From e92769f8333f56d402d4be1e7b6eb02b6153b487 Mon Sep 17 00:00:00 2001 From: Mix Date: Sat, 17 Oct 2026 00:02:33 +0300 Subject: [PATCH] design: test-email - a Test message card on Health MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Decided by the owner on 2026-10-13 (out of preflight), taken up on 2026-10-16; the sender is the owner's choice of 2026-10-16 ("Да, адрес годится"): postmaster@ the hostname, as notifications. Server › Health gets card 09, Test message: one recipient and Send. The message goes as notifications go - through Postfix, signed with the key of the server's own name - and opens in the Outbound log, whose page follows it to the receiving server; ten an hour. The help gets a Test message topic: what the test proves (the server's path, not a domain's) and what it does not (the inbox). outlines.json: health gains the box, help one topic. check.py: 0 violations. Co-Authored-By: Claude Opus 5.5 --- docs/assets/panel-redesign/panel/health.html | 13 +++++++++++++ docs/assets/panel-redesign/panel/help.html | 1 + docs/assets/panel-redesign/panel/outlines.json | 5 +++-- docs/assets/panel-redesign/panel/src/health.html | 13 +++++++++++++ docs/assets/panel-redesign/panel/src/help.html | 1 + 5 files changed, 31 insertions(+), 2 deletions(-) diff --git a/docs/assets/panel-redesign/panel/health.html b/docs/assets/panel-redesign/panel/health.html index ac4ad90..69751f6 100644 --- a/docs/assets/panel-redesign/panel/health.html +++ b/docs/assets/panel-redesign/panel/health.html @@ -123,6 +123,19 @@ +
+
09

Test message

Shows what the receiving server answers
+
+
+
+
+
+
+
+

From postmaster@mail.example.org, signed with the server's own key, through Postfix as its notifications go. It opens in the Outbound log, where its page follows it to the receiving server. Ten an hour.

+
+
+
diff --git a/docs/assets/panel-redesign/panel/help.html b/docs/assets/panel-redesign/panel/help.html index 843d984..8d2490d 100644 --- a/docs/assets/panel-redesign/panel/help.html +++ b/docs/assets/panel-redesign/panel/help.html @@ -119,6 +119,7 @@
01

Overview

Health checks

Six checks, and the worst of them is the postmark. ok needs nothing; warn still delivers mail but will stop doing so if ignored; fail means mail is being lost or refused now. Health shows the readings behind them: CPU and memory are the container's own, not the host's spare capacity, and network is a short window, not a daily total. Your address, in the Configuration card, is the address the panel sees your browser at: behind a reverse proxy it must be your own, taken from X-Forwarded-For; when it is the proxy's, every visitor shares one sign-in limit, and Health warns and names the address to put in TRUSTED_PROXY_CIDR.

TLS certificate

The certificate Postfix presents on 465 and 587. The reverse proxy or the image mounts it, the panel does not issue it. Postfix serves its own copy of the mounted file and looks for a renewed one once a day by default; until it takes one up, the card shows it as a renewal waiting, and warns once it has waited longer than that check allows - the container log's cert-reload lines say why. It warns 14 days before expiry unless a renewal is already waiting, and fails once expired, or when the file is missing or unreadable — clients that verify certificates then refuse to connect. It also fails when none of its names is the hostname (SELFPOST_HOSTNAME) - the tag beside Names says which: a client that verifies the name refuses it however valid it is.

+

Test message

A message from postmaster@ the server's hostname to one address you type, sent the way notifications are: through Postfix, signed with the DKIM key of the server's own name. It proves the path from this server - TLS, its address's reputation, the SPF and DKIM records of its name - not your domains', which only mail from an application does. The page that opens is its row in the Outbound log: it shows whether the receiving server took it, put it off or refused it, with the lines of mail.log. Whether it then reached the inbox or the spam folder only the mailbox can say. The global role sends it, at most ten an hour.

Hostname and reverse DNS

The hostname (SELFPOST_HOSTNAME) must resolve to this server's address, and that address must resolve back to the hostname. Large receivers reject or spam-folder mail from hosts where the two disagree. The PTR record is set at your hosting provider, not in your DNS zone. Greeting is the line Postfix opens every connection with, 220 and its banner; it must name the hostname too - a receiver compares it with the name it looked up - and a container id or localhost there is a warning.

diff --git a/docs/assets/panel-redesign/panel/outlines.json b/docs/assets/panel-redesign/panel/outlines.json index 7c7a138..47c9595 100644 --- a/docs/assets/panel-redesign/panel/outlines.json +++ b/docs/assets/panel-redesign/panel/outlines.json @@ -82,7 +82,8 @@ "box[Processes]:table", "box[Sender check]:table+body", "box[Hostname and reverse DNS]:body", - "box[Machine]:table" + "box[Machine]:table", + "box[Test message]:body" ] }, { @@ -107,7 +108,7 @@ }, { "is-9": [ - "box[Overview]:help×3", + "box[Overview]:help×4", "box[Outbound]:help×7", "box[Inbound]:help×6", "box[Server]:help×4", diff --git a/docs/assets/panel-redesign/panel/src/health.html b/docs/assets/panel-redesign/panel/src/health.html index 46750b0..678a53b 100644 --- a/docs/assets/panel-redesign/panel/src/health.html +++ b/docs/assets/panel-redesign/panel/src/health.html @@ -57,6 +57,19 @@
+
+
09

Test message

Shows what the receiving server answers
+
+
+
+
+
+
+
+

From postmaster@mail.example.org, signed with the server's own key, through Postfix as its notifications go. It opens in the Outbound log, where its page follows it to the receiving server. Ten an hour.

+
+
+
diff --git a/docs/assets/panel-redesign/panel/src/help.html b/docs/assets/panel-redesign/panel/src/help.html index cb80790..590dcfe 100644 --- a/docs/assets/panel-redesign/panel/src/help.html +++ b/docs/assets/panel-redesign/panel/src/help.html @@ -53,6 +53,7 @@
01

Overview

Health checks

Six checks, and the worst of them is the postmark. ok needs nothing; warn still delivers mail but will stop doing so if ignored; fail means mail is being lost or refused now. Health shows the readings behind them: CPU and memory are the container's own, not the host's spare capacity, and network is a short window, not a daily total. Your address, in the Configuration card, is the address the panel sees your browser at: behind a reverse proxy it must be your own, taken from X-Forwarded-For; when it is the proxy's, every visitor shares one sign-in limit, and Health warns and names the address to put in TRUSTED_PROXY_CIDR.

TLS certificate

The certificate Postfix presents on 465 and 587. The reverse proxy or the image mounts it, the panel does not issue it. Postfix serves its own copy of the mounted file and looks for a renewed one once a day by default; until it takes one up, the card shows it as a renewal waiting, and warns once it has waited longer than that check allows - the container log's cert-reload lines say why. It warns 14 days before expiry unless a renewal is already waiting, and fails once expired, or when the file is missing or unreadable — clients that verify certificates then refuse to connect. It also fails when none of its names is the hostname (SELFPOST_HOSTNAME) - the tag beside Names says which: a client that verifies the name refuses it however valid it is.

+

Test message

A message from postmaster@ the server's hostname to one address you type, sent the way notifications are: through Postfix, signed with the DKIM key of the server's own name. It proves the path from this server - TLS, its address's reputation, the SPF and DKIM records of its name - not your domains', which only mail from an application does. The page that opens is its row in the Outbound log: it shows whether the receiving server took it, put it off or refused it, with the lines of mail.log. Whether it then reached the inbox or the spam folder only the mailbox can say. The global role sends it, at most ten an hour.

Hostname and reverse DNS

The hostname (SELFPOST_HOSTNAME) must resolve to this server's address, and that address must resolve back to the hostname. Large receivers reject or spam-folder mail from hosts where the two disagree. The PTR record is set at your hosting provider, not in your DNS zone. Greeting is the line Postfix opens every connection with, 220 and its banner; it must name the hostname too - a receiver compares it with the name it looked up - and a container id or localhost there is a warning.