forked from itsthejb/docker-ispconfig
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathDockerfile
369 lines (351 loc) · 21.5 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
# syntax=docker/dockerfile:latest
#
# ## .
# ## ## ## ==
# ## ## ## ## ===
# /""""""""""""""""\___/ ===
# ~~~ {~~ ~~~~ ~~~ ~~~~ ~~ ~ / ===- ~~~
# \______ o __/
# \ \ __/
# \____\______/
#
# | |
# __ | __ __ | _ __ _
# / \| / \ / |/ / _\ |
# \__/| \__/ \__ |\_ \__ |
#
# Dockerfile for ISPConfig with MariaDB database
#
# Originally based on:
# https://www.howtoforge.com/perfect-server-debian-10-buster-apache-bind-dovecot-ispconfig-3-1/
# https://www.howtoforge.com/update-the-ispconfig-perfect-server-from-debian-10-to-debian-11/
#
FROM debian:12.6-slim
LABEL maintainer="[email protected]"
LABEL description="ISPConfig 3.2 on Debian Bookworm, with Roundcube mail, phpMyAdmin and more"
# Frequent: versioning
ARG BUILD_ISPCONFIG_VERSION="3.2.12"
ARG BUILD_ROUNDCUBE_VERSION="1.6.1"
ARG BUILD_PHPMYADMIN_VERSION="5.2.1"
ENV BUILD_PHP_VERS="8.2"
ARG BUILD_JAILKIT_VERSION="2.23"
# Other arguments
ARG BUILD_CERTBOT="yes"
ARG BUILD_HOSTNAME="myhost.test.com"
ARG BUILD_ISPCONFIG_DROP_EXISTING="no"
ARG BUILD_ISPCONFIG_MYSQL_USER="ispconfig"
ARG BUILD_ISPCONFIG_MYSQL_DATABASE="dbispconfig"
ARG BUILD_ISPCONFIG_PORT="8080"
ARG BUILD_ISPCONFIG_USE_SSL="yes"
ARG BUILD_LOCALE="C"
ARG BUILD_MYSQL_HOST="localhost"
ARG BUILD_MYSQL_PW="pass"
ARG BUILD_MYSQL_REMOTE_ACCESS_HOST="172.%.%.%"
ARG BUILD_PHPMYADMIN="yes"
ARG BUILD_PHPMYADMIN_PW="phpmyadmin"
ARG BUILD_PHPMYADMIN_USER="phpmyadmin"
ARG BUILD_PRINTING="no"
# https://packages.debian.org/bookworm/pure-ftpd-common
ARG BUILD_PUREFTPD_VERSION_BASE="1.0.50"
ARG BUILD_PUREFTPD_VERSION_FULL="${BUILD_PUREFTPD_VERSION_BASE}-2.1+b2"
ARG BUILD_REDIS="yes"
ARG BUILD_ROUNDCUBE_DB="roundcube"
ARG BUILD_ROUNDCUBE_DIR="/opt/roundcube"
ARG BUILD_ROUNDCUBE_PW="secretpassword"
ARG BUILD_ROUNDCUBE_USER="roundcube"
ARG BUILD_TZ="Europe/London"
# Let the container know that there is no tty
ENV DEBIAN_FRONTEND=noninteractive
ENV POSTGREY_DELAY=300
ENV POSTGREY_MAX_AGE=35
ENV POSTGREY_TEXT="Delayed by postgrey"
# --- prep
SHELL ["/bin/bash", "-Eeuo", "pipefail", "-c"]
# --- set timezone and locale
ENV LANG="${BUILD_LOCALE}.UTF-8"
ENV LANGUAGE="${BUILD_LOCALE}:en"
ENV LC_ALL="${BUILD_LOCALE}.UTF-8"
# hadolint ignore=SC1091
RUN . /etc/os-release && \
touch /etc/apt/sources.list && \
echo "deb-src http://deb.debian.org/debian $VERSION_CODENAME main non-free-firmware" >> /etc/apt/sources.list && \
echo "deb-src http://deb.debian.org/debian $VERSION_CODENAME-updates main non-free-firmware" >> /etc/apt/sources.list && \
echo "deb-src http://deb.debian.org/debian-security/ $VERSION_CODENAME-security main non-free-firmware" >> /etc/apt/sources.list && \
apt-get -qq -o Dpkg::Use-Pty=0 update && \
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install apt-utils locales && \
sed -i -e "s/# ${BUILD_LOCALE}.UTF-8 UTF-8/${BUILD_LOCALE}.UTF-8 UTF-8/" /etc/locale.gen && \
