selfpost

321 Commits 1 Branch 3 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
mixandClaude Opus 5.5	c5edbd84c7	design: panel-words - the mockups and the panel say the same The owner's "проверь, что документация актуальна с кодом" (2026-10-16): the words the mockups put on screen against what the panel renders and does, page by page (docs-audit, 2026-10-17). Where the code is right about behaviour the mockup follows it; where the mockup is right the code follows in the next commit. The mockups now say: "Refreshes automatically" / "refreshes on its own" instead of "every 10 s" (panel.js polls at 5 s, 30 s, up to 60 s) on Health, Overview, System log and both queues; System log points at the Outbound log, the one with a page per message; the Spam filter facts are what the panel knows without the quarantine (Applies to, Filter, If the filter is down), and Valid recipients takes one per line or comma; a DMARC report's title has no year, as its own title line; the "same form, empty" sentences go (a new application and a new user have their own heads); an application's login is fixed; the auto limit's multiplier is 1.5-5, default 2.5 (store/ratelimits.go); the user form's e-mail is for notifications (no reset link yet) and All makes the single domains ignored (nothing greys them); a user's deletion says "(outbound)"; a message's history is the panel's own steps, with the queue's wait after a deferral; the footer is the panel's, "Copyright © 2026 Mikhail Yenuchenko". Help, true to the code: an application's password is kept by the server (sasldb2) so an export can carry it; a refusal for From:/Sender: is one row of the Outbound log; every password check of a backup counts, right or wrong, ten in 15 minutes; a password set on the user form signs that user out everywhere, but your own keeps your session; the limit mail is daily per sending domain (notify.go, "limit:"+domain). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-17 02:10:29 +03:00
mixandClaude Opus 5.5	ef19c1448e	design: Help covers every section; boxes link to their topic The owner's decision (2026-10-10): help is needed by almost every section, not by Overview and Outbound alone. The Help mockup had six topics while other screens already linked to topics it did not have (#dmarc, #inbound). - src/help.html: seventeen topics in five boxes - Overview (checks, certificate, rdns), Outbound (dns, apps, limits, log, queue, dmarc), Inbound (inbound, upstream, recipients, filter), Server (backup, users, settings), Account (account) - one paragraph each, and the side menu lists them by group. - A box head gets the sp-help link where a topic now exists: health, out-domain-settings, out-app, out-log, out-message, out-queue, the three DMARC screens, in-domains, in-domain, backup, users, user, settings. No link on boxes that explain themselves (confirmations, the shown-once password, sign-in) and at most one per box. - outlines.json regenerated (check.py --write): only help changed - Outbound holds six topics, and Inbound, Server and Account are new boxes. 0 violations. The dns, dmarc and account topics describe the report-address scheme the owner decided the same day (no reports / the SelfPost address / a typed address, no user default); the account and out-domain-settings mockups are redrawn for it in the change that follows. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 11:58:35 +03:00
mix	7ef7f75246	release: 1.9.2: Review pass: port-25 milters, DMARC validation, rate-limit fix Review pass over `1.4.0`…`1.9.1`: port 25 no longer shares the submission milter chain, DMARC reports are validated before they are stored, and the auto rate limit is correct for a non-default level-1 window. Schema migration `0010` (index only). Upgrading is a tag bump. Added: - SQLite migration `0010_send_log_app_login_index.sql` — - DMARC aggregate reports are accepted as zip as well as gzip or plain XML - e2e: `checkPort25ConfigCombinations` regenerates the Postfix configuration Changed: - README hero line and a Positioning block in `docs/product.md` record the Fixed: - The setup account's password is hashed at bcrypt cost `12` like every other - Login/setup rate limiter: protecting blocked buckets from eviction is now - `postqueue -p` output is bounded to 4 MiB (the timeout alone left the size of - [schema-migrations.md](docs/schema-migrations.md): the schema section was - postqueue reader is now time-bounded: `postqueue -p` runs under a 5-second … (11 more in CHANGELOG) Changed: - [roadmap.md](docs/roadmap.md) now carries everything the 2026-08-19 code - Extracted `internal/configsafe` — the empty-value and forbidden-character - Build, deploy and migration comments no longer cite the archived - Dropped the `parseDomainRateLimitForm` / `parseAppRateLimitForm` pass-through - Extracted shared helpers: `internal/atomicfile` (atomic temp-write+rename) and … (7 more in CHANGELOG) Removed: - Unused legacy asset `docs/assets/icon.png` (superseded by the four brand SVGs - Plan documents for already-shipped features: `domain-stats-auto-ratelimit`, Full detail: CHANGELOG.md (1.9.2).	2026-09-22 15:24:53 +03:00

Author

SHA1

Message

Date

mixandClaude Opus 5.5

c5edbd84c7

design: panel-words - the mockups and the panel say the same

The owner's "проверь, что документация актуальна с кодом" (2026-10-16):
the words the mockups put on screen against what the panel renders and
does, page by page (docs-audit, 2026-10-17). Where the code is right about
behaviour the mockup follows it; where the mockup is right the code
follows in the next commit.

