services:

  mailserver:
    image: docker.io/mailserver/docker-mailserver:latest
    container_name: mailserver-new
    hostname: mail.email-srvr.com
    domainname: email-srvr.com
    ports:
      - "25:25"     # SMTP (parallel zu MailCow auf Port 25)
      - "587:587"    # SMTP Submission
      - "465:465"    # SMTP SSL
      - "143:143"    # IMAP
      - "993:993"    # IMAP SSL
      - "110:110"    # POP3
      - "995:995"    # POP3 SSL
    volumes:
      - ./docker-data/dms/mail-data/:/var/mail/
      - ./docker-data/dms/mail-state/:/var/mail-state/
      - ./docker-data/dms/mail-logs/:/var/log/mail/
      - ./docker-data/dms/config/:/tmp/docker-mailserver/
      - ./docker-data/dms/config/dovecot/conf.d/95-sieve-redirect.conf:/etc/dovecot/conf.d/95-sieve-redirect.conf:ro
      - /etc/localtime:/etc/localtime:ro
    environment:
      # Wichtig: Rspamd und andere Services deaktivieren für ersten Test
      - ENABLE_RSPAMD=0
      - ENABLE_OPENDKIM=1
      - ENABLE_OPENDMARC=0
      - ENABLE_POLICYD_SPF=0
      - ENABLE_AMAVIS=0
      - ENABLE_SPAMASSASSIN=0                                                                                                 - ENABLE_POSTGREY=0
      - RSPAMD_GREYLISTING=0
      - ENABLE_CLAMAV=0
        #- ENABLE_FAIL2BAN=1
      - ENABLE_FAIL2BAN=0
      - ENABLE_MANAGESIEVE=1
      - ENABLE_POP3=1
      - RSPAMD_LEARN=1
      - MOVE_SPAM_TO_JUNK=1
      - RSPAMD_CHECK_AUTHENTICATED=0
      - RSPAMD_HFILTER=0
      - ONE_DIR=1
      - ENABLE_UPDATE_CHECK=0
      - PERMIT_DOCKER=network
        # - PERMIT_DOCKER=empty
      - SSL_TYPE=manual
      - SSL_CERT_PATH=/tmp/docker-mailserver/ssl/cert.pem
      - SSL_KEY_PATH=/tmp/docker-mailserver/ssl/key.pem
      # Amazon SES SMTP Relay
      - RELAY_HOST=email-smtp.us-east-2.amazonaws.com
      - RELAY_PORT=587
      - RELAY_USER=${SES_SMTP_USER}
      - RELAY_PASSWORD=${SES_SMTP_PASSWORD}
      # Weitere Einstellungen
      - POSTFIX_OVERRIDE_HOSTNAME=email-srvr.com
      - POSTFIX_MYNETWORKS=172.16.0.0/12 172.17.0.0/12 172.18.0.0/12 [::1]/128 [fe80::]/64
      - POSTFIX_MAILBOX_SIZE_LIMIT=0
      - POSTFIX_MESSAGE_SIZE_LIMIT=0
      - SPOOF_PROTECTION=0
      - ENABLE_SRS=0
      # Debug-Einstellungen
      - LOG_LEVEL=info
    cap_add:
      - NET_ADMIN
      - SYS_PTRACE
    restart: unless-stopped
    networks:
      mail_network:
        aliases:
          - mail.email-srvr.com
          - mailserver

  roundcube:
    image: roundcube/roundcubemail:latest
    container_name: roundcube-new
    depends_on:
      - roundcube-db
      - mailserver
    environment:
      - ROUNDCUBEMAIL_DB_TYPE=pgsql
      - ROUNDCUBEMAIL_DB_HOST=roundcube-db
      - ROUNDCUBEMAIL_DB_NAME=roundcube
      - ROUNDCUBEMAIL_DB_USER=roundcube
      - ROUNDCUBEMAIL_DB_PASSWORD=${ROUNDCUBE_DB_PASSWORD}
      # Einfache Konfiguration ohne SSL-Probleme (für ersten Test)
      - ROUNDCUBEMAIL_DEFAULT_HOST=ssl://mail.email-srvr.com
      - ROUNDCUBEMAIL_DEFAULT_PORT=993
      - ROUNDCUBEMAIL_SMTP_SERVER=tls://mail.email-srvr.com
      - ROUNDCUBEMAIL_SMTP_PORT=587
      - ROUNDCUBEMAIL_PLUGINS=password,managesieve
    volumes:
      - ./docker-data/roundcube/config:/var/roundcube/config
      # ENTFERNEN Sie diese Zeile:
      # - ./roundcube-config.php:/var/www/html/config/config.inc.php:ro
    networks:
      - mail_network
    restart: unless-stopped

  roundcube-db:
    image: postgres:15
    container_name: roundcube-db-new
    environment:
      - POSTGRES_DB=roundcube
      - POSTGRES_USER=roundcube
      - POSTGRES_PASSWORD=${ROUNDCUBE_DB_PASSWORD}
    ports:
      - "5555:5432"
    volumes:
      - ./docker-data/roundcube/db:/var/lib/postgresql/data
    networks:
      - mail_network
    restart: unless-stopped

networks:
  mail_network:
    external: true