git subrepo commit (merge) mailcow/src/mailcow-dockerized
subrepo:
subdir: "mailcow/src/mailcow-dockerized"
merged: "81fb18894"
upstream:
origin: "https://github.com/mailcow/mailcow-dockerized.git"
branch: "master"
commit: "4ca02ecee"
git-subrepo:
version: "0.4.6"
origin: "???"
commit: "???"
Update to upstream 2026-10. Local patches re-applied by hand
(no Unbound DNS for containers, IPv6 off by default, fake-MySQL
stubs in dockerapi, Postfix overrides, no .env symlink); dropped
the unused dovecot and clamd Dockerfile patches.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Change-Id: I2c2c194d1d436b841358685f5f94aef09eb19ae8
diff --git a/mailcow/src/mailcow-dockerized/_modules/scripts/core.sh b/mailcow/src/mailcow-dockerized/_modules/scripts/core.sh
new file mode 100644
index 0000000..576967a
--- /dev/null
+++ b/mailcow/src/mailcow-dockerized/_modules/scripts/core.sh
@@ -0,0 +1,230 @@
+#!/usr/bin/env bash
+# _modules/scripts/core.sh
+# THIS SCRIPT IS DESIGNED TO BE RUNNING BY MAILCOW SCRIPTS ONLY!
+# DO NOT, AGAIN, NOT TRY TO RUN THIS SCRIPT STANDALONE!!!!!!
+
+# ANSI color for red errors
+RED='\e[31m'
+GREEN='\e[32m'
+YELLOW='\e[33m'
+BLUE='\e[34m'
+MAGENTA='\e[35m'
+LIGHT_RED='\e[91m'
+LIGHT_GREEN='\e[92m'
+NC='\e[0m'
+
+caller="${BASH_SOURCE[1]##*/}"
+
+get_installed_tools(){
+ for bin in openssl curl docker git awk sha1sum grep cut jq; do
+ if [[ -z $(command -v ${bin}) ]]; then
+ echo "Error: Cannot find command '${bin}'. Cannot proceed."
+ echo "Solution: Please review system requirements and install requirements. Then, re-run the script."
+ echo "See System Requirements: https://docs.mailcow.email/getstarted/install/"
+ echo "Exiting..."
+ exit 1
+ fi
+ done
+
+ if grep --help 2>&1 | head -n 1 | grep -q -i "busybox"; then echo -e "${LIGHT_RED}BusyBox grep detected, please install gnu grep, \"apk add --no-cache --upgrade grep\"${NC}"; exit 1; fi
+ # This will also cover sort
+ if cp --help 2>&1 | head -n 1 | grep -q -i "busybox"; then echo -e "${LIGHT_RED}BusyBox cp detected, please install coreutils, \"apk add --no-cache --upgrade coreutils\"${NC}"; exit 1; fi
+ if sed --help 2>&1 | head -n 1 | grep -q -i "busybox"; then echo -e "${LIGHT_RED}BusyBox sed detected, please install gnu sed, \"apk add --no-cache --upgrade sed\"${NC}"; exit 1; fi
+}
+
+get_docker_version(){
+ # Check Docker Version (need at least 24.X)
+ docker_version=$(docker version --format '{{.Server.Version}}' | cut -d '.' -f 1)
+}
+
+get_compose_type(){
+ if docker compose > /dev/null 2>&1; then
+ if docker compose version --short | grep -e "^[2-9]\." -e "^v[2-9]\." -e "^[1-9][0-9]\." -e "^v[1-9][0-9]\." > /dev/null 2>&1; then
+ COMPOSE_VERSION=native
+ COMPOSE_COMMAND="docker compose"
+ if [[ "$caller" == "update.sh" ]]; then
+ sed -i 's/^DOCKER_COMPOSE_VERSION=.*/DOCKER_COMPOSE_VERSION=native/' "$SCRIPT_DIR/mailcow.conf"
+ fi
+ echo -e "\e[33mFound Docker Compose Plugin (native).\e[0m"
+ echo -e "\e[33mSetting the DOCKER_COMPOSE_VERSION Variable to native\e[0m"
+ sleep 2
+ echo -e "\e[33mNotice: You'll have to update this Compose Version via your Package Manager manually!\e[0m"
+ else
+ echo -e "\e[31mCannot find Docker Compose with a Version Higher than 2.X.X.\e[0m"
+ echo -e "\e[31mPlease update/install it manually regarding to this doc site: https://docs.mailcow.email/install/\e[0m"
+ exit 1
+ fi
+ elif docker-compose > /dev/null 2>&1; then
+ if ! [[ $(alias docker-compose 2> /dev/null) ]] ; then
+ if docker-compose version --short | grep -e "^[2-9]\." -e "^[1-9][0-9]\." > /dev/null 2>&1; then
+ COMPOSE_VERSION=standalone
+ COMPOSE_COMMAND="docker-compose"
+ if [[ "$caller" == "update.sh" ]]; then
+ sed -i 's/^DOCKER_COMPOSE_VERSION=.*/DOCKER_COMPOSE_VERSION=standalone/' "$SCRIPT_DIR/mailcow.conf"
+ fi
+ echo -e "\e[33mFound Docker Compose Standalone.\e[0m"
+ echo -e "\e[33mSetting the DOCKER_COMPOSE_VERSION Variable to standalone\e[0m"
+ sleep 2
+ echo -e "\e[33mNotice: For an automatic update of docker-compose please use the update_compose.sh scripts located at the helper-scripts folder.\e[0m"
+ else
+ echo -e "\e[31mCannot find Docker Compose with a Version Higher than 2.X.X.\e[0m"
+ echo -e "\e[31mPlease update/install manually regarding to this doc site: https://docs.mailcow.email/install/\e[0m"
+ exit 1
+ fi
+ fi
+ else
+ echo -e "\e[31mCannot find Docker Compose.\e[0m"
+ echo -e "\e[31mPlease install it regarding to this doc site: https://docs.mailcow.email/install/\e[0m"
+ exit 1
+ fi
+}
+
+detect_bad_asn() {
+ echo -e "\e[33mDetecting if your IP is listed on Spamhaus Bad ASN List...\e[0m"
+ response=$(curl --connect-timeout 15 --max-time 30 -s -o /dev/null -w "%{http_code}" "https://asn-check.mailcow.email")
+ if [ "$response" -eq 503 ]; then
+ if [ -z "$SPAMHAUS_DQS_KEY" ]; then
+ echo -e "\e[33mYour server's public IP uses an AS that is blocked by Spamhaus to use their DNS public blocklists for Postfix.\e[0m"
