youtous/rainloop repository overview

⁠youtous/rainloop

• docker hub: https://hub.docker.com/r/youtous/rainloop⁠
• github repo: https://github.com/youtous/rainloop⁠

⁠Docker-compose.yml

rainloop:
  image: youtous/rainloop:latest
  container_name: rainloop
  ports:
    - "80:8888"
  volumes:
    - /mnt/docker/rainloop:/rainloop/data
  depends_on:
    - mailserver

⁠What is this ?

Rainloop is a simple, modern & fast web-based client. More details on the official website⁠.

This fork https://github.com/hardware/rainloop⁠ maintains a docker image for the latest version of rainloop using debian stretch image as base. It also provides some security enhancements, see below.

Rainloop version: 1.16.0

⁠Features

• Lightweight & secure image (no root process)
• Based on Debian-buster
• Latest Rainloop Community Edition (stable)
• Contacts (DB) : sqlite, mysql or pgsql (server not built-in)
• With Nginx and PHP8
• Postfixadmin-change-password plugin
• Redirects Rainloop log files to docker logs, allowing fail2ban processing
• Periodically rotates rainloop log files (errors, auth)

⁠Build-time variables

• GPG_FINGERPRINT : fingerprint of signing key

⁠Ports

• 8888

⁠Environment variables

⁠How to setup

https://github.com/hardware/mailserver/wiki/Rainloop-initial-configuration⁠

/!\ Security: Restrict admin interface after configuration is done.

⁠Fail2ban pattern

Authentication failures are logged using the following pattern:

[{date:Y-m-d H:i:s}] Auth failed: ip={request:ip} user={imap:login} host={imap:host} port={imap:port}

You can configure fail2ban jails and filter as it follows:

/etc/fail2ban/filter.d/rainloop.conf

[Definition]
failregex = Auth failed: ip=<HOST> user=.* host=.* port=.*$
ignoreregex =

/etc/fail2ban/jail.local

[rainloop]
enabled = true
port = http,https
backend = systemd # systemd is used as a source of logs, docker logs are redirected to systemd