anonaddy / docker

AnonAddy Docker image
MIT License
468 stars 51 forks source link

The value of CNAME changes in the error. #234

Closed MeneerHeijpaal closed 9 months ago

MeneerHeijpaal commented 9 months ago

Support guidelines

I've found a bug and checked that ...

Description

I want to add a custom domain to Anonaddy, but the CNAME mentioned appears to be not correct. The CNAME which is provided is different in the error.

Expected behaviour

The supplied value for the CNAME must be correct.

Actual behaviour

The supplied value for the CNAME doesn't seem correct.

Steps to reproduce

If I want to check the records of the custom domain, I have to set some DNS records. This looks like the following from a popup:

MX @ example.com
TXT @ v=spf1 mx -all
CNAME default._domainkey default._domainkey.example.com.
TXT _dmarc v=DMARC1; p=quarantine; adkim=s

If I enter these values into my DNS records, only the CNAME keeps giving an error. This error states: CNAME ._domainkey record not found. This could be due to DNS caching, please try again later.

This CNAME is different from the one mentioned in the pop-up which is mentioned above. A CNAME can't start with a '.'

Docker info

Client: Docker Engine - Community
 Version:    24.0.6
 Context:    default
 Debug Mode: false
 Plugins:
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.11.2
    Path:     /usr/libexec/docker/cli-plugins/docker-buildx
  compose: Docker Compose (Docker Inc.)
    Version:  v2.21.0
    Path:     /usr/libexec/docker/cli-plugins/docker-compose

Server:
 Containers: 6
  Running: 4
  Paused: 0
  Stopped: 2
 Images: 5
 Server Version: 24.0.6
 Storage Driver: overlay2
  Backing Filesystem: extfs
  Supports d_type: true
  Using metacopy: false
  Native Overlay Diff: true
  userxattr: false
 Logging Driver: json-file
 Cgroup Driver: systemd
 Cgroup Version: 2
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 8165feabfdfe38c65b599c4993d227328c231fca
 runc version: v1.1.8-0-g82f18fe
 init version: de40ad0
 Security Options:
  apparmor
  seccomp
   Profile: builtin
  cgroupns
 Kernel Version: 5.15.0-83-generic
 Operating System: Ubuntu 22.04.3 LTS
 OSType: linux
 Architecture: x86_64
 CPUs: 2
 Total Memory: 3.727GiB
 Name: example.com
 ID: 163a1050-45cf-4112-9838-97eb0db3adcf
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 Experimental: false
 Insecure Registries:
  127.0.0.0/8
 Live Restore Enabled: false

Docker Compose config

name: docker-anonaddy
services:
  anonaddy:
    container_name: anonaddy
    depends_on:
      db:
        condition: service_started
        required: true
      redis:
        condition: service_started
        required: true
    environment:
      ANONADDY_ADDITIONAL_USERNAME_LIMIT: "3"
      ANONADDY_ADMIN_USERNAME: anonaddy
      ANONADDY_BANDWIDTH_LIMIT: "104857600"
      ANONADDY_DNS_RESOLVER: 127.0.0.1
      ANONADDY_DOMAIN: example.com
      ANONADDY_ENABLE_REGISTRATION: "false"
      ANONADDY_HOSTNAME: example.com
      ANONADDY_LIMIT: "200"
      ANONADDY_NEW_ALIAS_LIMIT: "10"
      ANONADDY_RETURN_PATH: return@example.com
      ANONADDY_SECRET: <REDACTED>
      APP_DEBUG: "true"
      APP_KEY: base64:<REDACTED>
      APP_URL: https://example.com
      DB_DATABASE: anonaddy_database
      DB_HOST: db
      DB_PASSWORD: <REDACTED>
      DB_PORT: "3306"
      DB_TIMEOUT: "60"
      DB_USERNAME: anonaddy
      LOG_IP_VAR: remote_addr
      MAIL_FROM_ADDRESS: anon@example.com
      MAIL_FROM_NAME: AnonAddy
      MEMORY_LIMIT: 256M
      MYSQL_DATABASE: anonaddy_database
      MYSQL_PASSWORD: <REDACTED>
      MYSQL_USER: anonaddy
      OPCACHE_MEM_SIZE: "128"
      PGID: "1000"
      POSTFIX_DEBUG: "true"
      POSTFIX_SMTP_TLS: "false"
      POSTFIX_SMTPD_TLS: "true"
      POSTFIX_SMTPD_TLS_CERT_FILE: /etc/letsencrypt/live/example.com/cert.pem
      POSTFIX_SMTPD_TLS_KEY_FILE: /etc/letsencrypt/live/example.com/privkey.pem
      PUID: "1000"
      REAL_IP_FROM: 0.0.0.0/32
      REAL_IP_HEADER: X-Forwarded-For
      REDIS_HOST: redis
      REDIS_PASSWORD: <REDACTED>
      REDIS_PORT: "6379"
      RSPAMD_ENABLE: "true"
      RSPAMD_WEB_PASSWORD: <REDACTED>
      TZ: Europe/Paris
      UPLOAD_MAX_SIZE: 16M
    image: anonaddy/anonaddy:latest
    networks:
      default: null
    ports:
    - target: 25
      published: "25"
      protocol: tcp
    - target: 11334
      published: "11334"
      protocol: tcp
    restart: always
    volumes:
    - type: bind
      source: /opt/docker-anonaddy/data
      target: /data
      bind:
        create_host_path: true
    - type: bind
      source: /opt/docker-anonaddy/keys
      target: /etc/letsencrypt/live/example.com
      read_only: true
      bind:
        create_host_path: true
  db:
    command:
    - mysqld
    - --character-set-server=utf8mb4
    - --collation-server=utf8mb4_unicode_ci
    container_name: anonaddy_db
    environment:
      MYSQL_ALLOW_EMPTY_PASSWORD: "yes"
      MYSQL_DATABASE: anonaddy_database
      MYSQL_PASSWORD: <REDACTED>
      MYSQL_USER: anonaddy
    image: mariadb:10.5
    networks:
      default: null
    restart: always
    volumes:
    - type: bind
      source: /opt/docker-anonaddy/db
      target: /var/lib/mysql
      bind:
        create_host_path: true
  nginx:
    container_name: anonaddy_nginx
    depends_on:
      anonaddy:
        condition: service_started
        required: true
    image: nginx:1.20.1-alpine
    networks:
      default: null
    ports:
    - mode: ingress
      target: 443
      published: "443"
      protocol: tcp
    restart: unless-stopped
    volumes:
    - type: bind
      source: /opt/nginx/ssl/dhparam.pem
      target: /etc/ssl/dhparam.pem
      bind:
        create_host_path: true
    - type: bind
      source: /opt/nginx/templates
      target: /etc/nginx/templates
      bind:
        create_host_path: true
    - type: bind
      source: /opt/docker-anonaddy/keys
      target: /etc/letsencrypt/live/example.com
      bind:
        create_host_path: true
  redis:
    container_name: anonaddy_redis
    image: redis:4.0-alpine
    networks:
      default: null
    restart: always
networks:
  default:
    name: docker-anonaddy_default

