release: 1.0.0: Public 1.0 image; delivery log; docs and SECURITY.md (incl. 1.0.1)

[1.0.0]
Added:
  - A **Delivery log** on each delivery's page (`/deliveries/{id}`): the
  - A **History** block on the same page: the journal's two timestamps stated as
Fixed:
  - Postfix config: copy TLS cert/key from the (often `:ro`, host-owned) mount
  - Postfix config: allow `maillog_file` under `/data` via
  - E2e: read `/data/setup-token` via `docker compose exec` (file is `0600`
  - Entrypoint: check `SELFPOST_HOSTNAME` before `/data` setup (so a bad identity
  - E2e gate: wait for host-published `/healthz` before panel setup, and stop
  … (3 more in CHANGELOG)
Changed:
  - Document what `.spbk` and `.spde` stand for (SelfPost backup / SelfPost domain
  - Docs aligned with the code: setup URL is `/setup/<token>` (README and
  - Full backups no longer carry `/data/log`. It is Postfix's raw log plus its
  - Monitoring screens (status, mail queue, system log, deliveries) use adaptive
  - Documentation package consolidated into `docs/development.md`: Documentation
  … (4 more in CHANGELOG)
[1.0.1]
A documentation and packaging release: no change to the mail path, the database, or the on-disk layout. Upgrading is a tag bump.
Added:
  - `SECURITY.md` — how to report a vulnerability privately (GitHub private
  - [docs/plans/](docs/plans/) — one document per agreed extension: the optional
Changed:
  - The panel's **Account** entry is now called **Settings** — nav link, page
  - The signed-in name in the panel's nav is now labelled `User:`, so it reads as
  - [docs/product.md](docs/product.md) reframes the future line: the inbound
  - [docs/security.md](docs/security.md) is now in English, matching the rest of
  - The README documentation table now points at `SECURITY.md` for reporting a
  … (2 more in CHANGELOG)
Fixed:
  - The panel's static assets are served with a content ETag and

Squashed CHANGELOG sections: [1.0.0], [1.0.1].

Full detail: CHANGELOG.md (1.0.0, 1.0.1).

cmd/panel/envdoc_test.go

@@ -5,7 +5,7 @@ import (
 	"testing"
 )
 
-// documentedPublic matches the README "Environment variables" table.
+// documentedPublic matches docs/guide.md "Environment variables" table.
 var documentedPublic = []string{
 	"SELFPOST_HOSTNAME",
 	"SUBMISSION_ENABLE",
@@ -17,7 +17,7 @@ var documentedPublic = []string{
 	"TRUSTED_PROXY_CIDR",
 }
 
-// documentedInternal matches README "Internal variables (not part of the operator interface)".
+// documentedInternal matches guide.md "Internal variables (not part of the operator interface)".
 var documentedInternal = []string{
 	"SELFPOST_DATA_DIR",
 	"SELFPOST_DB_PATH",
@@ -82,6 +82,7 @@ var buildScriptKeys = []string{
 	"RATE_LIMIT_WINDOW_SECONDS",
 	"OPENDKIM_SOCKET",
 	"JOURNAL_MILTER_SOCKET",
+	"MAIL_LOG",
 	"POSTFIX_SENDER_LOGIN_MAPS",
 	"SASL_DB_PATH",
 	"SUBMISSION_ENABLE",
@@ -105,7 +106,7 @@ func TestLoadConfigKeysDocumented(t *testing.T) {
 	doc := documentedKeys()
 	for _, key := range loadConfigKeys {
 		if !slices.Contains(doc, key) {
-			t.Errorf("loadConfig reads %s but it is not listed in README public, internal, or compose-fixed env docs", key)
+			t.Errorf("loadConfig reads %s but it is not listed in guide.md public, internal, or compose-fixed env docs", key)
 		}
 	}
 }
@@ -114,7 +115,7 @@ func TestBuildScriptKeysDocumented(t *testing.T) {
 	doc := documentedKeys()
 	for _, key := range buildScriptKeys {
 		if !slices.Contains(doc, key) {
-			t.Errorf("build scripts read %s but it is not listed in README env documentation", key)
+			t.Errorf("build scripts read %s but it is not listed in guide.md env documentation", key)
 		}
 	}
 }
@@ -127,7 +128,7 @@ func TestDocumentedKeysAreRead(t *testing.T) {
 
 	for _, key := range documentedKeys() {
 		if !slices.Contains(read, key) {
-			t.Errorf("README documents %s but no code in loadConfig or build scripts reads it", key)
+			t.Errorf("guide.md documents %s but no code in loadConfig or build scripts reads it", key)
 		}
 	}
 }

cmd/panel/main.go

@@ -81,7 +81,10 @@ func loadConfig() config {
 	return config{
 		httpAddr:      envDefault("PANEL_HTTP_ADDR", ":8080"),
 		journalSocket: envDefault("JOURNAL_MILTER_SOCKET", "/run/selfpost/journal.sock"),
-		mailLog:       envDefault("MAIL_LOG", "/var/log/mail.log"),
+		// Postfix's delivery log, under /data so the lines that resolve a
+		// "queued" send-log row outlive the container. The default must match
+		// maillog_file in build/postfix-config.sh.
+		mailLog: envDefault("MAIL_LOG", "/data/log/mail.log"),
 		// Send-log retention window (architecture.md § Persistence).
 		// Non-positive/invalid falls back to the 90-day default inside the
 		// log-tailer.