Corrected many things after actual deployment

docker-compose.yml

@@ -9,7 +9,6 @@ services:
             - ./service_data/reverse_proxy:/etc/caddy
             - caddy-data:/data
         environment:
-            - CADDY_TLS=${CADDY_TLS}
             - DOMAIN_NAME=${DOMAIN_NAME}
             - MAIL_SUBDOMAIN=${MAIL_SUBDOMAIN}
             - WEBMAIL_SUBDOMAIN=${WEBMAIL_SUBDOMAIN}
@@ -23,16 +22,13 @@ services:
         volumes:
             - stalwart-etc:/etc/stalwart
             - stalwart-data:/var/lib/stalwart
+            - stalwart-certs:/certs:ro
         environment:
             - STALWART_PUBLIC_URL=https://${MAIL_SUBDOMAIN}.${DOMAIN_NAME}
         ports:
             - "25:25"
-            - "587:587"
             - "465:465"
-            - "143:143"
             - "993:993"
-            - "110:110"
-            - "995:995"
             - "4190:4190"
         networks:
             - proxy-net
@@ -43,8 +39,6 @@ services:
         restart: unless-stopped
         environment:
             - JMAP_SERVER_URL=https://${MAIL_SUBDOMAIN}.${DOMAIN_NAME}
-            - NODE_TLS_REJECT_UNAUTHORIZED=0 # DEFINITELY REMOVE AFTER TESTING
-            - OAUTH_ALLOW_PRIVATE_ENDPOINTS=true # ALSO DEFINITELY REMOVE THIS
             - SESSION_SECRET=${BULWARK_SECRET}
             - OAUTH_ENABLED=true
             - OAUTH_ONLY=true
@@ -57,12 +51,26 @@ services:
         networks:
             - proxy-net
 
+    cert_sync:
+        image: alpine:latest
+        container_name: cert_sync
+        restart: unless-stopped
+        depends_on:
+            - reverse_proxy
+        volumes:
+            - caddy-data:/caddy-data:ro
+            - stalwart-certs:/stalwart-certs
+            - ./service_data/cert_sync:/data
+        command: sh /data/sync-certs.sh
+
 volumes:
     stalwart-etc:
     stalwart-data:
+    stalwart-certs:
     caddy-data:
     bulwark-config:
     bulwark-state:
+    
 
 networks:
     proxy-net: