Self-host Mailu mail stack at mail.profullstack.com#17
Merged
Conversation
Members get a real <name>@mail.profullstack.com mailbox, served by a
co-located Mailu (Postfix+Dovecot+Roundcube+rspamd) Docker stack. Coexists
with the host Caddy: Mailu owns the mail ports; Caddy fronts the loopback
webmail and supplies the TLS cert (TLS_FLAVOR=mail), the same cert-copy
pattern as the Ergo/IRC and NNTP services.
- deploy/mailu/: docker-compose.yml, mailu.env.example, refresh-certs.sh
(copy Caddy's mail cert into Mailu on renewal), provision-mailbox.sh
(member mailbox + Dovecot gateway master user), README.
- setup.sh: MAIL flag + mail.${DOMAIN#*.} Caddy site + §9e (cert timer,
mail-port firewall, conditional compose bring-up, AGENTBBS_MAIL_* env).
- docs/mail.md: architecture, DNS (MX/SPF/DKIM/DMARC/PTR), gateway
master-user setup, env, provisioning, webmail-only policy.
Apex profullstack.com stays corporate; member mail is only on mail.*.
Infra is inspection-verified (bash -n, YAML lint); deploy pending.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
vu1nz Security Review0 finding(s) in PR #? No security issues found. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Stands up a self-hosted Mailu stack (Postfix + Dovecot + Roundcube + rspamd) so paid members get a real
<name>@mail.profullstack.commailbox. Pairs with the AgentMail reader (PR #16) and@logicsrc/plugin-agentmail(logicsrc #73).Architecture
Coexists with the host Caddy (which owns
:80/:443):25/465/587/993/995); its HTTP front is loopback-only.https://mail.profullstack.com→ Roundcube (webmail = the only member-facing surface) and obtains the LE cert;refresh-certs.shcopies it into Mailu (TLS_FLAVOR=mail) — the same cert-copy pattern already used for Ergo/IRC and NNTP.<name>*gateway) and submits via the local relay (127.0.0.1:25), so members never manage IMAP/SMTP passwords.Files
deploy/mailu/—docker-compose.yml,mailu.env.example,refresh-certs.sh,provision-mailbox.sh,README.md,.gitignore.setup.sh—MAILflag,mail.${DOMAIN#*.}Caddy site, §9e (cert timer, mail-port firewall, conditionaldocker compose up,AGENTBBS_MAIL_*env).docs/mail.md— architecture, DNS (MX/SPF/DKIM/DMARC/PTR;mail./smtp.A records already added), gateway master-user setup, env, provisioning, webmail-only policy.Verification
Infra is inspection-verified:
bash -n setup.shand both scripts pass;docker-compose.ymlis valid YAML. Actual deploy (compose up, cert issuance, DKIM, deliverability) is pending on the host — see the port-25 / PTR notes indocs/mail.md.Notes
profullstack.comstays corporate; member mail is only onmail.*.deploy/mailu/README.md).main.🤖 Generated with Claude Code