locale-gen && \
ln -fs /usr/share/zoneinfo/${BUILD_TZ} /etc/localtime && \
dpkg-reconfigure -f noninteractive tzdata && \
# --- 1 Preliminary
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install borgbackup cron patch rsyslog rsyslog-relp logrotate supervisor git sendemail wget sudo && \
ln -fs /usr/bin/true /usr/bin/systemctl && \
# Create the log file to be able to run tail
touch /var/log/cron.log && \
touch /var/spool/cron/root && \
crontab /var/spool/cron/root && \
# --- 2 Install the SSH server, Install a shell text editor
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install ssh openssh-server nano vim-nox && \
# --- 6 Change The Default Shell
printf "dash dash/sh boolean no\n" | debconf-set-selections && \
dpkg-reconfigure dash && \
# --- 7 Synchronize the System Clock
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install ntp ntpdate && \
# --- 8a Install MySQL (optional)
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install mariadb-client && \
if [ "${BUILD_MYSQL_HOST}" = "localhost" ]; then \
printf "mariadb-server mariadb-server/root_password password %s\n" "${BUILD_MYSQL_PW}" | debconf-set-selections && \
printf "mariadb-server mariadb-server/root_password_again password %s\n" "${BUILD_MYSQL_PW}" | debconf-set-selections && \
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install mariadb-server; \
fi; \
rm -rf /var/lib/apt/lists/*
COPY ./build/etc/mysql/debian.cnf /etc/mysql
COPY ./build/etc/mysql/50-server.cnf /etc/mysql/mariadb.conf.d/
RUN if [ "${BUILD_MYSQL_HOST}" = "localhost" ]; then \
sed -i "s|password =|password = ${BUILD_MYSQL_PW}|" /etc/mysql/debian.cnf && \
printf "mysql soft nofile 65535\nmysql hard nofile 65535\n" >> /etc/security/limits.conf && \
mkdir -p /etc/systemd/system/mysql.service.d/ && \
printf "[Service]\nLimitNOFILE=infinity\n" >> /etc/systemd/system/mysql.service.d/limits.conf && \
service mariadb restart && \
printf "SET PASSWORD = PASSWORD('%s');\n" "${BUILD_MYSQL_PW}" | mysql -h ${BUILD_MYSQL_HOST} -uroot -p${BUILD_MYSQL_PW}; \
elif ! mysql -h ${BUILD_MYSQL_HOST} -uroot -p${BUILD_MYSQL_PW}; then \
printf "\e[31mConnection to mysql host \"%s\" with password \"%s\" failed!\e[0m\n" "${BUILD_MYSQL_HOST}" "${BUILD_MYSQL_PW}" && \
exit 1; \
fi; \
# --- 8b Install Postfix, Dovecot, and Binutils
apt-get -qq -o Dpkg::Use-Pty=0 update && \
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install postfix postfix-mysql postfix-doc fetchmail rkhunter binutils dovecot-imapd dovecot-pop3d dovecot-mysql dovecot-sieve dovecot-lmtpd libsasl2-modules && \
rm -rf /var/lib/apt/lists/*
COPY ./build/etc/postfix/master.cf /etc/postfix/master.cf
# --- 9 Install SpamAssassin, and ClamAV
RUN (crontab -l; printf "\n") | sort | uniq | crontab - && \
apt-get -qq -o Dpkg::Use-Pty=0 update && \
apt-get -y --no-install-recommends install spamd clamav sa-compile clamav-daemon unzip bzip2 arj nomarch lzop gnupg2 cabextract p7zip p7zip-full unrar-free lrzip apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-perl libdbd-mysql-perl postgrey && \
