Every few minutes postfix and sometimes dovecot are restarting.

My certificate is valid and from LetsEncrypt.

My dovecot log:

2026-04-01 12:51:04,607 INFO waiting for processes, dovecot, syslog-ng to die
Apr  1 12:51:04 91ed056730ea syslog-ng[112]: syslog-ng shutting down; version='4.8.3'
2026-04-01 12:51:04,726 INFO stopped: syslog-ng (exit status 0)
2026-04-01 12:51:05,830 INFO stopped: dovecot (exit status 0)
2026-04-01 12:51:05,831 WARN received SIGQUIT indicating exit request
2026-04-01 12:51:05,831 WARN stopped: processes (terminated by SIGTERM)
Uptime: 125  Threads: 9  Questions: 640  Slow queries: 0  Opens: 67  Open tables: 60  Queries per second avg: 5.120
Detecting SKIP_FTS=y... not enabling Flatcurve (FTS) then...
grep: /etc/dovecot/extra.conf: No such file or directory
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  129k  100  129k    0     0   398k      0 --:--:-- --:--:-- --:--:--  399k
20_blatspammer.cf
70_HS_body.cf
70_HS_header.cf
2026-04-01 12:51:07,905 INFO Set uid to user 0 succeeded
2026-04-01 12:51:07,907 INFO supervisord started with pid 1
2026-04-01 12:51:08,910 INFO spawned: 'processes' with pid 110
2026-04-01 12:51:08,913 INFO spawned: 'dovecot' with pid 111
2026-04-01 12:51:08,914 INFO spawned: 'syslog-ng' with pid 112
Apr  1 12:51:08 91ed056730ea syslog-ng[112]: syslog-ng starting up; version='4.8.3'
Apr  1 12:51:08 91ed056730ea dovecot: master: Dovecot v2.3.21.1 (d492236fa0) starting up for imap, sieve, lmtp, pop3
2026-04-01 12:51:09,971 INFO success: processes entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-04-01 12:51:09,971 INFO success: dovecot entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-04-01 12:51:09,971 INFO success: syslog-ng entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)

Postfix:

