panel-notifications: Account, Server > Settings, Server > Health, help; e2e

The pages of the mockups accepted in 87fa0a4, built from the kit's partials
(written by a Sonnet agent into the working tree, reviewed here):

- Account: "Send me notifications" in the Profile form, saved with the
  profile; an unticked box is off.
- Server > Settings: the instance switch (box 03), and box 04 Notification
  mail with the DKIM and SPF records of the server's own name, drawn with the
  record partial of a domain's DNS page and checked in DNS. Sending rate
  limits are box 02 in the left column. A record that is not in place is
  tagged as a warning, not a failure: notifications are sent without it.
- Server > Health: card 06 Notification mail with the state of each record
  and a link to Settings, beside Configuration (07); part of the polled
  fragment; Re-check DNS forces it too. Overview does not run this check.
- help.go: the Notifications topic and the clauses in Settings and Your
  account, word for word with help.html.

If the server's key cannot be read the pages still render: the DKIM record
is left out and SPF is shown unchecked.

e2e: the administrator gets a mailbox behind the sink and the server's DKIM
record from Settings is published; the level-2 refusal of the next step must
then arrive as a notification from postmaster@mail.e2e.test, signed as that
name with the key Settings shows, and must not be a row of the Outbound log.
The rotation step now waits for Postfix to be running: it follows a step that
restarts the container, and logrotate's `postfix reload` failed in between.

On the test server, for this tree: go vet clean, go test ./... 23 packages
ok, make e2e ok (147 s); the notification reached the sink 28 s after the
refusal.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

internal/web/view/health.go

@@ -30,10 +30,19 @@ type Health struct {
 	CertDetail  string
 	CertProblem bool
 
-	Sockets       Box
-	SocketRows    []SocketRow
-	Hostname      Box
-	HostFacts     []Fact
+	Sockets    Box
+	SocketRows []SocketRow
+	Hostname   Box
+	HostFacts  []Fact
+
+	// NotifyMail is the card of the DNS records notifications are signed and
+	// authorised with (their values are under Server › Settings); NotifyNote
+	// is the line under its table. It is polled with the rest, so Refresh swaps
+	// it into place on its own.
+	NotifyMail Box
+	NotifyRows []MailRow
+	NotifyNote Text
+
 	Configuration Box
 	Reload        Action
 }
@@ -87,6 +96,20 @@ type SocketRow struct {
 	Detail string
 }
 
+// MailRow is one record of the Notification mail table: its name, the host it
+// is published at and its state as a tag.
+type MailRow struct {
+	Name  string
+	Host  string
+	State Tag
+}
+
+// NewMailRow is the row of one record of the server's own name, from what the
+// DNS check found. A record that is not in place is a warning, as on Settings.
+func NewMailRow(name, host string, c DNSCheck) MailRow {
+	return MailRow{Name: name, Host: host, State: mailTag(c)}
+}
+
 // NewHealth builds the page around its content. The handler fills the tables;
 // the boxes, the head and the reload action are the page's own.
 func NewHealth(m Meta, flash string) *Health {
@@ -104,7 +127,9 @@ func NewHealth(m Meta, flash string) *Health {
 		Certificate: Box{No: "03", Title: "TLS certificate", ID: "certificate", Help: topicLink(HelpCertificate, "When it warns and what to do")},
 		Sockets:     Box{No: "04", Title: "Milter sockets", ID: "sockets"},
 		Hostname:    Box{No: "05", Title: "Hostname and reverse DNS", ID: "hostname", Help: topicLink(HelpRDNS, "Forward and reverse DNS")},
-		Configuration: Box{No: "06", Title: "Configuration", ID: "configuration",
+		NotifyMail: Box{No: "06", Title: "Notification mail", ID: "notification-mail",
+			Help: topicLink(HelpNotifications, "What the panel sends and what makes it arrive")},
+		Configuration: Box{No: "07", Title: "Configuration", ID: "configuration",
 			End: Plain("Safe to run at any time")},
 		Reload: Action{Label: "Reload configuration", Icon: "ti-reload", Post: "/server/health/reload"},
 	}
@@ -114,5 +139,16 @@ func NewHealth(m Meta, flash string) *Health {
 	return h
 }
 
+// WithNotificationMail fills the Notification mail card: from is the address
+// notifications come from, rows the state of each record, and status the
+// card's verdict for its head.
+func (h *Health) WithNotificationMail(from string, rows []MailRow, status string) *Health {
+	h.NotifyMail.End = Verdict(status)
+	h.NotifyRows = rows
+	h.NotifyNote = Rich("Sent from ", Mono(from), ". What to publish is under ",
+		Link("/server/settings#notification-mail", "Settings"), ".")
+	return h
+}
+
 // Verdict puts a check's status in the end slot of its box, as the mockup does.
 func Verdict(status string) Text { return Text{TagOf(status, "")} }