mix
75207f0d1e
[1.0.0]
Added:
- A **Delivery log** on each delivery's page (`/deliveries/{id}`): the
- A **History** block on the same page: the journal's two timestamps stated as
Fixed:
- Postfix config: copy TLS cert/key from the (often `:ro`, host-owned) mount
- Postfix config: allow `maillog_file` under `/data` via
- E2e: read `/data/setup-token` via `docker compose exec` (file is `0600`
- Entrypoint: check `SELFPOST_HOSTNAME` before `/data` setup (so a bad identity
- E2e gate: wait for host-published `/healthz` before panel setup, and stop
… (3 more in CHANGELOG)
Changed:
- Document what `.spbk` and `.spde` stand for (SelfPost backup / SelfPost domain
- Docs aligned with the code: setup URL is `/setup/<token>` (README and
- Full backups no longer carry `/data/log`. It is Postfix's raw log plus its
- Monitoring screens (status, mail queue, system log, deliveries) use adaptive
- Documentation package consolidated into `docs/development.md`: Documentation
… (4 more in CHANGELOG)
[1.0.1]
A documentation and packaging release: no change to the mail path, the database, or the on-disk layout. Upgrading is a tag bump.
Added:
- `SECURITY.md` — how to report a vulnerability privately (GitHub private
- [docs/plans/](docs/plans/) — one document per agreed extension: the optional
Changed:
- The panel's **Account** entry is now called **Settings** — nav link, page
- The signed-in name in the panel's nav is now labelled `User:`, so it reads as
- [docs/product.md](docs/product.md) reframes the future line: the inbound
- [docs/security.md](docs/security.md) is now in English, matching the rest of
- The README documentation table now points at `SECURITY.md` for reporting a
… (2 more in CHANGELOG)
Fixed:
- The panel's static assets are served with a content ETag and
Squashed CHANGELOG sections: [1.0.0], [1.0.1].
Full detail: CHANGELOG.md (1.0.0, 1.0.1).
91 lines
3.4 KiB
YAML
91 lines
3.4 KiB
YAML
|
|
# Hermetic e2e stand override for ../../deploy/docker-compose.yml (plan C.4).
|
|
#
|
|
# Applied as a second -f on top of the SHIPPED compose file, not a separate
|
|
# test compose — the whole point is to exercise cap_drop/cap_add/
|
|
# no-new-privileges exactly as documented, not a laxer stand-in. Run only via
|
|
# `make e2e`, which also sets --project-directory to a scratch stage
|
|
# directory so the base file's relative ./data and ./certs bind mounts land
|
|
# there instead of next to a real deployment, and -p selfpost-e2e so the
|
|
# containers/network never collide with a prod stack on the same host.
|
|
#
|
|
# `ports:` and `networks:` use the compose-spec `!override` merge tag to fully
|
|
# replace the base file's list rather than concatenate with it (the default
|
|
# merge behaviour for sequences) — otherwise the real 465/587/8080 would stay
|
|
# published here too and collide with a prod container on the same host.
|
|
|
|
services:
|
|
selfpost:
|
|
# Crash-looping with unless-stopped makes `compose exec` fail with
|
|
# "Container is restarting" and hides the entrypoint/supervisord exit
|
|
# reason; keep the stand exited so logs stay attached to one attempt.
|
|
restart: "no"
|
|
build:
|
|
# Resolved relative to --project-directory (.stage), NOT this file's own
|
|
# directory — compose build.context paths follow the project directory,
|
|
# unlike bind-mount volume paths, which is the same reason ./data and
|
|
# ./certs above need no path here at all.
|
|
context: ../../..
|
|
dockerfile: build/Dockerfile
|
|
args:
|
|
VERSION: e2e
|
|
image: selfpost:e2e
|
|
environment:
|
|
SELFPOST_HOSTNAME: mail.e2e.test
|
|
# Plain HTTP panel for the test client — no reverse proxy in this stand.
|
|
PANEL_COOKIE_SECURE: "false"
|
|
# The panel's deliverability checks query resolvers directly rather than
|
|
# the container's own (see internal/dnscheck), so the fake zone has to be
|
|
# named here too — `dns:` below only redirects the system resolver.
|
|
SELFPOST_DNS_RESOLVERS: 10.77.0.10:53
|
|
# High enough that the whole suite's other ~10 sends (positive path,
|
|
# level-2 test, the various rejected attempts) never trip it by
|
|
# accident — only the dedicated level-1 test (negative check 4, which
|
|
# loops well past this count) is meant to hit it.
|
|
RATE_LIMIT_MESSAGES_PER_IP: "50"
|
|
RATE_LIMIT_WINDOW_SECONDS: "60"
|
|
ports: !override
|
|
- "20465:465"
|
|
- "20587:587"
|
|
- "127.0.0.1:20080:8080"
|
|
dns:
|
|
- 10.77.0.10
|
|
networks: !override
|
|
e2e:
|
|
depends_on:
|
|
- coredns
|
|
- sink
|
|
|
|
# Fake authoritative DNS for e2e.test (plan C.4): serves the DKIM/host
|
|
# records the test harness publishes, so Postfix's outbound MX lookup for
|
|
# the sink and the panel's own dnscheck resolve inside the isolated network
|
|
# instead of hitting the real internet.
|
|
coredns:
|
|
image: coredns/coredns:latest
|
|
command: ["-conf", "/dns/Corefile"]
|
|
volumes:
|
|
- ./dns-stage:/dns
|
|
networks:
|
|
e2e:
|
|
ipv4_address: 10.77.0.10
|
|
ports:
|
|
- "20053:53/udp"
|
|
|
|
# Sink-MX: accepts any inbound mail and dumps each transaction to its own
|
|
# file under ./mail-stage, which the harness reads directly to check the
|
|
# DKIM-Signature header Postfix/OpenDKIM produced.
|
|
sink:
|
|
build:
|
|
context: ../sink
|
|
volumes:
|
|
- ./mail-stage:/mail
|
|
networks:
|
|
e2e:
|
|
ipv4_address: 10.77.0.11
|
|
|
|
networks:
|
|
e2e:
|
|
ipam:
|
|
config:
|
|
- subnet: 10.77.0.0/24
|