Files
email_agent/docker-compose.yml
Sam Rolfe 1d88f962f6 Phase 2: Gmail IMAP fetch (IPv4), FR-2 source address, real mail in dashboard (AUD-67)
- internal/mailfetch: stdlib-only read-only IMAP client (LOGIN, SELECT,
  UID SEARCH, UID FETCH) that always dials tcp4; IPv6 to Gmail is broken
  from .13 and caused a socket EOF.
- MIME parsing to text, RFC2047 header decoding, FR-2 source address:
  X-Pm-Original-To -> To -> Received 'for <addr>' -> Return-Path, never
  Delivered-To. The matched header is recorded for audit.
- store: Message upsert/list/count + LogAction; schema migration v2 adds
  imap_uid and imap_uidvalidity.
- server: dashboard and /partials/inbox render real mail grouped by
  category with a recommended action; POST /actions/fetch runs a scan
  (CSRF-checked); nav counts; 'Check mail' button.
- config: GMAIL_USER, GMAIL_APP_PASSWORD, IMAP host/port/lookback/max.
- cmd: -fetch runs one scan and exits (n8n/CLI entry point, FR-1).
- compose/.env.example expose the Gmail + IMAP settings.
- tests: FR-2 precedence, MIME bodies, IMAP literal/parser, store
  upsert/migration, inbox rendering.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-10-11 20:59:53 +11:00

59 lines
2.1 KiB
YAML

name: email-agent
# Own container and image for this project (AGENTS.md §9). Not shared with any
# other project.
services:
email-agent:
build:
context: .
args:
VERSION: ${EMAIL_AGENT_VERSION:-dev}
COMMIT: ${EMAIL_AGENT_COMMIT:-unknown}
BUILD_TIME: ${EMAIL_AGENT_BUILD_TIME:-}
image: email-agent:${EMAIL_AGENT_TAG:-latest}
container_name: email-agent
restart: unless-stopped
# Posture: keep the service on the internal network only. Caddy on .35
# proxies to this port. Publishing is required for that hop.
ports:
- "${EMAIL_AGENT_PORT:-8790}:8790"
environment:
EMAIL_AGENT_ENV: ${EMAIL_AGENT_ENV:-production}
EMAIL_AGENT_ADDR: ":8790"
EMAIL_AGENT_DB_PATH: /data/email_agent.db
EMAIL_AGENT_LOG_LEVEL: ${EMAIL_AGENT_LOG_LEVEL:-info}
EMAIL_AGENT_PUBLIC_BASE_URL: ${EMAIL_AGENT_PUBLIC_BASE_URL:-https://mail.lab.audasmedia.com.au}
# Secrets: names only here. Values are supplied by the host environment
# (see ~/.config/environment.d/10-secrets.conf) or a gitignored .env file,
# and are never committed.
EMAIL_AGENT_SESSION_SECRET: ${EMAIL_AGENT_SESSION_SECRET:-}
EMAIL_AGENT_PASSWORD: ${EMAIL_AGENT_PASSWORD:-}
# Gmail IMAP + app password (AGENTS.md §8/§9). The dialer forces IPv4.
GMAIL_USER: ${GMAIL_USER:-}
GMAIL_APP_PASSWORD: ${GMAIL_APP_PASSWORD:-}
EMAIL_AGENT_IMAP_HOST: ${EMAIL_AGENT_IMAP_HOST:-imap.gmail.com}
EMAIL_AGENT_IMAP_PORT: ${EMAIL_AGENT_IMAP_PORT:-993}
EMAIL_AGENT_IMAP_LOOKBACK_DAYS: ${EMAIL_AGENT_IMAP_LOOKBACK_DAYS:-14}
EMAIL_AGENT_IMAP_MAX_MESSAGES: ${EMAIL_AGENT_IMAP_MAX_MESSAGES:-100}
JEV_BASE_URL: ${JEV_BASE_URL:-}
JEV_API_KEY: ${JEV_API_KEY:-}
OMNIROUTE_BASE_URL: ${OMNIROUTE_BASE_URL:-}
OMNIROUTE_API_KEY: ${OMNIROUTE_API_KEY:-}
HUB_TOKEN: ${HUB_TOKEN:-}
volumes:
- email_agent_data:/data
healthcheck:
test: ["CMD", "/usr/local/bin/email-agent", "-healthcheck"]
interval: 30s
timeout: 5s
retries: 3
start_period: 5s
volumes:
email_agent_data: