%%{init: {'theme': 'base', 'flowchart': {'nodeSpacing': 40, 'rankSpacing': 50}}}%%
flowchart LR
    subgraph mail_stack ["Services Mail natifs"]
        direction TB
        postfix["Postfix<br/>SMTP :25 :465 :587"]
        dovecot["Dovecot<br/>IMAP :993<br/>LMTP + Sieve"]
        opendkim["OpenDKIM<br/>milter DKIM"]
        spamassassin["SpamAssassin<br/>anti-spam"]
        clamav["ClamAV + Amavis<br/>antivirus"]
        fail2ban_m["fail2ban<br/>postfix, dovecot, sasl"]
        postfix -->|"milter"| opendkim
        postfix -->|"content_filter"| spamassassin
        spamassassin --> clamav
    end

    subgraph tls ["TLS"]
        direction TB
        certs["/etc/ssl/mail/<br/>fullchain.pem<br/>privkey.pem"]
        sync["rsync cron depuis<br/>araucaria Caddy<br/>Let's Encrypt"]
        sync --> certs
    end

    subgraph config ["Config huinca"]
        direction TB
        vm_info["huinca .66<br/>Ubuntu 24.04 LTS<br/>2 vCPU 4 GB RAM<br/>LVM 70 GB"]
        partitions["/var/mail 40 GB<br/>/var/log 5 GB<br/>/ 15 GB"]
        user_info["user: toshiro<br/>SSH cle uniquement"]
    end

    subgraph access ["Acces reseau"]
        direction TB
        dns["mail.arauco.online<br/>huinca.local<br/>-> 192.168.99.66"]
        nat["NAT Swisscom<br/>:25 :465 :587 :993<br/>-> .66"]
        clients["Clients mail<br/>Thunderbird / K-9"]
    end

    subgraph mailboxes ["Boites mail"]
        direction TB
        maildir["Maildir<br/>/home/*/Maildir/"]
        aliases["Aliases<br/>postmaster -> toshiro<br/>root -> toshiro"]
    end

    clients -->|"IMAPS :993"| dovecot
    clients -->|"SMTPS :465/587"| postfix
    nat --> postfix
    dns -.-> postfix
    certs -.-> postfix
    certs -.-> dovecot
    dovecot --> maildir

    classDef mailStyle fill:#1e4a2e,stroke:#4a9a6a,color:#a8e0c0
    classDef secStyle fill:#4a3a1e,stroke:#d9a84a,color:#f0d8a8
    classDef netStyle fill:#1e3a5f,stroke:#4a90d9,color:#a8d0f0
    classDef configStyle fill:#2a3a4a,stroke:#6a8aaa,color:#b0d0e8
    classDef storStyle fill:#4a3a1e,stroke:#d9a84a,color:#f0d8a8
    classDef tlsStyle fill:#3a1e5f,stroke:#8a6ad9,color:#c8b0f0

    class postfix,dovecot mailStyle
    class opendkim,spamassassin,clamav,fail2ban_m secStyle
    class dns,nat,clients netStyle
    class vm_info,partitions,user_info configStyle
    class maildir,aliases storStyle
    class certs,sync tlsStyle