Backups

Ckruijntjens

Hi All,

I am a beginer when it comes to mailcow. However everything works perfect. great product. However i got one question.
How can we restore a single email? and search email true backups?

m15f1t

It’s not easy to restore a single mail, due to the fact that everything is encrypted. For the same reason it’s not easy to search through backups for a specific e-mail ..

How do you make backups?

And may I ask for more context on your question? (user has a Trash where everything lands when it’s deleted..)

Ckruijntjens

Hi,

I am going to create my updates with the build in script.

I used to run kopano but decided to migrate to mailcow. What’s happens when a user accedently deletes a mail that’s in the trash and wants it back? Is there no way to restore this?

PS thanks for your reply.

m15f1t

If you only use the script from mailcow to make backups, I think there’s no easy way. Besides the script, I also rsync the whole vmail dir to another server with zfs snapshots for retention. From there you could restore a single mail, but you would have to know the file name on disk to do that, or decrypt everything so you can search in files.

Please don’t take my answer for final, I’m just starting with mailcow as well.

Ckruijntjens

m15f1t thanks for the reply. I am only gust starting with mailcow.

I will try your approach. If someone else knows a better way. Please inform us

Ckruijntjens

m15f1t

hi yust a question. how can i decrypt the messages in the terminal?

m15f1t

Ckruijntjens

There are excellent docs:

https://mailcow.github.io/mailcow-dockerized-docs/u_e-dovecot-mail-crypt/

Ckruijntjens

m15f1t

hi thank yoy for your reply.

I allredeay found that. but i want to decrypt a folder. not everyone’s email… how could this be achived whit a oneliner in terminal?

Ckruijntjens

m15f1t

when i am using this script nothing happens? (i changed the naming of domain_name nad user) if i change it to /var/vmail/ the script is doing something. however i dont see anything happening in the /tmp folder.

Decrypt /var/vmail

find /var/vmail/domain_name/user/ -type f -regextype egrep -regex ‘.S=.W=.*’ | while read -r file; do
if [[ $(head -c7 “$file”) == “CRYPTED” ]]; then
doveadm fs get compress lz4:0:crypt:private_key_path=/mail_crypt/ecprivkey.pem:public_key_path=/mail_crypt/ecpubkey.pem:posix:prefix=/ \
“$file” > “/tmp/$(basename ”$file")"
if [[ -s “/tmp/$(basename ”$file")" ]]; then
chmod 600 “/tmp/$(basename ”$file")"
chown 5000:5000 “/tmp/$(basename ”$file")"
mv “/tmp/$(basename ”$file")“ ”$file"
else
rm “/tmp/$(basename ”$file")"
fi
fi
done

Ckruijntjens

The thing i am trying to achive is to decrypt a users mailfolder to a temporary maildir so i can search and recover a single mail.

Ckruijntjens

Can anyone help me with this?

i also noticed that the docs are not correct.

lz4:0:crypt:private_key_path=/mail_crypt/ecprivkey.pem:public_key_path=/mail_crypt/ecpubkey.pem:posix:prefix=/ \

needs to be

lz4:4:crypt:private_key_path=/mail_crypt/ecprivkey.pem:public_key_path=/mail_crypt/ecpubkey.pem:posix:prefix=/ \

Ckruijntjens

For other people ho are havingthe same issues.

allredeay resolved it. the script is also removing the decrypted files. so i removed the last of the script.

find /var/vmail/domain_name/user/ -type f -regextype egrep -regex ‘.S=.W=.*’ | while read -r file; do
if [[ $(head -c7 “$file”) == “CRYPTED” ]]; then
doveadm fs get compress lz4:4:crypt:private_key_path=/mail_crypt/ecprivkey.pem:public_key_path=/mail_crypt/ecpubkey.pem:posix:prefix=/ \
“$file” > “/tmp/$(basename ”$file")"
if [[ -s “/tmp/$(basename ”$file")" ]]; then
chmod 600 “/tmp/$(basename ”$file")"
chown 5000:5000 “/tmp/$(basename ”$file")"
fi
fi
done