+ echo -e "\e[33mmailcow did not detected a value for the variable SPAMHAUS_DQS_KEY inside mailcow.conf!\e[0m"
+ sleep 2
+ echo ""
+ echo -e "\e[33mTo use the Spamhaus DNS Blocklists again, you will need to create a FREE account for their Data Query Service (DQS) at: https://www.spamhaus.com/free-trial/sign-up-for-a-free-data-query-service-account\e[0m"
+ echo -e "\e[33mOnce done, enter your DQS API key in mailcow.conf and mailcow will do the rest for you!\e[0m"
+ echo ""
+ sleep 2
+ else
+ echo -e "\e[33mYour server's public IP uses an AS that is blocked by Spamhaus to use their DNS public blocklists for Postfix.\e[0m"
+ echo -e "\e[32mmailcow detected a Value for the variable SPAMHAUS_DQS_KEY inside mailcow.conf. Postfix will use DQS with the given API key...\e[0m"
+ fi
+ elif [ "$response" -eq 200 ]; then
+ echo -e "\e[33mCheck completed! Your IP is \e[32mclean\e[0m"
+ elif [ "$response" -eq 429 ]; then
+ echo -e "\e[33mCheck completed! \e[31mYour IP seems to be rate limited on the ASN Check service... please try again later!\e[0m"
+ else
+ echo -e "\e[31mCheck failed! \e[0mMaybe a DNS or Network problem?\e[0m"
+ fi
+}
+
+check_online_status() {
+ CHECK_ONLINE_DOMAINS=('https://github.com' 'https://hub.docker.com')
+ for domain in "${CHECK_ONLINE_DOMAINS[@]}"; do
+ if timeout 6 curl --head --silent --output /dev/null ${domain}; then
+ return 0
+ fi
+ done
+ return 1
+}
+
+prefetch_images() {
+ [[ -z ${BRANCH} ]] && { echo -e "\e[33m\nUnknown branch...\e[0m"; exit 1; }
+ git fetch origin #${BRANCH}
+ while read image; do
+ RET_C=0
+ until docker pull "${image}"; do
+ RET_C=$((RET_C + 1))
+ echo -e "\e[33m\nError pulling $image, retrying...\e[0m"
+ [ ${RET_C} -gt 3 ] && { echo -e "\e[31m\nToo many failed retries, exiting\e[0m"; exit 1; }
+ sleep 1
+ done
+ done < <(git show "origin/${BRANCH}:docker-compose.yml" | grep "image:" | awk '{ gsub("image:","", $3); print $2 }')
+}
+
+docker_garbage() {
+ SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )/../.." && pwd )"
+ IMGS_TO_DELETE=()
+
+ declare -A IMAGES_INFO
+ COMPOSE_IMAGES=($(grep -oP "image: \K(ghcr\.io/)?mailcow.+" "${SCRIPT_DIR}/docker-compose.yml"))
+
+ for existing_image in $(docker images --format "{{.ID}}:{{.Repository}}:{{.Tag}}" | grep -E '(mailcow/|ghcr\.io/mailcow/)'); do
+ ID=$(echo "$existing_image" | cut -d ':' -f 1)
+ REPOSITORY=$(echo "$existing_image" | cut -d ':' -f 2)
+ TAG=$(echo "$existing_image" | cut -d ':' -f 3)
+
+ if [[ "$REPOSITORY" == "mailcow/backup" || "$REPOSITORY" == "ghcr.io/mailcow/backup" ]]; then
+ if [[ "$TAG" != "<none>" ]]; then
+ continue
+ fi
+ fi
+
+ if [[ " ${COMPOSE_IMAGES[@]} " =~ " ${REPOSITORY}:${TAG} " ]]; then
+ continue
+ else
+ IMGS_TO_DELETE+=("$ID")
+ IMAGES_INFO["$ID"]="$REPOSITORY:$TAG"
+ fi
+ done
+
+ if [[ ! -z ${IMGS_TO_DELETE[*]} ]]; then
+ echo "The following unused mailcow images were found:"
+ for id in "${IMGS_TO_DELETE[@]}"; do
+ echo " ${IMAGES_INFO[$id]} ($id)"
+ done
+
+ if [ -z "$FORCE" ]; then
+ read -r -p "Do you want to delete them to free up some space? [y/N] " response
+ if [[ "$response" =~ ^([yY][eE][sS]|[yY])+$ ]]; then
+ docker rmi ${IMGS_TO_DELETE[*]}
+ else
+ echo "OK, skipped."
+ fi
+ else
+ echo "Running in forced mode! Force removing old mailcow images..."
+ docker rmi ${IMGS_TO_DELETE[*]}
+ fi
+ echo -e "\e[32mFurther cleanup...\e[0m"
+ echo "If you want to cleanup further garbage collected by Docker, please make sure all containers are up and running before cleaning your system by executing \"docker system prune\""
+ fi
+}
+
+in_array() {
+ local e match="$1"
+ shift
+ for e; do [[ "$e" == "$match" ]] && return 0; done
+ return 1
+}
+
+detect_major_update() {
+ if [ ${BRANCH} == "master" ]; then
+ # Array with major versions
+ # Add major versions here
+ MAJOR_VERSIONS=(
+ "2025-02"
+ "2025-03"
+ "2025-09"
+ )
+
+ current_version=""
+ if [[ -f "${SCRIPT_DIR}/data/web/inc/app_info.inc.php" ]]; then
+ current_version=$(grep 'MAILCOW_GIT_VERSION' ${SCRIPT_DIR}/data/web/inc/app_info.inc.php | sed -E 's/.*MAILCOW_GIT_VERSION="([^"]+)".*/\1/')
+ fi
+ if [[ -z "$current_version" ]]; then
+ return 1
+ fi
+ release_url="https://github.com/mailcow/mailcow-dockerized/releases/tag"
+
+ updates_to_apply=()
+
+ for version in "${MAJOR_VERSIONS[@]}"; do
+ if [[ "$current_version" < "$version" ]]; then
+ updates_to_apply+=("$version")
+ fi
+ done
+
+ if [[ ${#updates_to_apply[@]} -gt 0 ]]; then
+ echo -e "\e[33m\nMAJOR UPDATES to be applied:\e[0m"
+ for update in "${updates_to_apply[@]}"; do
+ echo "$update - $release_url/$update"
+ done
+
+ echo -e "\nPlease read the release notes before proceeding."
+ read -p "Do you want to proceed with the update? [y/n] " response
+ if [[ "${response}" =~ ^([yY][eE][sS]|[yY])+$ ]]; then
+ echo "Proceeding with the update..."
