FROM docker.io/alpine:3.16 as builder

RUN apk --no-cache add \
    rpcgen \
    g++ \
    make \
    openssl \
    openssl-dev \
    lua-dev \
    libsodium-dev \
    linux-pam-dev \
    zlib-dev \
    bzip2-dev \
    xz-dev \
    lz4-dev \
    icu-dev \
    inotify-tools-dev

ENV SHA256_SUM_DOVECOT=db5abcd87d7309659ea6b45b2cb6ee9c5f97486b2b719a5dd05a759e1f6a5c51
ENV DOVECOT_FILENAME=dovecot-2.3.19.1.tar.gz
RUN wget https://www.dovecot.org/releases/2.3/$DOVECOT_FILENAME
RUN echo "$SHA256_SUM_DOVECOT  $DOVECOT_FILENAME" | sha256sum -c - || exit 1
RUN mkdir /tmp/dovecot
RUN tar xzf $DOVECOT_FILENAME -C /tmp/dovecot --strip 1

ENV SHA256_SUM_PIGEONHOLE=637709a83fb1338c918e5398049f96b7aeb5ae00696794ed1e5a4d4c0ca3f688
ENV PIGEONHOLE_FILENAME=dovecot-2.3-pigeonhole-0.5.19.tar.gz
RUN wget https://pigeonhole.dovecot.org/releases/2.3/$PIGEONHOLE_FILENAME
RUN echo "$SHA256_SUM_PIGEONHOLE  $PIGEONHOLE_FILENAME" | sha256sum -c - || exit 1
RUN mkdir /tmp/pigeonhole
RUN tar xzf $PIGEONHOLE_FILENAME -C /tmp/pigeonhole --strip 1

RUN cd /tmp/dovecot && \
    ./configure --prefix '' \
    --with-notify=inotify \
    --with-lua \
    --with-zlib \
    --with-bzlib \
    --with-pam \
    --with-ssl=openssl \
    --with-sodium \
    --without-sql \
    --with-lzma \
    --with-lz4 \
    --with-icu \
    --without-shadow \
    --with-ssldir=/etc/ssl/mail \
    --with-rundir=/run/dovecot \
    --disable-static && \
    make && \
    make install

RUN cd /tmp/pigeonhole && \
    ./configure --prefix '' \
    --with-dovecot=/lib/dovecot \
    --disable-static && \
    make && make install

FROM docker.io/thallian/confd-env:3.16

COPY --from=builder /lib/dovecot/ /lib/dovecot/
COPY --from=builder /libexec/dovecot/ /libexec/dovecot/
COPY --from=builder /bin/doveadm /bin/doveadm
COPY --from=builder /bin/doveconf /bin/doveconf
COPY --from=builder /bin/dsync /bin/dsync
COPY --from=builder /sbin/dovecot /sbin/dovecot
COPY --from=builder /bin/sieve* /bin/

RUN apk --no-cache add \
    libsodium \
    libbz2 \
    zlib \
    xz-libs \
    lz4-libs \
    lz4 \
    linux-pam \
    openssl \
    ssmtp \
    ca-certificates \
    lua \
    lua-rapidjson \
    curl \
    inotify-tools

RUN addgroup -g 150 dovecot
RUN adduser -u 140 -h /dev/null -H -s /sbin/nologin -D -G dovecot dovecot

RUN addgroup -g 151 dovenull
RUN adduser -u 141 -h /dev/null -H -s /sbin/nologin -D -G dovenull dovenull

RUN addgroup -g 2222 access
RUN addgroup dovecot access

RUN addgroup -g 1111 vmail
RUN adduser -u 1111 -h /var/lib/vmail -D -G vmail vmail

RUN mkdir -p /etc/dovecot/conf.d
RUN mkdir /var/lib/vmail/sieve-before/

RUN chown -R vmail:vmail /var/lib/vmail/sieve-before/

EXPOSE 143 4190 6334 7777

VOLUME /var/lib/vmail/mail/ /etc/ssl/mail

ADD /rootfs /