500s when trying to create aliases

[hobgoblina]

Behaviour

Getting 500s when trying to create aliases.

Steps to reproduce this issue

Try the configs below? I've been able to add and verify domains, create usernames, create another user, edit settings, etc. Only thing I've found that's not working so far is creating aliases - seems to be failing both when I attempt to create both via the interface (with any params) and via sending emails to addresses that I'd like to use as aliases.

Expected behaviour

Creates an alias

Actual behaviour

500s without creating an alias

Configuration

• Docker version (type docker --version) : Docker version 20.10.12, build e91ed57
• Docker compose version if applicable (type docker-compose --version) : docker-compose version 1.29.2, build 5becea4c
• Platform (Debian 9, Ubuntu 18.04, ...) : Ubuntu 21.04
• System info (type uname -a) : Linux 1312 5.11.0-49-generic #55-Ubuntu SMP Wed Jan 12 17:36:34 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
• Include all necessary configuration files : docker-compose.yml, .env, ...

anonaddy.yml:

TZ=America/New_York
PUID=1000
PGID=1000

MEMORY_LIMIT=256M
UPLOAD_MAX_SIZE=64M
OPCACHE_MEM_SIZE=128
REAL_IP_FROM=0.0.0.0/32
REAL_IP_HEADER=X-Forwarded-For
LOG_IP_VAR=remote_addr

APP_KEY=base64:{{ SECRET SHH }}
APP_DEBUG=true
APP_URL=https://mail.{{ MY DOMAIN }}

ANONADDY_ADMIN_USERNAME={{ MY USER }}
ANONADDY_ENABLE_REGISTRATION=false
ANONADDY_DOMAIN={{ MY DOMAIN }}
ANONADDY_ALL_DOMAINS={{ MY DOMAIN }}
ANONADDY_HOSTNAME={{ MY FQDN }}
ANONADDY_DNS_RESOLVER=127.0.0.1
ANONADDY_SECRET={{ SECRET SHH }}
ANONADDY_LIMIT=200
ANONADDY_BANDWIDTH_LIMIT=2097152000
ANONADDY_NEW_ALIAS_LIMIT=20
ANONADDY_ADDITIONAL_USERNAME_LIMIT=500

MAIL_FROM_NAME=LinAnon
MAIL_FROM_ADDRESS=mailbot@{{ MY DOMAIN }}

POSTFIX_DEBUG=false
POSTFIX_SMTPD_TLS=false
POSTFIX_SMTP_TLS=false

DKIM_ENABLE=true
DMARC_ENABLE=true

Docker info

Client:
 Context:    default
 Debug Mode: false
 Plugins:
  app: Docker App (Docker Inc., v0.9.1-beta3)
  buildx: Docker Buildx (Docker Inc., v0.7.1-docker)
  scan: Docker Scan (Docker Inc., v0.12.0)

Server:
 Containers: 7
  Running: 6
  Paused: 0
  Stopped: 1
 Images: 7
 Server Version: 20.10.12
 Storage Driver: overlay2
  Backing Filesystem: extfs
  Supports d_type: true
  Native Overlay Diff: true
  userxattr: false
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Cgroup Version: 1
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 io.containerd.runtime.v1.linux runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 7b11cfaabd73bb80907dd23182b9347b4245eb5d
 runc version: v1.0.2-0-g52b36a2
 init version: de40ad0
 Security Options:
  apparmor
  seccomp
   Profile: default
 Kernel Version: 5.11.0-49-generic
 Operating System: Ubuntu 21.04
 OSType: linux
 Architecture: x86_64
 CPUs: 2
 Total Memory: 1.932GiB
 Name: 1312
 ID: 4NAI:ACHY:IE62:24KR:YSD4:FL7W:J7WZ:BIEB:OMAW:S2OL:SBJX:CFI5
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 Registry: https://index.docker.io/v1/
 Labels:
 Experimental: false
 Insecure Registries:
  127.0.0.0/8
 Live Restore Enabled: false