rm -rf /var/lib/apt/lists/*
COPY ./build/etc/clamav/clamd.conf /etc/clamav/clamd.conf
RUN (crontab -l; printf "@daily /usr/bin/ionice -c 3 /usr/bin/nice -n +19 /usr/bin/freshclam\n") | sort | uniq | crontab - && \
freshclam --quiet && \
sa-update 2>&1 && \
sa-compile --quiet 2>&1 && \
# --- 10 Install Apache Web Server and PHP
apt-get -qq -o Dpkg::Use-Pty=0 update && \
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install apache2 apache2-suexec-pristine apache2-utils ca-certificates dirmngr dnsutils gnupg gnupg2 haveged imagemagick libapache2-mod-fcgid libapache2-mod-passenger libapache2-mod-php${BUILD_PHP_VERS} libapache2-mod-python libruby lsb-release mcrypt memcached php${BUILD_PHP_VERS}-{cgi,cli,common,curl,fpm,gd,imagick,imap,intl,mbstring,mysql,opcache,pspell,readline,redis,soap,sqlite3,tidy,xml,xsl,yaml,zip} python3 software-properties-common unbound wget && \
ln -sf /etc/php/${BUILD_PHP_VERS} /etc/php/current && \
ln -sf /var/lib/php${BUILD_PHP_VERS}-fpm /var/lib/php-fpm && \
rm -rf /var/lib/apt/lists/* && \
/usr/sbin/a2enmod suexec rewrite ssl actions include dav_fs dav auth_digest cgi headers actions proxy_fcgi alias
COPY ./build/etc/apache2/httpoxy.conf /etc/apache2/conf-available/
COPY ./build/etc/aliases /etc/aliases
RUN apt-get -qq -o Dpkg::Use-Pty=0 update && \
printf "ServerName %s\n" "${BUILD_HOSTNAME}" > /etc/apache2/conf-available/fqdn.conf && \
/usr/sbin/a2enconf fqdn && \
/usr/sbin/a2enconf httpoxy && \
# --- 11 Free SSL RUN mkdir /opt/certbot
[ "${BUILD_CERTBOT}" = "yes" ] && apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install certbot; \
# --- PHP-FPM
/usr/sbin/a2enmod actions proxy_fcgi alias setenvif && \
/usr/sbin/a2enconf php${BUILD_PHP_VERS}-fpm && \
service apache2 restart && \
rm -rf /var/lib/apt/lists/* && \
newaliases
# --- 13 Install PureFTPd [https://github.com/stilliard/docker-pure-ftpd/blob/master/Dockerfile]
WORKDIR /tmp
COPY ./build/etc/default/pure-ftpd-common /etc/default/pure-ftpd-common
RUN apt-get -qq -o Dpkg::Use-Pty=0 update && \
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install build-essential debhelper default-libmysqlclient-dev dpkg-dev dpkg-dev libcap-dev libldap-dev libpam-dev libpq-dev libsodium-dev libssl-dev pure-ftpd=${BUILD_PUREFTPD_VERSION_FULL} && \
apt-get -y source pure-ftpd=${BUILD_PUREFTPD_VERSION_FULL} && \
rm -rf /var/lib/apt/lists/*
WORKDIR /tmp/pure-ftpd-${BUILD_PUREFTPD_VERSION_BASE}
RUN ./configure --with-tls --with-nonroot --quiet && \
sed -i '/CAP_SYS_NICE,/d; /CAP_DAC_READ_SEARCH/d; s/CAP_SYS_CHROOT,/CAP_SYS_CHROOT/;' src/caps_p.h && \
DEB_BUILD_OPTIONS=terse dpkg-buildpackage -b -uc && \
dpkg -i /tmp/pure-ftpd-common*.deb && \
dpkg -i /tmp/pure-ftpd-mysql_*.deb && \
apt-mark hold pure-ftpd=${BUILD_PUREFTPD_VERSION_FULL} pure-ftpd-common pure-ftpd-mysql && \
openssl dhparam -out /etc/ssl/private/pure-ftpd-dhparams.pem 2048 2>&1 && \