+ else
+ echo "Update canceled. Exiting."
+ exit 1
+ fi
+ fi
+ fi
+}
diff --git a/mailcow/src/mailcow-dockerized/_modules/scripts/ipv6_controller.sh b/mailcow/src/mailcow-dockerized/_modules/scripts/ipv6_controller.sh
new file mode 100644
index 0000000..a025ee1
--- /dev/null
+++ b/mailcow/src/mailcow-dockerized/_modules/scripts/ipv6_controller.sh
@@ -0,0 +1,239 @@
+#!/usr/bin/env bash
+# _modules/scripts/ipv6_controller.sh
+# THIS SCRIPT IS DESIGNED TO BE RUNNING BY MAILCOW SCRIPTS ONLY!
+# DO NOT, AGAIN, NOT TRY TO RUN THIS SCRIPT STANDALONE!!!!!!
+
+# 1) Check if the host supports IPv6
+get_ipv6_support() {
+ # ---- helper: probe external IPv6 connectivity without DNS ----
+ _probe_ipv6_connectivity() {
+ # Use literal, always-on IPv6 echo responders (no DNS required)
+ local PROBE_IPS=("2001:4860:4860::8888" "2606:4700:4700::1111")
+ local ip rc=1
+
+ for ip in "${PROBE_IPS[@]}"; do
+ if command -v ping6 &>/dev/null; then
+ ping6 -c1 -W2 "$ip" &>/dev/null || ping6 -c1 -w2 "$ip" &>/dev/null
+ rc=$?
+ elif command -v ping &>/dev/null; then
+ ping -6 -c1 -W2 "$ip" &>/dev/null || ping -6 -c1 -w2 "$ip" &>/dev/null
+ rc=$?
+ else
+ rc=1
+ fi
+ [[ $rc -eq 0 ]] && return 0
+ done
+ return 1
+ }
+
+ if [[ ! -f /proc/net/if_inet6 ]] || grep -qs '^1' /proc/sys/net/ipv6/conf/all/disable_ipv6 2>/dev/null; then
+ DETECTED_IPV6=false
+ echo -e "${YELLOW}IPv6 not detected on host – ${LIGHT_RED}IPv6 is administratively disabled${YELLOW}.${NC}"
+ return
+ fi
+
+ if ip -6 route show default 2>/dev/null | grep -qE '^default'; then
+ echo -e "${YELLOW}Default IPv6 route found – testing external IPv6 connectivity...${NC}"
+ if _probe_ipv6_connectivity; then
+ DETECTED_IPV6=true
+ echo -e "IPv6 detected on host – ${LIGHT_GREEN}leaving IPv6 support enabled${YELLOW}.${NC}"
+ else
+ DETECTED_IPV6=false
+ echo -e "${YELLOW}Default IPv6 route present but external IPv6 connectivity failed – ${LIGHT_RED}disabling IPv6 support${YELLOW}.${NC}"
+ fi
+ return
+ fi
+
+ if ip -6 addr show scope global 2>/dev/null | grep -q 'inet6'; then
+ DETECTED_IPV6=false
+ echo -e "${YELLOW}Global IPv6 address present but no default route – ${LIGHT_RED}disabling IPv6 support${YELLOW}.${NC}"
+ return
+ fi
+
+ if ip -6 addr show scope link 2>/dev/null | grep -q 'inet6'; then
+ echo -e "${YELLOW}Only link-local IPv6 addresses found – testing external IPv6 connectivity...${NC}"
+ if _probe_ipv6_connectivity; then
+ DETECTED_IPV6=true
+ echo -e "External IPv6 connectivity available – ${LIGHT_GREEN}leaving IPv6 support enabled${YELLOW}.${NC}"
+ else
+ DETECTED_IPV6=false
+ echo -e "${YELLOW}Only link-local IPv6 present and no external connectivity – ${LIGHT_RED}disabling IPv6 support${YELLOW}.${NC}"
+ fi
+ return
+ fi
+
+ DETECTED_IPV6=false
+ echo -e "${YELLOW}IPv6 not detected on host – ${LIGHT_RED}disabling IPv6 support${YELLOW}.${NC}"
+}
+
+# 2) Ensure Docker daemon.json has (or create) the required IPv6 settings
+docker_daemon_edit(){
+ DOCKER_DAEMON_CONFIG="/etc/docker/daemon.json"
+ DOCKER_MAJOR=$(docker version --format '{{.Server.Version}}' 2>/dev/null | cut -d. -f1)
+ MISSING=()
+
+ _has_kv() { grep -Eq "\"$1\"[[:space:]]*:[[:space:]]*$2" "$DOCKER_DAEMON_CONFIG" 2>/dev/null; }
+
+ if [[ -f "$DOCKER_DAEMON_CONFIG" ]]; then
+
+ # reject empty or whitespace-only file immediately
+ if [[ ! -s "$DOCKER_DAEMON_CONFIG" ]] || ! grep -Eq '[{}]' "$DOCKER_DAEMON_CONFIG"; then
+ echo -e "${RED}ERROR: $DOCKER_DAEMON_CONFIG exists but is empty or contains no JSON braces – please initialize it with valid JSON (e.g. {}).${NC}"
+ exit 1
+ fi
+
+ # Validate JSON if jq is present
+ if command -v jq &>/dev/null && ! jq empty "$DOCKER_DAEMON_CONFIG" &>/dev/null; then
+ echo -e "${RED}ERROR: Invalid JSON in $DOCKER_DAEMON_CONFIG – please correct manually.${NC}"
+ exit 1
+ fi
+
+ # Gather missing keys
+ ! _has_kv ipv6 true && MISSING+=("ipv6: true")
+
+ # For Docker < 28, keep requiring fixed-cidr-v6 (default bridge needs it on old engines)
+ if [[ -n "$DOCKER_MAJOR" && "$DOCKER_MAJOR" -lt 28 ]]; then
+ ! grep -Eq '"fixed-cidr-v6"[[:space:]]*:[[:space:]]*".+"' "$DOCKER_DAEMON_CONFIG" \
+ && MISSING+=('fixed-cidr-v6: "fd00:dead:beef:c0::/80"')
+ fi
+
+ # For Docker < 27, ip6tables needed and was tied to experimental in older releases
+ if [[ -n "$DOCKER_MAJOR" && "$DOCKER_MAJOR" -lt 27 ]]; then
+ _has_kv ipv6 true && ! _has_kv ip6tables true && MISSING+=("ip6tables: true")
+ ! _has_kv experimental true && MISSING+=("experimental: true")
+ fi
+
+ # Fix if needed
+ if ((${#MISSING[@]}>0)); then
+ echo -e "${MAGENTA}Your daemon.json is missing: ${YELLOW}${MISSING[*]}${NC}"
+ if [[ -n "$FORCE" ]]; then
+ ans=Y
+ else
+ read -p "Would you like to update $DOCKER_DAEMON_CONFIG now? [Y/n] " ans
+ ans=${ans:-Y}
+ fi
+
+ if [[ $ans =~ ^[Yy]$ ]]; then
+ cp "$DOCKER_DAEMON_CONFIG" "${DOCKER_DAEMON_CONFIG}.bak"
+ if command -v jq &>/dev/null; then
+ TMP=$(mktemp)
+ # Base filter: ensure ipv6 = true
+ JQ_FILTER='.ipv6 = true'
+
+ # Add fixed-cidr-v6 only for Docker < 28
+ if [[ -n "$DOCKER_MAJOR" && "$DOCKER_MAJOR" -lt 28 ]]; then
+ JQ_FILTER+=' | .["fixed-cidr-v6"] = (.["fixed-cidr-v6"] // "fd00:dead:beef:c0::/80")'
+ fi
+
+ # Add ip6tables/experimental only for Docker < 27
+ if [[ -n "$DOCKER_MAJOR" && "$DOCKER_MAJOR" -lt 27 ]]; then
+ JQ_FILTER+=' | .ip6tables = true | .experimental = true'
+ fi
+
+ jq "$JQ_FILTER" "$DOCKER_DAEMON_CONFIG" >"$TMP" && mv "$TMP" "$DOCKER_DAEMON_CONFIG"
+ echo -e "${LIGHT_GREEN}daemon.json updated. Restarting Docker...${NC}"
+ (command -v systemctl &>/dev/null && systemctl restart docker) || service docker restart
+ echo -e "${YELLOW}Docker restarted.${NC}"
+ else
+ echo -e "${RED}Please install jq or manually update daemon.json and restart Docker.${NC}"
+ exit 1
+ fi
+ else
+ echo -e "${YELLOW}User declined Docker update – please insert these changes manually:${NC}"
+ echo "${MISSING[*]}"
+ exit 1
+ fi
+ fi
+
+ else
+ # Create new daemon.json if missing
+ if [[ -n "$FORCE" ]]; then
+ ans=Y
+ else
+ read -p "$DOCKER_DAEMON_CONFIG not found. Create it with IPv6 settings? [Y/n] " ans
+ ans=${ans:-Y}
+ fi
+
+ if [[ $ans =~ ^[Yy]$ ]]; then
+ mkdir -p "$(dirname "$DOCKER_DAEMON_CONFIG")"
+ if [[ -n "$DOCKER_MAJOR" && "$DOCKER_MAJOR" -lt 27 ]]; then
+ cat > "$DOCKER_DAEMON_CONFIG" <<EOF
+{
+ "ipv6": true,
+ "fixed-cidr-v6": "fd00:dead:beef:c0::/80",
+ "ip6tables": true,
+ "experimental": true
+}
+EOF
+ elif [[ -n "$DOCKER_MAJOR" && "$DOCKER_MAJOR" -lt 28 ]]; then
+ cat > "$DOCKER_DAEMON_CONFIG" <<EOF
+{
+ "ipv6": true,
+ "fixed-cidr-v6": "fd00:dead:beef:c0::/80"
+}
+EOF
+ else
+ # Docker 28+: ipv6 works without fixed-cidr-v6
+ cat > "$DOCKER_DAEMON_CONFIG" <<EOF
+{
+ "ipv6": true
+}
+EOF
+ fi
+ echo -e "${GREEN}Created $DOCKER_DAEMON_CONFIG with IPv6 settings.${NC}"
+ echo "Restarting Docker..."
+ (command -v systemctl &>/dev/null && systemctl restart docker) || service docker restart
+ echo "Docker restarted."
+ else
+ echo "User declined to create daemon.json – please manually merge the docker daemon with these configs:"
+ echo "${MISSING[*]}"
+ exit 1
+ fi
+ fi
+}
+
+# 3) Main wrapper for generate_config.sh and update.sh
+configure_ipv6() {
+ # detect manual override if mailcow.conf is present
+ if [[ -n "$MAILCOW_CONF" && -f "$MAILCOW_CONF" ]] && grep -q '^ENABLE_IPV6=' "$MAILCOW_CONF"; then
+ MANUAL_SETTING=$(grep '^ENABLE_IPV6=' "$MAILCOW_CONF" | cut -d= -f2)
+ elif [[ -z "$MAILCOW_CONF" ]] && [[ -n "${ENABLE_IPV6:-}" ]]; then
+ MANUAL_SETTING="$ENABLE_IPV6"
+ else
+ MANUAL_SETTING=""
+ fi
+
+ get_ipv6_support
+
+ # if user manually set it, check for mismatch
+ if [[ "$DETECTED_IPV6" != "true" ]]; then
+ if [[ -n "$MAILCOW_CONF" && -f "$MAILCOW_CONF" ]]; then
+ if grep -q '^ENABLE_IPV6=' "$MAILCOW_CONF"; then
+ sed -i 's/^ENABLE_IPV6=.*/ENABLE_IPV6=false/' "$MAILCOW_CONF"
+ else
+ echo "ENABLE_IPV6=false" >> "$MAILCOW_CONF"
+ fi
+ else
+ export IPV6_BOOL=false
+ fi
+ echo "Skipping Docker IPv6 configuration because host does not support IPv6."
+ echo "Make sure to check if your docker daemon.json does not include \"enable_ipv6\": true if you do not want IPv6."
+ echo "IPv6 configuration complete: ENABLE_IPV6=false"
+ sleep 2
+ return
+ fi
+
+ docker_daemon_edit
+
+ if [[ -n "$MAILCOW_CONF" && -f "$MAILCOW_CONF" ]]; then
+ if grep -q '^ENABLE_IPV6=' "$MAILCOW_CONF"; then
+ sed -i 's/^ENABLE_IPV6=.*/ENABLE_IPV6=true/' "$MAILCOW_CONF"
+ else
+ echo "ENABLE_IPV6=true" >> "$MAILCOW_CONF"
+ fi
+ else
+ export IPV6_BOOL=true
+ fi
+
+ echo "IPv6 configuration complete: ENABLE_IPV6=true"
+}
\ No newline at end of file
diff --git a/mailcow/src/mailcow-dockerized/_modules/scripts/migrate_options.sh b/mailcow/src/mailcow-dockerized/_modules/scripts/migrate_options.sh
new file mode 100644
index 0000000..6a584b9
--- /dev/null
+++ b/mailcow/src/mailcow-dockerized/_modules/scripts/migrate_options.sh
@@ -0,0 +1,96 @@
+#!/usr/bin/env bash
+# _modules/scripts/migrate_options.sh
+# THIS SCRIPT IS DESIGNED TO BE RUNNING BY MAILCOW SCRIPTS ONLY!
