D4190 has been deployed.

@yousra if we define a block like this at node level:

In addition to this change, we also need to reuse our dedicated IP address for e-mails:

Best short-term solution, to allow mail from Docker services too, is to allow the new router IP.

GPT-5.6-Sol idea:

Confirmed: Phabricator deliberately uses its default no-reply address as a recipient on some notifications. As Postfix currently rejects that recipient before DATA, we’ll declare notifications-noreply@devcentral.nasqueron.org as a valid blackhole mailbox and silently discard mail delivered to it.

• Tail /var/log/maillog and trigger compilation
  • Monitor in nagios (done while writing this)

We can consider the mail server as deployed and create tasks for extra actions in the Mail projects.

Deployed and working fine.

Dovecot deployed and working well.

FIx deployed.

Will be deployed tonight on production servers

With D3906, there is a way to do this easily, by adding the command to the certificate_options pillar in https://devcentral.nasqueron.org/source/operations/browse/main/pillar/core/certificates/hervil.sls$13

2025-02-05 ops office hours take:

• Mailgun could be used as fallback for certificates issue
• We need to update payment info at Mailgun to reactivate service in that case, as our account isn't active anymore

Patched it live.