Files
karim 1d3818e725 docker-mailserver LXC für Proxmox: Stack + Admin-UI + Webmail + Hardening
- dms-lxc.sh: Proxmox-Host-Installer (unprivilegierter LXC, Debian 13, Docker),
  curl-Self-Download, Multi-Domain-DKIM, SnappyMail-Provisionierung, PVE-Firewall
- Stack: docker-mailserver, Node-Admin-API (Supabase-Auth), React-Admin-UI
  (OPENBUREAU-Look), SnappyMail (Shibui-Theme), Rspamd-Web-UI, docker-socket-proxy
- Admin: Postfächer/Aliase/Catch-all/Quota, editierbare Domains+Settings,
  Server (Quota/Queue über abgesicherte Bridge), Status & DNS
- Hardening: no-new-privileges, Whitelisted exec-Bridge, Rspamd-Passwort,
  .env chmod 600, PVE-CT-Firewall, generisch/teilbar (keine festen Domains)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-02 02:26:28 +02:00

14 lines
543 B
Bash

#!/bin/sh
# Erzeugt zur Laufzeit /config.js aus den Umgebungsvariablen, damit die
# React-App Supabase-URL/Key ohne Neu-Build erhält (window.__CONFIG__).
# Das nginx-Image führt Skripte in /docker-entrypoint.d/ vor dem Start aus.
set -e
cat > /usr/share/nginx/html/config.js <<EOF
window.__CONFIG__ = {
SUPABASE_URL: "${SUPABASE_URL}",
SUPABASE_ANON_KEY: "${SUPABASE_ANON_KEY}",
AUTH_DISABLED: "${AUTH_DISABLED:-false}"
};
EOF
echo "[entrypoint] config.js erzeugt (SUPABASE_URL=${SUPABASE_URL}, AUTH_DISABLED=${AUTH_DISABLED:-false})"