Logs

[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 00-env: executing... 
[cont-init.d] 00-env: exited 0.
[cont-init.d] 00-fix-logs.sh: executing... 
[cont-init.d] 00-fix-logs.sh: exited 0.
[cont-init.d] 01-fix-uidgid.sh: executing... 
[cont-init.d] 01-fix-uidgid.sh: exited 0.
[cont-init.d] 02-fix-perms.sh: executing... 
Fixing perms...
[cont-init.d] 02-fix-perms.sh: exited 0.
[cont-init.d] 10-config.sh: executing... 
Setting timezone to Europe/Paris...
Initializing files and folders
Checking database connection...
Waiting 60s for database to be ready...
Database ready!
[cont-init.d] 10-config.sh: exited 0.
[cont-init.d] 11-config-php.sh: executing... 
Init PHP extensions
Setting PHP-FPM configuration
Setting PHP INI configuration
Setting OpCache configuration
[cont-init.d] 11-config-php.sh: exited 0.
[cont-init.d] 12-config-nginx.sh: executing... 
Setting Nginx configuration
[cont-init.d] 12-config-nginx.sh: exited 0.
[cont-init.d] 13-config-anonaddy.sh: executing... 
Creating AnonAddy env file
Trust all proxies
[cont-init.d] 13-config-anonaddy.sh: exited 0.
[cont-init.d] 14-config-rspamd.sh: executing... 
Copying DKIM private key for Rspamd
Setting Rspamd dkim_signing.conf
Setting Rspamd arc.conf
Setting Rspamd classifier-bayes.conf
Setting Rspamd logging.inc
Setting Rspamd redis.conf
Setting Rspamd greylist.conf
Setting Rspamd history_redis.conf
Setting Rspamd groups.conf
Setting Rspamd worker-controller.inc
Setting Rspamd dmarc.conf
Setting Rspamd milter_headers.conf
Disabling a variety of Rspamd modules
[cont-init.d] 14-config-rspamd.sh: exited 0.
[cont-init.d] 15-config-postfix.sh: executing... 
Setting Postfix master configuration
Setting Postfix main configuration
Setting Postfix milter configuration
Setting Postfix smtpd TLS configuration
Creating Postfix virtual alias domains and subdomains configuration
Creating Postfix recipient access configuration
Display Postfix config
[postfix-config] 2bounce_notice_recipient = postmaster
[postfix-config] access_map_defer_code = 450
[postfix-config] access_map_reject_code = 554
[postfix-config] address_verify_cache_cleanup_interval = 12h
[postfix-config] address_verify_default_transport = $default_transport
[postfix-config] address_verify_local_transport = $local_transport
[postfix-config] address_verify_map = lmdb:$data_directory/verify_cache
[postfix-config] address_verify_negative_cache = yes
[postfix-config] address_verify_negative_expire_time = 3d
[postfix-config] address_verify_negative_refresh_time = 3h
[postfix-config] address_verify_pending_request_limit = 5000
[postfix-config] address_verify_poll_count = ${stress?{1}:{3}}
[postfix-config] address_verify_poll_delay = 3s
[postfix-config] address_verify_positive_expire_time = 31d
[postfix-config] address_verify_positive_refresh_time = 7d
[postfix-config] address_verify_relay_transport = $relay_transport
[postfix-config] address_verify_relayhost = $relayhost
[postfix-config] address_verify_sender = $double_bounce_sender
[postfix-config] address_verify_sender_dependent_default_transport_maps = $sender_dependent_default_transport_maps
[postfix-config] address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps
[postfix-config] address_verify_sender_ttl = 0s
[postfix-config] address_verify_service_name = verify
[postfix-config] address_verify_transport_maps = $transport_maps
[postfix-config] address_verify_virtual_transport = $virtual_transport
[postfix-config] alias_database = hash:/etc/aliases
[postfix-config] alias_maps = hash:/etc/aliases
[postfix-config] allow_mail_to_commands = alias, forward
[postfix-config] allow_mail_to_files = alias, forward
[postfix-config] allow_min_user = no
[postfix-config] allow_percent_hack = yes
[postfix-config] allow_srv_lookup_fallback = no
[postfix-config] allow_untrusted_routing = no
[postfix-config] alternate_config_directories =
[postfix-config] always_add_missing_headers = no
[postfix-config] always_bcc =
[postfix-config] anonaddy_delivery_slot_cost = $default_delivery_slot_cost
[postfix-config] anonaddy_delivery_slot_discount = $default_delivery_slot_discount
[postfix-config] anonaddy_delivery_slot_loan = $default_delivery_slot_loan
