infra/roles
jack 26c0df851e
Some checks failed
CI/CD / syntax-check (push) Successful in 1m25s
CI/CD / deploy (push) Has been cancelled
feat: full mail server — send + receive for @csrx.ru
Upgrade docker-mailserver from SMTP_ONLY to full Postfix + Dovecot:
- Remove SMTP_ONLY, enable Dovecot (IMAP) and Rspamd (spam filter)
- Expose ports 25 (SMTP), 587 (submission), 993 (IMAPS), 465 (SMTPS)
- SSL_TYPE=letsencrypt — certbot obtains cert for mail.csrx.ru via
  Cloudflare DNS-01 challenge (uses existing cloudflare_dns_api_token)
- UFW: open ports 25, 587, 993, 465
- Accounts: admin@csrx.ru, jack@csrx.ru, noreply@csrx.ru

Mail client settings after deploy:
  IMAP: mail.csrx.ru:993 (SSL)
  SMTP: mail.csrx.ru:587 (STARTTLS)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-22 17:16:09 +07:00
..
backup fix: redesign backup archive structure + enable Outline email auth 2026-03-22 16:20:11 +07:00
base feat: extend fail2ban with Forgejo SSH and Traefik HTTP jails 2026-03-22 04:51:43 +07:00
docker feat: Cloudflare DNS-01 ACME + Docker hardening + sysctl 2026-03-22 04:06:46 +07:00
services fix: remove promtail nested /var/log/traefik volume mount 2026-03-22 15:55:39 +07:00
tools feat: full mail server — send + receive for @csrx.ru 2026-03-22 17:16:09 +07:00