release: 0.1.0: Phases 0-11: panel, Postfix/DKIM, milter, backup, Docker image

Initial feature-complete implementation of the v1.0 specification (phases 0-11 of `docs/implementation-plan.md`).
Added:
  - Panel (Go, single static binary) with SQLite persistence, one-time
  - Domain management with per-domain DKIM (RSA-2048, generated in pure Go) and
  - Application (sender identity) management: SASL credentials via `sasldb2`,
  - Full Postfix relay config generated from env at container start: SMTPS 465,
  - Journal milter (pure Go, `go-milter`) recording every send to `send_log`;
  … (6 more in CHANGELOG)

Full detail: CHANGELOG.md (0.1.0).

cmd/panel/httpserver.go

@@ -0,0 +1,68 @@
+package main
+
+import (
+	"context"
+	"errors"
+	"log"
+	"net/http"
+	"time"
+
+	"codeberg.org/mix/selfpost/internal/app"
+	"codeberg.org/mix/selfpost/internal/buildinfo"
+	"codeberg.org/mix/selfpost/internal/domain"
+	"codeberg.org/mix/selfpost/internal/postfix"
+	"codeberg.org/mix/selfpost/internal/store"
+	"codeberg.org/mix/selfpost/internal/web"
+)
+
+// serveHTTP runs the control-panel HTTP server until ctx is cancelled, using
+// the database handle shared by all roles. From Phase 2 this serves the real
+// setup, login and authenticated panel surface (spec 7.6).
+func serveHTTP(ctx context.Context, cfg config, st *store.Store) error {
+	// Applications own the SASL accounts and the Postfix sender map; the domain
+	// service delegates to them when a domain (and its applications) is deleted.
+	pf := postfix.New(cfg.postfixDir)
+	apps := app.NewService(st, app.NewSASLDB(cfg.saslDBPath, cfg.saslRealm), pf)
+	domains := domain.NewService(st, domain.NewOpenDKIM(cfg.opendkimDir), apps, cfg.dkimSelectorDef)
+
+	srvApp, err := web.New(st, domains, apps, web.Config{
+		Hostname:          cfg.hostname,
+		CookieSecure:      cfg.cookieSecure,
+		SubmissionEnabled: cfg.submissionEnabled,
+		MailLogPath:       cfg.mailLog,
+		DataDir:           cfg.dataDir,
+		DBPath:            cfg.dbPath,
+		Version:           buildinfo.Version,
+		TrustedProxyCIDRs: cfg.trustedProxies,
+		TLSCertFile:       cfg.tlsCertFile,
+		OpenDKIMSocket:    cfg.opendkimSocket,
+		JournalSocket:     cfg.journalSocket,
+		SessionIdleDays:   cfg.sessionIdleDays,
+	}, cfg.setupTokenPath)
+	if err != nil {
+		return err
+	}
+	if err := srvApp.Start(); err != nil {
+		return err
+	}
+
+	srv := &http.Server{
+		Addr:              cfg.httpAddr,
+		Handler:           srvApp.Handler(),
+		ReadHeaderTimeout: 10 * time.Second,
+	}
+
+	// Shut the server down cleanly when the process is asked to stop.
+	go func() {
+		<-ctx.Done()
+		shutdownCtx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
+		defer cancel()
+		_ = srv.Shutdown(shutdownCtx)
+	}()
+
+	log.Printf("http panel listening on %s", cfg.httpAddr)
+	if err := srv.ListenAndServe(); err != nil && !errors.Is(err, http.ErrServerClosed) {
+		return err
+	}
+	return nil
+}