[postfix-config] anonaddy_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
[postfix-config] anonaddy_destination_concurrency_limit = $default_destination_concurrency_limit
[postfix-config] anonaddy_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
[postfix-config] anonaddy_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
[postfix-config] anonaddy_destination_rate_delay = $default_destination_rate_delay
[postfix-config] anonaddy_destination_recipient_limit = $default_destination_recipient_limit
[postfix-config] anonaddy_extra_recipient_limit = $default_extra_recipient_limit
[postfix-config] anonaddy_initial_destination_concurrency = $initial_destination_concurrency
[postfix-config] anonaddy_minimum_delivery_slots = $default_minimum_delivery_slots
[postfix-config] anonaddy_recipient_limit = $default_recipient_limit
[postfix-config] anonaddy_recipient_refill_delay = $default_recipient_refill_delay
[postfix-config] anonaddy_recipient_refill_limit = $default_recipient_refill_limit
[postfix-config] anonaddy_time_limit = $command_time_limit
[postfix-config] anonaddy_transport_rate_delay = $default_transport_rate_delay
[postfix-config] anvil_rate_time_unit = 60s
[postfix-config] anvil_status_update_time = 600s
[postfix-config] append_at_myorigin = yes
[postfix-config] append_dot_mydomain = no
[postfix-config] application_event_drain_time = 100s
[postfix-config] authorized_flush_users = static:anyone
[postfix-config] authorized_mailq_users = static:anyone
[postfix-config] authorized_submit_users = static:anyone
[postfix-config] backwards_bounce_logfile_compatibility = yes
[postfix-config] berkeley_db_create_buffer_size = 16777216
[postfix-config] berkeley_db_read_buffer_size = 131072
[postfix-config] best_mx_transport =
[postfix-config] biff = no
[postfix-config] body_checks =
[postfix-config] body_checks_size_limit = 51200
[postfix-config] bounce_notice_recipient = postmaster
[postfix-config] bounce_queue_lifetime = 5d
[postfix-config] bounce_service_name = bounce
[postfix-config] bounce_size_limit = 50000
[postfix-config] bounce_template_file =
[postfix-config] broken_sasl_auth_clients = no
[postfix-config] canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient
[postfix-config] canonical_maps =
[postfix-config] cleanup_service_name = cleanup
[postfix-config] command_directory = /usr/sbin
[postfix-config] command_execution_directory =
[postfix-config] command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
[postfix-config] command_time_limit = 1000s
[postfix-config] compatibility_level = 2
[postfix-config] config_directory = /etc/postfix
[postfix-config] confirm_delay_cleared = no
[postfix-config] connection_cache_protocol_timeout = 5s
[postfix-config] connection_cache_service_name = scache
[postfix-config] connection_cache_status_update_time = 600s
[postfix-config] connection_cache_ttl_limit = 2s
[postfix-config] content_filter =
[postfix-config] cyrus_sasl_config_path =
[postfix-config] daemon_directory = /usr/libexec/postfix
[postfix-config] daemon_table_open_error_is_fatal = no
[postfix-config] daemon_timeout = 18000s
[postfix-config] data_directory = /var/lib/postfix
[postfix-config] debug_peer_level = 2
[postfix-config] debug_peer_list =
[postfix-config] debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
[postfix-config] default_database_type = lmdb
[postfix-config] default_delivery_slot_cost = 5
[postfix-config] default_delivery_slot_discount = 50
[postfix-config] default_delivery_slot_loan = 3
[postfix-config] default_delivery_status_filter =
[postfix-config] default_destination_concurrency_failed_cohort_limit = 1
[postfix-config] default_destination_concurrency_limit = 20
[postfix-config] default_destination_concurrency_negative_feedback = 1
[postfix-config] default_destination_concurrency_positive_feedback = 1
[postfix-config] default_destination_rate_delay = 0s
[postfix-config] default_destination_recipient_limit = 50
[postfix-config] default_extra_recipient_limit = 1000
[postfix-config] default_filter_nexthop =
[postfix-config] default_minimum_delivery_slots = 3
[postfix-config] default_privs = nobody
[postfix-config] default_process_limit = 100