# --- 14 Install BIND DNS Server
apt-get -qq -o Dpkg::Use-Pty=0 update && \
printf "do-ip6: no\n" > /etc/unbound/unbound.conf.d/no-ip6v.conf && \
if [ $BUILD_REDIS = "yes" ]; then \
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install redis-server && \
sed -i "s|daemonize yes|daemonize no|" /etc/redis/redis.conf; \
fi; \
apt-get -qq -o Dpkg::Use-Pty=0 update && \
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install rspamd && \
printf "servers = \"localhost\";\n" > /etc/rspamd/local.d/redis.conf && \
printf "nrows = 2500;\n" > /etc/rspamd/local.d/history_redis.conf && \
printf "compress = true;\n" >> /etc/rspamd/local.d/history_redis.conf && \
printf "subject_privacy = false;\n" >> /etc/rspamd/local.d/history_redis.conf && \
sed -i 's|-f /bin/systemctl|-d /run/systemd/system|' /etc/logrotate.d/rspamd && \
# --- 15 Install awffull, AWStats, goaccess
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install awffull awstats goaccess geoip-database libclass-dbi-mysql-perl libtimedate-perl && \
rm -rf /var/lib/apt/lists/*
COPY ./build/etc/cron.d/awstats /etc/cron.d/
# --- 17 Install fail2ban and UFW Firewall
RUN touch /var/log/auth.log && \
touch /var/log/mail.log && \
touch /var/log/syslog && \
apt-get -qq -o Dpkg::Use-Pty=0 update && \
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install fail2ban ufw && \
rm -rf /var/lib/apt/lists/*;
COPY ./build/etc/fail2ban/jail.local /etc/fail2ban/jail.local
COPY ./build/etc/phpmyadmin/config.inc.php /tmp/phpmyadmin.config.inc.php
COPY ./build/etc/apache2/phpmyadmin.conf /etc/apache2/conf-available/phpmyadmin.conf
# --- 18 Install PHPMyAdmin Database Administration Tool
# https://www.linuxbabe.com/debian/install-phpmyadmin-apache-lamp-debian-10-buster
RUN apt-get -qq -o Dpkg::Use-Pty=0 update && \
if [ "${BUILD_PHPMYADMIN}" = "yes" ]; then \
if [ "${BUILD_MYSQL_HOST}" = "localhost" ]; then \
wget "https://files.phpmyadmin.net/phpMyAdmin/${BUILD_PHPMYADMIN_VERSION}/phpMyAdmin-${BUILD_PHPMYADMIN_VERSION}-all-languages.zip" -q -O "/tmp/phpMyAdmin-${BUILD_PHPMYADMIN_VERSION}-all-languages.zip" && \
unzip -q "/tmp/phpMyAdmin-${BUILD_PHPMYADMIN_VERSION}-all-languages.zip" -d /usr/share/ && \
mv "/usr/share/phpMyAdmin-${BUILD_PHPMYADMIN_VERSION}-all-languages" /usr/share/phpmyadmin && \
chown -R www-data:www-data /usr/share/phpmyadmin && \
service mariadb restart && \
mysql -h ${BUILD_MYSQL_HOST} -uroot -p${BUILD_MYSQL_PW} -e "CREATE DATABASE phpmyadmin DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;" && \
mysql -h ${BUILD_MYSQL_HOST} -uroot -p${BUILD_MYSQL_PW} -e "GRANT ALL ON phpmyadmin.* TO '${BUILD_PHPMYADMIN_USER}'@'localhost' IDENTIFIED BY '${BUILD_PHPMYADMIN_PW}';" && \
/usr/sbin/a2enconf phpmyadmin.conf && \
mv /tmp/phpmyadmin.config.inc.php /usr/share/phpmyadmin/config.inc.php && \
sed -i "s|\['controlhost'\] = '';|\['controlhost'\] = '${BUILD_MYSQL_HOST}';|" /usr/share/phpmyadmin/config.inc.php && \
