Custom domains

api/.env.sample

@@ -1,54 +1,57 @@
-FQDN="localhost"
-API_NAME="Service Name"
-API_PORT="3000"
-API_ALLOW_ORIGIN="http://localhost:3001"
-TOKEN_SECRET="secret"
+FQDN=localhost
+API_NAME=Service Name
+API_PORT=3000
+API_ALLOW_ORIGIN=http://localhost:3001
+API_TRUSTED_PROXIES=127.0.0.1,10.0.0.0/8,172.16.0.0/12
+API_ALLOW_IPS=127.0.0.1
+TOKEN_SECRET=secret
 TOKEN_EXPIRATION=168h
 API_TOKEN_EXPIRATION=8760h
-PSK=""
-PSK_ALLOW_ORIGIN="http://localhost:3001"
-DOMAINS="example1.net,example2.com"
-LOG_FILE="/var/log/api.log"
-BASIC_AUTH_USER=""
-BASIC_AUTH_PASSWORD=""
-NET_SUBNET=""
-NET_GATEWAY=""
-SIGNUP_WEBHOOK_URL=""
-SIGNUP_WEBHOOK_PSK=""
+API_DNS_RESOLVER=
+PSK=
+DOMAINS=example1.net,example2.com
+LOG_FILE=/var/log/api.log
+BASIC_AUTH_USER=
+BASIC_AUTH_PASSWORD=
+NET_SUBNET=
+NET_GATEWAY=
+SIGNUP_WEBHOOK_URL=
+SIGNUP_WEBHOOK_PSK=
 
-APP_PORT="3001"
+APP_PORT=3001
 
-DB_HOSTS="db"
-DB_PORT="3306"
-DB_NAME="email"
-DB_USER="email"
-DB_PASSWORD="email"
-DB_ROOT_USER="root"
-DB_ROOT_PASSWORD="root"
+DB_HOSTS=db
+DB_PORT=3306
+DB_NAME=email
+DB_USER=email
+DB_PASSWORD=email
+DB_ROOT_USER=root
+DB_ROOT_PASSWORD=root
 
-REDIS_ADDR="redis:6379"
-REDIS_ADDRS=""
-REDIS_MASTER_NAME=""
-REDIS_USERNAME=""
-REDIS_PASSWORD=""
-REDIS_FAILOVER_USERNAME=""
-REDIS_FAILOVER_PASSWORD=""
-REDIS_TLS_ENABLED="false"
-REDIS_CERT_FILE=""
-REDIS_KEY_FILE=""
-REDIS_CA_CERT_FILE=""
-REDIS_TLS_INSECURE_SKIP_VERIFY="false"
+REDIS_ADDR=redis:6379
+REDIS_ADDRS=
+REDIS_MASTER_NAME=
+REDIS_USERNAME=
+REDIS_PASSWORD=
+REDIS_FAILOVER_USERNAME=
+REDIS_FAILOVER_PASSWORD=
+REDIS_TLS_ENABLED=false
+REDIS_CERT_FILE=
+REDIS_KEY_FILE=
+REDIS_CA_CERT_FILE=
+REDIS_TLS_INSECURE_SKIP_VERIFY=false
 
-SMTP_CLIENT_HOST="smtp.example.net"
-SMTP_CLIENT_PORT="2525"
-SMTP_CLIENT_USER=""
-SMTP_CLIENT_PASSWORD=""
-SMTP_CLIENT_SENDER="from@example.net"
-SMTP_CLIENT_SENDER_NAME="From Name"
-SMTP_CLIENT_REPORT=""
+SMTP_CLIENT_HOST=smtp.example.net
+SMTP_CLIENT_PORT=2525
+SMTP_CLIENT_USER=
+SMTP_CLIENT_PASSWORD=
+SMTP_CLIENT_SENDER=from@example.net
+SMTP_CLIENT_SENDER_NAME=From Name
+SMTP_CLIENT_DKIM_SELECTOR=
+SMTP_CLIENT_REPORT=
 
 OTP_EXPIRATION=15m
-SUBSCRIPTION_TYPE=""
+SUBSCRIPTION_TYPE=
 MAX_CREDENTIALS=10
 MAX_RECIPIENTS=10
 MAX_DAILY_ALIASES=100
@@ -59,10 +62,10 @@ ACCOUNT_GRACE_PERIOD_DAYS=194
 ID_LIMITER_MAX=5
 ID_LIMITER_EXPIRATION=60m
 