[postfix-config] default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}
[postfix-config] default_recipient_limit = 20000
[postfix-config] default_recipient_refill_delay = 5s
[postfix-config] default_recipient_refill_limit = 100
[postfix-config] default_transport = smtp
[postfix-config] default_transport_rate_delay = 0s
[postfix-config] default_verp_delimiters = +=
[postfix-config] defer_code = 450
[postfix-config] defer_service_name = defer
[postfix-config] defer_transports =
[postfix-config] delay_logging_resolution_limit = 2
[postfix-config] delay_notice_recipient = postmaster
[postfix-config] delay_warning_time = 0h
[postfix-config] deliver_lock_attempts = 20
[postfix-config] deliver_lock_delay = 1s
[postfix-config] destination_concurrency_feedback_debug = no
[postfix-config] detect_8bit_encoding_header = yes
[postfix-config] disable_dns_lookups = no
[postfix-config] disable_mime_input_processing = no
[postfix-config] disable_mime_output_conversion = no
[postfix-config] disable_verp_bounces = no
[postfix-config] disable_vrfy_command = yes
[postfix-config] dns_ncache_ttl_fix_enable = no
[postfix-config] dnsblog_reply_delay = 0s
[postfix-config] dnsblog_service_name = dnsblog
[postfix-config] dnssec_probe = ns:.
[postfix-config] dont_remove = 0
[postfix-config] double_bounce_sender = double-bounce
[postfix-config] duplicate_filter_limit = 1000
[postfix-config] empty_address_default_transport_maps_lookup_key = <>
[postfix-config] empty_address_local_login_sender_maps_lookup_key = <>
[postfix-config] empty_address_recipient = MAILER-DAEMON
[postfix-config] empty_address_relayhost_maps_lookup_key = <>
[postfix-config] enable_idna2003_compatibility = no
[postfix-config] enable_long_queue_ids = no
[postfix-config] enable_original_recipient = yes
[postfix-config] enable_threaded_bounces = no
[postfix-config] error_delivery_slot_cost = $default_delivery_slot_cost
[postfix-config] error_delivery_slot_discount = $default_delivery_slot_discount
[postfix-config] error_delivery_slot_loan = $default_delivery_slot_loan
[postfix-config] error_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
[postfix-config] error_destination_concurrency_limit = $default_destination_concurrency_limit
[postfix-config] error_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
[postfix-config] error_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
[postfix-config] error_destination_rate_delay = $default_destination_rate_delay
[postfix-config] error_destination_recipient_limit = $default_destination_recipient_limit
[postfix-config] error_extra_recipient_limit = $default_extra_recipient_limit
[postfix-config] error_initial_destination_concurrency = $initial_destination_concurrency
[postfix-config] error_minimum_delivery_slots = $default_minimum_delivery_slots
[postfix-config] error_notice_recipient = postmaster
[postfix-config] error_recipient_limit = $default_recipient_limit
[postfix-config] error_recipient_refill_delay = $default_recipient_refill_delay
[postfix-config] error_recipient_refill_limit = $default_recipient_refill_limit
[postfix-config] error_service_name = error
[postfix-config] error_transport_rate_delay = $default_transport_rate_delay
[postfix-config] execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
[postfix-config] expand_owner_alias = no
[postfix-config] export_environment = TZ MAIL_CONFIG LANG
[postfix-config] fallback_transport =
[postfix-config] fallback_transport_maps =
[postfix-config] fast_flush_domains = $relay_domains
[postfix-config] fast_flush_purge_time = 7d
[postfix-config] fast_flush_refresh_time = 12h
[postfix-config] fault_injection_code = 0
[postfix-config] flush_service_name = flush
[postfix-config] fork_attempts = 5
[postfix-config] fork_delay = 1s
[postfix-config] forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
[postfix-config] forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward
[postfix-config] frozen_delivered_to = yes
[postfix-config] hash_queue_depth = 1
[postfix-config] hash_queue_names = deferred, defer
[postfix-config] header_address_token_limit = 10240
[postfix-config] header_checks =
[postfix-config] header_from_format = standard
[postfix-config] header_size_limit = 102400
