mix/selfpost
1
0
Fork 0
Code Issues Pull Requests Actions 21 Packages Projects Releases Wiki Activity

test-email: a test message from Server › Health

Browse Source 
Decided by the owner on 2026-10-13 (out of preflight); the sender is his
choice of 2026-10-16 ("Да, адрес годится"); mockups e92769f, e3b2501,
8f0ccf9, the route guard 75f97c9.

Card 09 on Health, in the right stack's static end (the left stack is
polled whole): one recipient and Send. HandleTestMessage (global role)
takes one address (validate.AccountEmail - no list, nothing that reads as
an option), at most ten an hour counted from the send log, writes the
message's send-log row first (store.InsertTestMessage: queued, the
hostname as domain, no application, no queue id), awaits its Message-ID
(logtail.AwaitMessageID) and hands it to sendmail as notifications go
(notify.Mailer.SendWithID: postmaster@ the hostname, signed by the local
socket with the key of the server's own name). The browser lands on the
row; the tailer gives it its queue id from cleanup's message-id= line
(src/cleanup/cleanup_message.c:639) and from then on its delivery lines
its status. Postfix refusing the hand-over removes the row; sendmail out
of time keeps it (postdrop may have queued it). The sweep closes a row
whose id was never seen once it is no longer awaited
(CloseUnmatchedTestMessages); an id awaited past ten minutes is not taken.

Reviewed for security before the commit (2026-10-17): no high or medium;
its three low findings are fixed in this commit (the unmatched row's
close, the awaited id's age, the timeout keeping the row) and the
security.md bullet says how the queue id is matched.

Tests: TestTestMessage (refusals, the row and the page, Postfix refusing,
the hourly ten), TestTestMessageTimeoutKeepsTheRow, TestTestMessageRows,
TestCloseUnmatchedTestMessages, TestAwaitedMessageID,
TestRunGivesTheTestMessageItsQueueID, TestHealthTestMessageCard; e2e sends
one to the sink: the row is sent with a long queue id, the sink has it
signed d=mail.e2e.test. go vet + go test (26 packages) and make e2e on the
test server for this tree.

