If you need to change default settings of the onlyoffice-mail-server, starting from v1.6.57, it is possible to run an external script after the container is started. To do that create your script under the following path /app/onlyoffice/MailServer/data/external.sh and write the necessary commands to edit configuration in it, or use any other commands in bash language (see the example below). The script will be executed each time after the version update or restart.
Previously, if it was necessary to change configuration, you had to make the same changes in the configuration files again after the version update. Now, if you write the necessary commands to edit configuration files into the script and save under the specified path, all the changes will be applied automatically each time the script is run after the version update.
Below is an example of the external.sh file, which can be used to customize the ONLYOFFICE Mail according to your needs. You can use not all of the commands listed in the example, but only the ones you need, or add your own commands.
{ANY-YOUR-IPS} must be replaced with any set of IP addresses (separated with space) that you trust.
#!/bin/bash
echo "Add ignore IP addresses"
sed -i -e 's/ignoreip = 127.0.0.1\/8 onlyoffice-community-server 172.18.0.1/ignoreip = 127.0.0.1\/8 onlyoffice-community-server 172.18.0.1 {ANY-YOUR-IPS}/g' /etc/fail2ban/jail.conf
echo "Disable greylist"
sed -i -e '/\[Greylisting\]/!b;n;c enable=0' /etc/policyd/cluebringer.conf
echo "Increase imap connections from one IP"
sed -i -e 's/mail_max_userip_connections = 20/mail_max_userip_connections = 100/g' /etc/dovecot/dovecot.conf
echo "Setup mynetwork"
sed -i -e 's/mynetworks = 127.0.0.1$/mynetworks = 127.0.0.1 {ANY-YOUR-IPS}/g' /etc/postfix/main.cf
fail2ban-client reload
dovecot reload
postfix reload
Where:
Add ignore IP addresses is used to create a list of IP addresses, which are not affected by common Fail2ban rules. If a user from the specified IP address enter an incorrect login or password, this IP address will not be blocked, while unknown IP addresses will be blocked after unsuccessful logn attempts.Disable greylist is used to disable the greylisting feature enabled by default (a spam protection feature based on the principle that, if the recipient's server temporary unable to receive a message, mail servers repeat the attempt to send the message, unlike spammers). Disabling this function may be necessary, for example, to avoid a reduction of the business processes speed if you receive a lot of messages from unknown mail servers.Increase imap connections from one IP is used to enable the possibility to connect a bigger number of clients from a single IP address than specified by default. In the example above, 100 connections from a single IP address are allowed instead of 20 connections.Setup mynetwork is used to specify a list of trusted networks in the Postfix configuration file, that allows to make mail server checks less strict for the IP addresses that belong to the trusted networks. - Once the changes are made, the
fail2ban-client, dovecot, postfix services read the configuration files once again.
To find out how to perform certain operations using a script, you can refer to the following articles: