wk1: initial docker image setup

target/supervisor/conf.d/services.conf

@@ -0,0 +1,53 @@
+[program:mailserver]
+command=/usr/local/bin/start-services.sh
+autostart=true
+startsecs=0
+stopwaitsecs=55
+autorestart=false
+stdout_logfile=/dev/stdout
+stderr_logfile=/dev/stderr
+
+[program:fail2ban]
+command=/usr/bin/fail2ban-server -xf start
+autostart=false
+startsecs=0
+stopwaitsecs=55
+autorestart=true
+stdout_logfile=/var/log/supervisor/%(program_name)s.log
+stderr_logfile=/var/log/supervisor/%(program_name)s.log
+
+[program:rspamd]
+command=/usr/bin/rspamd --no-fork --user=_rspamd --group=_rspamd
+autostart=false
+startsecs=0
+stopwaitsecs=55
+autorestart=true
+stdout_logfile=/var/log/supervisor/%(program_name)s.log
+stderr_logfile=/var/log/supervisor/%(program_name)s.log
+
+[program:rspamd-redis]
+command=/usr/bin/redis-server /etc/redis/redis.conf
+autostart=false
+startsecs=0
+stopwaitsecs=55
+autorestart=true
+stdout_logfile=/var/log/supervisor/%(program_name)s.log
+stderr_logfile=/var/log/supervisor/%(program_name)s.log
+
+[program:dovecot]
+command=/usr/sbin/dovecot
+autostart=false
+startsecs=3
+stopwaitsecs=55
+autorestart=true
+stdout_logfile=/var/log/supervisor/%(program_name)s.log
+stderr_logfile=/var/log/supervisor/%(program_name)s.log
+
+[program:postfix]
+command=/usr/sbin/postfix
+autostart=false
+startsecs=3
+stopwaitsecs=55
+autorestart=true
+stdout_logfile=/var/log/supervisor/%(program_name)s.log
+stderr_logfile=/var/log/supervisor/%(program_name)s.log

target/supervisor/supervisord.conf

@@ -0,0 +1,34 @@
+[unix_http_server]
+file = /tmp/supervisor.sock
+chmod = 0700
+chown = nobody:nogroup
+username = jupiter
+password = jupiter
+
+[supervisord]
+user = root
+loglevel = warn
+nodaemon = true
+strip_ansi = true
+logfile = /var/log/supervisor/supervisord.log
+pidfile = /var/run/supervisord.pid
+childlogdir = /var/log/supervisor
+
+; The rpcinterface:supervisor section must remain in the config file for
+; RPC (supervisorctl/web interface) to work.  Additional interfaces may be
+; added by defining them in separate [rpcinterface:x] sections.
+[rpcinterface:supervisor]
+supervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface
+
+[supervisorctl]
+serverurl = unix:///tmp/supervisor.sock ; use a unix:// URL  for a unix socket
+username = jupiter
+password = jupiter
+
+; The [include] section can just contain the "files" setting.  This
+; setting can list multiple files (separated by whitespace or
+; newlines).  It can also contain wildcards.  The filenames are
+; interpreted as relative to this file.  Included files *cannot*
+; include files themselves.
+[include]
+files = /etc/supervisor/conf.d/*.conf