From 2f7b5d95c370db5e7503067fef0587034a889711 Mon Sep 17 00:00:00 2001 From: Mix Date: Mon, 21 Sep 2026 22:07:39 +0300 Subject: [PATCH] docs: draw the roadmap's screens in the panel design Four screens for open roadmap items, all built from existing components: Inbound > Filter lists (allow / deny, where the maps go) and an adjusted Inbound > Log (client, decision, engine and reason, Allow / Deny sender) for inbound-antispam-panel; Inbound > Quarantine, list and held message with Release beside a danger-zone Discard, for inbound-quarantine; and Server > Preflight, a verdict postmark over a table of checks with a "what to do" column and a test e-mail form, for preflight. A mockup is the target look, not a decision to build: each item keeps its status, and quarantine's open questions stay open - the mockup only assumes answers to them. The paths join the plan's Routes table, the quarantine and preflight plans link their mockups, and the components page maps the quarantine decision to a tag. 33 screens; lint clean. Co-Authored-By: Claude Fable 5.1 --- CHANGELOG.md | 8 + docs/assets/panel-redesign/index.html | 8 +- docs/assets/panel-redesign/panel/account.html | 3 + docs/assets/panel-redesign/panel/backup.html | 5 +- docs/assets/panel-redesign/panel/build.py | 3 + .../panel-redesign/panel/components.html | 5 +- .../panel-redesign/panel/dmarc-domain.html | 3 + .../panel-redesign/panel/dmarc-report.html | 3 + docs/assets/panel-redesign/panel/dmarc.html | 3 + docs/assets/panel-redesign/panel/health.html | 5 +- docs/assets/panel-redesign/panel/help.html | 3 + .../panel/in-domain-delete.html | 5 +- .../panel-redesign/panel/in-domain.html | 5 +- .../panel-redesign/panel/in-domains.html | 5 +- .../panel-redesign/panel/in-filter-lists.html | 145 +++++++++++++++++ docs/assets/panel-redesign/panel/in-log.html | 25 +-- .../panel/in-quarantine-message.html | 149 ++++++++++++++++++ .../panel-redesign/panel/in-quarantine.html | 99 ++++++++++++ .../assets/panel-redesign/panel/in-queue.html | 5 +- .../panel-redesign/panel/out-app-created.html | 3 + docs/assets/panel-redesign/panel/out-app.html | 3 + .../panel/out-domain-delete.html | 3 + .../panel/out-domain-settings.html | 3 + .../panel-redesign/panel/out-domain.html | 3 + .../panel-redesign/panel/out-domains.html | 3 + docs/assets/panel-redesign/panel/out-log.html | 3 + .../panel-redesign/panel/out-message.html | 3 + .../panel-redesign/panel/out-queue.html | 3 + .../assets/panel-redesign/panel/outlines.json | 73 +++++++++ .../assets/panel-redesign/panel/overview.html | 3 + .../panel-redesign/panel/preflight.html | 126 +++++++++++++++ .../assets/panel-redesign/panel/settings.html | 5 +- .../panel-redesign/panel/src/components.html | 2 +- .../panel/src/in-filter-lists.html | 73 +++++++++ .../panel-redesign/panel/src/in-log.html | 20 ++- .../panel/src/in-quarantine-message.html | 77 +++++++++ .../panel/src/in-quarantine.html | 27 ++++ .../panel-redesign/panel/src/preflight.html | 54 +++++++ .../panel-redesign/panel/system-log.html | 5 +- .../panel-redesign/panel/user-delete.html | 5 +- docs/assets/panel-redesign/panel/user.html | 5 +- docs/assets/panel-redesign/panel/users.html | 5 +- docs/plans/inbound-quarantine.md | 9 ++ docs/plans/panel-redesign.md | 24 +-- docs/plans/preflight.md | 6 + 45 files changed, 991 insertions(+), 42 deletions(-) create mode 100644 docs/assets/panel-redesign/panel/in-filter-lists.html create mode 100644 docs/assets/panel-redesign/panel/in-quarantine-message.html create mode 100644 docs/assets/panel-redesign/panel/in-quarantine.html create mode 100644 docs/assets/panel-redesign/panel/preflight.html create mode 100644 docs/assets/panel-redesign/panel/src/in-filter-lists.html create mode 100644 docs/assets/panel-redesign/panel/src/in-quarantine-message.html create mode 100644 docs/assets/panel-redesign/panel/src/in-quarantine.html create mode 100644 docs/assets/panel-redesign/panel/src/preflight.html diff --git a/CHANGELOG.md b/CHANGELOG.md index c0a591b..cdbce4e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -23,6 +23,14 @@ document is not part of the release. ### Added +- Panel redesign, the roadmap's screens: **Inbound › Filter lists** and the + adjusted **Inbound › Log** (client, decision, engine and reason; *Allow / + Deny sender*) for inbound-antispam-panel, **Inbound › Quarantine** (list and + held message with Release / Discard) for inbound-quarantine, and **Server › + Preflight** for preflight — all from existing components; 33 screens. Their + paths join § Routes; the quarantine and preflight plans link their mockups. + A mockup is the target look, not a decision to build: each item keeps its + status, and quarantine's open questions stay open. - Panel redesign, two owner decisions recorded in `docs/plans/panel-redesign.md`: **no compatibility** — the redesign is `2.0.0`, old paths are removed without redirects, the SQLite migration chain diff --git a/docs/assets/panel-redesign/index.html b/docs/assets/panel-redesign/index.html index c2b7e58..a4ce82b 100644 --- a/docs/assets/panel-redesign/index.html +++ b/docs/assets/panel-redesign/index.html @@ -13,7 +13,7 @@

The accepted direction, every screen

Direction C (Bulma) was picked as the base: the important things in view, details one or two clicks away. It takes the postal signature of A — the postmark verdict, numbered mono section - heads, the stamp's perforated edge — and the icons of B. Twenty-nine screens and a components page live in + heads, the stamp's perforated edge — and the icons of B. Thirty-three screens and a components page live in panel/. Serve this folder from the repository root: the pages load the panel's own fonts and mark by relative path.

@@ -31,8 +31,10 @@ by domain · one report InboundDomains · domain · delete domain · Log · - Queue (empty state) - ServerHealth · System log · + Queue (empty state)
+ Quarantine · held message · + Filter lists — roadmap items, drawn as their target look + ServerHealth · Preflight (roadmap) · System log · Backup · Users · user form · delete user · Settings User menuAccount · Help diff --git a/docs/assets/panel-redesign/panel/account.html b/docs/assets/panel-redesign/panel/account.html index bff95f8..788f0ab 100644 --- a/docs/assets/panel-redesign/panel/account.html +++ b/docs/assets/panel-redesign/panel/account.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/backup.html b/docs/assets/panel-redesign/panel/backup.html index 4c50c4d..cc398da 100644 --- a/docs/assets/panel-redesign/panel/backup.html +++ b/docs/assets/panel-redesign/panel/backup.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users @@ -59,7 +62,7 @@
-
HealthSystem logBackupUsersSettings
+
HealthPreflightSystem logBackupUsersSettings
diff --git a/docs/assets/panel-redesign/panel/build.py b/docs/assets/panel-redesign/panel/build.py index 0f1010b..96ce79d 100644 --- a/docs/assets/panel-redesign/panel/build.py +++ b/docs/assets/panel-redesign/panel/build.py @@ -26,9 +26,12 @@ NAV = [ ("domains", "Domains", "in-domains.html", "ti-world-download"), ("log", "Log", "in-log.html", "ti-list-details"), ("queue", "Queue", "in-queue.html", "ti-stack-2"), + ("quarantine", "Quarantine", "in-quarantine.html", "ti-mail-pause"), + ("filter-lists", "Filter lists", "in-filter-lists.html", "ti-filter"), ]), ("server", "Server", "health.html", "ti-server-2", [ ("health", "Health", "health.html", "ti-heartbeat"), + ("preflight", "Preflight", "preflight.html", "ti-checklist"), ("system-log", "System log", "system-log.html", "ti-file-text"), ("backup", "Backup", "backup.html", "ti-archive"), ("users", "Users", "users.html", "ti-users"), diff --git a/docs/assets/panel-redesign/panel/components.html b/docs/assets/panel-redesign/panel/components.html index f8c77c5..8cf8827 100644 --- a/docs/assets/panel-redesign/panel/components.html +++ b/docs/assets/panel-redesign/panel/components.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users @@ -110,7 +113,7 @@ warn, deferred, quietwarntag is-warning is-light error, fail, mismatch, bouncedfailtag is-danger is-light unknown, off, neutral countsofftag is-light - role: globalglobaltag is-primary is-light + held: quarantine · role: globalquarantinetag is-primary is-light
diff --git a/docs/assets/panel-redesign/panel/dmarc-domain.html b/docs/assets/panel-redesign/panel/dmarc-domain.html index ea94be3..acc466f 100644 --- a/docs/assets/panel-redesign/panel/dmarc-domain.html +++ b/docs/assets/panel-redesign/panel/dmarc-domain.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/dmarc-report.html b/docs/assets/panel-redesign/panel/dmarc-report.html index 773d1a6..45435f1 100644 --- a/docs/assets/panel-redesign/panel/dmarc-report.html +++ b/docs/assets/panel-redesign/panel/dmarc-report.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/dmarc.html b/docs/assets/panel-redesign/panel/dmarc.html index 03f49c7..894f6f0 100644 --- a/docs/assets/panel-redesign/panel/dmarc.html +++ b/docs/assets/panel-redesign/panel/dmarc.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/health.html b/docs/assets/panel-redesign/panel/health.html index 008e77a..b256cf9 100644 --- a/docs/assets/panel-redesign/panel/health.html +++ b/docs/assets/panel-redesign/panel/health.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users @@ -59,7 +62,7 @@
-
HealthSystem logBackupUsersSettings
+
HealthPreflightSystem logBackupUsersSettings
diff --git a/docs/assets/panel-redesign/panel/help.html b/docs/assets/panel-redesign/panel/help.html index 982ae5b..b4ec936 100644 --- a/docs/assets/panel-redesign/panel/help.html +++ b/docs/assets/panel-redesign/panel/help.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/in-domain-delete.html b/docs/assets/panel-redesign/panel/in-domain-delete.html index fdd0260..0719d6d 100644 --- a/docs/assets/panel-redesign/panel/in-domain-delete.html +++ b/docs/assets/panel-redesign/panel/in-domain-delete.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users @@ -59,7 +62,7 @@
-
DomainsLogQueue
+
DomainsLogQueueQuarantineFilter lists
diff --git a/docs/assets/panel-redesign/panel/in-domain.html b/docs/assets/panel-redesign/panel/in-domain.html index abe0291..be32619 100644 --- a/docs/assets/panel-redesign/panel/in-domain.html +++ b/docs/assets/panel-redesign/panel/in-domain.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users @@ -59,7 +62,7 @@
-
DomainsLogQueue
+
DomainsLogQueueQuarantineFilter lists
diff --git a/docs/assets/panel-redesign/panel/in-domains.html b/docs/assets/panel-redesign/panel/in-domains.html index 2bdb8d8..bbec33a 100644 --- a/docs/assets/panel-redesign/panel/in-domains.html +++ b/docs/assets/panel-redesign/panel/in-domains.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users @@ -59,7 +62,7 @@
-
DomainsLogQueue
+
DomainsLogQueueQuarantineFilter lists
diff --git a/docs/assets/panel-redesign/panel/in-filter-lists.html b/docs/assets/panel-redesign/panel/in-filter-lists.html new file mode 100644 index 0000000..a9793ad --- /dev/null +++ b/docs/assets/panel-redesign/panel/in-filter-lists.html @@ -0,0 +1,145 @@ + + + + + +Filter lists · SelfPost + + + + + + + + +
DomainsLogQueueQuarantineFilter lists
+
+
+
+
+

Inbound · global administrator

+

Filter lists

+

Correct the spam filter by hand: senders it must always let through, and senders it must always turn away. One pair of lists for the whole instance.

+
+
+ +
+
01

Add an entry

+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ +
+
+
+ +
+
+
+
02

Deny

3 entries · wins over Allow
+ + + + + + + +
ValueNoteAdded
@bulk.example domainnewsletter nobody subscribed to2026-09-02Remove
198.51.100.0/24 ipdictionary attack on lists.example.org2026-08-19Remove
win@lottery.example address—2026-07-30Remove
+
+
+
+
+
03

Allow

2 entries
+ + + + + + +
ValueNoteAdded
@partner.example domaininvoices were scored as spam2026-09-11Remove
noreply@github.example addresssecurity advisories2026-06-04Remove
+
+
+
+ +
+
04

Where the lists go

applied
+
+
+
Applied by
rspamd, from map files
+
Files
/data/antispam/allow.map
/data/antispam/deny.map
+
Last written
2026-09-11 08:40 UTC
+
When the filter is off
The lists are kept and editable, but nothing reads them until INBOUND_ANTISPAM_MILTER is set.
+
+
+
+ + +
+
+ + diff --git a/docs/assets/panel-redesign/panel/in-log.html b/docs/assets/panel-redesign/panel/in-log.html index b94fda9..0416c1f 100644 --- a/docs/assets/panel-redesign/panel/in-log.html +++ b/docs/assets/panel-redesign/panel/in-log.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users @@ -59,14 +62,14 @@
-
DomainsLogQueue
+
DomainsLogQueueQuarantineFilter lists

Inbound

Inbound log

-

What port 25 accepted and what it turned away. Accepts come from the inbound journal, rejects from mail.log.

+

What port 25 decided about each message, one row per recipient. Accepts come from the inbound journal, rejects from mail.log; the filter's reasons appear when the spam filter is on.

@@ -75,20 +78,24 @@ 01

Messages

-
+
+ +
- + - - - - + + + + + +
Time, UTCFromToSubjectActionReason
Time, UTCClientFromToSubjectDecisionWhy
09-21 14:00:18t.berg@uni.exampledev@lists.example.orgRe: [dev] patch series v3forwarded→ mx.internal:25
09-21 13:57:41promo@bulk.examplesales@lists.example.org—rejected550 5.1.1 unknown recipient
09-21 13:44:02hr@partner.examplejobs@acme.ioApplication: backend engineerdeferredupstream 10.0.4.12 timed out
09-21 13:30:55noreply@github.examplesecurity@lists.example.org[advisory] new reportforwarded→ mx.internal:25
09-21 14:00:18192.0.2.77t.berg@uni.exampledev@lists.example.orgRe: [dev] patch series v3acceptrspamd · score 0.4Deny sender
09-21 13:59:02203.0.113.140invoice@partner-billing.exampleowner@lists.example.orgOutstanding invoice — action requiredquarantinerspamd · score 9.8 · PHISHING, FORGED_SENDERReview
09-21 13:57:41198.51.100.90promo@bulk.examplesales@lists.example.org—rejectpostfix · 550 5.1.1 unknown recipientDeny sender
09-21 13:51:30198.51.100.12billing@partner.exampleowner@lists.example.orgInvoice 2026-0917rejectrspamd · score 16.2 · BAYES_SPAMAllow sender
09-21 13:44:02192.0.2.31hr@partner.examplejobs@acme.ioApplication: backend engineertempfailselfpost · upstream 10.0.4.12 timed out
09-21 13:30:55192.0.2.200noreply@github.examplesecurity@lists.example.org[advisory] new reportacceptrspamd · allow list
-
Page 1 of 38Older →New rows appear on their own
+
Page 1 of 38Older →Allow / Deny sender opens Filter lists with the entry filled in · global administrator only
diff --git a/docs/assets/panel-redesign/panel/in-quarantine-message.html b/docs/assets/panel-redesign/panel/in-quarantine-message.html new file mode 100644 index 0000000..fb699a0 --- /dev/null +++ b/docs/assets/panel-redesign/panel/in-quarantine-message.html @@ -0,0 +1,149 @@ + + + + + +Held message · Quarantine · SelfPost + + + + + + + + +
DomainsLogQueueQuarantineFilter lists
+
+
+
+
+

Quarantine /

+

Outstanding invoice — action required

+

invoice@partner-billing.exampleowner@lists.example.orgquarantine

+
+
+ +
+
+
+
01

Message

+
+
+
Inbound domain
lists.example.org
+
Client
203.0.113.140
+
Held
2026-09-21 13:59:02 UTC
+
Deleted on
2026-10-05 · in 14 days
+
Size
48 kB · 1 attachment (invoice.html)
+
Would go to
mx.internal:25
+
+
+
+
+
+
+
02

Why it was held

rspamd · score 9.8
+ + + + + + + +
SymbolScore
PHISHING5.0
FORGED_SENDER3.0
HTML_ATTACHMENT1.8
+
+
+
+ +
+
03

Headers

The body and attachments are never rendered in the panel
+
Received: from mail.partner-billing.example (unknown [203.0.113.140]) by mail.example.org
+From: "Partner Billing" <invoice@partner-billing.example>
+Reply-To: payments.dept@freemail.example
+To: owner@lists.example.org
+Subject: Outstanding invoice — action required
+Date: Mon, 21 Sep 2026 13:58:57 +0000
+Authentication-Results: spf=fail dkim=none dmarc=fail
+
+ +
+
+
+
04

Release

+
+

Hands the message to mx.internal:25 unchanged, as if it had just arrived. It leaves the quarantine.

+
+
+ +
+
+
+
+
+
+

Discard

+
+

Deletes the message now instead of in 14 days. The sender is not told. This cannot be undone.

+
+
+ +
+
+
+
+
+ + +
+
+ + diff --git a/docs/assets/panel-redesign/panel/in-quarantine.html b/docs/assets/panel-redesign/panel/in-quarantine.html new file mode 100644 index 0000000..724daf6 --- /dev/null +++ b/docs/assets/panel-redesign/panel/in-quarantine.html @@ -0,0 +1,99 @@ + + + + + +Quarantine · SelfPost + + + + + + + + +
DomainsLogQueueQuarantineFilter lists
+
+
+
+
+

Inbound

+

Quarantine

+

Mail the filter found suspicious enough to hold, but not to refuse. Release hands a message to its upstream as if it had just arrived; Discard deletes it. Anything left is deleted after 14 days.

+
+
+ +
+
+ 01

Held messages

+
+
+ +
+
+ + + + + + + +
Held, UTCFromToSubjectWhySizeDeleted in
09-21 13:59:02invoice@partner-billing.exampleowner@lists.example.orgOutstanding invoice — action requiredscore 9.8 · PHISHING48 kB14 daysReview
09-20 22:14:40no-reply@shipping-update.examplejobs@acme.ioYour parcel could not be deliveredscore 8.1 · URL_SHORTENER12 kB13 daysReview
09-09 07:02:11m.ortega@supplier.exampleowner@lists.example.orgFwd: scanned contract (3 attachments)score 7.4 · MIME_ARCHIVE2.9 MB2 daysReview
+
3 messages · 3.0 MB of 500 MBA domain administrator sees only their assigned inbound domains
+
+ + +
+
+ + diff --git a/docs/assets/panel-redesign/panel/in-queue.html b/docs/assets/panel-redesign/panel/in-queue.html index ce38225..2172c6d 100644 --- a/docs/assets/panel-redesign/panel/in-queue.html +++ b/docs/assets/panel-redesign/panel/in-queue.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users @@ -59,7 +62,7 @@
-
DomainsLogQueue
+
DomainsLogQueueQuarantineFilter lists
diff --git a/docs/assets/panel-redesign/panel/out-app-created.html b/docs/assets/panel-redesign/panel/out-app-created.html index 7d09b33..3d2feef 100644 --- a/docs/assets/panel-redesign/panel/out-app-created.html +++ b/docs/assets/panel-redesign/panel/out-app-created.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/out-app.html b/docs/assets/panel-redesign/panel/out-app.html index 3816884..5f6bfc9 100644 --- a/docs/assets/panel-redesign/panel/out-app.html +++ b/docs/assets/panel-redesign/panel/out-app.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/out-domain-delete.html b/docs/assets/panel-redesign/panel/out-domain-delete.html index d6837e1..652236f 100644 --- a/docs/assets/panel-redesign/panel/out-domain-delete.html +++ b/docs/assets/panel-redesign/panel/out-domain-delete.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/out-domain-settings.html b/docs/assets/panel-redesign/panel/out-domain-settings.html index 2111761..858620a 100644 --- a/docs/assets/panel-redesign/panel/out-domain-settings.html +++ b/docs/assets/panel-redesign/panel/out-domain-settings.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/out-domain.html b/docs/assets/panel-redesign/panel/out-domain.html index 0bbe548..908a482 100644 --- a/docs/assets/panel-redesign/panel/out-domain.html +++ b/docs/assets/panel-redesign/panel/out-domain.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/out-domains.html b/docs/assets/panel-redesign/panel/out-domains.html index 3725d6d..8919a19 100644 --- a/docs/assets/panel-redesign/panel/out-domains.html +++ b/docs/assets/panel-redesign/panel/out-domains.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/out-log.html b/docs/assets/panel-redesign/panel/out-log.html index 3fa85a5..6565eb9 100644 --- a/docs/assets/panel-redesign/panel/out-log.html +++ b/docs/assets/panel-redesign/panel/out-log.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/out-message.html b/docs/assets/panel-redesign/panel/out-message.html index 1891105..f93381b 100644 --- a/docs/assets/panel-redesign/panel/out-message.html +++ b/docs/assets/panel-redesign/panel/out-message.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/out-queue.html b/docs/assets/panel-redesign/panel/out-queue.html index 544b263..dfc552a 100644 --- a/docs/assets/panel-redesign/panel/out-queue.html +++ b/docs/assets/panel-redesign/panel/out-queue.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/outlines.json b/docs/assets/panel-redesign/panel/outlines.json index b19f830..807f889 100644 --- a/docs/assets/panel-redesign/panel/outlines.json +++ b/docs/assets/panel-redesign/panel/outlines.json @@ -176,10 +176,65 @@ "box[Add a domain]:body", "box[Domains]:table" ], + "in-filter-lists": [ + "head", + "box[Add an entry]:body", + { + "columns": [ + { + "is-6": [ + "box[Deny]:table" + ] + }, + { + "is-6": [ + "box[Allow]:table" + ] + } + ] + }, + "box[Where the lists go]:body" + ], "in-log": [ "head", "box[Messages]:table" ], + "in-quarantine-message": [ + "head", + { + "columns": [ + { + "is-7": [ + "box[Message]:body" + ] + }, + { + "is-5": [ + "box[Why it was held]:table" + ] + } + ] + }, + "box[Headers]:log", + { + "columns": [ + { + "is-6": [ + "box[Release]:body" + ] + }, + { + "is-6": [ + "box.sp-danger-zone[Discard]:body" + ] + } + ] + } + ], + "in-quarantine": [ + "head", + "box[Held messages]:table" + ], "in-queue": [ "head", "box[Waiting]:empty", @@ -334,6 +389,24 @@ ] } ], + "preflight": [ + "head+postmark+actions", + "box[Checks]:table", + { + "columns": [ + { + "is-6": [ + "box[Send a test e-mail]:body" + ] + }, + { + "is-6": [ + "box[Not checked here]:body" + ] + } + ] + } + ], "settings": [ "head", { diff --git a/docs/assets/panel-redesign/panel/overview.html b/docs/assets/panel-redesign/panel/overview.html index 43d56ee..1f4c7a1 100644 --- a/docs/assets/panel-redesign/panel/overview.html +++ b/docs/assets/panel-redesign/panel/overview.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users diff --git a/docs/assets/panel-redesign/panel/preflight.html b/docs/assets/panel-redesign/panel/preflight.html new file mode 100644 index 0000000..07ba20b --- /dev/null +++ b/docs/assets/panel-redesign/panel/preflight.html @@ -0,0 +1,126 @@ + + + + + +Preflight · SelfPost + + + + + + + + +
HealthPreflightSystem logBackupUsersSettings
+
+
+
+
PREFLIGHTWARN1 OF 7 CHECKS
+
+

Server

+

Preflight

+

Is this installation ready to deliver mail? Run it after the first start, after moving the server, or when receivers start refusing you. Health watches what runs; Preflight checks what the outside world sees.

+
+
+
+ +
+
01

Checks

Ran 14:02 UTC · 3.1 s
+ + + + + + + + + + + +
CheckResultFoundWhat to do
Reverse DNSok203.0.113.25 ⇄ mail.example.org—
TLS certificatewarnValid for mail.example.org, expires in 12 daysRenewal has not run. Check that port 80 reaches the ACME client and look for acme in the system log.
Port 25ok220 mail.example.org ESMTP—
Ports 465, 587okTLS handshake, 220 banner on both—
HELO nameokmail.example.org—
Proxy headersokPeer 172.18.0.2 is trusted; X-Forwarded-Proto: https—
DKIM signingokinet:127.0.0.1:8891 answers—
+
Ports are dialled from inside the container at the public address; a firewall that treats inside and outside differently can make this pass while the world is still blocked.
+
+ +
+
+
+
02

Send a test e-mail

+
+
+
+
+
+
+
+

Sent from postmaster@mail.example.org through the local Postfix. This confirms the relay accepted it — follow the delivery in the outbound log.

+
+
+
+
+
+
+
03

Not checked here

+
+

SPF, DKIM and DMARC records are per domain — each outbound domain shows its own.

+

Whether a receiver finally accepted the test message is not tracked; only that it left.

+
+
+
+
+ + +
+
+ + diff --git a/docs/assets/panel-redesign/panel/settings.html b/docs/assets/panel-redesign/panel/settings.html index ed78014..879f294 100644 --- a/docs/assets/panel-redesign/panel/settings.html +++ b/docs/assets/panel-redesign/panel/settings.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users @@ -59,7 +62,7 @@
-
HealthSystem logBackupUsersSettings
+
HealthPreflightSystem logBackupUsersSettings
diff --git a/docs/assets/panel-redesign/panel/src/components.html b/docs/assets/panel-redesign/panel/src/components.html index b536dc7..e6789be 100644 --- a/docs/assets/panel-redesign/panel/src/components.html +++ b/docs/assets/panel-redesign/panel/src/components.html @@ -47,7 +47,7 @@ warn, deferred, quietwarntag is-warning is-light error, fail, mismatch, bouncedfailtag is-danger is-light unknown, off, neutral countsofftag is-light - role: globalglobaltag is-primary is-light + held: quarantine · role: globalquarantinetag is-primary is-light
diff --git a/docs/assets/panel-redesign/panel/src/in-filter-lists.html b/docs/assets/panel-redesign/panel/src/in-filter-lists.html new file mode 100644 index 0000000..44c87a3 --- /dev/null +++ b/docs/assets/panel-redesign/panel/src/in-filter-lists.html @@ -0,0 +1,73 @@ + +
+
+

Inbound · global administrator

+

Filter lists

+

Correct the spam filter by hand: senders it must always let through, and senders it must always turn away. One pair of lists for the whole instance.

+
+
+ +
+
01

Add an entry

+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ +
+
+
+ +
+
+
+
02

Deny

3 entries · wins over Allow
+ + + + + + + +
ValueNoteAdded
@bulk.example domainnewsletter nobody subscribed to2026-09-02Remove
198.51.100.0/24 ipdictionary attack on lists.example.org2026-08-19Remove
win@lottery.example address—2026-07-30Remove
+
+
+
+
+
03

Allow

2 entries
+ + + + + + +
ValueNoteAdded
@partner.example domaininvoices were scored as spam2026-09-11Remove
noreply@github.example addresssecurity advisories2026-06-04Remove
+
+
+
+ +
+
04

Where the lists go

applied
+
+
+
Applied by
rspamd, from map files
+
Files
/data/antispam/allow.map
/data/antispam/deny.map
+
Last written
2026-09-11 08:40 UTC
+
When the filter is off
The lists are kept and editable, but nothing reads them until INBOUND_ANTISPAM_MILTER is set.
+
+
+
diff --git a/docs/assets/panel-redesign/panel/src/in-log.html b/docs/assets/panel-redesign/panel/src/in-log.html index 2bcaf69..23cddfd 100644 --- a/docs/assets/panel-redesign/panel/src/in-log.html +++ b/docs/assets/panel-redesign/panel/src/in-log.html @@ -3,7 +3,7 @@

Inbound

Inbound log

-

What port 25 accepted and what it turned away. Accepts come from the inbound journal, rejects from mail.log.

