networks:
  hidden_mailserver_network:
    driver: bridge
    ipam:
      config:
        - subnet: 172.32.0.0/24
services:
  tor:
    image: dockurr/tor
    container_name: tor
    volumes:
      - ./tor/config/torrc:/etc/tor/torrc
      - ./tor/data:/var/lib/tor
    networks:
      hidden_mailserver_network:
        ipv4_address: 172.32.0.2
    restart: always
  docker-mailserver:
    image: mailserver/docker-mailserver
    container_name: mailserver
    depends_on:
      - tor
    volumes:
      - ./docker-mailserver/certs:/certs
      - ./docker-mailserver/config:/tmp/docker-mailserver
      - ./docker-mailserver/dovecot/10-encryption.conf:/etc/dovecot/conf.d/10-encryption.conf
      - ./docker-mailserver/mail:/var/mail
      - ./docker-mailserver/smtp_tor/smtp_tor.sh:/usr/lib/postfix/sbin/smtp_tor
      - ./docker-mailserver/transport:/etc/postfix/transport
      - ./docker-mailserver/master.cf:/etc/postfix/master.cf
    networks:
      hidden_mailserver_network:
        ipv4_address: 172.32.0.3
    restart: always
    command:
      - "/bin/bash"
      - "-c"
      - "apt-get update -y && apt-get install -y torsocks && echo 'AllowInbound 1' >> /etc/tor/torsocks.conf && chown root:root /usr/lib/postfix/sbin/smtp_tor && chown root:root /etc/postfix/transport && postmap /etc/postfix/transport && supervisord -c /etc/supervisor/supervisord.conf"
    environment:
      - "ENABLE_POP3=1"
      - "OVERRIDE_HOSTNAME=mail.${HIDDEN_SERVICE_ADDRESS}"
      - "POSTMASTER_ADDRESS=postmaster@${HIDDEN_SERVICE_ADDRESS}"
      - "SSL_TYPE=self-signed"