-BACKUP_FILENAME="backup"
-BACKUP_CRON_EXPRESSION="0 0 29 2 1"
+BACKUP_FILENAME=backup
+BACKUP_CRON_EXPRESSION=0 0 29 2 1
 BACKUP_RETENTION_DAYS=7
-GPG_PASSPHRASE=""
-AWS_S3_BUCKET_NAME=""
-AWS_ACCESS_KEY_ID=""
-AWS_SECRET_ACCESS_KEY=""
+GPG_PASSPHRASE=
+AWS_S3_BUCKET_NAME=
+AWS_ACCESS_KEY_ID=
+AWS_SECRET_ACCESS_KEY=

api/compose.yml

@@ -16,6 +16,8 @@ services:
       - api:/var/log
     networks:
       net:
+    dns:
+      - ${API_DNS_RESOLVER}
 
   app:
     build: ../app

api/config/config.go

@@ -12,11 +12,12 @@ type APIConfig struct {
 	Name               string
 	Port               string
 	ApiAllowOrigin     string
+	ApiTrustedProxies  []string
+	ApiAllowIPs        []string
 	TokenSecret        string
 	TokenExpiration    time.Duration
 	ApiTokenExpiration time.Duration
 	PSK                string
-	PSKAllowOrigin     string
 	Domains            string
 	LogFile            string
 	BasicAuthUser      string
@@ -49,14 +50,15 @@ type RedisConfig struct {
 }
 
 type SMTPClientConfig struct {
-	Host        string
-	Port        string
-	User        string
-	Password    string
-	Sender      string
-	SenderName  string
-	Report      string
-	TokenSecret string
+	Host         string
+	Port         string
+	User         string
+	Password     string
+	Sender       string
+	SenderName   string
+	DkimSelector string
+	Report       string
+	TokenSecret  string
 }
 
 type ServiceConfig struct {
@@ -147,18 +149,21 @@ func New() (Config, error) {
 
 	dbHosts := strings.Split(os.Getenv("DB_HOSTS"), ",")
 	redisAddrs := strings.Split(os.Getenv("REDIS_ADDRESSES"), ",")
+	apiTrustedProxies := strings.Split(os.Getenv("API_TRUSTED_PROXIES"), ",")
+	apiAllowIPs := strings.Split(os.Getenv("API_ALLOW_IPS"), ",")
 
 	return Config{
 		API: APIConfig{
 			FQDN:               os.Getenv("FQDN"),
 			Name:               os.Getenv("API_NAME"),
 			Port:               os.Getenv("API_PORT"),
 			ApiAllowOrigin:     os.Getenv("API_ALLOW_ORIGIN"),
+			ApiTrustedProxies:  apiTrustedProxies,
+			ApiAllowIPs:        apiAllowIPs,
 			TokenSecret:        os.Getenv("TOKEN_SECRET"),
 			TokenExpiration:    tokenExp,
 			ApiTokenExpiration: apiTokenExp,
 			PSK:                os.Getenv("PSK"),
-			PSKAllowOrigin:     os.Getenv("PSK_ALLOW_ORIGIN"),
 			Domains:            os.Getenv("DOMAINS"),
 			LogFile:            os.Getenv("LOG_FILE"),
 			BasicAuthUser:      os.Getenv("BASIC_AUTH_USER"),
@@ -188,14 +193,15 @@ func New() (Config, error) {
 			TLSInsecureSkipVerify: os.Getenv("REDIS_TLS_INSECURE_SKIP_VERIFY") == "true",
 		},
 		SMTPClient: SMTPClientConfig{
-			Host:        os.Getenv("SMTP_CLIENT_HOST"),
-			Port:        os.Getenv("SMTP_CLIENT_PORT"),
-			User:        os.Getenv("SMTP_CLIENT_USER"),
-			Password:    os.Getenv("SMTP_CLIENT_PASSWORD"),
-			Sender:      os.Getenv("SMTP_CLIENT_SENDER"),
-			SenderName:  os.Getenv("SMTP_CLIENT_SENDER_NAME"),
-			Report:      os.Getenv("SMTP_CLIENT_REPORT"),
-			TokenSecret: os.Getenv("TOKEN_SECRET"),
+			Host:         os.Getenv("SMTP_CLIENT_HOST"),
+			Port:         os.Getenv("SMTP_CLIENT_PORT"),
+			User:         os.Getenv("SMTP_CLIENT_USER"),
+			Password:     os.Getenv("SMTP_CLIENT_PASSWORD"),
+			Sender:       os.Getenv("SMTP_CLIENT_SENDER"),
+			SenderName:   os.Getenv("SMTP_CLIENT_SENDER_NAME"),
+			DkimSelector: os.Getenv("SMTP_CLIENT_DKIM_SELECTOR"),
+			Report:       os.Getenv("SMTP_CLIENT_REPORT"),
+			TokenSecret:  os.Getenv("TOKEN_SECRET"),
 		},
 
 		Service: ServiceConfig{