link2xt

DKIM-sign Content-Type and oversign all signed headers

1

Oversigning (including header name in DKIM-Signature more times that it appears in the mail) prevents adding more headers with the same name without invalidating DKIM signature. We don't want middleboxes...

WIP: Enable rawlogs

1

This is what I "delpoyed" manually on nine.testrun.org to enable [rawlogs](https://doc.dovecot.org/admin_manual/debugging/debugging_rawlog/). The result of this is that dovecot starts writing into `/home/vmail/mail/[email protected]` files with `*.in` and `.*out` extensions that have...

Prepare for pyinfra 3

1

#213

Messages with DKIM-signatures that have `l=` tag are not fully protected. We should reject such signatures. See `opendkim-lua` man page, there a functions `odkim.sig_bodylength` and `odkim.sig_canonlength` that can help with...

Authentication from Postfix to Dovecot is flaky

1

Delta chat core CI sometimes fails to create an account with "transient: 4.7.0 Temporary authentication failure: Connection lost to authentication server" error when running Python tests. In Postfix logs I...

At least `ci-` accounts can be removed. Currently running "Fix file owner in /home/vmail" steps takes a long time because it has to go through a lot of directories. We...

Document setting up root email account

1

We currently use [email protected] to receive reports and list it in IMAP METADATA /shared/admin entry, but other chatmail servers don't have this account so reports probably just bounce. While we...

Generate SSHFP DNS records

3

Running `ssh-keygen -r nine.testrun.org.` on the server generates this: ``` root@nine:~# ssh-keygen -r nine.testrun.org. nine.testrun.org. IN SSHFP 1 1 dba387c91a3e322b0e6913a148b312e8118a8e3f nine.testrun.org. IN SSHFP 1 2 5128ef50b2e4fd86a79fa685e2aa0fa7ba1255cdb35ed18ed299a8ece4c2fb57 nine.testrun.org. IN SSHFP 3...

# Based on PR #261

Fix "request had no answer" warning in doveauth

1

Currently `journalctl -u doveauth.service` is filled with ``` Jan 29 17:20:07 c20 doveauth[669843]: WARNING:root:request had no answer: 'H3\t2\t0\t\tauth' Jan 29 17:20:07 c20 doveauth[669843]: WARNING:root:request had no answer: 'H3\t2\t0\t\tauth' Jan 29...