Upgrade Guide

Upgrade guide for docker-mailserver.

When upgrading, ensure that container configuration files are updated to match the requirements of the new version. Review the manifests in deploy/compose and deploy/kustomize for any changes to persistent volumes or configuration, and update them as necessary. If new environment variables have been introduced, update the .env file accordingly.

v6.x to v7.x

The web image is now based on Alpine Linux and uses FrankenPHP instead of PHP-FPM. The installation path for Roundcube has changed from /var/www/html/webmail to /opt/roundcube. A symbolic link is retained at /var/www/html/webmail, pointing to the public_html directory of Roundcube. The admin interface is now installed in /opt/admin to have a more appropriate naming. The container now supports read-only operation. Ensure that tmpfs mounts are configured as specified in deploy/compose/web.yaml.

v5.x to v6.0

Deployment on Kubernetes is now a first class citizen. You can use the kustomization.yaml file to deploy the mailserver to your Kubernetes cluster. The Helm chart has been deprecated and archived.

  • virus: The virus service has been removed. To add antivirus functionality, see the Rspamd antivirus documentation.
  • unbound: Added unbound as a DNS resolver for the filter service.
  • filter: The base image has been changed to rspamd/rspamd. This image is no longer based on Alpine Linux.
  • web: Set CSRF_ENABLED=false to disable CSRF protection in the web interface (default: true).
  • web: To run rootless, the web interface now runs on port 8080 internally.

MTA (Mail Transfer Agent)

  • TLS Certificate Paths: Certificate paths have been updated to /etc/postfix/tls/tls.crt and /etc/postfix/tls/tls.key.
  • Mail Submission: Mail submission is now only possible on port 587.

MDA (Mail Delivery Agent)

  • Base Image: Changed to dovecot/dovecot. This image is no longer based on Alpine Linux.
  • TLS Certificate Paths: Updated to /etc/dovecot/tls/tls.crt and /etc/dovecot/tls/tls.key. A Diffie-Hellman file is no longer required.
  • Mail Storage: Now mounted to /srv/vmail instead of /var/vmail.
  • Rootless Operation: The container now runs as a non-root user. Ensure mail storage and TLS certificates are accessible by UID 1000 and GID 1000.
  • Internal Ports: IMAP/POP3 internal ports have been updated:
  • IMAP: 31143
  • POP3: 31110
  • IMAPS: 31993
  • POP3S: 31995

These ports are only used for connections within the container network.

  • Full Text Search: Enabled by default. All FTS_ environment variables have been removed.
  • Protocol Support: POP3 and IMAP are always enabled. The POP3_ENABLED and IMAP_ENABLED environment variables have been removed.