+

What port 25 decided about each message, one row per recipient. Accepts come from the inbound journal, rejects from mail.log; the filter's reasons appear when the spam filter is on.

@@ -12,18 +12,22 @@ 01

Messages

-
+
+ +
- + - - - - + + + + + +
Time, UTCFromToSubjectActionReason
Time, UTCClientFromToSubjectDecisionWhy
09-21 14:00:18t.berg@uni.exampledev@lists.example.orgRe: [dev] patch series v3forwarded→ mx.internal:25
09-21 13:57:41promo@bulk.examplesales@lists.example.org—rejected550 5.1.1 unknown recipient
09-21 13:44:02hr@partner.examplejobs@acme.ioApplication: backend engineerdeferredupstream 10.0.4.12 timed out
09-21 13:30:55noreply@github.examplesecurity@lists.example.org[advisory] new reportforwarded→ mx.internal:25
09-21 14:00:18192.0.2.77t.berg@uni.exampledev@lists.example.orgRe: [dev] patch series v3acceptrspamd · score 0.4Deny sender
09-21 13:59:02203.0.113.140invoice@partner-billing.exampleowner@lists.example.orgOutstanding invoice — action requiredquarantinerspamd · score 9.8 · PHISHING, FORGED_SENDERReview
09-21 13:57:41198.51.100.90promo@bulk.examplesales@lists.example.org—rejectpostfix · 550 5.1.1 unknown recipientDeny sender
09-21 13:51:30198.51.100.12billing@partner.exampleowner@lists.example.orgInvoice 2026-0917rejectrspamd · score 16.2 · BAYES_SPAMAllow sender
09-21 13:44:02192.0.2.31hr@partner.examplejobs@acme.ioApplication: backend engineertempfailselfpost · upstream 10.0.4.12 timed out
09-21 13:30:55192.0.2.200noreply@github.examplesecurity@lists.example.org[advisory] new reportacceptrspamd · allow list
-
Page 1 of 38Older →New rows appear on their own
+
Page 1 of 38Older →Allow / Deny sender opens Filter lists with the entry filled in · global administrator only
diff --git a/docs/assets/panel-redesign/panel/src/in-quarantine-message.html b/docs/assets/panel-redesign/panel/src/in-quarantine-message.html new file mode 100644 index 0000000..a7e1c29 --- /dev/null +++ b/docs/assets/panel-redesign/panel/src/in-quarantine-message.html @@ -0,0 +1,77 @@ + +
+
+

Quarantine /

+

Outstanding invoice — action required

+

invoice@partner-billing.exampleowner@lists.example.orgquarantine

+
+
+ +
+
+
+
01

Message

+
+
+
Inbound domain
lists.example.org
+
Client
203.0.113.140
+
Held
2026-09-21 13:59:02 UTC
+
Deleted on
2026-10-05 · in 14 days
+
Size
48 kB · 1 attachment (invoice.html)
+
Would go to
mx.internal:25
+
+
+
+
+
+
+
02

Why it was held

rspamd · score 9.8
+ + + + + + + +
SymbolScore
PHISHING5.0
FORGED_SENDER3.0
HTML_ATTACHMENT1.8
+
+
+
+ +
+
03

Headers

The body and attachments are never rendered in the panel
+
Received: from mail.partner-billing.example (unknown [203.0.113.140]) by mail.example.org
+From: "Partner Billing" <invoice@partner-billing.example>
+Reply-To: payments.dept@freemail.example
+To: owner@lists.example.org
+Subject: Outstanding invoice — action required
+Date: Mon, 21 Sep 2026 13:58:57 +0000
+Authentication-Results: spf=fail dkim=none dmarc=fail
+
+ +
+
+
+
04

Release

+
+

Hands the message to mx.internal:25 unchanged, as if it had just arrived. It leaves the quarantine.

+
+
+ +
+
+
+
+
+
+

Discard

+
+

Deletes the message now instead of in 14 days. The sender is not told. This cannot be undone.

+
+
+ +
+
+
+
+
diff --git a/docs/assets/panel-redesign/panel/src/in-quarantine.html b/docs/assets/panel-redesign/panel/src/in-quarantine.html new file mode 100644 index 0000000..98bed43 --- /dev/null +++ b/docs/assets/panel-redesign/panel/src/in-quarantine.html @@ -0,0 +1,27 @@ + +
+
+

Inbound

+

Quarantine

+

Mail the filter found suspicious enough to hold, but not to refuse. Release hands a message to its upstream as if it had just arrived; Discard deletes it. Anything left is deleted after 14 days.

+
+
+ +
+
+ 01

Held messages

+
+
+ +
+
+ + + + + + + +
Held, UTCFromToSubjectWhySizeDeleted in
09-21 13:59:02invoice@partner-billing.exampleowner@lists.example.orgOutstanding invoice — action requiredscore 9.8 · PHISHING48 kB14 daysReview
09-20 22:14:40no-reply@shipping-update.examplejobs@acme.ioYour parcel could not be deliveredscore 8.1 · URL_SHORTENER12 kB13 daysReview
09-09 07:02:11m.ortega@supplier.exampleowner@lists.example.orgFwd: scanned contract (3 attachments)score 7.4 · MIME_ARCHIVE2.9 MB2 daysReview
+
3 messages · 3.0 MB of 500 MBA domain administrator sees only their assigned inbound domains
+
diff --git a/docs/assets/panel-redesign/panel/src/preflight.html b/docs/assets/panel-redesign/panel/src/preflight.html new file mode 100644 index 0000000..dc6b632 --- /dev/null +++ b/docs/assets/panel-redesign/panel/src/preflight.html @@ -0,0 +1,54 @@ + +
+
PREFLIGHTWARN1 OF 7 CHECKS
+
+

Server

+

Preflight

+

Is this installation ready to deliver mail? Run it after the first start, after moving the server, or when receivers start refusing you. Health watches what runs; Preflight checks what the outside world sees.

