Automated bash script to setup dovecot postfix mysql email server on ubuntu 14.04

postfix-dovecot-ubuntu14.04.sh

#!/usr/bin/env bash

#####
# Script to install postfix
#####


DOMAIN="example.com"
EMAIL="[email protected]"
PASSWORD="example.com1*"
DATABASE="servermail"
DB_USER="usermail"
DB_USER_PASS="mailpassword"

export DEBIAN_FRONTEND=noninteractive

installpkg(){
    dpkg-query --status $1 >/dev/null || apt-get install -y $1
}

apt-get update
installpkg mysql-server
installpkg mysql-client
debconf-set-selections <<< "postfix postfix/mailname string $DOMAIN"
debconf-set-selections <<< "postfix postfix/main_mailer_type string 'Internet Site'"
installpkg postfix
installpkg postfix-mysql
installpkg dovecot-core
installpkg dovecot-imapd
installpkg dovecot-pop3d
installpkg dovecot-lmtpd
installpkg dovecot-mysql

bootstrapdb(){
    cat <<EOF | mysql -uroot
    
	CREATE DATABASE IF NOT EXISTS $DATABASE;

	GRANT SELECT ON $DATABASE.* TO '$DB_USER'@'127.0.0.1' IDENTIFIED BY '$DB_USER_PASS';

	FLUSH PRIVILEGES;

	USE servermail;

	CREATE TABLE IF NOT EXISTS virtual_domains (
	id  INT NOT NULL AUTO_INCREMENT,
	name VARCHAR(50) NOT NULL,
	PRIMARY KEY (id)
	) ENGINE=InnoDB DEFAULT CHARSET=utf8;

	CREATE TABLE IF NOT EXISTS virtual_users (
	id INT NOT NULL AUTO_INCREMENT,
	domain_id INT NOT NULL,
	password VARCHAR(106) NOT NULL,
	email VARCHAR(120) NOT NULL,
	PRIMARY KEY (id),
	UNIQUE KEY email (email),
	FOREIGN KEY (domain_id) REFERENCES virtual_domains(id) ON DELETE CASCADE
	) ENGINE=InnoDB DEFAULT CHARSET=utf8;

	CREATE TABLE IF NOT EXISTS virtual_aliases (
	id INT NOT NULL AUTO_INCREMENT,
	domain_id INT NOT NULL,
	source varchar(100) NOT NULL,
	destination varchar(100) NOT NULL,
	PRIMARY KEY (id),
	FOREIGN KEY (domain_id) REFERENCES virtual_domains(id) ON DELETE CASCADE
	) ENGINE=InnoDB DEFAULT CHARSET=utf8;

	INSERT INTO servermail.virtual_domains
	(id ,name)
	VALUES
	('1', '$DOMAIN'),
	('2', 'mail.$DOMAIN');

	INSERT INTO servermail.virtual_users
	(id, domain_id, password , email)
	VALUES
	('1', '1', ENCRYPT('$PASSWORD', CONCAT('\$6\$', SUBSTRING(SHA(RAND()), -16))), '$EMAIL');

EOF
}
bootstrapdb

##Configure postfix main.cf config
postconf smtpd_recipient_restrictions="permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination"
postconf smtpd_sasl_auth_enable=yes
postconf smtpd_sasl_path=private/auth
postconf smtpd_sasl_type=dovecot
postconf mydestination=localhost
postconf myhostname=`hostname`
postconf virtual_transport=lmtp:unix:private/dovecot-lmtp

postconf virtual_mailbox_domains=mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf
postconf virtual_mailbox_maps=mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf
postconf virtual_alias_maps=mysql:/etc/postfix/mysql-virtual-alias-maps.cf