sed -i "s|\['controluser'\] = '';|\['controluser'\] = '${BUILD_PHPMYADMIN_USER}';|" /usr/share/phpmyadmin/config.inc.php && \
sed -i "s|\['controlpass'\] = '';|\['controlpass'\] = '${BUILD_PHPMYADMIN_PW}';|" /usr/share/phpmyadmin/config.inc.php && \
mkdir -p /var/lib/phpmyadmin/tmp && \
chown www-data:www-data /var/lib/phpmyadmin/tmp && \
service apache2 restart && \
service apache2 reload; \
else \
printf "\e[31m'BUILD_PHPMYADMIN' = 'yes', but 'BUILD_MYSQL_HOST' is not 'localhost' ('%s')\e[0m" "${BUILD_MYSQL_HOST}" && \
printf "\e[31mCan't currently install phpMyAdmin with a remote server connection. Sorry!\e[0m"; \
fi; \
fi; \
service apache2 restart && \
# --- 19 Install RoundCube Webmail
mkdir "$BUILD_ROUNDCUBE_DIR" && \
wget "https://github.com/roundcube/roundcubemail/releases/download/${BUILD_ROUNDCUBE_VERSION}/roundcubemail-${BUILD_ROUNDCUBE_VERSION}-complete.tar.gz" -q -P /tmp && \
tar xfz "/tmp/roundcubemail-${BUILD_ROUNDCUBE_VERSION}-complete.tar.gz" --strip-components=1 -C "$BUILD_ROUNDCUBE_DIR" && \
chown -R www-data:www-data "$BUILD_ROUNDCUBE_DIR" && \
if [ "${BUILD_MYSQL_HOST}" = "localhost" ]; then \
service mariadb restart && BUILD_MYSQL_REMOTE_ACCESS_HOST="localhost"; \
fi; \
if ! printf "USE %s;" "${BUILD_ROUNDCUBE_DB}" | mysql -h "${BUILD_MYSQL_HOST}" -uroot -p"${BUILD_MYSQL_PW}" 2> /dev/null; then \
printf "CREATE DATABASE %s;" "${BUILD_ROUNDCUBE_DB}" | mysql -h ${BUILD_MYSQL_HOST} -uroot -p${BUILD_MYSQL_PW} && \
mysql -h ${BUILD_MYSQL_HOST} -uroot -p${BUILD_MYSQL_PW} ${BUILD_ROUNDCUBE_DB} < $BUILD_ROUNDCUBE_DIR/SQL/mysql.initial.sql; \
fi; \
echo "\
GRANT ALL PRIVILEGES ON ${BUILD_ROUNDCUBE_DB}.* TO ${BUILD_ROUNDCUBE_USER}@'${BUILD_MYSQL_REMOTE_ACCESS_HOST}' IDENTIFIED BY '${BUILD_ROUNDCUBE_PW}'; \
FLUSH PRIVILEGES;" | \
mysql -h ${BUILD_MYSQL_HOST} -uroot -p${BUILD_MYSQL_PW} && \
mv "$BUILD_ROUNDCUBE_DIR/config/config.inc.php.sample" "$BUILD_ROUNDCUBE_DIR/config/config.inc.php" && \
sed -i "s|mysql://roundcube:pass@localhost/roundcubemail|mysql://${BUILD_ROUNDCUBE_USER}:${BUILD_ROUNDCUBE_PW}@${BUILD_MYSQL_HOST}/${BUILD_ROUNDCUBE_DB}|" $BUILD_ROUNDCUBE_DIR/config/config.inc.php && \
echo "\$config['default_host'] = 'localhost';" >> $BUILD_ROUNDCUBE_DIR/config/config.inc.php && \
echo "\$config['smtp_server'] = 'localhost';" >> $BUILD_ROUNDCUBE_DIR/config/config.inc.php && \
echo "\$config['smtp_port'] = 25;" >> $BUILD_ROUNDCUBE_DIR/config/config.inc.php && \
rm -rf /var/lib/apt/lists/*
COPY ./build/etc/apache2/roundcube.conf /etc/apache2/conf-enabled/roundcube.conf
# --- 19 Install ispconfig plugins for roundcube
WORKDIR /tmp
RUN git clone https://github.com/w2c/ispconfig3_roundcube.git 2>&1 && \
mv /tmp/ispconfig3_roundcube/ispconfig3_* ${BUILD_ROUNDCUBE_DIR}/plugins && \
rm -Rf /tmp/ispconfig3_roundcube && \
printf "\n\$config['plugins'] = array_merge(\$config['plugins'], array(\"jqueryui\", \"ispconfig3_account\", \"ispconfig3_autoreply\", \"ispconfig3_pass\", \"ispconfig3_spam\", \"ispconfig3_fetchmail\", \"ispconfig3_filter\"));\n" >> ${BUILD_ROUNDCUBE_DIR}/config/config.inc.php && \