Docs: help (word for word with the mockup), guide § Overview and Health,
architecture § Log tailer, security.md, CHANGELOG [Unreleased] § Added,
roadmap row done.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
mix
2026-10-17 00:42:21 +03:00
co-authored by Claude Opus 5.5
parent 8f0ccf90cb
commit f2ff8b4fea
24 changed files with 690 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/web/view/cards_order_test.go
+1 -1
View File
@@ -51,7 +51,7 @@ func TestCardsBoxesCarryTheirNumberAsTheirOrder(t *testing.T) {
t.Errorf("%s: panel.css has no rule for data-order %s", name, order)
}
}
if want := map[string]int{"health": 8, "kit": 3}[name]; found != want {
if want := map[string]int{"health": 9, "kit": 3}[name]; found != want {
t.Errorf("%s: %d numbered boxes found in the cards layout, want %d", name, found, want)
}
}
internal/web/view/health.go
+22
View File
@@ -59,6 +59,25 @@ type Health struct {
// reverse proxy's own.
ConfigFacts []Fact
ConfigProblem Text
// TestMessage is the card that sends the panel's test message
// (test-email): TestFrom is its sender, TestTo the address typed and
// TestErr why it was not sent, both kept when the form comes back.
TestMessage Box
TestAction string
TestFrom string
TestTo string
TestErr string
}
// TestMessageAction is where the Test message card posts.
const TestMessageAction = "/server/health/test-message"
// WithTestMessage fills the Test message card: from is the sender, to and
// problem what the form comes back with when it was refused.
func (h *Health) WithTestMessage(from, to, problem string) *Health {
h.TestFrom, h.TestTo, h.TestErr = from, to, problem
return h
}
// WithClientAddress says where the panel sees the viewer's request from:
@@ -184,6 +203,9 @@ func NewHealth(m Meta, flash string) *Health {
Configuration: Box{No: "08", InCards: true, Title: "Configuration", ID: "configuration",
End: Plain("Safe to run at any time")},
Reload: Action{Label: "Reload configuration", Icon: "ti-reload", Post: "/server/health/reload"},
TestMessage: Box{No: "09", InCards: true, Title: "Test message", ID: "test-message",
End: Plain("Shows what the receiving server answers"), Help: topicLink(HelpTestMessage, "What the test proves")},
TestAction: TestMessageAction,
}
if flash != "" {
h.Flash = &Flash{Text: Plain(flash)}
internal/web/view/help.go
+6
View File
@@ -40,6 +40,7 @@ const (
HelpChecks = "checks"
HelpCertificate = "certificate"
HelpRDNS = "rdns"
HelpTestMessage = "test-message"
// Outbound
HelpDNS = "dns"
HelpApps = "apps"
@@ -99,6 +100,7 @@ func NewHelp(m Meta, inbound bool) *Help {
add("Overview", overviewTopics, []MenuItem{
{Label: "Health checks", Icon: "ti-activity-heartbeat", Href: "#" + HelpChecks},
{Label: "TLS certificate", Icon: "ti-certificate", Href: "#" + HelpCertificate},
{Label: "Test message", Icon: "ti-send", Href: "#" + HelpTestMessage},
{Label: "Reverse DNS", Icon: "ti-arrows-exchange", Href: "#" + HelpRDNS},
})
}
@@ -153,6 +155,10 @@ var overviewTopics = []HelpTopic{
Rich("The certificate Postfix presents on 465 and 587. The reverse proxy or the image mounts it, the panel does not issue it. Postfix serves its own copy of the mounted file and looks for a renewed one once a day by default; until it takes one up, the card shows it as a renewal waiting, and warns once it has waited longer than that check allows - the container log's cert-reload lines say why. It warns 14 days before expiry unless a renewal is already waiting, and fails once expired, or when the file is missing or unreadable — clients that verify certificates then refuse to connect. It also fails when none of its names is the hostname (",
Code("SELFPOST_HOSTNAME"), ") - the tag beside ", Em("Names"), " says which: a client that verifies the name refuses it however valid it is."),
}},
{ID: HelpTestMessage, Title: "Test message", Body: []Text{
Rich("A message from ", Code("postmaster@"), " the server's hostname to one address you type, sent the way notifications are: through Postfix, signed with the DKIM key of the server's own name. It proves the path from this server - TLS, its address's reputation, the SPF and DKIM records of its name - not your domains', which only mail from an application does. The page that opens is its row in the Outbound log: it shows whether the receiving server took it, put it off or refused it, with the lines of ",
Code("mail.log"), ". Whether it then reached the inbox or the spam folder only the mailbox can say. The global role sends it, at most ten an hour."),
}},
{ID: HelpRDNS, Title: "Hostname and reverse DNS", Body: []Text{
Rich("The hostname (", Code("SELFPOST_HOSTNAME"), ") must resolve to this server's address, and that address must resolve back to the hostname. Large receivers reject or spam-folder mail from hosts where the two disagree. The PTR record is set at your hosting provider, not in your DNS zone. ",
Em("Greeting"), " is the line Postfix opens every connection with, ", Code("220"), " and its banner; it must name the hostname too - a receiver compares it with the name it looked up - and a container id or ",
internal/web/view/server_test.go
+13
View File
@@ -346,3 +346,16 @@ func TestHealthSaysWhereItSeesTheViewer(t *testing.T) {
out = renderSignedIn(t, "health", NewHealth(admin(), "").WithClientAddress("fd00::1", "fd00::1", false, true))
pageHas(t, "Health", out, `<code>fd00::1/128</code>`)
}
// Health's Test message card posts one address and keeps it, with the reason,
// when it comes back refused.
func TestHealthTestMessageCard(t *testing.T) {
out := renderSignedIn(t, "health", NewHealth(admin(), "").WithTestMessage("postmaster@mail.example.org", "", ""))
pageHas(t, "Health", out, `<form class="sp-form" method="post" action="/server/health/test-message">`,
`name="recipient" type="email" placeholder="you@elsewhere.example" value="" required>`,
`From <span class="sp-mono">postmaster@mail.example.org</span>, signed with the server's own key`)
pageLacks(t, "Health", out, `help is-danger`)
out = renderSignedIn(t, "health", NewHealth(admin(), "").WithTestMessage("postmaster@mail.example.org", "a@x, b@y", "Enter one e-mail address."))
pageHas(t, "Health", out, `class="input is-danger" id="rcpt"`, `value="a@x, b@y"`, `<p class="help is-danger">Enter one e-mail address.</p>`)
}
internal/web/view/templates/health.html
+13
View File
@@ -21,6 +21,19 @@
{{template "action" .Reload}}
{{template "body_close"}}
{{template "box_close"}}
{{template "box_open" .TestMessage}}
{{template "body_open"}}
<form class="sp-form" method="post" action="{{.TestAction}}">
<div class="field"><label class="label" for="rcpt">Recipient</label>
<div class="field has-addons">
<div class="control is-expanded has-icons-left"><input class="input{{if .TestErr}} is-danger{{end}}" id="rcpt" name="recipient" type="email" placeholder="you@elsewhere.example" value="{{.TestTo}}" required><span class="icon is-left"><i class="ti ti-mail"></i></span></div>
<div class="control"><button type="submit" class="button is-primary"><i class="ti ti-send"></i>Send</button></div>
</div>
{{if .TestErr}}<p class="help is-danger">{{.TestErr}}</p>
{{end}}<p class="help">From <span class="sp-mono">{{.TestFrom}}</span>, signed with the server's own key, through Postfix as its notifications go. It opens in the <a href="/outbound/log">Outbound log</a>, where its page follows it to the receiving server. Ten an hour.</p></div>
</form>
{{template "body_close"}}
{{template "box_close"}}
</div>
{{template "cards_close"}}
{{end}}