[postfix-config] helpful_warnings = yes
[postfix-config] home_mailbox =
[postfix-config] hopcount_limit = 50
[postfix-config] html_directory = no
[postfix-config] ignore_mx_lookup_error = no
[postfix-config] ignore_srv_lookup_error = no
[postfix-config] import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C POSTLOG_SERVICE POSTLOG_HOSTNAME
[postfix-config] in_flow_delay = 1s
[postfix-config] inet_interfaces = all
[postfix-config] inet_protocols = all
[postfix-config] info_log_address_format = external
[postfix-config] initial_destination_concurrency = 5
[postfix-config] internal_mail_filter_classes =
[postfix-config] invalid_hostname_reject_code = 501
[postfix-config] ipc_idle = 5s
[postfix-config] ipc_timeout = 3600s
[postfix-config] ipc_ttl = 1000s
[postfix-config] known_tcp_ports = lmtp=24, smtp=25, smtps=submissions=465, submission=587
[postfix-config] line_length_limit = 2048
[postfix-config] lmdb_map_size = 16777216
[postfix-config] lmtp_address_preference = any
[postfix-config] lmtp_address_verify_target = rcpt
[postfix-config] lmtp_assume_final = no
[postfix-config] lmtp_balance_inet_protocols = yes
[postfix-config] lmtp_bind_address =
[postfix-config] lmtp_bind_address6 =
[postfix-config] lmtp_bind_address_enforce = no
[postfix-config] lmtp_body_checks =
[postfix-config] lmtp_cname_overrides_servername = no
[postfix-config] lmtp_connect_timeout = 0s
[postfix-config] lmtp_connection_cache_destinations =
[postfix-config] lmtp_connection_cache_on_demand = yes
[postfix-config] lmtp_connection_cache_time_limit = 2s
[postfix-config] lmtp_connection_reuse_count_limit = 0
[postfix-config] lmtp_connection_reuse_time_limit = 300s
[postfix-config] lmtp_data_done_timeout = 600s
[postfix-config] lmtp_data_init_timeout = 120s
[postfix-config] lmtp_data_xfer_timeout = 180s
[postfix-config] lmtp_defer_if_no_mx_address_found = no
[postfix-config] lmtp_delivery_slot_cost = $default_delivery_slot_cost
[postfix-config] lmtp_delivery_slot_discount = $default_delivery_slot_discount
[postfix-config] lmtp_delivery_slot_loan = $default_delivery_slot_loan
[postfix-config] lmtp_delivery_status_filter = $default_delivery_status_filter
[postfix-config] lmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
[postfix-config] lmtp_destination_concurrency_limit = $default_destination_concurrency_limit
[postfix-config] lmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
[postfix-config] lmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
[postfix-config] lmtp_destination_rate_delay = $default_destination_rate_delay
[postfix-config] lmtp_destination_recipient_limit = $default_destination_recipient_limit
[postfix-config] lmtp_discard_lhlo_keyword_address_maps =
[postfix-config] lmtp_discard_lhlo_keywords =
[postfix-config] lmtp_dns_reply_filter =
[postfix-config] lmtp_dns_resolver_options =
[postfix-config] lmtp_dns_support_level =
[postfix-config] lmtp_enforce_tls = no
[postfix-config] lmtp_extra_recipient_limit = $default_extra_recipient_limit
[postfix-config] lmtp_fallback_relay =
[postfix-config] lmtp_generic_maps =
[postfix-config] lmtp_header_checks =
[postfix-config] lmtp_host_lookup = dns
[postfix-config] lmtp_initial_destination_concurrency = $initial_destination_concurrency
[postfix-config] lmtp_lhlo_name = $myhostname
[postfix-config] lmtp_lhlo_timeout = 300s
[postfix-config] lmtp_line_length_limit = 998
[postfix-config] lmtp_mail_timeout = 300s
[postfix-config] lmtp_mime_header_checks =
[postfix-config] lmtp_min_data_rate = 500
[postfix-config] lmtp_minimum_delivery_slots = $default_minimum_delivery_slots
[postfix-config] lmtp_mx_address_limit = 5
[postfix-config] lmtp_mx_session_limit = 2
[postfix-config] lmtp_nested_header_checks =
[postfix-config] lmtp_per_request_deadline = ${lmtp_per_record_deadline?{$lmtp_per_record_deadline}:{no}}
[postfix-config] lmtp_pix_workaround_delay_time = 10s
[postfix-config] lmtp_pix_workaround_maps =
[postfix-config] lmtp_pix_workaround_threshold_time = 500s
[postfix-config] lmtp_pix_workarounds = disable_esmtp,delay_dotcrlf
[postfix-config] lmtp_quit_timeout = 300s
[postfix-config] lmtp_quote_rfc821_envelope = yes
[postfix-config] lmtp_randomize_addresses = yes
