En este tutorial les mostrare como implementar un servidor de correo postfix desde cero. Le he llamado inutil mail 🙂 .Para ello usaremos Mariadb y PostfixAdmin sobre un debian 9. Como webmail usaremos RoundCube, pero en este otro tutorial les muestro como usar Rainloop. Por lo extenso del tutorial lo dividire en 4 partes:
Primera parte: Instalación de dependencias y configuración de las mismas.
Segunda parte: Preparación e instalación de RoundCube y seguridad del mismo.
Tercera parte: Instalación de PostfixAdmin , Dovecot y Postfix.
Cuarta parte: Configuración del Postfix.
- Instalar/upgradear un sistema debian 9
1 2 3 | apt update apt upgrade apt dist-upgrade |
- Dependencias
Antes de instalar algo debemos instalar las dependencias básicas o herramientas que necesitaremos para nuestro trabajo:
1 | apt install arj bzip2 cabextract cpio file lzop rpm2cpio gzip nomarch pax rar unrar unzip zoo unace razor pyzor tnef ripole zip p7zip-full mc |
- Grupo y usuario
Comenzamos con añadir el grupo de nuestros sistema de correo al que llamaré vmail:
1 | groupadd -g 5000 vmail |
Usuario del sistema:
1 | useradd -d /home/vmail -s /bin/false -m -u 5000 -g 5000 -c "Virtual Mailbox Storage" vmail |
- Soporte Web
1 | apt install nginx php-cgi php-fpm php-pear php-mcrypt php-mysql php-imap php-memcache memcached php-pear php-intl mariadb-server phpmyadmin |
Configurar MariaDB:
MariaDB -> /etc/mysql/my.cnf
El archivo my.cnf sólo hace referencia a donde estan guardados los archivos de configuracion. Sólo necesitaremos modificar
/etc/mysql/mariadb.conf.d/50-server.cnf (modificando/ajustando) las siguientes variables según nuestras necesidades:
1 2 3 4 5 | max_connections = 100 max_user_connections = 100 general_log_file = /var/log/mysql/mysql.log general_log = 1 |
Sólo queda guardar los cambios.
Ahora debemos ejecutar el script de seguridad para la configuración de MariaDB:
1 | mysql_secure_installation |
Responder las preguntas lo más certeramente posible.
Configurar Nginx y PHP7:
Creamos la configuracion del nginx
Nginx -> /etc/nginx/nginx.conf
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 | user www-data; worker_processes auto; pid /run/nginx.pid; include /etc/nginx/modules-enabled/*.conf; events { worker_connections 768; # multi_accept on; } http { ## # Basic Settings ## sendfile on; tcp_nopush on; tcp_nodelay on; keepalive_timeout 65; types_hash_max_size 2048; server_tokens off; # server_names_hash_bucket_size 64; # server_name_in_redirect off; include /etc/nginx/mime.types; default_type application/octet-stream; ## # SSL Settings ## ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE ssl_prefer_server_ciphers on; ## # Logging Settings ## log_format specialLog '$http_x_real_ip - $remote_user [$time_local]' '"$request" $status $body_bytes_sent' '"$http_referer" "$http_user_agent"'; access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log; ## # Gzip Settings ## gzip on; gzip_disable "MSIE [1-6].(?!.*SV1)"; #gzip_disable "msie6"; gzip_vary on; gzip_proxied any; gzip_comp_level 6; gzip_buffers 16 8k; gzip_http_version 1.1; gzip_static on; gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; ignore_invalid_headers on; keepalive_requests 100; keepalive_disable none; max_ranges 1; ## # Virtual Host Configs ## include /etc/nginx/conf.d/*.conf; include /etc/nginx/sites-enabled/*; } #mail { # # See sample authentication script at: # # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript # # # auth_http localhost/auth.php; # # pop3_capabilities "TOP" "USER"; # # imap_capabilities "IMAP4rev1" "UIDPLUS"; # # server { # listen localhost:110; # protocol pop3; # proxy on; # } # # server { # listen localhost:143; # protocol imap; # proxy on; # } #} |
Para procesar php en sites-available:
Editar /etc/nginx/sites-available/default
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 | ## # You should look at the following URL's in order to grasp a solid understanding # of Nginx configuration files in order to fully unleash the power of Nginx. # https://www.nginx.com/resources/wiki/start/ # https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/ # https://wiki.debian.org/Nginx/DirectoryStructure # # In most cases, administrators will remove this file from sites-enabled/ and # leave it as reference inside of sites-available where it will continue to be # updated by the nginx packaging team. # # This file will automatically load configuration files provided by other # applications, such as Drupal or Wordpress. These applications will be made # available underneath a path with that package name, such as /drupal8. # # Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. ## # Default server configuration # server { listen 80 default_server; # SSL configuration # # listen 443 ssl default_server; # listen [::]:443 ssl default_server; # # Note: You should disable gzip for SSL traffic. # See: https://bugs.debian.org/773332 # # Read up on ssl_ciphers to ensure a secure configuration. # See: https://bugs.debian.org/765782 # # Self signed certs generated by the ssl-cert package # Don't use them in a production server! # # include snippets/snakeoil.conf; root /var/www/html; # Add index.php to the list if you are using PHP index index.php index.html index.htm index.nginx-debian.html; server_name _; location / { # First attempt to serve request as file, then # as directory, then fall back to displaying a 404. try_files $uri $uri/ =404; } # pass PHP scripts to FastCGI server # location ~ \.php$ { include snippets/fastcgi-php.conf; # # # With php-fpm (or other unix sockets): fastcgi_pass unix:/var/run/php/php7.0-fpm.sock; # # With php-cgi (or other tcp sockets): #fastcgi_pass 127.0.0.1:9000; } # deny access to .htaccess files, if Apache's document root # concurs with nginx's one # location ~ /\.ht { deny all; } } # Virtual Host configuration for example.com # # You can move that to a different file under sites-available/ and symlink that # to sites-enabled/ to enable it. # #server { # listen 80; # listen [::]:80; # # server_name example.com; # # root /var/www/example.com; # index index.html; # # location / { # try_files $uri $uri/ =404; # } #} |
Guardar al configuración y probar que funciona OK:
1 | nginx -t |
Debe devolver:
1 2 | nginx: the configuration file <strong>/etc/nginx/nginx.conf</strong> syntax is ok nginx: configuration file <strong>/etc/nginx/nginx.conf</strong> test is successful |
PHP7 -> /etc/php/7.0/fpm/php.ini
Editar la variable date.timezone, para ajustarla a nuestro país:
1 | date.timezone = "America/Havana" |
Ahora sólo nos queda hacer un link para phpmyadmin:
1 | ln -s /usr/share/phpmyadmin/ /var/www/html/ |
Reiniciar Nginc y PHP7/:
1 2 3 | /etc/init.d/mysql restart /etc/init.d/php7.0-fpm restart /etc/init.d/nginx restart |
Ahora podemos entrar a nuestro phpmyadmin:
http://IP_del_server/phpmyadmin/
Hasta aqui esta primera parte del tutorial donde ya tenemos todo instalado, solo nos queda configurar.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0
Me gustaria saber si se instalan en el mismo container o en ct separados
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0
no puedo entrar al phpmyadmin y todo me sale como dice el tutorial