFIX_LOOKUP_DIR#$ENV{POSTFIX_LOOKUP_DIR}#g' ${POSTFIX_FILE_MAIN_CF}
+
+    cp -f ${SAMPLE_DIR}/postfix/${POSTFIX_LOOKUP_DB}/*.cf ${POSTFIX_LOOKUP_DIR}
+
+    chown ${SYS_USER_ROOT}:${SYS_GROUP_POSTFIX} ${POSTFIX_LOOKUP_DIR}/*.cf
+    chmod 0640 ${POSTFIX_LOOKUP_DIR}/*.cf
+
+    if [ X"${BACKEND}" == X'OPENLDAP' ]; then
+        # LDAP server and bind dn/password
+        perl -pi -e 's#PH_LDAP_SERVER_HOST#$ENV{LDAP_SERVER_HOST}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
+        perl -pi -e 's#PH_LDAP_SERVER_PORT#$ENV{LDAP_SERVER_PORT}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
+        perl -pi -e 's#PH_LDAP_BIND_VERSION#$ENV{LDAP_BIND_VERSION}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
+        perl -pi -e 's#PH_LDAP_BASEDN#$ENV{LDAP_BASEDN}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
+        perl -pi -e 's#PH_LDAP_BINDDN#$ENV{LDAP_BINDDN}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
+        perl -pi -e 's#PH_LDAP_BINDPW#$ENV{LDAP_BINDPW}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
+
+        perl -pi -e 's#PH_LDAP_ATTR_GROUP_USERS#$ENV{LDAP_ATTR_GROUP_USERS}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
+        perl -pi -e 's#PH_LDAP_ATTR_GROUP_GROUPS#$ENV{LDAP_ATTR_GROUP_GROUPS}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
+    elif [ X"${BACKEND}" == X'MYSQL' -o X"${BACKEND}" == X'PGSQL' ]; then
+        # SQL server, port, bind username, password
+        perl -pi -e 's#PH_SQL_SERVER_ADDRESS#$ENV{SQL_SERVER_ADDRESS}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
+        perl -pi -e 's#PH_SQL_SERVER_PORT#$ENV{SQL_SERVER_PORT}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
+        perl -pi -e 's#PH_VMAIL_DB_BIND_USER#$ENV{VMAIL_DB_BIND_USER}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
+        perl -pi -e 's#PH_VMAIL_DB_BIND_PASSWD#$ENV{VMAIL_DB_BIND_PASSWD}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
+        perl -pi -e 's#PH_VMAIL_DB_NAME#$ENV{VMAIL_DB_NAME}#g' ${POSTFIX_LOOKUP_DIR}/*.cf
+    fi
+
+    echo 'export status_postfix_config_vhost="DONE"' >> ${STATUS_FILE}
+}
+
+postfix_config_postscreen()
+{
+    ECHO_DEBUG "Enable postscreen service."
+
+    backup_file ${POSTSCREEN_FILE_ACCESS_CIDR} ${POSTSCREEN_FILE_DNSBL_REPLY}
+
+    export POSTFIX_VERSION="$(postconf mail_version 2>/dev/null | awk '{print $NF}')"
+    if echo ${POSTFIX_VERSION} | grep '^2\.[01234567]\.' &>/dev/null; then
+        ECHO_ERROR "postscreen requires Postfix 2.8 or later, you're running ${POSTFIX_VERSION}."
+        ECHO_ERROR "postscreen service not enabled."
+    else
+        ECHO_DEBUG "Comment out 'smtp inet ... smtpd' service in ${POSTFIX_FILE_MASTER_CF}."
+        perl -pi -e 's/^(smtp .*inet.*smtpd)$/#${1}/g' ${POSTFIX_FILE_MASTER_CF}
+
+        ECHO_DEBUG "Uncomment the new 'smtpd pass ... smtpd' service in ${POSTFIX_FILE_MASTER_CF}."
+        perl -pi -e 's/^#(smtpd.*pass.*smtpd)$/${1}/g' ${POSTFIX_FILE_MASTER_CF}
+
+        ECHO_DEBUG "Uncomment the new "smtp inet ... postscreen" service in ${POSTFIX_FILE_MASTER_CF}."
+        perl -pi -e 's/^#(smtp *.*inet.*postscreen)$/${1}/g' ${POSTFIX_FILE_MASTER_CF}
+
+        ECHO_DEBUG "Uncomment the new 'tlsproxy unix ... tlsproxy' service in ${POSTFIX_FILE_MASTER_CF}."
+        perl -pi -e 's/^#(tlsproxy.*unix.*tlsproxy)$/${1}/g' ${POSTFIX_FILE_MASTER_CF}
+
+        ECHO_DEBUG "Uncomment the new 'dnsblog unix ... dnsblog' service in ${POSTFIX_FILE_MASTER_CF}."
+        perl -pi -e 's/^#(dnsblog.*unix.*dnsblog)$/${1}/g' ${POSTFIX_FILE_MASTER_CF}
+
+        #
+        # main.cf
+        #
+        if [[ X"${DISTRO}" == X'FREEBSD' ]]; then
+            perl -pi -e 's#postscreen_blacklist_action#postscreen_denylist_action#g' ${SAMPLE_DIR}/postfix/main.cf.postscreen
+            perl -pi -e 's#postscreen_dnsbl_whitelist_threshold#postscreen_dnsbl_allowlist_threshold#g' ${SAMPLE_DIR}/postfix/main.cf.postscreen
+        fi
+
+        ECHO_DEBUG "Update ${POSTFIX_FILE_MAIN_CF} to enable postscreen."
+        cat ${SAMPLE_DIR}/postfix/main.cf.postscreen >> ${POSTFIX_FILE_MAIN_CF}
+
+        perl -pi -e 's#PH_POSTSCREEN_FILE_DNSBL_REPLY#$ENV{POSTSCREEN_FILE_DNSBL_REPLY}#g' ${POSTFIX_FILE_MAIN_CF}
+        touch ${POSTSCREEN_FILE_DNSBL_REPLY}
+
+        perl -pi -e 's#PH_POSTSCREEN_FILE_ACCESS_CIDR#$ENV{POSTSCREEN_FILE_ACCESS_CIDR}#g' ${POSTFIX_FILE_MAIN_CF}
+        cp -f ${SAMPLE_DIR}/postfix/postscreen_access.cidr ${POSTSCREEN_FILE_ACCESS_CIDR}
+
+        # Require Postfix-2.11+
+        if echo ${POSTFIX_VERSION} | egrep '(^3|^2\.[123456789][123456789])' &>/dev/null; then
+            perl -pi -e 's/^#(postscreen_dnsbl_whitelist_threshold.*)/${1}/g' ${POSTFIX_FILE_MAIN_CF}
+        fi
+
+        # Set a not existing directory as default value, if we cannot get
+        # ${queue_directory} for some reason, it won't mistakenly reset owner
+        # and permission on '/'
+        export queue_directory="$(postconf queue_directory | awk '{print $NF}')"
+        export data_directory="$(postconf data_directory | awk '{print $NF}')"
+        _chrooted_data_directory="${queue_directory:=/tmp/not-exist}/${data_directory}"
+
+        unset queue_directory data_directory
+
+        ECHO_DEBUG "Create ${_chrooted_data_directory}/postscreen_cache.db."
+        if [ ! -d ${_chrooted_data_directory} ]; then
+            mkdir -p ${_chrooted_data_directory}
+            chown ${SYS_USER_POSTFIX}:${SYS_GROUP_ROOT} ${_chrooted_data_directory}
+            chmod 0700 ${_chrooted_data_directory}
+        fi
+
+        # Create db file.
+        cd ${_chrooted_data_directory}
+        touch postscreen_cache
+        postmap ${POSTFIX_DEFAULT_DB_TYPE}:postscreen_cache
+        rm postscreen_cache
+        chown ${SYS_USER_POSTFIX}:${SYS_GROUP_POSTFIX} postscreen_cache.*
+        chmod 0700 postscreen_cache.*
+    fi
+
+    echo 'export status_postfix_config_postscreen="DONE"' >> ${STATUS_FILE}
+}
+
+postfix_config_logwatch()
+{
+    # Enable long queue ID.
+    if [[ -n ${LOGWATCH_SERVICES_DIR} ]]; then
+        # Create the directory if not present.
+        #
+        # logwatch package may be missing on the server, continue adding the
+        # modular config file to avoid the issue if sysadmin installs logwatch
+        # someday in the future.
+        [[ -d ${LOGWATCH_SERVICES_DIR} ]] || mkdir -p ${LOGWATCH_SERVICES_DIR}
+
+        f="${LOGWATCH_SERVICES_DIR}/postfix.conf"
+
+        if ! grep '\$postfix_Enable_Long_Queue_Ids' ${f} &>/dev/null; then
+            cat >> ${f} <<EOF
+\$postfix_Enable_Long_Queue_Ids = Yes
+EOF
+        fi
+    fi
+
+    echo 'export status_postfix_config_logwatch="DONE"' >> ${STATUS_FILE}
+}
+
+postfix_setup()
+{
+    # Include all sub-steps
+    check_status_before_run postfix_config_basic && \
+    check_status_before_run postfix_config_vhost && \
+    check_status_before_run postfix_config_postscreen && \
+    check_status_before_run postfix_config_logwatch
+
+    cat >> ${TIP_FILE} <<EOF
+Postfix:
+    * Configuration files:
+        - ${POSTFIX_ROOTDIR}
+        - ${POSTFIX_ROOTDIR}/aliases
+        - ${POSTFIX_FILE_MAIN_CF}
+        - ${POSTFIX_FILE_MASTER_CF}
+
+    * SQL/LDAP lookup config files:
+        - ${POSTFIX_LOOKUP_DIR}
+
+EOF
+
+    echo 'export status_postfix_setup="DONE"' >> ${STATUS_FILE}
+}