[postfix-config] lmtp_rcpt_timeout = 300s
[postfix-config] lmtp_recipient_limit = $default_recipient_limit
[postfix-config] lmtp_recipient_refill_delay = $default_recipient_refill_delay
[postfix-config] lmtp_recipient_refill_limit = $default_recipient_refill_limit
[postfix-config] lmtp_reply_filter =
[postfix-config] lmtp_rset_timeout = 20s
[postfix-config] lmtp_sasl_auth_cache_name =
[postfix-config] lmtp_sasl_auth_cache_time = 90d
[postfix-config] lmtp_sasl_auth_enable = no
[postfix-config] lmtp_sasl_auth_soft_bounce = yes
[postfix-config] lmtp_sasl_mechanism_filter =
[postfix-config] lmtp_sasl_password_maps =
[postfix-config] lmtp_sasl_path =
[postfix-config] lmtp_sasl_security_options = noplaintext, noanonymous
[postfix-config] lmtp_sasl_tls_security_options = $lmtp_sasl_security_options
[postfix-config] lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options
[postfix-config] lmtp_sasl_type = cyrus
[postfix-config] lmtp_send_dummy_mail_auth = no
[postfix-config] lmtp_send_xforward_command = no
[postfix-config] lmtp_sender_dependent_authentication = no
[postfix-config] lmtp_skip_5xx_greeting = yes
[postfix-config] lmtp_skip_quit_response = no
[postfix-config] lmtp_starttls_timeout = 300s
[postfix-config] lmtp_tcp_port = 24
[postfix-config] lmtp_tls_CAfile =
[postfix-config] lmtp_tls_CApath =
[postfix-config] lmtp_tls_block_early_mail_reply = no
[postfix-config] lmtp_tls_cert_file =
[postfix-config] lmtp_tls_chain_files =
[postfix-config] lmtp_tls_ciphers = medium
[postfix-config] lmtp_tls_connection_reuse = no
[postfix-config] lmtp_tls_dcert_file =
[postfix-config] lmtp_tls_dkey_file = $lmtp_tls_dcert_file
[postfix-config] lmtp_tls_eccert_file =
[postfix-config] lmtp_tls_eckey_file = $lmtp_tls_eccert_file
[postfix-config] lmtp_tls_enforce_peername = yes
[postfix-config] lmtp_tls_exclude_ciphers =
[postfix-config] lmtp_tls_fingerprint_cert_match =
[postfix-config] lmtp_tls_fingerprint_digest = ${{$compatibility_level} <level {3.6} ? {md5} : {sha256}}
[postfix-config] lmtp_tls_force_insecure_host_tlsa_lookup = no
[postfix-config] lmtp_tls_key_file = $lmtp_tls_cert_file
[postfix-config] lmtp_tls_loglevel = 0
[postfix-config] lmtp_tls_mandatory_ciphers = medium
[postfix-config] lmtp_tls_mandatory_exclude_ciphers =
[postfix-config] lmtp_tls_mandatory_protocols = >=TLSv1
[postfix-config] lmtp_tls_note_starttls_offer = no
[postfix-config] lmtp_tls_per_site =
[postfix-config] lmtp_tls_policy_maps =
[postfix-config] lmtp_tls_protocols = >=TLSv1
[postfix-config] lmtp_tls_scert_verifydepth = 9
[postfix-config] lmtp_tls_secure_cert_match = nexthop
[postfix-config] lmtp_tls_security_level =
[postfix-config] lmtp_tls_servername =
[postfix-config] lmtp_tls_session_cache_database =
[postfix-config] lmtp_tls_session_cache_timeout = 3600s
[postfix-config] lmtp_tls_trust_anchor_file =
[postfix-config] lmtp_tls_verify_cert_match = hostname
[postfix-config] lmtp_tls_wrappermode = no
[postfix-config] lmtp_transport_rate_delay = $default_transport_rate_delay
[postfix-config] lmtp_use_tls = no
[postfix-config] lmtp_xforward_timeout = 300s
[postfix-config] local_command_shell =
[postfix-config] local_delivery_slot_cost = $default_delivery_slot_cost
[postfix-config] local_delivery_slot_discount = $default_delivery_slot_discount
[postfix-config] local_delivery_slot_loan = $default_delivery_slot_loan
[postfix-config] local_delivery_status_filter = $default_delivery_status_filter
[postfix-config] local_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
[postfix-config] local_destination_concurrency_limit = 2
[postfix-config] local_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
[postfix-config] local_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
[postfix-config] local_destination_rate_delay = $default_destination_rate_delay
[postfix-config] local_destination_recipient_limit = 1
[postfix-config] local_extra_recipient_limit = $default_extra_recipient_limit
[postfix-config] local_header_rewrite_clients = permit_inet_interfaces
[postfix-config] local_initial_destination_concurrency = $initial_destination_concurrency
[postfix-config] local_login_sender_maps = static:*
[postfix-config] local_minimum_delivery_slots = $default_minimum_delivery_slots
