add opendkim rspamd and dig by default

This commit is contained in:
Christoph Haas 2025-10-09 21:49:24 +02:00
parent 782f130d27
commit 562cf7ba6d

View file

@ -18,21 +18,22 @@ DEBIAN_FRONTEND=noninteractive \
apache2 python3-certbot-apache libapache2-mod-php \ apache2 python3-certbot-apache libapache2-mod-php \
php-intl php-mbstring php-xml unzip certbot \ php-intl php-mbstring php-xml unzip certbot \
roundcube-mysql roundcube roundcube-plugins swaks libnet-ssleay-perl \ roundcube-mysql roundcube roundcube-plugins swaks libnet-ssleay-perl \
ufw mutt unattended-upgrades mariadb-server ufw mutt unattended-upgrades mariadb-server \
rspamd opendkim-tools bind9-dnsutils
``` ```
While the server is downloading and installing the packages, let me give you a quick explanation of each package: While the server is downloading and installing the packages, let me give you a quick explanation of each package:
- **postfix** / **postfix-mysql** \ - **postfix** / **postfix-mysql** \
Postfix is the MTA (mail transport agent) that speaks SMTP to send and receive emails. This package installs Postfix with Postfix is the MTA (mail transport agent) that speaks SMTP to send and receive emails. This package installs Postfix
support for MariaDB databases. with support for MariaDB databases.
- **dovecot** \ - **dovecot** \
Dovecot manages the emsrc/content/docs/ispmail-trixie/140-install-packages.mdx emails using IMAP. Dovecot manages the emsrc/content/docs/ispmail-trixie/140-install-packages.mdx emails using IMAP.
- **-lmtpd** \ - **-lmtpd** \
LMTP (Local Mail Transfer Protocol) provides the glue between Postfix and Dovecot. LMTP (Local Mail Transfer Protocol) provides the glue between Postfix and Dovecot.
- **-managesieved** \ - **-managesieved** \
Lets you configure automatic processing rules on the server. Like out-of-office emails or filtering incoming emails to Lets you configure automatic processing rules on the server. Like out-of-office emails or filtering incoming emails
folders. to folders.
- **-mysql** \ - **-mysql** \
Makes Dovecot able to query MariaDB databases. Makes Dovecot able to query MariaDB databases.
- **apache** \ - **apache** \
@ -45,17 +46,21 @@ While the server is downloading and installing the packages, let me give you a q
Webmail software that lets you access your emails in any web browser. Roundcube speaks to Dovecot to fetch emails. And Webmail software that lets you access your emails in any web browser. Roundcube speaks to Dovecot to fetch emails. And
to Postfix to send emails. to Postfix to send emails.
- **swaks** / **libnet-ssleay-perl** \ - **swaks** / **libnet-ssleay-perl** \
The SWiss Army Knife of Smtp. Helpful command-line tool to send test emails to a mail server. The additional SSL package The SWiss Army Knife of Smtp. Helpful command-line tool to send test emails to a mail server. The additional SSL
is needed to test encrypted connections. package is needed to test encrypted connections.
- **certbot** \ - **certbot** \
Gets a free TLS certificate from [_Let's Encrypt_](https://letsencrypt.org/) for encrypting network communication. Gets a free TLS certificate from [_Let's Encrypt_](https://letsencrypt.org/) for encrypting network communication.
- **ufw** \ - **ufw** \
Universal FireWall. A simple tool to manage firewall rules to limit access to your server. TODO: omit? Universal FireWall. A simple tool to manage firewall rules to limit access to your server. TODO: omit?
- **rspamd** \
It reliably detects spam. Also handles adding DKIM signature to outgoing email to prevent spoofing your domains. TODO:
later/optional
- **mutt** \ - **mutt** \
A console-based program that can speak IMAP and also read Maildirs directly. Very helpful for testing the functionality A console-based program that can speak IMAP and also read Maildirs directly. Very helpful for testing the
of your mail server. Think of it as a text-based Thunderbird. functionality of your mail server. Think of it as a text-based Thunderbird.
- **unattended-upgrades** \ - **unattended-upgrades** \
Installs security updates automatically. Installs security updates automatically.
- **rspamd** \
It reliably detects and blocks spam. Also handles adding DKIM signature to outgoing email to prevent spoofing your
domains.
- **opendkim-tools** \
Not strictly necessary. But a nice tool to verify DKIM signatures. You know, for science.
- **bind9-dnsutils** \
Provides the infamous `dig` command for an easy way to do DNS lookups.