+# DO NOT, AGAIN, NOT TRY TO RUN THIS SCRIPT STANDALONE!!!!!!
+
+migrate_config_options() {
+
+ sed -i --follow-symlinks '$a\' mailcow.conf
+
+ KEYS=(
+ SOLR_HEAP
+ SKIP_SOLR
+ SOLR_PORT
+ FLATCURVE_EXPERIMENTAL
+ DISABLE_IPv6
+ ACME_CONTACT
+ )
+
+ for key in "${KEYS[@]}"; do
+ if grep -q "${key}" mailcow.conf; then
+ case "${key}" in
+ SOLR_HEAP)
+ echo "Removing ${key} in mailcow.conf"
+ sed -i '/# Solr heap size in MB\b/d' mailcow.conf
+ sed -i '/# Solr is a prone to run\b/d' mailcow.conf
+ sed -i '/SOLR_HEAP\b/d' mailcow.conf
+ ;;
+ SKIP_SOLR)
+ echo "Removing ${key} in mailcow.conf"
+ sed -i '/\bSkip Solr on low-memory\b/d' mailcow.conf
+ sed -i '/\bSolr is disabled by default\b/d' mailcow.conf
+ sed -i '/\bDisable Solr or\b/d' mailcow.conf
+ sed -i '/\bSKIP_SOLR\b/d' mailcow.conf
+ ;;
+ SOLR_PORT)
+ echo "Removing ${key} in mailcow.conf"
+ sed -i '/\bSOLR_PORT\b/d' mailcow.conf
+ ;;
+ FLATCURVE_EXPERIMENTAL)
+ echo "Removing ${key} in mailcow.conf"
+ sed -i '/\bFLATCURVE_EXPERIMENTAL\b/d' mailcow.conf
+ ;;
+ DISABLE_IPv6)
+ echo "Migrating ${key} to ENABLE_IPv6 in mailcow.conf"
+ local old=$(grep '^DISABLE_IPv6=' "mailcow.conf" | cut -d'=' -f2)
+ local new
+ if [[ "$old" == "y" ]]; then
+ new="false"
+ else
+ new="true"
+ fi
+ sed -i '/^DISABLE_IPv6=/d' "mailcow.conf"
+ echo "ENABLE_IPV6=$new" >> "mailcow.conf"
+ ;;
+ ACME_CONTACT)
+ echo "Deleting obsoleted ${key} in mailcow.conf"
+ sed -i '/^# Lets Encrypt registration contact information/d' mailcow.conf
+ sed -i '/^# Optional: Leave empty for none/d' mailcow.conf
+ sed -i '/^# This value is only used on first order!/d' mailcow.conf
+ sed -i '/^# Setting it at a later point will require the following steps:/d' mailcow.conf
+ sed -i '/^# https:\/\/docs.mailcow.email\/troubleshooting\/debug-reset_tls\//d' mailcow.conf
+ sed -i '/^ACME_CONTACT=.*/d' mailcow.conf
+ sed -i '/^#ACME_CONTACT=.*/d' mailcow.conf
+ ;;
+ esac
+ fi
+ done
+
+ solr_volume=$(docker volume ls -qf name=^${COMPOSE_PROJECT_NAME}_solr-vol-1)
+ if [[ -n $solr_volume ]]; then
+ echo -e "\e[34mSolr has been replaced within mailcow since 2025-01.\nThe volume $solr_volume is unused.\e[0m"
+ sleep 1
+ if [ ! "$FORCE" ]; then
+ read -r -p "Remove $solr_volume? [y/N] " response
+ if [[ "$response" =~ ^([yY][eE][sS]|[yY])+$ ]]; then
+ echo -e "\e[33mRemoving $solr_volume...\e[0m"
+ docker volume rm $solr_volume || echo -e "\e[31mFailed to remove. Remove it manually!\e[0m"
+ echo -e "\e[32mSuccessfully removed $solr_volume!\e[0m"
+ else
+ echo -e "Not removing $solr_volume. Run \`docker volume rm $solr_volume\` manually if needed."
+ fi
+ else
+ echo -e "\e[33mForce removing $solr_volume...\e[0m"
+ docker volume rm $solr_volume || echo -e "\e[31mFailed to remove. Remove it manually!\e[0m"
+ echo -e "\e[32mSuccessfully removed $solr_volume!\e[0m"
+ fi
+ fi
+
+ # Delete old fts.conf before forced switch to flatcurve to ensure update is working properly
+ FTS_CONF_PATH="${SCRIPT_DIR}/data/conf/dovecot/conf.d/fts.conf"
+ if [[ -f "$FTS_CONF_PATH" ]]; then
+ if grep -q "Autogenerated by mailcow" "$FTS_CONF_PATH"; then
+ rm -rf $FTS_CONF_PATH
+ fi
+ fi
+}
\ No newline at end of file
diff --git a/mailcow/src/mailcow-dockerized/_modules/scripts/new_options.sh b/mailcow/src/mailcow-dockerized/_modules/scripts/new_options.sh
new file mode 100644
index 0000000..2c39c8a
--- /dev/null
+++ b/mailcow/src/mailcow-dockerized/_modules/scripts/new_options.sh
@@ -0,0 +1,317 @@
+#!/usr/bin/env bash
+# _modules/scripts/new_options.sh
+# THIS SCRIPT IS DESIGNED TO BE RUNNING BY MAILCOW SCRIPTS ONLY!
+# DO NOT, AGAIN, NOT TRY TO RUN THIS SCRIPT STANDALONE!!!!!!
