Proxmox - Email Alerts Setup (gmail)

README.md

Proxmox - Email Alerts Setup (gmail)

1. SSH into proxmox node and become root user. Run the following commands to download extra software dependencies we'll need.

   apt update
   apt install -y libsasl2-modules mailutils

2. Enable 2FA for the gmail account that will be used by going to security settings

3. Create app password for the account.

   1. Go to App Passwords
   2. Select app: Mail
   3. Select device: Other
   4. Type in: Proxmox or whatever you want here

4. Write gmail credentials to file and hash it. Again, make sure you are root.

   echo "smtp.gmail.com youremail@gmail.com:yourpassword" > /etc/postfix/sasl_passwd
   
   # chmod u=rw
   chmod 600 /etc/postfix/sasl_passwd
   
   # generate /etc/postfix/sasl_passwd.db
   postmap hash:/etc/postfix/sasl_passwd

5. Open the Postfix configuration file with editor of your choice.

   nano /etc/postfix/main.cf

6. Append the following to the end of the file:

   relayhost = smtp.gmail.com:587
   smtp_use_tls = yes
   smtp_sasl_auth_enable = yes
   smtp_sasl_security_options =
   smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
   smtp_tls_CAfile = /etc/ssl/certs/Entrust_Root_Certification_Authority.pem
   smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_tls_session_cache
   smtp_tls_session_cache_timeout = 3600s
   

   IMPORTANT: Comment out the existing line containing just relayhost= since we are using this key in our configuration we just pasted in.

   

7. Reload postfix

   postfix reload

8. Test to make sure everything is hunky-dory.

   echo "sample message" | mail -s "sample subject" anotheremail@gmail.com

Credit: https://crepaldi.us/2021/03/07/configuring-e-mail-alerts-on-your-proxmox/

If you have installed proxmox on top of debian (instead of a normal install) you will need to install mailutils before you can send a sample message.

sudo apt-get install mailutils

Thanks for catching that @pixitha

It looks like you're using two different styles of password maps, but without detail on why. Which method works best?

smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd

smtp_sasl_password_maps = /etc/postfix/sasl_passwd.db

@Jerhaad Thanks for catching that. I think I was trying out a few things and forgot to update the screenshot. I have now fixed the screenshot to show smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd

Also, @pixitha I have added the mailutils to the apt install command in step 1, thanks!

if doing this on proxmox for it to send emails properly you may also need to hash your aliases with postalias /etc/aliases so items addressed to root get sent to you for example ZFS array scrubbing or smart errors

I got the error message in /var/log/mail.log

Must issue a STARTTLS command first

Update the CA first: update-ca-certificates --fresh

Also the main.cf should be

smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
smtp_enforce_tls = yes
smtpd_use_tls = yes

thanks a lot!
but i have to install postfix to...

Hey,
Thank you for these instructions!!

I got this error,
Would anyone know how to change it?

SendAsDenied; myemailaddress@outlook.com not allowed to send as MAILER-DAEMON@proxmox.local.network

Fixed it.
I created the file /etc/postfix/header_check and added the following code /From:.*/ REPLACE From: myemailaddress@outlook.com

Then added the following line to /etc/postfix/main.cf

smtp_header_checks = regexp:/etc/postfix/header_check

that changed the sendas address to match my email address

credit: https://vectops.com/2022/02/how-to-set-up-a-smtp-relay-on-your-proxmox-node/

Thank you for these setup instructions! If it helps anyone, I didn't log in as root when installing the dependencies. I purged them and reinstalled. For some reason, I still had to use sudo for some commands, like the postmap. Also, followed @SecureCPU advise to add custom from address followed by systemctl restart postfix.service to restart.

Big THANK YOU! Works fine!

Hi, thank you for the most detailed setup you did.
If you have a network unreachable error it might be caused by the fact that google smtp server address is now : smtp-relay.gmail.com:25

Hi, thank you for the most detailed setup you did. If you have a network unreachable error it might be caused by the fact that google smtp server address is now : smtp-relay.gmail.com:25

Most ISPs block port 25 have you tried using one of the other ports? Such as 587 or 465?

Thank you! Thorough and easy to follow.