[postfix-config] local_recipient_limit = $default_recipient_limit
[postfix-config] local_recipient_maps =
[postfix-config] local_recipient_refill_delay = $default_recipient_refill_delay
[postfix-config] local_recipient_refill_limit = $default_recipient_refill_limit
[postfix-config] local_transport = local:$myhostname
[postfix-config] local_transport_rate_delay = $default_transport_rate_delay
[postfix-config] luser_relay =
[postfix-config] mail_name = Postfix
[postfix-config] mail_owner = postfix
[postfix-config] mail_release_date = 20230605
[postfix-config] mail_spool_directory = /var/mail
[postfix-config] mail_version = 3.8.1
[postfix-config] mailbox_command =
[postfix-config] mailbox_command_maps =
[postfix-config] mailbox_delivery_lock = fcntl, dotlock
[postfix-config] mailbox_size_limit = 0
[postfix-config] mailbox_transport =
[postfix-config] mailbox_transport_maps =
[postfix-config] maillog_file = /dev/stdout
[postfix-config] maillog_file_compressor = gzip
[postfix-config] maillog_file_prefixes = /var, /dev/stdout
[postfix-config] maillog_file_rotate_suffix = %Y%m%d-%H%M%S
[postfix-config] mailq_path = /usr/bin/mailq
[postfix-config] manpage_directory = /usr/share/man
[postfix-config] maps_rbl_domains =
[postfix-config] maps_rbl_reject_code = 554
[postfix-config] masquerade_classes = envelope_sender, header_sender, header_recipient
[postfix-config] masquerade_domains =
[postfix-config] masquerade_exceptions =
[postfix-config] master_service_disable =
[postfix-config] max_idle = 100s
[postfix-config] max_use = 100
[postfix-config] maximal_backoff_time = 4000s
[postfix-config] maximal_queue_lifetime = 5d
[postfix-config] message_drop_headers = bcc, content-length, resent-bcc, return-path
[postfix-config] message_reject_characters =
[postfix-config] message_size_limit = 26214400
[postfix-config] message_strip_characters =
[postfix-config] meta_directory = /etc/postfix
[postfix-config] milter_command_timeout = 30s
[postfix-config] milter_connect_macros = j {daemon_name} {daemon_addr} v _
[postfix-config] milter_connect_timeout = 30s
[postfix-config] milter_content_timeout = 300s
[postfix-config] milter_data_macros = i
[postfix-config] milter_default_action = accept
[postfix-config] milter_end_of_data_macros = i
[postfix-config] milter_end_of_header_macros = i
[postfix-config] milter_header_checks =
[postfix-config] milter_helo_macros = {tls_version} {cipher} {cipher_bits} {cert_subject} {cert_issuer}
[postfix-config] milter_macro_daemon_name = $myhostname
[postfix-config] milter_macro_defaults =
[postfix-config] milter_macro_v = $mail_name $mail_version
[postfix-config] milter_mail_macros = i {mail_addr} {client_addr} {client_name} {auth_authen}
[postfix-config] milter_protocol = 6
[postfix-config] milter_rcpt_macros = i {rcpt_addr} {rcpt_host} {rcpt_mailer}
[postfix-config] milter_unknown_command_macros =
[postfix-config] mime_boundary_length_limit = 2048
[postfix-config] mime_header_checks = $header_checks
[postfix-config] mime_nesting_limit = 100
[postfix-config] minimal_backoff_time = 300s
[postfix-config] multi_instance_directories =
[postfix-config] multi_instance_enable = no
[postfix-config] multi_instance_group =
[postfix-config] multi_instance_name =
[postfix-config] multi_instance_wrapper =
[postfix-config] multi_recipient_bounce_reject_code = 550
[postfix-config] mydestination = localhost.$mydomain, localhost
[postfix-config] mydomain = example.com
[postfix-config] myhostname = example.com
[postfix-config] mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
[postfix-config] mynetworks_style = ${{$compatibility_level} <level {2} ? {subnet} : {host}}
[postfix-config] myorigin = $myhostname
[postfix-config] nested_header_checks = $header_checks
[postfix-config] newaliases_path = /usr/bin/newaliases
[postfix-config] non_fqdn_reject_code = 504
[postfix-config] non_smtpd_milters = $smtpd_milters
[postfix-config] notify_classes = resource, software
[postfix-config] openssl_path = openssl
[postfix-config] owner_request_special = yes
[postfix-config] parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,relay_domains,smtpd_access_maps
