docker-compose.yml

name: mailu
services:
  # External dependencies
  redis:
    image: redis:alpine
    restart: always
    volumes:
      - "/data/redis:/data"
    depends_on:
      - resolver
    dns:
      - 10.1.1.254

  # Core services
  front:
    image: ghcr.io/mailu/nginx:latest
    restart: always
    env_file: mailu.env
    logging:
      driver: journald
      options:
        tag: mailu-front
    ports:
      - "25:25"
      - "465:465"
      - "587:587"
      - "110:110"
      - "995:995"
      - "143:143"
      - "993:993"
      - "4190:4190"
      - "172.17.0.1:59000:443"
    networks:
      - default
      - webmail
      - radicale
    volumes:
      - "/data/certs:/certs"
      - "/data/overrides/nginx:/overrides:ro"
    depends_on:
      - resolver
    dns:
      - 10.1.1.254

  resolver:
    image: ghcr.io/mailu/unbound:latest
    env_file: mailu.env
    logging:
      driver: journald
      options:
        tag: mailu-resolver
    restart: always
    networks:
      default:
        ipv4_address: 10.1.1.254

  admin:
    image: ghcr.io/mailu/admin:latest
    restart: always
    env_file: mailu.env
    logging:
      driver: journald
      options:
        tag: mailu-admin
    volumes:
      - "/data/data:/data"
      - "/data/dkim:/dkim"
    depends_on:
      - redis
      - resolver
    dns:
      - 10.1.1.254

  imap:
    image: ghcr.io/mailu/dovecot:latest
    restart: always
    env_file: mailu.env
    logging:
      driver: journald
      options:
        tag: mailu-imap
    volumes:
      - "/data/mail:/mail"
      - "/data/overrides/dovecot:/overrides:ro"
    networks:
      - default
      - fts_attachments
    depends_on:
      - front
      - fts_attachments
      - resolver
    dns:
      - 10.1.1.254

  smtp:
    image: ghcr.io/mailu/postfix:latest
    restart: always
    env_file: mailu.env
    logging:
      driver: journald
      options:
        tag: mailu-smtp
    volumes:
      - "/data/mailqueue:/queue"
      - "/data/overrides/postfix:/overrides:ro"
    depends_on:
      - front
      - resolver
    dns:
      - 10.1.1.254

  oletools:
    image: ghcr.io/mailu/oletools:latest
    hostname: oletools
    logging:
      driver: journald
      options:
        tag: mailu-oletools
    restart: always
    networks:
      - oletools
    depends_on:
      - resolver
    dns:
      - 10.1.1.254

  fts_attachments:
    image: apache/tika:2.9.2.1-full
    hostname: tika
    logging:
      driver: journald
      options:
        tag: mailu-tika
    restart: always
    networks:
      - fts_attachments
    depends_on:
      - resolver
    dns:
      - 10.1.1.254
    healthcheck:
      test: ["CMD-SHELL", "wget -nv -t1 -O /dev/null http://127.0.0.1:9998/tika || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 10s

  antispam:
    image: ghcr.io/mailu/rspamd:latest
    hostname: antispam
    restart: always
    env_file: mailu.env
    logging:
      driver: journald
      options:
        tag: mailu-antispam
    networks:
      - default
      - oletools
      - clamav
    volumes:
      - "/data/filter:/var/lib/rspamd"
      - "/data/overrides/rspamd:/overrides:ro"
    depends_on:
      - front
      - redis
      - oletools
      - antivirus
      - resolver
    dns:
      - 10.1.1.254

  # Optional services
  antivirus:
    image: clamav/clamav-debian:1.2.3-45
    restart: always
    logging:
      driver: journald
      options:
        tag: mailu-antivirus
    networks:
      - clamav
    volumes:
      - "/data/filter/clamav:/var/lib/clamav"
    healthcheck:
      test: ["CMD-SHELL", "kill -0 `cat /tmp/clamd.pid` && kill -0 `cat /tmp/freshclam.pid`"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 10s

  webdav:
    image: ghcr.io/mailu/radicale:latest
    restart: always
    logging:
      driver: journald
      options:
        tag: mailu-webdav
    volumes:
      - "/data/dav:/data"
    networks:
      - radicale

  fetchmail:
    image: ghcr.io/mailu/fetchmail:latest
    restart: always
    env_file: mailu.env
    logging:
      driver: journald
      options:
        tag: mailu-fetchmail
    volumes:
      - "/data/data/fetchmail:/data"
    depends_on:
      - admin
      - smtp
      - imap
      - resolver
    dns:
      - 10.1.1.254

  # Webmail
  webmail:
    image: ghcr.io/mailu/webmail:latest 
    restart: always
    env_file: mailu.env
    logging:
      driver: journald
      options:
        tag: mailu-webmail
    volumes:
      - "/data/webmail:/data"
      - "/data/overrides/snappymail:/overrides:ro"
    networks:
      - webmail
    depends_on:
      - front

networks:
  default:
    enable_ipv6: true
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: 10.1.1.0/24
        - subnet: fdab:03bb:c928:beef::/64
  radicale:
    driver: bridge
  webmail:
    driver: bridge
  clamav:
    driver: bridge
  oletools:
    driver: bridge
    internal: true
  fts_attachments:
    driver: bridge
    internal: true