#set IFS to blank so we preserve new lines in multiline strings
IFS=""

echo "user = $DB_USER
password = $DB_USER_PASS
hosts = 127.0.0.1
dbname = $DATABASE
query = SELECT 1 FROM virtual_domains WHERE name='%s'" > /etc/postfix/mysql-virtual-mailbox-domains.cf

service postfix restart

status=`postmap -q $DOMAIN mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf`
if [ $status -ne 1 ]; then
	echo "Virtual Domains config failed."
fi

echo "user = $DB_USER
password = $DB_USER_PASS
hosts = 127.0.0.1
dbname = $DATABASE
query = SELECT 1 FROM virtual_users WHERE email='%s'" > /etc/postfix/mysql-virtual-mailbox-maps.cf

service postfix restart

status=`postmap -q $EMAIL mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf`

status=`postmap -q mail.$DOMAIN mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf`
if [ $status -ne 1 ]; then
	echo "Virtual users config failed."
fi

echo "user = $DB_USER
password = $DB_USER_PASS
hosts = 127.0.0.1
dbname = $DATABASE
query = SELECT destination FROM virtual_aliases WHERE source='%s'" > /etc/postfix/mysql-virtual-alias-maps.cf

service postfix restart

#master.cf config
postconf -M submission/inet="submission       inet       n       -       -       -       -       smtpd"
postconf -P submission/inet/syslog_name=postfix/submission
postconf -P submission/inet/smtpd_tls_security_level=may
postconf -P submission/inet/smtpd_sasl_auth_enable=yes
postconf -P submission/inet/smtpd_client_restrictions=permit_sasl_authenticated,reject

service postfix restart

##Dovecot

cp /etc/dovecot/dovecot.conf /etc/dovecot/dovecot.conf.orig
cp /etc/dovecot/conf.d/10-mail.conf /etc/dovecot/conf.d/10-mail.conf.orig
cp /etc/dovecot/conf.d/10-auth.conf /etc/dovecot/conf.d/10-auth.conf.orig
cp /etc/dovecot/dovecot-sql.conf.ext /etc/dovecot/dovecot-sql.conf.ext.orig
cp /etc/dovecot/conf.d/10-master.conf /etc/dovecot/conf.d/10-master.conf.orig
cp /etc/dovecot/conf.d/10-ssl.conf /etc/dovecot/conf.d/10-ssl.conf.orig
#uncomment !include conf.d/*.conf
sed -i '/\!include conf\.d\/\*\.conf/s/^#//' /etc/dovecot/dovecot.conf
status = `grep "protocols = imap lmtp" /etc/dovecot/dovecot.conf`
if [ -z $status ];then
	echo "protocols = imap lmtp pop3" >> /etc/dovecot/dovecot.conf
fi

sed -i '/^mail_location =.*/s/^/#/g' /etc/dovecot/conf.d/10-mail.conf #comment default mail_location
echo "mail_location = maildir:/var/mail/vhosts/%d/%n" >> /etc/dovecot/conf.d/10-mail.conf


sed -i '/^mail_privileged_group =.*/s/^/#/g' /etc/dovecot/conf.d/10-mail.conf
echo "mail_privileged_group = mail" >> /etc/dovecot/conf.d/10-mail.conf

mkdir -p /var/mail/vhosts/"$DOMAIN"
groupadd -g 5000 vmail 
useradd -g vmail -u 5000 vmail -d /var/mail
chown -R vmail:vmail /var/mail

sed -i '/^auth_mechanisms =.*/s/^/#/g' /etc/dovecot/conf.d/10-auth.conf
echo "auth_mechanisms = plain login" >> /etc/dovecot/conf.d/10-auth.conf

sed -i '/\!include auth-system\.conf\.ext/s/^/#/g' /etc/dovecot/conf.d/10-auth.conf

sed -i '/\!include auth-sql\.conf\.ext/s/^#//g' /etc/dovecot/conf.d/10-auth.conf



if [[ ! -f /etc/dovecot/conf.d/auth-sql.conf.ext.orig ]]; then
	mv /etc/dovecot/conf.d/auth-sql.conf.ext /etc/dovecot/conf.d/auth-sql.conf.ext.orig
fi

auth10="
passdb {
  driver = sql
  args = /etc/dovecot/dovecot-sql.conf.ext
}
userdb {
  driver = static
  args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n
}
"
echo $auth10 > /etc/dovecot/conf.d/auth-sql.conf.ext

sed -i '/^driver =.*/s/^/#/g' /etc/dovecot/dovecot-sql.conf.ext
echo "driver = mysql" >> /etc/dovecot/dovecot-sql.conf.ext

sed -i '/^connect =.*/s/^/#/g' /etc/dovecot/dovecot-sql.conf.ext
echo "connect = host=127.0.0.1 dbname=$DATABASE user=$DB_USER password=$DB_USER_PASS" >> /etc/dovecot/dovecot-sql.conf.ext

sed -i '/^default_pass_scheme =.*/s/^/#/g' /etc/dovecot/dovecot-sql.conf.ext
echo "default_pass_scheme = SHA512-CRYPT" >> /etc/dovecot/dovecot-sql.conf.ext

sed -i '/^password_query =.*/s/^/#/g' /etc/dovecot/dovecot-sql.conf.ext
echo "password_query = SELECT email as user, password FROM virtual_users WHERE email='%u';" >> /etc/dovecot/dovecot-sql.conf.ext

chown -R vmail:dovecot /etc/dovecot
chmod -R o-rwx /etc/dovecot

if [[ ! -f /etc/dovecot/conf.d/10-master.conf.orig ]]; then
	mv /etc/dovecot/conf.d/10-master.conf /etc/dovecot/conf.d/10-master.conf.orig
fi
dovecotmaster="service imap-login {
  inet_listener imap {
    port = 0
  }
  inet_listener imaps {
    #port = 993
    #ssl = yes
  }
}
service pop3-login {
  inet_listener pop3 {
    #port = 110
  }
  inet_listener pop3s {
    #port = 995
    #ssl = yes
  }
}

service lmtp {
  unix_listener /var/spool/postfix/private/dovecot-lmtp {
   mode = 0600
   user = postfix
   group = postfix
  }
}

service imap {
}

service pop3 {
}

service auth {
  unix_listener /var/spool/postfix/private/auth {
    mode = 0666
    user = postfix
    group = postfix
  }

  unix_listener auth-userdb {
   mode = 0600
   user = vmail
   #group =
  }
  # Auth process is run as this user.
  user = dovecot
}

service auth-worker {
  user = vmail
}

service dict {
  unix_listener dict {
  }
}"
echo $dovecotmaster > /etc/dovecot/conf.d/10-master.conf
service dovecot restart
service postfix restart
echo "\n\nYour mail server should be accessible now."
unset $IFS

Thanks for this! Few things you missed:

109: status=postmap -q techtalik.co mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf
122: status=postmap -q [email protected] mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf
124: status=postmap -q [email protected] mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf

postconf -P is an invalid option.

postconf -P is an invalid option <= false statement:

Managing master.cf service parameters:

   postconf -P [-fhHovx] [-c config_dir] [service[/type[/parameter]] ...]
   postconf -P [-ev] [-c config_dir] service/type/parameter=value ...
   postconf -PX [-v] [-c config_dir] service/type/parameter ...

very helpful, clear, actually 1:1 to take over, @richpav is right:

line 109:
- status=`postmap -q techtalik.co mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf`
+ status=`postmap -q $DOMAIN mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf`
line 122:
- status=postmap -q [email protected] mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf
+ status=`postmap -q $DB_USER@$DOMAIN mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf
line 124:
- status=postmap -q [email protected] mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf
+ status=`postmap -q mail.$DOMAIN mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf`

Thanks @hryatgit and @richpav for pointing out mistakes. I have updated the gist.

waiting for ubuntu 18.04

works out of the box on debian stretch 9.12, perfect

works also in debian 10 with replacing the mysql-server and mysql-client with mariadb-server and mariadb-client

i created new repo for automated installation of Mailserver with new features based on:

• postfix
• dovecot
• mariadb
• DKIM domain Key generation with TXT RECORD output
• disabling pop3 service

supported Distributions:

• debian stretch 9
• debian buster 10
• debian bullseye 11

thanks to @haisum i made your script more smarter ;)
thanks to @iomarian i take your change in my new installer script (see repo below)

repo:
https://github.com/AysadKozanoglu/mailserver-postfix-dovecot-dkim-installer-debian-buster-bullseye