The mockups now say: "Refreshes automatically" / "refreshes on its own"
instead of "every 10 s" (panel.js polls at 5 s, 30 s, up to 60 s) on
Health, Overview, System log and both queues; System log points at the
Outbound log, the one with a page per message; the Spam filter facts are
what the panel knows without the quarantine (Applies to, Filter, If the
filter is down), and Valid recipients takes one per line or comma; a DMARC
report's title has no year, as its own title line; the "same form, empty"
sentences go (a new application and a new user have their own heads); an
application's login is fixed; the auto limit's multiplier is 1.5-5,
default 2.5 (store/ratelimits.go); the user form's e-mail is for
notifications (no reset link yet) and All makes the single domains
ignored (nothing greys them); a user's deletion says "(outbound)"; a
message's history is the panel's own steps, with the queue's wait after
a deferral; the footer is the panel's, "Copyright © 2026 Mikhail
Yenuchenko".

Help, true to the code: an application's password is kept by the server
(sasldb2) so an export can carry it; a refusal for From:/Sender: is one
row of the Outbound log; every password check of a backup counts, right
or wrong, ten in 15 minutes; a password set on the user form signs that
user out everywhere, but your own keeps your session; the limit mail is
daily per sending domain (notify.go, "limit:"+domain).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-17 02:10:29 +03:00

mixandClaude Opus 5.5

ef19c1448e

design: Help covers every section; boxes link to their topic

The owner's decision (2026-10-10): help is needed by almost every
section, not by Overview and Outbound alone. The Help mockup had six
topics while other screens already linked to topics it did not have
(#dmarc, #inbound).

  - src/help.html: seventeen topics in five boxes - Overview (checks,
    certificate, rdns), Outbound (dns, apps, limits, log, queue, dmarc),
    Inbound (inbound, upstream, recipients, filter), Server (backup,
    users, settings), Account (account) - one paragraph each, and the
    side menu lists them by group.
  - A box head gets the sp-help link where a topic now exists: health,
    out-domain-settings, out-app, out-log, out-message, out-queue, the
    three DMARC screens, in-domains, in-domain, backup, users, user,
    settings. No link on boxes that explain themselves (confirmations,
    the shown-once password, sign-in) and at most one per box.
  - outlines.json regenerated (check.py --write): only help changed -
    Outbound holds six topics, and Inbound, Server and Account are new
    boxes. 0 violations.

The dns, dmarc and account topics describe the report-address scheme the
owner decided the same day (no reports / the SelfPost address / a typed
address, no user default); the account and out-domain-settings mockups
are redrawn for it in the change that follows.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-10 11:58:35 +03:00

mix

7ef7f75246

release: 1.9.2: Review pass: port-25 milters, DMARC validation, rate-limit fix

Review pass over `1.4.0`…`1.9.1`: port 25 no longer shares the submission milter chain, DMARC reports are validated before they are stored, and the auto rate limit is correct for a non-default level-1 window. Schema migration `0010` (index only). Upgrading is a tag bump.
Added:
  - SQLite migration `0010_send_log_app_login_index.sql` —
  - DMARC aggregate reports are accepted as **zip** as well as gzip or plain XML
  - e2e: `checkPort25ConfigCombinations` regenerates the Postfix configuration
Changed:
  - README hero line and a **Positioning** block in `docs/product.md` record the
Fixed:
  - The setup account's password is hashed at bcrypt cost `12` like every other
  - Login/setup rate limiter: protecting blocked buckets from eviction is now
  - `postqueue -p` output is bounded to 4 MiB (the timeout alone left the size of
  - [schema-migrations.md](docs/schema-migrations.md): the schema section was
  - postqueue reader is now time-bounded: `postqueue -p` runs under a 5-second
  … (11 more in CHANGELOG)
Changed:
  - [roadmap.md](docs/roadmap.md) now carries everything the 2026-08-19 code
  - Extracted `internal/configsafe` — the empty-value and forbidden-character
  - Build, deploy and migration comments no longer cite the archived
  - Dropped the `parseDomainRateLimitForm` / `parseAppRateLimitForm` pass-through
  - Extracted shared helpers: `internal/atomicfile` (atomic temp-write+rename) and
  … (7 more in CHANGELOG)
Removed:
  - Unused legacy asset `docs/assets/icon.png` (superseded by the four brand SVGs
  - Plan documents for already-shipped features: `domain-stats-auto-ratelimit`,

Full detail: CHANGELOG.md (1.9.2).

2026-09-22 15:24:53 +03:00