在CentOS上配置LNMP(Linux, Nginx, MySQL, PHP)环境并添加邮件服务,可以通过安装和配置Postfix和Dovecot来实现。以下是详细的步骤:
首先,确保你的系统是最新的,并安装所需的软件包:
sudo yum update -y sudo yum install -y postfix dovecot dovecot-pgsql dovecot-sieve dovecot-managesieved
编辑Postfix的主配置文件 /etc/postfix/main.cf
:
sudo vi /etc/postfix/main.cf
添加或修改以下内容:
myhostname = mail.yourdomain.com mydomain = yourdomain.com myorigin = $mydomain inet_interfaces = all inet_protocols = ipv4 mydestination = $myhostname, localhost.$mydomain, $mydomain mynetworks = 127.0.0.0/8 [::1]/128 home_mailbox = Maildir/ smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous smtpd_sasl_local_domain = $myhostname smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination smtpd_tls_security_level = may smtpd_tls_cert_file = /etc/pki/tls/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file = /etc/pki/tls/private/ssl-cert-snakeoil.key smtpd_use_tls = yes
编辑SASL配置文件 /etc/postfix/sasl/sasl_passwd
:
sudo vi /etc/postfix/sasl/sasl_passwd
添加以下内容:
[smtp.yourdomain.com]:587 your_username:your_password
然后创建哈希数据库文件:
sudo postmap /etc/postfix/sasl/sasl_passwd
编辑Dovecot的主配置文件 /etc/dovecot/dovecot.conf
:
sudo vi /etc/dovecot/dovecot.conf
确保包含以下内容:
protocols = imap pop3 listen = * mail_location = maildir:~/Maildir ssl = yes ssl_cert = </etc/pki/tls/certs/ssl-cert-snakeoil.pem ssl_key = </etc/pki/tls/private/ssl-cert-snakeoil.key
编辑Dovecot的认证配置文件 /etc/dovecot/conf.d/10-auth.conf
:
sudo vi /etc/dovecot/conf.d/10-auth.conf
确保包含以下内容:
disable_plaintext_auth = no auth_mechanisms = plain login
编辑Dovecot的IMAP和POP3配置文件 /etc/dovecot/conf.d/10-mail.conf
:
sudo vi /etc/dovecot/conf.d/10-mail.conf
确保包含以下内容:
mail_privileged_group = mail
启动并启用Postfix和Dovecot服务:
sudo systemctl start postfix sudo systemctl enable postfix sudo systemctl start dovecot sudo systemctl enable dovecot
你可以使用 telnet
或 openssl
来测试邮件服务是否正常工作。
telnet mail.yourdomain.com 25
你应该能够看到类似以下的输出:
220 mail.yourdomain.com ESMTP Postfix
然后输入以下命令进行测试:
HELO localhost MAIL FROM:<your_username@yourdomain.com> RCPT TO:<recipient@example.com> DATA Subject: Test Email This is a test email. . QUIT
openssl s_client -connect mail.yourdomain.com:993 -crlf -quiet
你应该能够看到类似以下的输出:
CONNECTED(00000003) depth=2 C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3 verify error:num=20:unable to get local issuer certificate verify return:1 depth=2 C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3 verify error:num=27:certificate not trusted verify return:1 depth=2 C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3 verify error:num=21:unable to verify the first certificate verify return:1 --- Certificate chain 0 s:mail.yourdomain.com i:C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3 1 s:Let's Encrypt Authority X3 i:C=US, O=Internet Security Research Group, CN=ISRG Root X1 --- Server certificate -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE----- subject=/C=US/ST=YourState/L=YourCity/O=YourOrganization/CN=mail.yourdomain.com issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: ECDH, P-256, 256 bits --- SSL handshake has read 3544 bytes and written 434 bytes Verification error: self signed certificate --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 19 (self signed certificate) ---
通过以上步骤,你应该能够在CentOS上成功配置LNMP环境并添加邮件服务。