1 | #!/bin/sh |
---|
2 | |
---|
3 | |
---|
4 | ### http://notes.sagredo.eu/en/qmail-notes-185/configuring-qmail-83.html |
---|
5 | |
---|
6 | # create groups and users |
---|
7 | . /etc/qmail.rc.config |
---|
8 | qmail_user() { |
---|
9 | for I in _0 _1 _2 _3 _4 _5 _6; do |
---|
10 | eval CUR_USER=\$QMAIL_USER$I |
---|
11 | USER=`echo "$CUR_USER" | cut -d ':' -f 1` |
---|
12 | grep "$USER" /etc/passwd > /dev/null && userdel $USER |
---|
13 | done |
---|
14 | for I in _0 _1; do |
---|
15 | eval CUR_GROUP=\$QMAIL_GROUP$I |
---|
16 | GROUP=`echo "$CUR_GROUP" | cut -d ':' -f 1` |
---|
17 | grep "$GROUP" /etc/group > /dev/null && groupdel $GROUP |
---|
18 | done |
---|
19 | for I in _0 _1; do |
---|
20 | eval CUR_GROUP=\$QMAIL_GROUP$I |
---|
21 | GROUP=`echo "$CUR_GROUP" | cut -d ':' -f 1` |
---|
22 | CGID=`echo "$CUR_GROUP" | cut -d ':' -f 2` |
---|
23 | groupadd -g $CGID $GROUP |
---|
24 | done |
---|
25 | for I in _0 _1 _2 _3 _4 _5 _6; do |
---|
26 | eval CUR_USER=\$QMAIL_USER$I |
---|
27 | USER=`echo "$CUR_USER" | cut -d ':' -f 1` |
---|
28 | CUID=`echo "$CUR_USER" | cut -d ':' -f 2` |
---|
29 | GROUP=`echo "$CUR_USER" | cut -d ':' -f 3` |
---|
30 | HOME=`echo "$CUR_USER" | cut -d ':' -f 4` |
---|
31 | useradd -u $CUID -g $GROUP -d $HOME -s /bin/false $USER |
---|
32 | done |
---|
33 | } |
---|
34 | svcstop /service/nscd #this script doesnt like caching |
---|
35 | qmail_user |
---|
36 | svcreset /service/nscd |
---|
37 | |
---|
38 | |
---|
39 | # logging via syslog in /var/log/maillog from now on |
---|
40 | rm -rf /var/log/qmail/ |
---|
41 | |
---|
42 | |
---|
43 | # permissions |
---|
44 | . /etc/qmail.permissions |
---|
45 | qmail_permissions |
---|
46 | |
---|
47 | |
---|
48 | #stuff |
---|
49 | svc -d /service/qmail-* |
---|
50 | svcstop /service/nscd/ |
---|
51 | svcreset /service/nscd/ |
---|
52 | touch /var/qmail/control/smtpplugins |
---|
53 | svc -dx /service/qmail-* |
---|
54 | |
---|
55 | #update old config? |
---|
56 | if ! grep "127.0.0.3" /etc/qmail/tcp.smtp; then |
---|
57 | mv /etc/qmail/tcp.smtp.new /etc/qmail/tcp.smtp |
---|
58 | fi |
---|
59 | |
---|
60 | |
---|
61 | #regenerate cdb |
---|
62 | tcprules /etc/qmail/tcp.smtp.cdb /etc/qmail/tcp.smtp.tmp < /etc/qmail/tcp.smtp |
---|
63 | tcprules /etc/qmail/tcp.submission.cdb /etc/qmail/tcp.submission.tmp < /etc/qmail/tcp.submission |
---|
64 | |
---|
65 | |
---|
66 | #TLS configuration |
---|
67 | if ! [ -e /var/qmail/control/dh2048.pem ]; then |
---|
68 | openssl dhparam -out /var/qmail/control/dh2048.pem.tmp 2048 || exit 1 |
---|
69 | chown qmaild /var/qmail/control/dh2048.pem.tmp || exit 1 |
---|
70 | chmod 400 /var/qmail/control/dh2048.pem.tmp || exit 1 |
---|
71 | mv /var/qmail/control/dh2048.pem.tmp /var/qmail/control/dh2048.pem || exit 1 |
---|
72 | fi |
---|
73 | |
---|
74 | |
---|
75 | #certificate (uses letsencrypt) |
---|
76 | rm /var/qmail/control/servercert.pem |
---|
77 | ln -s /usr/webint/ssl/certandkey.pem /var/qmail/control/servercert.pem |
---|
78 | |
---|
79 | #fix queue |
---|
80 | qfixq live |
---|
81 | |
---|
82 | |
---|
83 | #enable scripts (x is disble to prevent starting up after first installation of binary) |
---|
84 | chmod +x /service/qmail-smtpd/run /service/qmail-send/run /service/qmail-send/log/run /service/qmail-smtpd/log/run /service/qmail-submission/run /service/qmail-submission/log/run |
---|