+
+adapt_new_options() {
+
+ CONFIG_ARRAY=(
+ "AUTODISCOVER_SAN"
+ "SKIP_LETS_ENCRYPT"
+ "SKIP_SOGO"
+ "USE_WATCHDOG"
+ "WATCHDOG_NOTIFY_EMAIL"
+ "WATCHDOG_NOTIFY_WEBHOOK"
+ "WATCHDOG_NOTIFY_WEBHOOK_BODY"
+ "WATCHDOG_NOTIFY_BAN"
+ "WATCHDOG_NOTIFY_START"
+ "WATCHDOG_EXTERNAL_CHECKS"
+ "WATCHDOG_SUBJECT"
+ "SKIP_CLAMD"
+ "SKIP_OLEFY"
+ "SKIP_IP_CHECK"
+ "ADDITIONAL_SAN"
+ "DOVEADM_PORT"
+ "IPV4_NETWORK"
+ "IPV6_NETWORK"
+ "LOG_LINES"
+ "SNAT_TO_SOURCE"
+ "SNAT6_TO_SOURCE"
+ "COMPOSE_PROJECT_NAME"
+ "DOCKER_COMPOSE_VERSION"
+ "SQL_PORT"
+ "API_KEY"
+ "API_KEY_READ_ONLY"
+ "API_ALLOW_FROM"
+ "MAILDIR_GC_TIME"
+ "MAILDIR_SUB"
+ "ACL_ANYONE"
+ "FTS_HEAP"
+ "FTS_PROCS"
+ "SKIP_FTS"
+ "ENABLE_SSL_SNI"
+ "ALLOW_ADMIN_EMAIL_LOGIN"
+ "SKIP_HTTP_VERIFICATION"
+ "SOGO_EXPIRE_SESSION"
+ "SOGO_URL_ENCRYPTION_KEY"
+ "REDIS_PORT"
+ "REDISPASS"
+ "DOVECOT_MASTER_USER"
+ "DOVECOT_MASTER_PASS"
+ "MAILCOW_PASS_SCHEME"
+ "ADDITIONAL_SERVER_NAMES"
+ "WATCHDOG_VERBOSE"
+ "WEBAUTHN_ONLY_TRUSTED_VENDORS"
+ "SPAMHAUS_DQS_KEY"
+ "SKIP_UNBOUND_HEALTHCHECK"
+ "DISABLE_NETFILTER_ISOLATION_RULE"
+ "HTTP_REDIRECT"
+ "ENABLE_IPV6"
+ "ACME_DNS_CHALLENGE"
+ "ACME_DNS_PROVIDER"
+ "ACME_ACCOUNT_EMAIL"
+ )
+
+ sed -i --follow-symlinks '$a\' mailcow.conf
+ for option in ${CONFIG_ARRAY[@]}; do
+ if grep -q "^#\?${option}=" mailcow.conf; then
+ continue
+ fi
+
+ echo "Adding new option \"${option}\" to mailcow.conf"
+
+ case "${option}" in
+ AUTODISCOVER_SAN)
+ echo '# Obtain certificates for autodiscover.* and autoconfig.* domains.' >> mailcow.conf
+ echo '# This can be useful to switch off in case you are in a scenario where a reverse proxy already handles those.' >> mailcow.conf
+ echo '# There are mixed scenarios where ports 80,443 are occupied and you do not want to share certs' >> mailcow.conf
+ echo '# between services. So acme-mailcow obtains for maildomains and all web-things get handled' >> mailcow.conf
+ echo '# in the reverse proxy.' >> mailcow.conf
+ echo 'AUTODISCOVER_SAN=y' >> mailcow.conf
+ ;;
+
+ DOCKER_COMPOSE_VERSION)
+ echo "# Used Docker Compose version" >> mailcow.conf
+ echo "# Switch here between native (compose plugin) and standalone" >> mailcow.conf
+ echo "# For more informations take a look at the mailcow docs regarding the configuration options." >> mailcow.conf
+ echo "# Normally this should be untouched but if you decided to use either of those you can switch it manually here." >> mailcow.conf
+ echo "# Please be aware that at least one of those variants should be installed on your machine or mailcow will fail." >> mailcow.conf
+ echo "" >> mailcow.conf
+ echo "DOCKER_COMPOSE_VERSION=${DOCKER_COMPOSE_VERSION}" >> mailcow.conf
+ ;;
+
+ DOVEADM_PORT)
+ echo "DOVEADM_PORT=127.0.0.1:19991" >> mailcow.conf
+ ;;
+
+ LOG_LINES)
+ echo '# Max log lines per service to keep in Redis logs' >> mailcow.conf
+ echo "LOG_LINES=9999" >> mailcow.conf
+ ;;
+ IPV4_NETWORK)
+ echo '# Internal IPv4 /24 subnet, format n.n.n. (expands to n.n.n.0/24)' >> mailcow.conf
+ echo "IPV4_NETWORK=172.22.1" >> mailcow.conf
+ ;;
+ IPV6_NETWORK)
+ echo '# Internal IPv6 subnet in fc00::/7' >> mailcow.conf
+ echo "IPV6_NETWORK=fd4d:6169:6c63:6f77::/64" >> mailcow.conf
+ ;;
+ SQL_PORT)
+ echo '# Bind SQL to 127.0.0.1 on port 13306' >> mailcow.conf
+ echo "SQL_PORT=127.0.0.1:13306" >> mailcow.conf
+ ;;
+ API_KEY)
+ echo '# Create or override API key for web UI' >> mailcow.conf
+ echo "#API_KEY=" >> mailcow.conf
+ ;;
+ API_KEY_READ_ONLY)
+ echo '# Create or override read-only API key for web UI' >> mailcow.conf
+ echo "#API_KEY_READ_ONLY=" >> mailcow.conf
+ ;;
+ API_ALLOW_FROM)
+ echo '# Must be set for API_KEY to be active' >> mailcow.conf
+ echo '# IPs only, no networks (networks can be set via UI)' >> mailcow.conf
+ echo "#API_ALLOW_FROM=" >> mailcow.conf
+ ;;
+ SNAT_TO_SOURCE)
+ echo '# Use this IPv4 for outgoing connections (SNAT)' >> mailcow.conf
+ echo "#SNAT_TO_SOURCE=" >> mailcow.conf
+ ;;
+ SNAT6_TO_SOURCE)
+ echo '# Use this IPv6 for outgoing connections (SNAT)' >> mailcow.conf
+ echo "#SNAT6_TO_SOURCE=" >> mailcow.conf
+ ;;
+ MAILDIR_GC_TIME)
+ echo '# Garbage collector cleanup' >> mailcow.conf
+ echo '# Deleted domains and mailboxes are moved to /var/vmail/_garbage/timestamp_sanitizedstring' >> mailcow.conf
+ echo '# How long should objects remain in the garbage until they are being deleted? (value in minutes)' >> mailcow.conf
+ echo '# Check interval is hourly' >> mailcow.conf
+ echo 'MAILDIR_GC_TIME=1440' >> mailcow.conf
+ ;;
+ ACL_ANYONE)
+ echo '# Set this to "allow" to enable the anyone pseudo user. Disabled by default.' >> mailcow.conf
+ echo '# When enabled, ACL can be created, that apply to "All authenticated users"' >> mailcow.conf
+ echo '# This should probably only be activated on mail hosts, that are used exclusively by one organisation.' >> mailcow.conf
+ echo '# Otherwise a user might share data with too many other users.' >> mailcow.conf
+ echo 'ACL_ANYONE=disallow' >> mailcow.conf
+ ;;
+ FTS_HEAP)
+ echo '# Dovecot Indexing (FTS) Process maximum heap size in MB, there is no recommendation, please see Dovecot docs.' >> mailcow.conf
+ echo '# Flatcurve is used as FTS Engine. It is supposed to be pretty efficient in CPU and RAM consumption.' >> mailcow.conf
+ echo '# Please always monitor your Resource consumption!' >> mailcow.conf
+ echo "FTS_HEAP=128" >> mailcow.conf
+ ;;
+ SKIP_FTS)
+ echo '# Skip FTS (Fulltext Search) for Dovecot on low-memory, low-threaded systems or if you simply want to disable it.' >> mailcow.conf
+ echo "# Dovecot inside mailcow use Flatcurve as FTS Backend." >> mailcow.conf
+ echo "SKIP_FTS=y" >> mailcow.conf
+ ;;
+ FTS_PROCS)
+ echo '# Controls how many processes the Dovecot indexing process can spawn at max.' >> mailcow.conf
+ echo '# Too many indexing processes can use a lot of CPU and Disk I/O' >> mailcow.conf
+ echo '# Please visit: https://doc.dovecot.org/configuration_manual/service_configuration/#indexer-worker for more informations' >> mailcow.conf
+ echo "FTS_PROCS=1" >> mailcow.conf
+ ;;
+ ENABLE_SSL_SNI)
+ echo '# Create seperate certificates for all domains - y/n' >> mailcow.conf
+ echo '# this will allow adding more than 100 domains, but some email clients will not be able to connect with alternative hostnames' >> mailcow.conf
+ echo '# see https://wiki.dovecot.org/SSL/SNIClientSupport' >> mailcow.conf
+ echo "ENABLE_SSL_SNI=n" >> mailcow.conf
+ ;;
+ SKIP_SOGO)
+ echo '# Skip SOGo: Will disable SOGo integration and therefore webmail, DAV protocols and ActiveSync support (experimental, unsupported, not fully implemented) - y/n' >> mailcow.conf
+ echo "SKIP_SOGO=n" >> mailcow.conf
+ ;;
+ MAILDIR_SUB)
+ echo '# MAILDIR_SUB defines a path in a users virtual home to keep the maildir in. Leave empty for updated setups.' >> mailcow.conf
+ echo "#MAILDIR_SUB=Maildir" >> mailcow.conf
+ echo "MAILDIR_SUB=" >> mailcow.conf
+ ;;
+ WATCHDOG_NOTIFY_WEBHOOK)
+ echo '# Send notifications to a webhook URL that receives a POST request with the content type "application/json".' >> mailcow.conf
+ echo '# You can use this to send notifications to services like Discord, Slack and others.' >> mailcow.conf
+ echo '#WATCHDOG_NOTIFY_WEBHOOK=https://discord.com/api/webhooks/XXXXXXXXXXXXXXXXXXX/XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX' >> mailcow.conf
+ ;;
+ WATCHDOG_NOTIFY_WEBHOOK_BODY)
+ echo '# JSON body included in the webhook POST request. Needs to be in single quotes.' >> mailcow.conf
+ echo '# Following variables are available: SUBJECT, BODY' >> mailcow.conf
+ WEBHOOK_BODY='{"username": "mailcow Watchdog", "content": "**${SUBJECT}**\n${BODY}"}'
+ echo "#WATCHDOG_NOTIFY_WEBHOOK_BODY='${WEBHOOK_BODY}'" >> mailcow.conf
+ ;;
+ WATCHDOG_NOTIFY_BAN)
+ echo '# Notify about banned IP. Includes whois lookup.' >> mailcow.conf
+ echo "WATCHDOG_NOTIFY_BAN=y" >> mailcow.conf
+ ;;
+ WATCHDOG_NOTIFY_START)
+ echo '# Send a notification when the watchdog is started.' >> mailcow.conf
+ echo "WATCHDOG_NOTIFY_START=y" >> mailcow.conf
+ ;;
+ WATCHDOG_SUBJECT)
+ echo '# Subject for watchdog mails. Defaults to "Watchdog ALERT" followed by the error message.' >> mailcow.conf
+ echo "#WATCHDOG_SUBJECT=" >> mailcow.conf
+ ;;
+ WATCHDOG_EXTERNAL_CHECKS)
+ echo '# Checks if mailcow is an open relay. Requires a SAL. More checks will follow.' >> mailcow.conf
+ echo '# No data is collected. Opt-in and anonymous.' >> mailcow.conf
+ echo '# Will only work with unmodified mailcow setups.' >> mailcow.conf
+ echo "WATCHDOG_EXTERNAL_CHECKS=n" >> mailcow.conf
+ ;;
+ SOGO_EXPIRE_SESSION)
+ echo '# SOGo session timeout in minutes' >> mailcow.conf
+ echo "SOGO_EXPIRE_SESSION=480" >> mailcow.conf
+ ;;
+ REDIS_PORT)
+ echo "REDIS_PORT=127.0.0.1:7654" >> mailcow.conf
+ ;;
+ DOVECOT_MASTER_USER)
+ echo '# DOVECOT_MASTER_USER and _PASS must _both_ be provided. No special chars.' >> mailcow.conf
+ echo '# Empty by default to auto-generate master user and password on start.' >> mailcow.conf
+ echo '# User expands to DOVECOT_MASTER_USER@mailcow.local' >> mailcow.conf
+ echo '# LEAVE EMPTY IF UNSURE' >> mailcow.conf
+ echo "DOVECOT_MASTER_USER=" >> mailcow.conf
+ ;;
+ DOVECOT_MASTER_PASS)
+ echo '# LEAVE EMPTY IF UNSURE' >> mailcow.conf
+ echo "DOVECOT_MASTER_PASS=" >> mailcow.conf
+ ;;
+ MAILCOW_PASS_SCHEME)
+ echo '# Password hash algorithm' >> mailcow.conf
+ echo '# Only certain password hash algorithm are supported. For a fully list of supported schemes,' >> mailcow.conf
+ echo '# see https://docs.mailcow.email/models/model-passwd/' >> mailcow.conf
+ echo "MAILCOW_PASS_SCHEME=BLF-CRYPT" >> mailcow.conf
