mix
7ef7f75246
Review pass over `1.4.0`…`1.9.1`: port 25 no longer shares the submission milter chain, DMARC reports are validated before they are stored, and the auto rate limit is correct for a non-default level-1 window. Schema migration `0010` (index only). Upgrading is a tag bump. Added: - SQLite migration `0010_send_log_app_login_index.sql` — - DMARC aggregate reports are accepted as **zip** as well as gzip or plain XML - e2e: `checkPort25ConfigCombinations` regenerates the Postfix configuration Changed: - README hero line and a **Positioning** block in `docs/product.md` record the Fixed: - The setup account's password is hashed at bcrypt cost `12` like every other - Login/setup rate limiter: protecting blocked buckets from eviction is now - `postqueue -p` output is bounded to 4 MiB (the timeout alone left the size of - [schema-migrations.md](docs/schema-migrations.md): the schema section was - postqueue reader is now time-bounded: `postqueue -p` runs under a 5-second … (11 more in CHANGELOG) Changed: - [roadmap.md](docs/roadmap.md) now carries everything the 2026-08-19 code - Extracted `internal/configsafe` — the empty-value and forbidden-character - Build, deploy and migration comments no longer cite the archived - Dropped the `parseDomainRateLimitForm` / `parseAppRateLimitForm` pass-through - Extracted shared helpers: `internal/atomicfile` (atomic temp-write+rename) and … (7 more in CHANGELOG) Removed: - Unused legacy asset `docs/assets/icon.png` (superseded by the four brand SVGs - Plan documents for already-shipped features: `domain-stats-auto-ratelimit`, Full detail: CHANGELOG.md (1.9.2).
148 lines
9.3 KiB
HTML
148 lines
9.3 KiB
HTML
<!DOCTYPE html>
|
||
<html lang="en" data-theme="light">
|
||
<head>
|
||
<meta charset="utf-8">
|
||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||
<title>Settings · example.org · SelfPost</title>
|
||
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@1.0.4/css/bulma.min.css">
|
||
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@tabler/icons-webfont@3/dist/tabler-icons.min.css">
|
||
<link rel="stylesheet" href="../shared/brand.css">
|
||
<link rel="stylesheet" href="theme.css">
|
||
</head>
|
||
<body>
|
||
<nav class="navbar is-primary" aria-label="main navigation">
|
||
<div class="container">
|
||
<div class="navbar-brand"><a class="navbar-item" href="overview.html"><img src="../../selfpost-wordmark.svg" alt="SelfPost"></a></div>
|
||
<div class="navbar-menu is-active">
|
||
<div class="navbar-start">
|
||
<a class="navbar-item" href="overview.html">Overview</a>
|
||
<div class="navbar-item has-dropdown is-hoverable sp-current">
|
||
<a class="navbar-link" href="out-domains.html">Outbound</a>
|
||
<div class="navbar-dropdown">
|
||
<a class="navbar-item is-active" href="out-domains.html"><i class="ti ti-world-upload"></i>Domains</a>
|
||
<a class="navbar-item" href="out-log.html"><i class="ti ti-list-details"></i>Log</a>
|
||
<a class="navbar-item" href="out-queue.html"><i class="ti ti-stack-2"></i>Queue</a>
|
||
<a class="navbar-item" href="dmarc.html"><i class="ti ti-report-analytics"></i>DMARC reports</a>
|
||
</div>
|
||
</div>
|
||
<div class="navbar-item has-dropdown is-hoverable">
|
||
<a class="navbar-link" href="in-domains.html">Inbound</a>
|
||
<div class="navbar-dropdown">
|
||
<a class="navbar-item" href="in-domains.html"><i class="ti ti-world-download"></i>Domains</a>
|
||
<a class="navbar-item" href="in-log.html"><i class="ti ti-list-details"></i>Log</a>
|
||
<a class="navbar-item" href="in-queue.html"><i class="ti ti-stack-2"></i>Queue</a>
|
||
<a class="navbar-item" href="in-quarantine.html"><i class="ti ti-mail-pause"></i>Quarantine</a>
|
||
<a class="navbar-item" href="in-filter-lists.html"><i class="ti ti-filter"></i>Filter lists</a>
|
||
</div>
|
||
</div>
|
||
<div class="navbar-item has-dropdown is-hoverable">
|
||
<a class="navbar-link" href="health.html">Server</a>
|
||
<div class="navbar-dropdown">
|
||
<a class="navbar-item" href="health.html"><i class="ti ti-heartbeat"></i>Health</a>
|
||
<a class="navbar-item" href="preflight.html"><i class="ti ti-checklist"></i>Preflight</a>
|
||
<a class="navbar-item" href="system-log.html"><i class="ti ti-file-text"></i>System log</a>
|
||
<a class="navbar-item" href="backup.html"><i class="ti ti-archive"></i>Backup</a>
|
||
<a class="navbar-item" href="users.html"><i class="ti ti-users"></i>Users</a>
|
||
<a class="navbar-item" href="settings.html"><i class="ti ti-settings"></i>Settings</a>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
<div class="navbar-end">
|
||
<div class="navbar-item has-dropdown is-hoverable">
|
||
<a class="navbar-link" href="account.html"><i class="ti ti-user-circle"></i>admin</a>
|
||
<div class="navbar-dropdown is-right">
|
||
<a class="navbar-item" href="account.html"><i class="ti ti-key"></i>Account</a>
|
||
<a class="navbar-item" href="help.html"><i class="ti ti-help"></i>Help</a>
|
||
<hr class="navbar-divider">
|
||
<a class="navbar-item" href="login.html"><i class="ti ti-logout"></i>Sign out</a>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</nav>
|
||
<div class="sp-perf" aria-hidden="true"></div>
|
||