2026-04-01 12:53:02,516 WARN received SIGTERM indicating exit request
2026-04-01 12:53:02,516 INFO waiting for processes, postfix, syslog-ng to die
Apr  1 12:53:02 72893d64cdda syslog-ng[10]: syslog-ng shutting down; version='3.38.1'
Apr  1 12:53:02 72893d64cdda postfix/submission/smtpd[382]: lost connection after CONNECT from wk4-2.hetrixtools.com[95.179.193.59]
Apr  1 12:53:02 72893d64cdda postfix/submission/smtpd[382]: disconnect from wk4-2.hetrixtools.com[95.179.193.59] commands=0/0
Apr  1 12:53:02 72893d64cdda postfix/submission/smtpd[385]: disconnect from wk4-2.hetrixtools.com[95.179.193.59] ehlo=1 quit=1 commands=2
2026-04-01 12:53:02,620 INFO stopped: syslog-ng (exit status 0)
2026-04-01 12:53:03,622 WARN stopped: postfix (terminated by SIGTERM)
2026-04-01 12:53:03,622 INFO reaped unknown pid 376 (terminated by SIGTERM)
2026-04-01 12:53:03,622 INFO reaped unknown pid 377 (terminated by SIGTERM)
2026-04-01 12:53:03,622 INFO reaped unknown pid 378 (terminated by SIGTERM)
2026-04-01 12:53:03,622 INFO reaped unknown pid 380 (terminated by SIGTERM)
2026-04-01 12:53:03,622 INFO reaped unknown pid 381 (terminated by SIGTERM)
2026-04-01 12:53:03,622 INFO reaped unknown pid 382 (terminated by SIGTERM)
2026-04-01 12:53:03,622 INFO reaped unknown pid 383 (terminated by SIGTERM)
2026-04-01 12:53:03,622 INFO reaped unknown pid 384 (terminated by SIGTERM)
2026-04-01 12:53:03,623 INFO reaped unknown pid 385 (terminated by SIGTERM)
2026-04-01 12:53:03,623 INFO reaped unknown pid 387 (terminated by SIGTERM)
2026-04-01 12:53:03,623 INFO reaped unknown pid 389 (terminated by SIGTERM)
2026-04-01 12:53:03,623 INFO reaped unknown pid 390 (exit status 15)
2026-04-01 12:53:03,623 INFO reaped unknown pid 392 (terminated by SIGTERM)
2026-04-01 12:53:03,623 INFO reaped unknown pid 393 (terminated by SIGTERM)
2026-04-01 12:53:03,623 WARN stopped: processes (terminated by SIGTERM)
2026-04-01 12:53:03,623 INFO reaped unknown pid 403 (exit status 1)
2026-04-01 12:53:04,587 INFO Set uid to user 0 succeeded
2026-04-01 12:53:04,588 INFO supervisord started with pid 1
2026-04-01 12:53:05,591 INFO spawned: 'processes' with pid 8
2026-04-01 12:53:05,592 INFO spawned: 'postfix' with pid 9
2026-04-01 12:53:05,594 INFO spawned: 'syslog-ng' with pid 10
Uptime: 244  Threads: 9  Questions: 908  Slow queries: 0  Opens: 69  Open tables: 62  Queries per second avg: 3.721
Apr  1 12:53:05 72893d64cdda syslog-ng[10]: syslog-ng starting up; version='3.38.1'
Checking if ASN for your IP is listed for Spamhaus Bad ASN List...
The AS of your IP is NOT listed as a banned AS from Spamhaus!
Using the open Spamhaus blocklists.
chown: cannot access '/usr/share/man/man1/mailq.1.gz': No such file or directory
2026-04-01 12:53:07,035 INFO success: processes entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2026-04-01 12:53:07,035 INFO success: syslog-ng entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
Apr  1 12:53:07 72893d64cdda postfix/postfix-script[373]: starting the Postfix mail system
Apr  1 12:53:07 72893d64cdda postfix/master[375]: daemon started -- version 3.7.11, configuration /opt/postfix/conf

Watchdog:

