diff options
| author | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-06-09 01:34:02 +0900 |
|---|---|---|
| committer | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-06-09 01:34:02 +0900 |
| commit | 733ae6e5c4362aa85d54cb7b0674483d3f6862cd (patch) | |
| tree | 20f311ef697b06e46c91b0a55a6e4e11395b1583 /mail | |
| parent | 72ff02cf231c60314ca4557c576f513088830e40 (diff) | |
Switch mail container from SES relay to direct delivery
Port 25 outbound is no longer blocked on Hetzner, so SES relay is
unnecessary. Remove relayhost, SASL auth config, and libsasl2-modules.
Postfix now delivers directly to recipient MX; inet_protocols=ipv4
already present to avoid IPv6 PTR issues.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'mail')
| -rw-r--r-- | mail/Dockerfile | 1 | ||||
| -rwxr-xr-x | mail/entrypoint.sh | 7 | ||||
| -rw-r--r-- | mail/postfix/main.cf | 8 |
3 files changed, 2 insertions, 14 deletions
diff --git a/mail/Dockerfile b/mail/Dockerfile index 8552253..f35efcf 100644 --- a/mail/Dockerfile +++ b/mail/Dockerfile @@ -2,7 +2,6 @@ FROM debian:bookworm-slim RUN apt-get update && apt-get install -y --no-install-recommends \ postfix \ - libsasl2-modules \ opendkim \ opendkim-tools \ rsyslog \ diff --git a/mail/entrypoint.sh b/mail/entrypoint.sh index 45798fe..9ba6655 100755 --- a/mail/entrypoint.sh +++ b/mail/entrypoint.sh @@ -35,13 +35,6 @@ cp -f /etc/hosts /var/spool/postfix/etc/hosts 2>/dev/null || true cp -f /etc/services /var/spool/postfix/etc/services 2>/dev/null || true cp -f /etc/nsswitch.conf /var/spool/postfix/etc/nsswitch.conf 2>/dev/null || true -# Create sasl_passwd for SES relay from environment variables -if [[ -n "${SES_ACCESS_KEY_ID:-}" && -n "${SES_SMTP_PASSWORD:-}" ]]; then - echo "[email-smtp.us-east-1.amazonaws.com]:587 ${SES_ACCESS_KEY_ID}:${SES_SMTP_PASSWORD}" > /etc/postfix/sasl_passwd - chmod 600 /etc/postfix/sasl_passwd - postmap /etc/postfix/sasl_passwd -fi - # Start Postfix postfix start diff --git a/mail/postfix/main.cf b/mail/postfix/main.cf index 4066839..0684ffb 100644 --- a/mail/postfix/main.cf +++ b/mail/postfix/main.cf @@ -19,12 +19,8 @@ local_transport = error:local delivery disabled smtpd_relay_restrictions = permit_mynetworks, reject smtpd_recipient_restrictions = permit_mynetworks, reject -# Relay via Amazon SES (port 25 outbound is blocked by Hetzner) -relayhost = [email-smtp.us-east-1.amazonaws.com]:587 -smtp_sasl_auth_enable = yes -smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd -smtp_sasl_security_options = noanonymous -smtp_tls_security_level = encrypt +# Direct delivery (no relay) +smtp_tls_security_level = may smtp_tls_loglevel = 1 # DKIM signing via OpenDKIM milter on localhost:8891 |