+
+
+
+ +
+
01

Checks

Ran 14:02 UTC · 3.1 s
+ + + + + + + + + + + +
CheckResultFoundWhat to do
Reverse DNSok203.0.113.25 ⇄ mail.example.org—
TLS certificatewarnValid for mail.example.org, expires in 12 daysRenewal has not run. Check that port 80 reaches the ACME client and look for acme in the system log.
Port 25ok220 mail.example.org ESMTP—
Ports 465, 587okTLS handshake, 220 banner on both—
HELO nameokmail.example.org—
Proxy headersokPeer 172.18.0.2 is trusted; X-Forwarded-Proto: https—
DKIM signingokinet:127.0.0.1:8891 answers—
+
Ports are dialled from inside the container at the public address; a firewall that treats inside and outside differently can make this pass while the world is still blocked.
+
+ +
+
+
+
02

Send a test e-mail

+
+
+
+
+
+
+
+

Sent from postmaster@mail.example.org through the local Postfix. This confirms the relay accepted it — follow the delivery in the outbound log.

+
+
+
+
+
+
+
03

Not checked here

+
+

SPF, DKIM and DMARC records are per domain — each outbound domain shows its own.

+

Whether a receiver finally accepted the test message is not tracked; only that it left.

+
+
+
+
diff --git a/docs/assets/panel-redesign/panel/system-log.html b/docs/assets/panel-redesign/panel/system-log.html index 584c5d4..c13634b 100644 --- a/docs/assets/panel-redesign/panel/system-log.html +++ b/docs/assets/panel-redesign/panel/system-log.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users @@ -59,7 +62,7 @@
-
HealthSystem logBackupUsersSettings
+
HealthPreflightSystem logBackupUsersSettings
diff --git a/docs/assets/panel-redesign/panel/user-delete.html b/docs/assets/panel-redesign/panel/user-delete.html index 13c5a11..4af185e 100644 --- a/docs/assets/panel-redesign/panel/user-delete.html +++ b/docs/assets/panel-redesign/panel/user-delete.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users @@ -59,7 +62,7 @@
-
HealthSystem logBackupUsersSettings
+
HealthPreflightSystem logBackupUsersSettings
diff --git a/docs/assets/panel-redesign/panel/user.html b/docs/assets/panel-redesign/panel/user.html index 220c7f8..311d102 100644 --- a/docs/assets/panel-redesign/panel/user.html +++ b/docs/assets/panel-redesign/panel/user.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users @@ -59,7 +62,7 @@
-
HealthSystem logBackupUsersSettings
+
HealthPreflightSystem logBackupUsersSettings
diff --git a/docs/assets/panel-redesign/panel/users.html b/docs/assets/panel-redesign/panel/users.html index f595d66..1453d55 100644 --- a/docs/assets/panel-redesign/panel/users.html +++ b/docs/assets/panel-redesign/panel/users.html @@ -31,12 +31,15 @@ Domains Log Queue + Quarantine + Filter lists
Server
Health + Preflight System log Backup Users @@ -59,7 +62,7 @@
-
HealthSystem logBackupUsersSettings
+
HealthPreflightSystem logBackupUsersSettings
diff --git a/docs/plans/inbound-quarantine.md b/docs/plans/inbound-quarantine.md index 50d4177..d97315a 100644 --- a/docs/plans/inbound-quarantine.md +++ b/docs/plans/inbound-quarantine.md @@ -22,6 +22,15 @@ so we can compare approaches before committing. reference to them) under `/data`, retention, release workflow, and a wider attack/backup surface — closer to "mini-mailbox" than pure relay. +## Mockup + +A target look is drawn — list and detail — +[in-quarantine](../assets/panel-redesign/panel/in-quarantine.html), +[in-quarantine-message](../assets/panel-redesign/panel/in-quarantine-message.html) +— under the design contract of [panel-redesign.md](panel-redesign.md). It +assumes answers to the questions below (SelfPost holds the mail, release goes +to the upstream, 14 days, headers only in the panel); it does not settle them. + ## Open questions (to decide before a checklist) 1. **Where mail lives** diff --git a/docs/plans/panel-redesign.md b/docs/plans/panel-redesign.md index a9be311..4322fa7 100644 --- a/docs/plans/panel-redesign.md +++ b/docs/plans/panel-redesign.md @@ -13,7 +13,7 @@ design itself is drawn and accepted: | Artefact | Role | |---|---| -| [docs/assets/panel-redesign/panel/](../assets/panel-redesign/index.html) | 29 screens — **the** reference for what each page looks like | +| [docs/assets/panel-redesign/panel/](../assets/panel-redesign/index.html) | 33 screens — **the** reference for what each page looks like | | [panel/components.html](../assets/panel-redesign/panel/components.html) | every component in every state — the only parts a page may be built from | | [panel/outlines.json](../assets/panel-redesign/panel/outlines.json) | the component skeleton of each screen, generated from the mockups | | [panel/check.py](../assets/panel-redesign/panel/check.py) | the contract as a program; its rules are ported to Go tests below | @@ -93,6 +93,8 @@ only. | Inbound: domain (upstream, recipients), log | all domains | assigned inbound domains | | Add / delete a domain, either direction | yes | no | | Queues, either direction | yes | no, until the queue is a filterable table | +| Inbound › Quarantine | all domains | assigned inbound domains | +| Inbound › Filter lists, Server › Preflight | yes | no — the lists are instance-wide | | Account, Help | yes | yes | - New table `user_inbound_domains (user_id, inbound_domain_id)`, mirroring @@ -115,6 +117,7 @@ list, an action under the thing it changes. |---|---|---| | overview | `GET /overview` | `/status` | | health | `GET /server/health` · `POST …/recheck` · `POST …/reload` | tables of `/status` · `/status/recheck` · `/reload` | +| preflight | `GET /server/preflight` · `POST …/preflight/run` · `POST …/preflight/test-email` | — (preflight; its plan says `/preflight`) | | out-domains | `GET, POST /outbound/domains` | `/domains` | | out-domain | `GET /outbound/domains/{id}` · `POST …/dns-recheck` | `/domains/{id}` | | out-domain-settings | `GET /outbound/domains/{id}/settings` · `POST …/settings/reports` · `…/settings/ratelimit` · `…/settings/ratelimit/recalc` · `…/settings/export` | cards of `/domains/{id}` · `…/dmarc` · `…/ratelimit` · `…/ratelimit/recalc` · `…/export` | @@ -127,6 +130,8 @@ list, an action under the thing it changes. | in-domains · in-domain | `GET, POST /inbound/domains` · `GET /inbound/domains/{id}` · `POST …/dns-recheck`, `…/upstream`, `…/recipients` | `/inbound` · `/inbound/{id}/…` | | in-domain-delete | `GET, POST /inbound/domains/{id}/delete` | `/inbound/{id}/delete` | | in-log · in-queue | `GET /inbound/log` · `GET /inbound/queue` | — (new, see below) | +| in-quarantine · in-quarantine-message | `GET /inbound/quarantine` · `GET …/quarantine/{id}` · `POST …/{id}/release` · `POST …/{id}/discard` | — (inbound-quarantine) | +| in-filter-lists | `GET, POST /inbound/filter-lists` · `POST …/filter-lists/{id}/delete` | — (inbound-antispam-panel) | | system-log | `GET /server/log` | `/system-log` | | backup | `GET, POST /server/backup` · `POST /server/backup/import` | `/backup` · `POST /domains/import` | | users · user · user-delete | `/server/users` · `…/new` · `…/{uid}` · `…/{uid}/delete` | `/users/…` | @@ -174,17 +179,18 @@ shell, and its menu entry is hidden if the page does not exist. ## Room for roadmap items -The mockups draw today's features plus the four rows above. The other open -roadmap items are **not drawn yet**; each has a place, and none needs a new -component or layout. A feature's screens are drawn mockup-first in this system -(`panel/src/`, `build.py`, `check.py --write`) as the first step of that -feature's own plan — not invented during its implementation. +The mockups draw today's features, the four rows above, and the screens of +the open roadmap items — none of them needed a new component or layout. A +mockup of a feature is its target look, not a decision to build it: each item +keeps its own status and plan. From here on a feature's screens are drawn +mockup-first in this system (`panel/src/`, `build.py`, `check.py --write`) as +the first step of that feature's plan — not invented during implementation. | Roadmap item | Where it lands | Built from | Drawn | |---|---|---|---| -| inbound-antispam-panel (agreed, `1.10.0`) | journal = **Inbound › Log** (add client IP and engine to the mockup's columns; `quarantine` joins the decisions); lists = new **Inbound › Filter lists**, global-only because the lists are instance-wide | list layout: add form + table, `status_tag`, filter form in `box_head` | log: yes, to be adjusted · lists: **no** | -| inbound-quarantine (candidate) | new **Inbound › Quarantine**, list + detail with *Release* / *Discard* | list layout; detail like `out-message` with `facts`, `log_pane`, a `sp-danger-zone` box for Discard | **no** | -| preflight (candidate) | new **Server › Preflight**, next to Health: Health is what runs now, Preflight is the deeper on-demand installation check with a test e-mail form | `postmark` verdict, a table of checks with `status_tag`, `facts`, one form box | **no** | +| inbound-antispam-panel (agreed, `1.10.0`) | journal = **Inbound › Log** (add client IP and engine to the mockup's columns; `quarantine` joins the decisions); lists = new **Inbound › Filter lists**, global-only because the lists are instance-wide | list layout: add form + two tables, `status_tag`, filter form in `box_head`; the log links *Allow / Deny sender* to the lists | `in-log`, `in-filter-lists` | +| inbound-quarantine (candidate) | new **Inbound › Quarantine**, list + detail with *Release* / *Discard* | list layout; detail like `out-message` with `facts`, `log_pane` for headers only, Release beside a `sp-danger-zone` Discard | `in-quarantine`, `in-quarantine-message` — the open questions of its plan (where mail lives, what release means, retention, RBAC) stay open; the mockup assumes SelfPost-held mail, release to upstream, 14 days, delegated like the rest of Inbound | +| preflight (candidate) | new **Server › Preflight**, next to Health: Health is what runs now, Preflight is the deeper on-demand installation check with a test e-mail form | `postmark` verdict, a table of checks with `status_tag` and a *What to do* column, one form box for the test e-mail | `preflight` | | csrf-tokens | no screen; every form gains a hidden field — forms are rendered through one helper so the token cannot be forgotten | — | n/a | | template-data-typing | no screen; the component partials are the natural first users of typed data | — | n/a | | structured-logging, contributing, review follow-ups | none | — | n/a | diff --git a/docs/plans/preflight.md b/docs/plans/preflight.md index 26f9230..df7fff0 100644 --- a/docs/plans/preflight.md +++ b/docs/plans/preflight.md @@ -13,6 +13,12 @@ checks and helps the administrator confirm the instance is fully configured and ready to deliver mail. Each failed check shows an actionable recommendation (what to do or where to look). +## Mockup + +[preflight](../assets/panel-redesign/panel/preflight.html), under the design +contract of [panel-redesign.md](panel-redesign.md): **Server › Preflight**, +path `/server/preflight` once the routes are renamed. + ## Scope **In:**