mv ${BUILD_ROUNDCUBE_DIR}/plugins/ispconfig3_account/config/config.inc.php.dist ${BUILD_ROUNDCUBE_DIR}/plugins/ispconfig3_account/config/config.inc.php && \
chown www-data:www-data ${BUILD_ROUNDCUBE_DIR}/plugins/ispconfig3_account/config/config.inc.php && \
chown -R www-data:www-data ${BUILD_ROUNDCUBE_DIR}/plugins/ispconfig3_* && \
# --- 20 Install ISPConfig 3
wget "https://ispconfig.org/downloads/ISPConfig-${BUILD_ISPCONFIG_VERSION}.tar.gz" -q && \
tar xfz ISPConfig-${BUILD_ISPCONFIG_VERSION}.tar.gz
COPY ./build/autoinstall.ini /tmp/ispconfig3_install/install/autoinstall.ini
# hadolint ignore=SC2086
RUN touch "/etc/mailname" && \
sed -i "s|mysql_hostname=localhost|mysql_hostname=${BUILD_MYSQL_HOST}|" "/tmp/ispconfig3_install/install/autoinstall.ini" && \
sed -i "s/^ispconfig_port=8080$/ispconfig_port=${BUILD_ISPCONFIG_PORT}/g" "/tmp/ispconfig3_install/install/autoinstall.ini" && \
sed -i "s|mysql_root_password=pass|mysql_root_password=${BUILD_MYSQL_PW}|" "/tmp/ispconfig3_install/install/autoinstall.ini" && \
sed -i "s|mysql_database=dbispconfig|mysql_database=${BUILD_ISPCONFIG_MYSQL_DATABASE}|" "/tmp/ispconfig3_install/install/autoinstall.ini" && \
sed -i "s/^hostname=server1.example.com$/hostname=${BUILD_HOSTNAME}/g" "/tmp/ispconfig3_install/install/autoinstall.ini" && \
sed -i "s/^ssl_cert_common_name=server1.example.com$/ssl_cert_common_name=${BUILD_HOSTNAME}/g" "/tmp/ispconfig3_install/install/autoinstall.ini" && \
sed -i "s/^ispconfig_use_ssl=y$/ispconfig_use_ssl=$(printf "%s" ${BUILD_ISPCONFIG_USE_SSL} | cut -c1)/g" "/tmp/ispconfig3_install/install/autoinstall.ini" && \
[ "${BUILD_MYSQL_HOST}" = "localhost" ] && service mariadb restart; \
if [ -n "$(printf "SHOW DATABASES LIKE '%s';" "${BUILD_ISPCONFIG_MYSQL_DATABASE}" | mysql -h "${BUILD_MYSQL_HOST}" -uroot -p"${BUILD_MYSQL_PW}" 2> /dev/null)" ]; then \
if [ "${BUILD_ISPCONFIG_DROP_EXISTING}" = "yes" ]; then \
printf "DROP DATABASE %s;" "${BUILD_ISPCONFIG_MYSQL_DATABASE}" | mysql -h "${BUILD_MYSQL_HOST}" -uroot -p"${BUILD_MYSQL_PW}"; \
else \
printf "\e[31mERROR: ISPConfig database '%s' already exists and build argument 'BUILD_ISPCONFIG_DROP_EXISTING' = 'no'. Move the existing database aside before continuing\e[0m" "${BUILD_ISPCONFIG_MYSQL_DATABASE}" && \
exit 1; \
fi; \
fi; \
if [ "$(printf "SELECT * FROM mysql.global_priv WHERE User = '%s';" "${BUILD_ISPCONFIG_MYSQL_USER}" | mysql -N -h ${BUILD_MYSQL_HOST} -uroot -p${BUILD_MYSQL_PW})" -eq 1 ]; then \
if [ "${BUILD_ISPCONFIG_DROP_EXISTING}" = "yes" ]; then \
printf "DELETE FROM mysql.global_priv WHERE User = \"%s\"; FLUSH PRIVILEGES;" "${BUILD_ISPCONFIG_MYSQL_USER}" | mysql -h "${BUILD_MYSQL_HOST}" -uroot -p"${BUILD_MYSQL_PW}"; \
else \
printf "\e[31mERROR: ISPConfig user '%s' already exists and build argument 'BUILD_ISPCONFIG_DROP_EXISTING' = 'no'. Move the existing user aside before continuing\e[0m" "${BUILD_ISPCONFIG_MYSQL_USER}" && \