[postfix-config] permit_mx_backup_networks =
[postfix-config] pickup_service_name = pickup
[postfix-config] pipe_delivery_status_filter = $default_delivery_status_filter
[postfix-config] plaintext_reject_code = 450
[postfix-config] postlog_service_name = postlog
[postfix-config] postlogd_watchdog_timeout = 10s
[postfix-config] postmulti_control_commands = reload flush
[postfix-config] postmulti_start_commands = start
[postfix-config] postmulti_stop_commands = stop abort drain quick-stop
[postfix-config] postscreen_access_list = permit_mynetworks
[postfix-config] postscreen_allowlist_interfaces = ${postscreen_whitelist_interfaces?{$postscreen_whitelist_interfaces}:{static:all}}
[postfix-config] postscreen_bare_newline_action = ignore
[postfix-config] postscreen_bare_newline_enable = no
[postfix-config] postscreen_bare_newline_ttl = 30d
[postfix-config] postscreen_cache_cleanup_interval = 12h
[postfix-config] postscreen_cache_map = lmdb:$data_directory/postscreen_cache
[postfix-config] postscreen_cache_retention_time = 7d
[postfix-config] postscreen_client_connection_count_limit = $smtpd_client_connection_count_limit
[postfix-config] postscreen_command_count_limit = 20
[postfix-config] postscreen_command_filter =
[postfix-config] postscreen_command_time_limit = ${stress?{10}:{300}}s
[postfix-config] postscreen_denylist_action = ${postscreen_blacklist_action?{$postscreen_blacklist_action}:{ignore}}
[postfix-config] postscreen_disable_vrfy_command = $disable_vrfy_command
[postfix-config] postscreen_discard_ehlo_keyword_address_maps = $smtpd_discard_ehlo_keyword_address_maps
[postfix-config] postscreen_discard_ehlo_keywords = $smtpd_discard_ehlo_keywords
[postfix-config] postscreen_dnsbl_action = ignore
[postfix-config] postscreen_dnsbl_allowlist_threshold = ${postscreen_dnsbl_whitelist_threshold?{$postscreen_dnsbl_whitelist_threshold}:{0}}
[postfix-config] postscreen_dnsbl_max_ttl = ${postscreen_dnsbl_ttl?{$postscreen_dnsbl_ttl}:{1}}h
[postfix-config] postscreen_dnsbl_min_ttl = 60s
[postfix-config] postscreen_dnsbl_reply_map =
[postfix-config] postscreen_dnsbl_sites =
[postfix-config] postscreen_dnsbl_threshold = 1
[postfix-config] postscreen_dnsbl_timeout = 10s
[postfix-config] postscreen_enforce_tls = $smtpd_enforce_tls
[postfix-config] postscreen_expansion_filter = $smtpd_expansion_filter
[postfix-config] postscreen_forbidden_commands = $smtpd_forbidden_commands
[postfix-config] postscreen_greet_action = ignore
[postfix-config] postscreen_greet_banner = $smtpd_banner
[postfix-config] postscreen_greet_ttl = 1d
[postfix-config] postscreen_greet_wait = ${stress?{2}:{6}}s
[postfix-config] postscreen_helo_required = $smtpd_helo_required
[postfix-config] postscreen_non_smtp_command_action = drop
[postfix-config] postscreen_non_smtp_command_enable = no
[postfix-config] postscreen_non_smtp_command_ttl = 30d
[postfix-config] postscreen_pipelining_action = enforce
[postfix-config] postscreen_pipelining_enable = no
[postfix-config] postscreen_pipelining_ttl = 30d
[postfix-config] postscreen_post_queue_limit = $default_process_limit
[postfix-config] postscreen_pre_queue_limit = $default_process_limit
[postfix-config] postscreen_reject_footer = $smtpd_reject_footer
[postfix-config] postscreen_reject_footer_maps = $smtpd_reject_footer_maps
[postfix-config] postscreen_tls_security_level = $smtpd_tls_security_level
[postfix-config] postscreen_upstream_proxy_protocol =
[postfix-config] postscreen_upstream_proxy_timeout = 5s
[postfix-config] postscreen_use_tls = $smtpd_use_tls
[postfix-config] postscreen_watchdog_timeout = 10s
[postfix-config] prepend_delivered_header = command, file, forward
[postfix-config] process_id = 423
[postfix-config] process_id_directory = pid
[postfix-config] process_name = postconf
[postfix-config] propagate_unmatched_extensions = canonical, virtual
[postfix-config] proxy_interfaces =
...

Additional info

If I do my own dig-command, I can see the correct data in my DNS-records.

willbrowningme commented 9 months ago

You need to make sure you have set "default" as the value for ANONADDY_DKIM_SELECTOR in your .env file.

It is used here - https://github.com/anonaddy/anonaddy/blob/master/config/anonaddy.php#L192