Logs

anonaddy                | [s6-init] making user provided files available at /var/run/s6/etc...exited 0.
anonaddy                | [s6-init] ensuring user provided files have correct perms...exited 0.
anonaddy                | [fix-attrs.d] applying ownership & permissions fixes...
anonaddy                | [fix-attrs.d] done.
anonaddy                | [cont-init.d] executing container initialization scripts...
anonaddy                | [cont-init.d] 00-env: executing... 
anonaddy                | [cont-init.d] 00-env: exited 0.
anonaddy                | [cont-init.d] 00-fix-logs.sh: executing... 
anonaddy                | [cont-init.d] 00-fix-logs.sh: exited 0.
anonaddy                | [cont-init.d] 01-fix-uidgid.sh: executing... 
anonaddy                | [cont-init.d] 01-fix-uidgid.sh: exited 0.
anonaddy                | [cont-init.d] 02-fix-perms.sh: executing... 
anonaddy                | Fixing perms...
anonaddy                | [cont-init.d] 02-fix-perms.sh: exited 0.
anonaddy                | [cont-init.d] 10-config.sh: executing... 
anonaddy                | Setting timezone to America/New_York...
anonaddy                | Initializing files and folders
anonaddy                | Checking database connection...
anonaddy                | Waiting 60s for database to be ready...
anonaddy                | Database ready!
anonaddy                | [cont-init.d] 10-config.sh: exited 0.
anonaddy                | [cont-init.d] 11-config-php.sh: executing... 
anonaddy                | Init PHP extensions
anonaddy                | Setting PHP-FPM configuration
anonaddy                | Setting PHP INI configuration
anonaddy                | Setting OpCache configuration
anonaddy                | [cont-init.d] 11-config-php.sh: exited 0.
anonaddy                | [cont-init.d] 12-config-nginx.sh: executing... 
anonaddy                | Setting Nginx configuration
anonaddy                | [cont-init.d] 12-config-nginx.sh: exited 0.
anonaddy                | [cont-init.d] 13-config-anonaddy.sh: executing... 
anonaddy                | Creating AnonAddy env file
anonaddy                | Trust all proxies
anonaddy                | Copied File [/vendor/fideloper/proxy/config/trustedproxy.php] To [/config/trustedproxy.php]
anonaddy                | Publishing complete.
anonaddy                | [cont-init.d] 13-config-anonaddy.sh: exited 0.
anonaddy                | [cont-init.d] 14-config-rspamd.sh: executing... 
anonaddy                | INFO: Rspamd service disabled.
anonaddy                | [cont-init.d] 14-config-rspamd.sh: exited 0.
anonaddy                | [cont-init.d] 15-config-opendkim.sh: executing... 
anonaddy                | Copying OpenDKIM private key
anonaddy                | Setting OpenDKIM configuration
anonaddy                | Setting OpenDKIM trusted hosts
anonaddy                | Setting OpenDKIM signing table
anonaddy                | Setting OpenDKIM key table
anonaddy                | [cont-init.d] 15-config-opendkim.sh: exited 0.
anonaddy                | [cont-init.d] 16-config-opendmarc.sh: executing... 
anonaddy                | Setting OpenDMARC configuration
anonaddy                | [cont-init.d] 16-config-opendmarc.sh: exited 0.
anonaddy                | [cont-init.d] 17-config-postfix.sh: executing... 
anonaddy                | Setting Postfix master configuration
anonaddy                | Setting Postfix main configuration
anonaddy                | Setting Postfix milter configuration
anonaddy                | Creating Postfix virtual alias domains and subdomains configuration
anonaddy                | Creating Postfix recipient access configuration
anonaddy                | Checking Postfix hostname
anonaddy                | myhostname = 1312.acab.casa
anonaddy                | Creating check_access stored procedure
anonaddy                | [cont-init.d] 17-config-postfix.sh: exited 0.
anonaddy                | [cont-init.d] 50-svc-main.sh: executing... 
anonaddy                | DB migration
anonaddy                | Nothing to migrate.
anonaddy                | Clear cache
anonaddy                | Application cache cleared!
anonaddy                | Configuration cache cleared!
anonaddy                | Configuration cached successfully!
anonaddy                | Compiled views cleared!
anonaddy                | Blade templates cached successfully!
anonaddy                | Route cache cleared!
anonaddy                | Routes cached successfully!
anonaddy                | Broadcasting queue restart signal.
anonaddy                | [cont-init.d] 50-svc-main.sh: exited 0.
anonaddy                | [cont-init.d] 60-svc-opendkim.sh: executing... 
anonaddy                | [cont-init.d] 60-svc-opendkim.sh: exited 0.
anonaddy                | [cont-init.d] 61-svc-opendmarc.sh: executing... 
anonaddy                | [cont-init.d] 61-svc-opendmarc.sh: exited 0.
anonaddy                | [cont-init.d] 62-svc-rspamd.sh: executing... 
anonaddy                | INFO: Rspamd service disabled.
anonaddy                | [cont-init.d] 62-svc-rspamd.sh: exited 0.
anonaddy                | [cont-init.d] 63-svc-postfix.sh: executing... 
anonaddy                | [cont-init.d] 63-svc-postfix.sh: exited 0.
anonaddy                | [cont-init.d] 80-svc-cron.sh: executing... 
anonaddy                | Fixing crontabs permissions...
anonaddy                | [cont-init.d] 80-svc-cron.sh: exited 0.
anonaddy                | [cont-init.d] 99-clean.sh: executing... 
anonaddy                | [cont-init.d] 99-clean.sh: exited 0.
anonaddy                | [cont-init.d] ~-socklog: executing... 
anonaddy                | [cont-init.d] ~-socklog: exited 0.
anonaddy                | [cont-init.d] done.
anonaddy                | [services.d] starting services
anonaddy                | Feb 05 02:36:25 1312 postfix[831]: Postfix is running with backwards-compatible default settings
anonaddy                | Feb 05 02:36:25 1312 postfix[831]: See http://www.postfix.org/COMPATIBILITY_README.html for details
anonaddy                | Feb 05 02:36:25 1312 postfix[831]: To disable backwards compatibility use "postconf compatibility_level=3.6" and "postfix reload"
anonaddy                | crond: crond (busybox 1.34.1) started, log level 8
anonaddy                | 2022/02/05 02:36:25 [notice] 835#835: using the "epoll" event method
anonaddy                | 2022/02/05 02:36:25 [notice] 835#835: nginx/1.20.2
anonaddy                | 2022/02/05 02:36:25 [notice] 835#835: OS: Linux 5.11.0-49-generic
anonaddy                | 2022/02/05 02:36:25 [notice] 835#835: getrlimit(RLIMIT_NOFILE): 1048576:1048576
anonaddy                | 2022/02/05 02:36:25 [notice] 835#835: start worker processes
anonaddy                | 2022/02/05 02:36:25 [notice] 835#835: start worker process 869
anonaddy                | 2022/02/05 02:36:25 [notice] 835#835: start worker process 870
anonaddy                | [services.d] done.
anonaddy                | [05-Feb-2022 02:36:25] NOTICE: fpm is running, pid 849
anonaddy                | [05-Feb-2022 02:36:25] NOTICE: ready to handle connections
anonaddy                | mail.info: Feb  5 07:36:25 opendkim[838]: OpenDKIM Filter v2.11.0 starting (args: -f -u opendkim -x /etc/opendkim/opendkim.conf)
anonaddy                | mail.info: Feb  5 07:36:25 opendmarc[833]: OpenDMARC Filter v1.4.1 starting (args: -f -u opendmarc -c /etc/opendmarc/opendmarc.conf)
anonaddy                | mail.info: Feb  5 07:36:25 opendmarc[833]: additional trusted authentication services: {{ HOST NAME }}
anonaddy                | Feb 05 02:36:25 1312 postfix/postfix-script[1029]: starting the Postfix mail system
anonaddy                | Feb 05 02:36:25 1312 postfix/master[1030]: daemon started -- version 3.6.4, configuration /etc/postfix
anonaddy                | 172.70.130.158 - - [05/Feb/2022:02:36:46 -0500] "GET / HTTP/1.1" 302 370 "https://{{ MY DOMAIN }}/usernames" "{{ USER AGENT INFO }}"
anonaddy                | 172.70.130.158 - - [05/Feb/2022:02:36:46 -0500] "GET /login HTTP/1.1" 200 1382 "https://{{ MY DOMAIN }}/usernames" "{{ USER AGENT INFO }}"
anonaddy                | 172.70.130.158 - - [05/Feb/2022:02:36:50 -0500] "POST /login HTTP/1.1" 302 346 "https://{{ MY DOMAIN }}/login" "{{ USER AGENT INFO }}"
anonaddy                | 172.70.130.158 - - [05/Feb/2022:02:36:50 -0500] "GET / HTTP/1.1" 200 1780 "https://{{ MY DOMAIN }}/login" "{{ USER AGENT INFO }}"
anonaddy                | 172.70.130.158 - - [05/Feb/2022:02:36:53 -0500] "GET /usernames HTTP/1.1" 200 1973 "https://{{ MY DOMAIN }}/" "{{ USER AGENT INFO }}"
anonaddy                | 172.70.130.158 - - [05/Feb/2022:02:36:55 -0500] "GET /domains HTTP/1.1" 200 1987 "https://{{ MY DOMAIN }}/usernames" "{{ USER AGENT INFO }}"
anonaddy                | 172.70.130.158 - - [05/Feb/2022:02:36:56 -0500] "GET / HTTP/1.1" 200 1780 "https://{{ MY DOMAIN }}/domains" "{{ USER AGENT INFO }}"
anonaddy                | crond: USER anonaddy pid 1034 cmd php /var/www/anonaddy/artisan schedule:run --no-ansi --no-interaction --quiet
anonaddy                | 172.70.130.158 - - [05/Feb/2022:02:37:07 -0500] "POST /api/v1/aliases HTTP/1.1" 500 15301 "https://{{ MY DOMAIN }}/" "{{ USER AGENT INFO }}"