exit 1; \
fi; \
fi; \
php -q "/tmp/ispconfig3_install/install/install.php" --autoinstall=/tmp/ispconfig3_install/install/autoinstall.ini && \
if [ "${BUILD_MYSQL_HOST}" != "localhost" ]; then \
ISP_ADMIN_PASS=$(grep "\$conf\['db_password'\] = '\(.*\)'" "/usr/local/ispconfig/interface/lib/config.inc.php" | sed "s|\$conf\['db_password'\] = '\(.*\)';|\1|") && \
printf "GRANT ALL PRIVILEGES ON %s.* TO '%s'@'%s' IDENTIFIED BY '%s';" "${BUILD_ISPCONFIG_MYSQL_DATABASE}" "${BUILD_ISPCONFIG_MYSQL_USER}" "${BUILD_MYSQL_REMOTE_ACCESS_HOST}" "${ISP_ADMIN_PASS}" | \
mysql -h "${BUILD_MYSQL_HOST}" -uroot -p"${BUILD_MYSQL_PW}"; \
fi; \
sed -i "s|NameVirtualHost|#NameVirtualHost|" "/etc/apache2/sites-enabled/000-ispconfig.conf" && \
sed -i "s|NameVirtualHost|#NameVirtualHost|" "/etc/apache2/sites-enabled/000-ispconfig.vhost" && \
################################################################################################
# the key and cert for pure-ftpd should be available :
# https://www.howtoforge.com/how-to-configure-pureftpd-to-accept-tls-sessions-on-debian-lenny
rm -f /etc/ssl/private/pure-ftpd.pem ;\
yes "" | openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem || true && \
chmod 600 /etc/ssl/private/pure-ftpd.pem && \
printf "1\n" > "/etc/pure-ftpd/conf/TLS" && \
# --- 23 Install printing stuff
if [ $BUILD_PRINTING = "yes" ]; then \
apt-get -qq -o Dpkg::Use-Pty=0 update && \
apt-get -qq -o Dpkg::Use-Pty=0 --no-install-recommends install --fix-missing -y libdmtx-utils dblatex latex-make cups-client lpr && \
rm -rf /var/lib/apt/lists/*; \
fi; \
#
# docker-extensions
#
mkdir -p /usr/local/bin
COPY ./build/bin/* /usr/local/bin/
RUN chmod a+x /usr/local/bin/*
#
# establish supervisord
#
COPY ./build/supervisor /etc/supervisor
COPY ./build/etc/init.d /etc/init.d
# link old /etc/init.d/ startup scripts to supervisor
RUN ln -sf /etc/supervisor/systemctl /bin/systemctl && \
chmod a+x /etc/supervisor/* /etc/supervisor/*.d/*
COPY ./build/supervisor/invoke-rc.d /usr/sbin/invoke-rc.d
#
# create directory for service volume
#
RUN mkdir -p /service ; chmod a+rwx /service
COPY ./build/track.gitignore /.gitignore
#
# Create bootstrap archives
#
RUN cp -v /etc/passwd /etc/passwd.bootstrap && \
cp -v /etc/shadow /etc/shadow.bootstrap && \
cp -v /etc/group /etc/group.bootstrap && \
mkdir -p /bootstrap && \
mkdir -p /var/vmail && \
tar -C /var/vmail -czf /bootstrap/vmail.tgz . && \
tar -C /var/www -czf /bootstrap/www.tgz .
ENV TERM=xterm
RUN printf "export TERM=xterm\n" >> /root/.bashrc && \
#
# Tidy up
apt-get autoremove && \
apt-get clean && \
rm -rf /var/lib/apt/lists/* && \
rm -rf /tmp/*
EXPOSE 20 21 22 53/udp 53/tcp 80 443 953 8080 30000 30001 30002 30003 30004 30005 30006 30007 30008 30009 3306
HEALTHCHECK --start-period=2m --timeout=3s --retries=1 \
CMD sh -c '! supervisorctl status all | grep -E "STARTING|FATAL"'
#
# startup script
#
COPY ./build/start.sh /start.sh
RUN chmod 755 /start.sh
CMD ["/start.sh"]
WORKDIR /