• Tail /var/log/maillog and trigger compilation
  • Monitor in nagios (done while writing this)

We can consider the mail server as deployed and create tasks for extra actions in the Mail projects.

Deployed and working fine.

Dovecot deployed and working well.

FIx deployed.

Will be deployed tonight on production servers

With D3906, there is a way to do this easily, by adding the command to the certificate_options pillar in https://devcentral.nasqueron.org/source/operations/browse/main/pillar/core/certificates/hervil.sls$13

2025-02-05 ops office hours take:

• Mailgun could be used as fallback for certificates issue
• We need to update payment info at Mailgun to reactivate service in that case, as our account isn't active anymore

Patched it live.

Upgrade to FreeBSD 15 broke Dovecot, needed to be recompiled.

@DorianWinty It seems it tries to use Mailgun again instead of mail.nasqueron.org SMTP, could we prune the Mailgun part of the configuration? I removed DevCentral from the admin panel there.

Mail bien reçu : `
ARC-Authentication-Results: i=1; mx.google.com;

spf=pass (google.com: domain of mediawiki-saas-no-reply@nasqueron.org designates 2001:41d0:303:d971::517e:c0de as permitted sender) smtp.mailfrom=mediawiki-saas-no-reply@nasqueron.org

Return-Path: <mediawiki-saas-no-reply@nasqueron.org>
Received: from web-001.nasqueron.drake (www-alkane.nasqueron.org. [2001:41d0:303:d971::517e:c0de])

by mx.google.com with ESMTP id ffacd0b85a97d-42e1ca54633si1934360f8f.947.2025.11.28.03.09.59
for <doba.guimartinien@gmail.com>;
Fri, 28 Nov 2025 03:10:00 -0800 (PST)

Received-SPF: pass (google.com: domain of mediawiki-saas-no-reply@nasqueron.org designates 2001:41d0:303:d971::517e:c0de as permitted sender) client-ip=2001:41d0:303:d971::517e:c0de;
Authentication-Results: mx.google.com;

spf=pass (google.com: domain of mediawiki-saas-no-reply@nasqueron.org designates 2001:41d0:303:d971::517e:c0de as permitted sender) smtp.mailfrom=mediawiki-saas-no-reply@nasqueron.org

Received: from mediawiki (uid 3004) (envelope-from mediawiki-saas-no-reply@nasqueron.org) id 1fd73 by web-001.nasqueron.drake (DragonFly Mail Agent v0.13+ on web-001.nasqueron.drake); Fri, 28 Nov 2025 11:09:58 +0000

SPF updated for nasqueron.org domain to allow web-001:

DNS record for SPF, TXT version, didn't include the IPs of web-001, now it's the case with D3892 (propagation still pending to nsX.he.net)

Installed and working fine.

Have worked fine all summer.

Monitoring could be as simple as:`

First part done,

Should use port 587 for submission. Port 25 (smptd) should be server-to-server only.

Jan 6 19:04:10 hervil postfix/smtpd[73868]: connect from docker-002.nasqueron.org[51.255.124.9]
Jan 6 19:04:12 hervil postfix/smtpd[73868]: warning: docker-002.nasqueron.org[51.255.124.9]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=devcentral
Jan 6 19:04:12 hervil postfix/smtpd[73868]: lost connection after RSET from docker-002.nasqueron.org[51.255.124.9]
Jan 6 19:04:12 hervil postfix/smtpd[73868]: disconnect from docker-002.nasqueron.org[51.255.124.9] ehlo=1 auth=0/1 rset=1 commands=2/3