From cb798b67e9f9817f2ceb5939931c6aee832435bd Mon Sep 17 00:00:00 2001
From: jack <jack@csrx.ru>
Date: Sun, 22 Mar 2026 17:08:33 +0700
Subject: [PATCH] fix: add mailserver to front network for outbound internet
 access

mail-internal is internal:true (no internet). mailserver needs the
front network to resolve DNS and deliver emails to external MX servers.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 roles/tools/templates/docker-compose.yml.j2 | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/roles/tools/templates/docker-compose.yml.j2 b/roles/tools/templates/docker-compose.yml.j2
index 17f0fed..f884506 100644
--- a/roles/tools/templates/docker-compose.yml.j2
+++ b/roles/tools/templates/docker-compose.yml.j2
@@ -139,7 +139,8 @@ services:
     domainname: {{ domain_base }}
     restart: unless-stopped
     networks:
-      - mail-internal
+      - mail-internal   # Outline → mailserver (internal)
+      - front           # mailserver → internet (outbound delivery)
     environment:
       - SMTP_ONLY=1              # no IMAP/POP3, sending only
       - ENABLE_RSPAMD=0          # lightweight: skip spam filter