env.yml

@@ -118,7 +118,7 @@ users:
   hedgedoc: 1004
   homepage: 8686
   lldap: 1007
-  mailserver: 8
+  mailserver: 8 # Do not change
   postgres: 70
   searxng: 977
   searxng_redis: 999

roles/mailserver/tasks/setup.yml

@@ -47,6 +47,6 @@
   file:
     path: "/etc/letsencrypt/live/mail.{{ domain }}/privkey.pem"
     owner: root
-    group: "{{ users['mailserver'] + uid_shift }}"
+    group: "{{ host_uid }}"
     mode: '640'
   become: true

roles/mailserver/templates/config.toml

@@ -9,6 +9,8 @@ server.http.permissive-cors = false
 server.http.url = "protocol + '://' + key_get('default', 'hostname') + ':' + local_port"
 server.http.use-x-forwarded = true
 server.max-connections = 8192
+server.run-as.group = "mail"
+server.run-as.user = "mail"
 server.socket.backlog = 1024
 server.socket.nodelay = true
 server.socket.reuse-addr = true

roles/mailserver/templates/docker-compose.yaml

@@ -1,9 +1,8 @@
 services:  
   mailserver:
-    image: docker.io/stalwartlabs/mail-server:v0.8.1
+    image: docker.io/stalwartlabs/mail-server:v0.7.3
     container_name: mailserver
     restart: always
-    user: "{{ users['mailserver'] }}:{{ users['mailserver'] }}"
     networks:
       - mailserver
     ports:

roles/stump/templates/docker-compose.yaml

@@ -1,7 +1,7 @@
 services:
   stump:
     container_name: stump
-    image: aaronleopold/stump:0.0.3
+    image: aaronleopold/stump:0.0.2
     restart: always
     environment:
       - PUID={{ users['stump'] }}