[crazy-max]

APP_URL=https://mail.{{ MY DOMAIN }}

Your env file is wrong. Please check our example: https://github.com/anonaddy/docker/tree/master/examples/compose

[hobgoblina]

I have also tried it with APP_URL=http://127.0.0.1:8000. Same thing.

[hobgoblina]

@crazy-max also, I'm using traefik and the traefik example shows APP_URL being set with the domain

I've started from scratch and tried a variety of configs. I haven't been able to create aliases at all

[crazy-max]

That's not just APP_URL, {{ MY DOMAIN }}, {{ MY FQDN }}, etc... is not something that is handled by compose.

[hobgoblina]

@crazy-max Am experienced with docker/compose, I put those in as placeholders. I see how that syntax would be confusing tho, my bad! Replaced below with "example.com" style placeholders. By now I've tried basically copy/pasting your examples with only minimal necessary changes, but I'm still running into this issue. :P

And it is only creating aliases that's the issue... creating accounts, verifying signup emails and custom domains, adding usernames to accounts, proxying via traefik, etc. is all working fine. Just can't make any aliases.

[hobgoblina]

TZ=America/New_York
PUID=1000
PGID=1000

MEMORY_LIMIT=256M
UPLOAD_MAX_SIZE=16M
OPCACHE_MEM_SIZE=128
REAL_IP_FROM=0.0.0.0/32
REAL_IP_HEADER=X-Forwarded-For
LOG_IP_VAR=http_x_forwarded_for

APP_KEY=base64:notreallythekey2376rgq93fhfh0sf4087=
APP_DEBUG=false
APP_URL=https://mail.example.com

ANONADDY_RETURN_PATH=bounces@example.com
ANONADDY_ADMIN_USERNAME=lina
ANONADDY_ENABLE_REGISTRATION=false
ANONADDY_DOMAIN=example.com
ANONADDY_ALL_DOMAINS=example.com
ANONADDY_HOSTNAME=mail.example.com
ANONADDY_DNS_RESOLVER=127.0.0.1
ANONADDY_SECRET=notmysecrethbafiuysh498f7rbfiudrg8e4ughesignsojn0fu=4tih349
ANONADDY_LIMIT=200
ANONADDY_BANDWIDTH_LIMIT=2097152000
ANONADDY_NEW_ALIAS_LIMIT=25
ANONADDY_ADDITIONAL_USERNAME_LIMIT=1000

