Hosting Web/Email services on Alpine - Revision history

John3-16: /* See also */ Added SSHGuard (previously orphaned page).

2026-01-07T20:26:30Z

See also: Added SSHGuard (previously orphaned page).

← Older revision		Revision as of 20:26, 7 January 2026
Line 190:		Line 190:
	* [[Grommunio_Mail_Server\|Grommunio Mail Server]] - Open-source groupware solution		* [[Grommunio_Mail_Server\|Grommunio Mail Server]] - Open-source groupware solution
	* [[Aerc]] - Terminal email client (MUA)		* [[Aerc]] - Terminal email client (MUA)
			* [[Sshguard\|SSHGuard]] - Protects hosts against brute-force attacks: monitoring logs, attack detection, blocking using firewall.

	[[Category:Server]]		[[Category:Server]]
	[[Category:Mail]]		[[Category:Mail]]

John3-16: 1. Added 'Accuracy' flag, as much is based on the obsolete Protecting your email server with Alpine page; 2. Amended style; 2. Added 'See also'

2025-12-16T16:38:50Z

1. Added 'Accuracy' flag, as much is based on the obsolete Protecting your email server with Alpine page; 2. Amended style; 2. Added 'See also'

Show changes

Chocolatine31: typo in a package name (clamsmtpd instead of clamsmtp)

2025-09-08T20:47:18Z

typo in a package name (clamsmtpd instead of clamsmtp)

← Older revision		Revision as of 20:47, 8 September 2025
Line 66:		Line 66:


	apk add postfix dovecot clamav ~~clamsmtpd~~ gross		apk add postfix dovecot clamav clamsmtp gross

	===Postfix===		===Postfix===

Chocolatine31: Update some 'apk' and 'rc-update' command to match their current state (wasn't updated since 2008)

2025-09-08T20:39:41Z

Update some 'apk' and 'rc-update' command to match their current state (wasn't updated since 2008)

← Older revision		Revision as of 20:39, 8 September 2025
Line 17:		Line 17:
	There are many http servers out there. Alpine comes with a few different ones. For this guide we installed lighttpd.		There are many http servers out there. Alpine comes with a few different ones. For this guide we installed lighttpd.

	~~apk_fetch -u~~		apk update
	~~apk_get install~~ lighttpd openssl php		apk add lighttpd openssl php

	Most everything is already taken care of with lighttpd. Make sure to uncomment the ssl options		Most everything is already taken care of with lighttpd. Make sure to uncomment the ssl options
Line 66:		Line 66:


	~~apk_get install~~ postfix dovecot clamav clamsmtpd gross		apk add postfix dovecot clamav clamsmtpd gross

	===Postfix===		===Postfix===
Line 188:		Line 188:

	===Final Steps ===		===Final Steps ===
	Start the services and make sure to ~~rc_add~~ them		Start the services and make sure to rc-update them
	rc-service postfix start		rc-service postfix start
	~~rc_add~~ -k postfix		rc-update add postfix default

	[[Category:Server]]		[[Category:Server]]
	[[Category:Mail]]		[[Category:Mail]]

Sertonix: replace /etc/init.d with rc-service

2023-11-17T10:06:39Z

replace /etc/init.d with rc-service

← Older revision		Revision as of 10:06, 17 November 2023
Line 24:		Line 24:
	ssl.pemfile = "/etc/lighttpd/server.pem"		ssl.pemfile = "/etc/lighttpd/server.pem"

	~~/etc/init.d/~~lighttpd start		rc-service lighttpd start
	See below for generating the server.pem		See below for generating the server.pem

Line 189:		Line 189:
	===Final Steps ===		===Final Steps ===
	Start the services and make sure to rc_add them		Start the services and make sure to rc_add them
	~~/etc/init.d/~~postfix start		rc-service postfix start
	rc_add -k postfix		rc_add -k postfix

	[[Category:Server]]		[[Category:Server]]
	[[Category:Mail]]		[[Category:Mail]]

Zcrayfish: /* Introduction */ Removed vserver section: no longer supported.

2023-09-03T21:15:04Z

Introduction: Removed vserver section: no longer supported.

@@ Line 13: / Line 13: @@
       |    |
     iSCSI  iSCSI
 == Web Services ==

Dubiousjim: Propose merge, add Categories

2012-03-24T15:48:29Z

Propose merge, add Categories

← Older revision		Revision as of 15:48, 24 March 2012
Line 1:		Line 1:
			{{Merge\|Hosting services on Alpine}}

	= Introduction =		= Introduction =

Line 202:		Line 204:
	rc_add -k postfix		rc_add -k postfix

	[[Category:~~Networking~~]]		[[Category:Server]]
			[[Category:Mail]]

Dubiousjim: Category:Networking

2012-03-12T09:14:45Z

Category:Networking

← Older revision		Revision as of 09:14, 12 March 2012
Line 201:		Line 201:
	/etc/init.d/postfix start		/etc/init.d/postfix start
	rc_add -k postfix		rc_add -k postfix

			[[Category:Networking]]

