# Help candidate

Short operator notes inside the panel — not a second copy of the full guide. Seeded from the Status explanations that do not belong on the cards (what a kernel counter is, why PTR is set at the host, what Reload does not touch). The cards themselves keep their readings, Detail columns, and the Configuration control.

## On this panel

- Machine — kernel counters and the rate window
- TLS certificate — port 465, reverse-proxy mount
- Hostname / reverse DNS — forward-confirmed PTR at the hosting provider
- Mail queue retries — time-based, no attempt budget
- Inbound — not mailboxes; listed recipients or any address at the domain
- Domain page — DNS, records, connection, applications, export (drawer from each card’s «?»)

The same texts open in the drawer from Status’s «?» — so a card can stay a reading, not a paragraph, without throwing the reading away.

## Machine

CPU and memory are the container’s own readings, not the host’s spare capacity. Network is a short window, not a daily total. High CPU with an empty queue usually means something else on the box — not SelfPost “being slow to send”.

## TLS certificate

Port 465 presents the certificate the reverse proxy (or the image) mounted. The panel does not issue certificates. A warn here is “expires soon”; an error is “missing or unreadable”, and clients will refuse submission.

## Hostname / reverse DNS

Forward-confirmed reverse DNS: the A/AAAA for `SELFPOST_HOSTNAME` must reverse to that same name. PTR is set at the hosting provider, not in this panel. Receiving networks use this pair as a cheap reputation check.