<div class="sp-subnav"><div class="container"><a href="out-domains.html" aria-current="page"><i class="ti ti-world-upload"></i>Domains</a><a href="out-log.html"><i class="ti ti-list-details"></i>Log</a><a href="out-queue.html"><i class="ti ti-stack-2"></i>Queue</a><a href="dmarc.html"><i class="ti ti-report-analytics"></i>DMARC reports</a></div></div>
|
||
<main>
|
||
<div class="container sp-page">
|
||
<div class="sp-head">
|
||
<div class="sp-grow">
|
||
<p class="sp-kicker"><a href="out-domains.html">Outbound domains</a> / <a href="out-domain.html">example.org</a> /</p>
|
||
<h1 class="title is-3">Domain settings</h1>
|
||
<p class="sp-lead">The things set once and rarely touched: where DMARC reports go, the sending ceiling, moving the domain elsewhere.</p>
|
||
</div>
|
||
</div>
|
||
|
||
<div class="columns">
|
||
<div class="column is-6">
|
||
<div class="box" id="reports">
|
||
<div class="sp-box-head"><span class="sp-no">01</span><h2>DMARC report address</h2></div>
|
||
<div class="sp-box-body">
|
||
<form class="sp-form" method="post" action="#">
|
||
<div class="field"><label class="label" for="rua">Aggregate reports (rua=)</label>
|
||
<div class="control"><div class="select is-fullwidth"><select id="rua" name="dmarc_rua_mode">
|
||
<option selected>admin's default — mix@example.org</option>
|
||
<option>SelfPost hosted (example.org@dmarc.mail.example.org)</option>
|
||
<option>My default instead — (you are admin)</option>
|
||
<option>No aggregate reports</option>
|
||
<option>Custom address</option>
|
||
</select></div></div>
|
||
<p class="help">A default belongs to a user and is set under their <a href="account.html#dmarc">Account</a>; a domain follows one named user, so two people sharing a domain never pull it two ways. Changing this changes the DMARC record to publish.</p></div>
|
||
<button type="submit" class="button is-primary">Save report address</button>
|
||
</form>
|
||
</div>
|
||
</div>
|
||
|
||
<div class="box" id="export">
|
||
<div class="sp-box-head"><span class="sp-no">03</span><h2>Export domain</h2></div>
|
||
<div class="sp-box-body">
|
||
<p class="mb-3">One file with the DKIM key and every application's password hash — import it on another SelfPost and the published DNS needs no change. <strong>The file is a secret.</strong></p>
|
||
<form class="sp-form" method="post" action="#">
|
||
<div class="field"><label class="checkbox"><input type="checkbox" name="encrypt" checked> Encrypt with a password (<code>.spde</code>)</label></div>
|
||
<div class="sp-pair">
|
||
<div class="field"><label class="label" for="encpw">Password</label><div class="control"><input class="input" id="encpw" type="password" placeholder="at least 12 characters"></div></div>
|
||
<div class="field"><label class="label" for="encpw2">Repeat password</label><div class="control"><input class="input" id="encpw2" type="password"></div></div>
|
||
</div>
|
||
<p class="help mb-3">Keep this password: SelfPost does not store it, and the file cannot be opened without it.</p>
|
||
<button type="submit" class="button"><i class="ti ti-download"></i>Export domain</button>
|
||
</form>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<div class="column is-6">
|
||
<div class="box" id="limit">
|
||
<div class="sp-box-head"><span class="sp-no">02</span><h2>Rate limit</h2><div class="sp-end"><span class="tag is-success is-light">active</span></div><a class="sp-help" href="help.html#limits" title="Levels 1 and 2"><i class="ti ti-help-circle"></i></a></div>
|
||
<div class="sp-box-body">
|
||
<form class="sp-form" method="post" action="#">
|
||
<div class="field"><label class="label" for="mode">Limit mode</label>
|
||
<div class="control"><div class="select is-fullwidth"><select id="mode" name="mode"><option>Manual</option><option selected>Auto (from statistics)</option></select></div></div></div>
|
||
<div class="field"><label class="label" for="mult">Multiplier (1.5–10, default 3)</label>
|
||
<div class="control"><input class="input" id="mult" name="auto_multiplier" type="number" min="1.5" max="10" step="0.1" value="3"></div>
|
||
<p class="help">Computed limit: <strong>288</strong> messages / 3600 s. Peak was 96 msg/h. Last recalculated yesterday 03:00 UTC.</p></div>
|
||
<div class="buttons">
|
||
<button type="submit" class="button is-primary">Save limit</button>
|
||
<button type="submit" class="button" formaction="#recalc">Recalculate now</button>
|
||
<button type="submit" class="button is-danger is-light" formaction="#clear">Remove limit</button>
|
||
</div>
|
||
</form>
|
||
<p class="sp-muted mt-4">Applies to every sender on this domain and cannot exceed level 1 (600 messages / 3600 s per client IP, set in <code>.env</code>). An application may carry its own limit above or below this one.</p>
|
||
</div>
|
||
</div>
|
||
|
||
<div class="box sp-danger-zone">
|
||
<div class="sp-box-head"><span class="sp-no">04</span><h2>Delete domain</h2></div>
|
||
<div class="sp-box-body">
|
||
<p class="mb-3">Removes the DKIM key and both applications. Asks once more before doing it.</p>
|
||
<a class="button is-danger is-light" href="out-domain-delete.html"><i class="ti ti-trash"></i>Delete example.org…</a>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<footer class="sp-foot">SelfPost 1.8.0 · © 2026 Mix · <a href="#">License (AGPL-3.0)</a> · <a href="#">Source</a> · No warranty</footer>
|
||
</div>
|
||
</main>
|
||
</body>
|
||
</html>
|