Mhavela: /* Dovecot */ Keyfile typo

2009-05-08T13:54:09Z

Dovecot: Keyfile typo

← Older revision		Revision as of 13:54, 8 May 2009
Line 158:		Line 158:

	ssl_cert_file = /etc/ssl/dovecot/server.pem		ssl_cert_file = /etc/ssl/dovecot/server.pem
	~~ssl_cert_file~~ = /etc/ssl/dovecot/~~key~~.pem		ssl_key_file = /etc/ssl/dovecot/keyfile.pem
	mail_location = maildir:/var/spool/vhosts/&d/%n		mail_location = maildir:/var/spool/vhosts/&d/%n
	valid_chroot_dirs = /var/spool/vhosts		valid_chroot_dirs = /var/spool/vhosts

Mhavela: Cleaning up the looks of the page

2009-05-06T16:59:48Z

Cleaning up the looks of the page

← Older revision		Revision as of 16:59, 6 May 2009
Line 6:		Line 6:

	Guest OS here or		Guest OS here or
	[Host Alpine Box] --------------------- [DAS]		[Host Alpine Box] --------------------- [DAS]
	\| \|		\| \|
	\| \|Guest OS here		\| \|Guest OS here
Line 45:		Line 45:
	For other services we are also going to be using ssl. An easy way to just start using it is generating your own self sign cert. Script and Configuration file taken from setup-webconf script on Alpine.		For other services we are also going to be using ssl. An easy way to just start using it is generating your own self sign cert. Script and Configuration file taken from setup-webconf script on Alpine.

	ssl.cnf		ssl.cnf
	[ req ]		[ req ]
	default_bits = 1024		default_bits = 1024
Line 52:		Line 52:
	x509_extensions = cert_type		x509_extensions = cert_type
	prompt = no		prompt = no

	[ req_dn ]		[ req_dn ]
	OU=HTTPS server		OU=HTTPS server
	CN=example.net		CN=example.net
	emailAddress=postmaster@example.net		emailAddress=postmaster@example.net

	[ cert_type ]		[ cert_type ]
	nsCertType = server		nsCertType = server

	ssl.sh		ssl.sh

	#/bin/sh		#/bin/sh
	openssl genrsa 512/1024 >server.pem		openssl genrsa 512/1024 >server.pem

	openssl req -new -key server.pem -days 365 -out request.pem		openssl req -new -key server.pem -days 365 -out request.pem

	openssl genrsa 2048 > keyfile.pem		openssl genrsa 2048 > keyfile.pem

	openssl req -new -x509 -nodes -sha1 -days 3650 -key keyfile.pem \		openssl req -new -x509 -nodes -sha1 -days 3650 -key keyfile.pem \
	-config ssl.cnf > server.pem		-config ssl.cnf > server.pem
Line 88:		Line 82:

	====Main.cf====		====Main.cf====
	vi /etc/postfix/main.cf		vi /etc/postfix/main.cf
	#/etc/postfix/main.cf		#/etc/postfix/main.cf
	myhostname = mx.example.net		myhostname = mx.example.net
Line 106:		Line 100:
	disable_vrfy_command = yes		disable_vrfy_command = yes
	content_filter = scan:[127.0.0.1]:10025 # clamscan to be configured later		content_filter = scan:[127.0.0.1]:10025 # clamscan to be configured later
	smtpd_recipient_restrictions = reject_unauth_pipelining, permit_sasl_authenticated,permit_mynetworks,reject_invalid_hostname, reject_non_fqdn_hostname,reject_non_fqdn_sender, reject_non_fqdn_recipient,reject_unknown_sender_domain, reject_unknown_recipient_domain,reject_unauth_destination,		smtpd_recipient_restrictions = reject_unauth_pipelining, permit_sasl_authenticated,permit_mynetworks,reject_invalid_hostname, reject_non_fqdn_hostname,reject_non_fqdn_sender, reject_non_fqdn_recipient,reject_unknown_sender_domain, reject_unknown_recipient_domain,reject_unauth_destination, check_policy_service inet:127.0.0.1:5525,permit
	check_policy_service inet:127.0.0.1:5525,permit
	smtpd_data_restrictions = reject_unauth_pipelining, permit		smtpd_data_restrictions = reject_unauth_pipelining, permit
	smtpd_sasl_auth_enable = yes		smtpd_sasl_auth_enable = yes
Line 113:		Line 106:
	smtpd_sasl_type = dovecot		smtpd_sasl_type = dovecot
	smtpd_sasl_path = private/auth		smtpd_sasl_path = private/auth

	smtpd_tls_cert_file = /etc/ssl/postfix/server.pem		smtpd_tls_cert_file = /etc/ssl/postfix/server.pem
	smtpd_tls_key_file = $smtpd_tls_cert_file		smtpd_tls_key_file = $smtpd_tls_cert_file
Line 167:		Line 159:
	ssl_cert_file = /etc/ssl/dovecot/server.pem		ssl_cert_file = /etc/ssl/dovecot/server.pem
	ssl_cert_file = /etc/ssl/dovecot/key.pem		ssl_cert_file = /etc/ssl/dovecot/key.pem

	mail_location = maildir:/var/spool/vhosts/&d/%n		mail_location = maildir:/var/spool/vhosts/&d/%n
	valid_chroot_dirs = /var/spool/vhosts		valid_chroot_dirs = /var/spool/vhosts