Wed Apr 1 12:46:07 CEST 2026 Postfix health level: 50% (4/8), health trend: -4
Wed Apr 1 12:46:11 CEST 2026 MySQL/MariaDB health level: 100% (5/5), health trend: 0
Wed Apr 1 12:46:12 CEST 2026 Rspamd health level: 100% (5/5), health trend: 0
Wed Apr 1 12:46:12 CEST 2026 Fail2ban health level: 100% (1/1), health trend: 0
Wed Apr 1 12:46:20 CEST 2026 Dovecot health level: 42% (5/12), health trend: 1
Wed Apr 1 12:46:23 CEST 2026 Olefy health level: 100% (5/5), health trend: 0
Wed Apr 1 12:46:27 CEST 2026 Dovecot replication health level: 100% (20/20), health trend: 0
Wed Apr 1 12:46:29 CEST 2026 Mail queue health level: 100% (20/20), health trend: 0
Wed Apr 1 12:46:42 CEST 2026 Nginx health level: 100% (5/5), health trend: 0
Wed Apr 1 12:46:45 CEST 2026 Postfix TLS Policy companion health level: 100% (8/8), health trend: 0
Wed Apr 1 12:46:46 CEST 2026 Redis health level: 100% (5/5), health trend: 0
Wed Apr 1 12:46:51 CEST 2026 Postfix health level: 63% (5/8), health trend: 1
Wed Apr 1 12:46:52 CEST 2026 SOGo health level: 100% (3/3), health trend: 0
Wed Apr 1 12:46:55 CEST 2026 Mail queue health level: 100% (20/20), health trend: 0
Wed Apr 1 12:46:58 CEST 2026 Ratelimit health level: 100% (1/1), health trend: 0
Wed Apr 1 12:47:01 CEST 2026 Dovecot replication health level: 100% (20/20), health trend: 0
Wed Apr 1 12:47:02 CEST 2026 PHP-FPM health level: 100% (5/5), health trend: 0
Wed Apr 1 12:47:05 CEST 2026 Dovecot health level: 0% (0/12), health trend: -9
Wed Apr 1 12:47:05 CEST 2026 Fail2ban health level: 100% (1/1), health trend: 0
Wed Apr 1 12:47:06 CEST 2026 Dovecot hit error limit
IMAP OK - 0.009 second response time on 172.22.1.250 port 993 [* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.]|time=0.008679s;;;0.000000;10.000000
IMAP OK - 0.001 second response time on 172.22.1.250 port 143 [* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED] Dovecot ready.]|time=0.001069s;;;0.000000;10.000000
TCP OK - 0.000 second response time on 172.22.1.250 port 10001 [VERSION	1	2
MECH	PLAIN	plaintext
MECH	LOGIN	plaintext
SPID	129
CUID	7
COOKIE	978b0e61d2472ad0fc7894a4a820cfcd
DONE]|time=0.000380s;;;0.000000;10.000000
TCP OK - 0.001 second response time on 172.22.1.250 port 4190 ["IMPLEMENTATION" "Dovecot Pigeonhole"
"SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader imapflags notify imapsieve vnd.dovecot.imapsieve"
"NOTIFY" "mailto"
"SASL" ""
"STARTTLS"
"VERSION" "1.0"
OK "Dovecot ready."]|time=0.000836s;;;0.000000;10.000000
SMTP OK - 0.009 sec. response time|time=0.008875s;;;0.000000
IMAP OK - 0.008 second response time on 172.22.1.250 port 993 [* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.]|time=0.008398s;;;0.000000;10.000000
IMAP OK - 0.001 second response time on 172.22.1.250 port 143 [* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED] Dovecot ready.]|time=0.001077s;;;0.000000;10.000000
TCP OK - 0.000 second response time on 172.22.1.250 port 10001 [VERSION	1	2
MECH	PLAIN	plaintext
MECH	LOGIN	plaintext
SPID	129
CUID	17
COOKIE	8a3daa140185c8bdcb01960d77707190
DONE]|time=0.000179s;;;0.000000;10.000000
TCP OK - 0.001 second response time on 172.22.1.250 port 4190 ["IMPLEMENTATION" "Dovecot Pigeonhole"
"SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader imapflags notify imapsieve vnd.dovecot.imapsieve"
"NOTIFY" "mailto"
"SASL" ""
"STARTTLS"
"VERSION" "1.0"
OK "Dovecot ready."]|time=0.000892s;;;0.000000;10.000000
SMTP OK - 0.019 sec. response time|time=0.019398s;;;0.000000
IMAP OK - 0.010 second response time on 172.22.1.250 port 993 [* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.]|time=0.010434s;;;0.000000;10.000000
IMAP OK - 0.001 second response time on 172.22.1.250 port 143 [* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED] Dovecot ready.]|time=0.000858s;;;0.000000;10.000000
TCP OK - 0.000 second response time on 172.22.1.250 port 10001 [VERSION	1	2
MECH	PLAIN	plaintext
MECH	LOGIN	plaintext
SPID	129
CUID	7
COOKIE	c9c1d27278d44a826334a540f741362a
DONE]|time=0.000335s;;;0.000000;10.000000
TCP OK - 0.001 second response time on 172.22.1.250 port 4190 ["IMPLEMENTATION" "Dovecot Pigeonhole"
"SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader imapflags notify imapsieve vnd.dovecot.imapsieve"
"NOTIFY" "mailto"
"SASL" ""
"STARTTLS"
"VERSION" "1.0"
OK "Dovecot ready."]|time=0.000845s;;;0.000000;10.000000
recv() failed
connect to address 172.22.1.250 and port 993: Connection refused
connect to address 172.22.1.250 and port 143: Connection refused
connect to address 172.22.1.250 and port 10001: Connection refused
connect to address 172.22.1.250 and port 4190: Connection refused
Wed Apr 1 12:47:16 CEST 2026 Container is running for less than 360 seconds, skipping action...