+ ;;
+ ADDITIONAL_SERVER_NAMES)
+ echo '# Additional server names for mailcow UI' >> mailcow.conf
+ echo '#' >> mailcow.conf
+ echo '# Specify alternative addresses for the mailcow UI to respond to' >> mailcow.conf
+ echo '# This is useful when you set mail.* as ADDITIONAL_SAN and want to make sure mail.maildomain.com will always point to the mailcow UI.' >> mailcow.conf
+ echo '# If the server name does not match a known site, Nginx decides by best-guess and may redirect users to the wrong web root.' >> mailcow.conf
+ echo '# You can understand this as server_name directive in Nginx.' >> mailcow.conf
+ echo '# Comma separated list without spaces! Example: ADDITIONAL_SERVER_NAMES=a.b.c,d.e.f' >> mailcow.conf
+ echo 'ADDITIONAL_SERVER_NAMES=' >> mailcow.conf
+ ;;
+ WEBAUTHN_ONLY_TRUSTED_VENDORS)
+ echo "# WebAuthn device manufacturer verification" >> mailcow.conf
+ echo '# After setting WEBAUTHN_ONLY_TRUSTED_VENDORS=y only devices from trusted manufacturers are allowed' >> mailcow.conf
+ echo '# root certificates can be placed for validation under mailcow-dockerized/data/web/inc/lib/WebAuthn/rootCertificates' >> mailcow.conf
+ echo 'WEBAUTHN_ONLY_TRUSTED_VENDORS=n' >> mailcow.conf
+ ;;
+ SPAMHAUS_DQS_KEY)
+ echo "# Spamhaus Data Query Service Key" >> mailcow.conf
+ echo '# Optional: Leave empty for none' >> mailcow.conf
+ echo '# Enter your key here if you are using a blocked ASN (OVH, AWS, Cloudflare e.g) for the unregistered Spamhaus Blocklist.' >> mailcow.conf
+ echo '# If empty, it will completely disable Spamhaus blocklists if it detects that you are running on a server using a blocked AS.' >> mailcow.conf
+ echo '# Otherwise it will work as usual.' >> mailcow.conf
+ echo 'SPAMHAUS_DQS_KEY=' >> mailcow.conf
+ ;;
+ WATCHDOG_VERBOSE)
+ echo '# Enable watchdog verbose logging' >> mailcow.conf
+ echo 'WATCHDOG_VERBOSE=n' >> mailcow.conf
+ ;;
+ SKIP_UNBOUND_HEALTHCHECK)
+ echo '# Skip Unbound (DNS Resolver) Healthchecks (NOT Recommended!) - y/n' >> mailcow.conf
+ echo 'SKIP_UNBOUND_HEALTHCHECK=n' >> mailcow.conf
+ ;;
+ DISABLE_NETFILTER_ISOLATION_RULE)
+ echo '# Prevent netfilter from setting an iptables/nftables rule to isolate the mailcow docker network - y/n' >> mailcow.conf
+ echo '# CAUTION: Disabling this may expose container ports to other neighbors on the same subnet, even if the ports are bound to localhost' >> mailcow.conf
+ echo 'DISABLE_NETFILTER_ISOLATION_RULE=n' >> mailcow.conf
+ ;;
+ HTTP_REDIRECT)
+ echo '# Redirect HTTP connections to HTTPS - y/n' >> mailcow.conf
+ echo 'HTTP_REDIRECT=n' >> mailcow.conf
+ ;;
+ ENABLE_IPV6)
+ echo '# IPv6 Controller Section' >> mailcow.conf
+ echo '# This variable controls the usage of IPv6 within mailcow.' >> mailcow.conf
+ echo '# Can either be true or false | Defaults to true' >> mailcow.conf
+ echo '# WARNING: MAKE SURE TO PROPERLY CONFIGURE IPv6 ON YOUR HOST FIRST BEFORE ENABLING THIS AS FAULTY CONFIGURATIONS CAN LEAD TO OPEN RELAYS!' >> mailcow.conf
+ echo '# A COMPLETE DOCKER STACK REBUILD (compose down && compose up -d) IS NEEDED TO APPLY THIS.' >> mailcow.conf
+ echo ENABLE_IPV6=${IPV6_BOOL} >> mailcow.conf
+ ;;
+ SKIP_CLAMD)
+ echo '# Skip ClamAV (clamd-mailcow) anti-virus (Rspamd will auto-detect a missing ClamAV container) - y/n' >> mailcow.conf
+ echo 'SKIP_CLAMD=n' >> mailcow.conf
+ ;;
+ SKIP_OLEFY)
+ echo '# Skip Olefy (olefy-mailcow) anti-virus for Office documents (Rspamd will auto-detect a missing Olefy container) - y/n' >> mailcow.conf
+ echo 'SKIP_OLEFY=n' >> mailcow.conf
+ ;;
+ REDISPASS)
+ echo "REDISPASS=$(LC_ALL=C </dev/urandom tr -dc A-Za-z0-9 2>/dev/null | head -c 28)" >> mailcow.conf
+ ;;
+ SOGO_URL_ENCRYPTION_KEY)
+ echo '# SOGo URL encryption key (exactly 16 characters, limited to A–Z, a–z, 0–9)' >> mailcow.conf
+ echo '# This key is used to encrypt email addresses within SOGo URLs' >> mailcow.conf
+ echo "SOGO_URL_ENCRYPTION_KEY=$(LC_ALL=C </dev/urandom tr -dc A-Za-z0-9 2>/dev/null | head -c 16)" >> mailcow.conf
+ ;;
+ ACME_DNS_CHALLENGE)
+ echo '# Enable DNS-01 challenge for ACME (acme-mailcow) - y/n' >> mailcow.conf
+ echo '# This requires you to set ACME_DNS_PROVIDER and ACME_ACCOUNT_EMAIL below' >> mailcow.conf
+ echo 'ACME_DNS_CHALLENGE=n' >> mailcow.conf
+ ;;
+ ACME_DNS_PROVIDER)
+ echo '# DNS provider for DNS-01 challenge (e.g. dns_cf, dns_azure, dns_gd, etc.)' >> mailcow.conf
+ echo '# See the dns-01 provider documentation for more information.' >> mailcow.conf
+ echo 'ACME_DNS_PROVIDER=dns_xxx' >> mailcow.conf
+ ;;
+ ACME_ACCOUNT_EMAIL)
+ echo '# Account email for ACME DNS-01 challenge registration' >> mailcow.conf
+ echo 'ACME_ACCOUNT_EMAIL=me@example.com' >> mailcow.conf
+ ;;
+ *)
+ echo "${option}=" >> mailcow.conf
+ ;;
+ esac
+ done
+}
\ No newline at end of file