MAIL_FROM_NAME=Anonalina
MAIL_FROM_ADDRESS=anonbot@mail.example.com

POSTFIX_DEBUG=false
POSTFIX_SMTPD_TLS=false
POSTFIX_SMTP_TLS=false

DKIM_ENABLE=true
DMARC_ENABLE=true

version: "3.5"

services:
  traefik:
    image: traefik
    container_name: traefik
    environment:
      - CF_API_EMAIL=${CLOUDFLARE_EMAIL}
      - CF_API_KEY=${CLOUDFLARE_API_KEY}
    command:
      - "--global.sendanonymoususage=false"
      - "--log=true"
      - "--log.level=INFO"
      - "--entrypoints.http=true"
      - "--entrypoints.http.address=:80"
      - "--entrypoints.http.http.redirections.entrypoint.to=https"
      - "--entrypoints.http.http.redirections.entrypoint.scheme=https"
      - "--entrypoints.https=true"
      - "--entrypoints.https.address=:443"
      - "--certificatesresolvers.myresolver.acme.dnschallenge=true"
      - "--certificatesresolvers.myresolver.acme.dnschallenge.provider=cloudflare"
      - "--certificatesresolvers.myresolver.acme.dnschallenge.resolvers=1.1.1.1:53"
      - "--certificatesresolvers.myresolver.acme.email=${CLOUDFLARE_EMAIL}"
      - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
      - "--providers.docker"
      - "--providers.docker.watch=true"
      - "--providers.docker.exposedbydefault=false"
    ports:
      - target: 80
        published: 80
        protocol: tcp
      - target: 443
        published: 443
        protocol: tcp
    volumes:
      - "./configs/traefik/letsencrypt:/letsencrypt"
      - "/var/run/docker.sock:/var/run/docker.sock"
    restart: always

  anonaddy_db:
    image: mariadb:10.5
    container_name: anonaddy_db
    command:
      - "mysqld"
      - "--character-set-server=utf8mb4"
      - "--collation-server=utf8mb4_unicode_ci"
    volumes:
      - "./configs/anonaddy/db:/var/lib/mysql"
    environment:
      - "MYSQL_ALLOW_EMPTY_PASSWORD=yes"
      - "MYSQL_DATABASE"
      - "MYSQL_USER"
      - "MYSQL_PASSWORD"
    restart: always

  anonaddy_redis:
    image: redis:4.0-alpine
    container_name: anonaddy_redis
    restart: always

  anonaddy:
    image: anonaddy/anonaddy:latest
    container_name: anonaddy
    depends_on:
      - anonaddy_db
      - anonaddy_redis
    ports:
      - target: 25
        published: 25
        protocol: tcp
    volumes:
      - "./configs/anonaddy/data:/data"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.anonaddy.entrypoints=https"
      - "traefik.http.routers.anonaddy.rule=Host(`mail.example.com`)"
      - "traefik.http.routers.anonaddy.tls=true"
      - "traefik.http.routers.anonaddy.tls.certresolver=myresolver"
      - "traefik.http.services.anonaddy.loadbalancer.server.port=8000"
    env_file:
      - "./anonaddy.env"
    environment:
      - "DB_HOST=anonaddy_db"
      - "DB_DATABASE=${MYSQL_DATABASE}"
      - "DB_USERNAME=${MYSQL_USER}"
      - "DB_PASSWORD=${MYSQL_PASSWORD}"
      - "REDIS_HOST=redis"
    restart: always

[hobgoblina]

Is there an environment variable that would cause specifically alias creation and only alias creation to fail if misconfigured?

[4very]

I don't know if you ever figured this out, but you specified the wrong redis host. in your case
"REDIS_HOST=redis"
should be
"REDIS_HOST=anonaddy_redis"

[xplreitr]

For future reference, this does appear to be a redis issue. I have a traefik2 setup nearly identical, but run in swarm. I failed to put the redis on the anonaddy internal network so the app couldn't connect to the redis container. My 500 errors resolved as soon as I got the app container able to connect to the redis container