mix
f88d8dabcb
Full server backup (spec 7.5.A): internal/backup produces a tar.gz of all of /data — a consistent SQLite snapshot via VACUUM INTO, DKIM keys, sasldb2 and a version manifest; TLS certs (tls/) and the Postfix queue are excluded. Two equal paths: the panel button (POST /backup, no-store) and the selfpost-backup CLI via docker exec (spec 11.6). CheckRestore runs before store.Open: a manifest version mismatch refuses to boot with the image tag to use; a match consumes the manifest so it only guards the first post-restore boot. Restore is not a separate branch — Postfix/OpenDKIM regenerate from the restored SQLite as on any start. Domain export/import (spec 7.5.B): DomainExport carries the DKIM private key and each application's working password. SASL secrets are read from sasldb2 via db_dump (the userPassword property is plaintext) and, on import, re-keyed under the local realm with saslpasswd2 — so credentials keep working on an instance with a different hostname, with no DKIM DNS change. Import validates and rolls back atomically on any failure. db-util (db_dump) is now an explicit image dep. Verified on the server (selfpost:p9): gofmt/vet/test green; container e2e for cross-realm domain export/import (SMTP AUTH 235 under the new realm), CLI and panel backups, same-version restore, and version-mismatch refusal. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
84 lines
3.0 KiB
HTML
84 lines
3.0 KiB
HTML
{{define "content"}}
|
|
<div class="topbar">
|
|
<h1>SelfPost</h1>
|
|
<div class="actions muted">
|
|
<span>{{.User}}</span>
|
|
<a href="/sendlog">Send log</a>
|
|
<a href="/queue">Queue</a>
|
|
<a href="/logtail">Log</a>
|
|
<form class="inline" method="post" action="/reload">
|
|
<button type="submit">Reload</button>
|
|
</form>
|
|
<form class="inline" method="post" action="/logout">
|
|
<button type="submit">Sign out</button>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
|
|
{{if .Flash}}<div class="flash">{{.Flash}}</div>{{end}}
|
|
|
|
<div class="card">
|
|
<h2>Add a sending domain</h2>
|
|
<form method="post" action="/domains">
|
|
<label for="name">Domain</label>
|
|
<input id="name" name="name" type="text" placeholder="example.com"
|
|
autocomplete="off" autocapitalize="none" spellcheck="false"
|
|
value="{{.FormName}}" autofocus required>
|
|
{{if .Error}}<p class="error">{{.Error}}</p>{{end}}
|
|
<button type="submit">Add domain</button>
|
|
</form>
|
|
<p class="muted">A DKIM key is generated for the domain; you then publish the
|
|
shown DNS record. Adding a domain does not create an application.</p>
|
|
</div>
|
|
|
|
<div class="card">
|
|
<h2>Domains</h2>
|
|
{{if .Domains}}
|
|
<table>
|
|
<thead>
|
|
<tr><th>Domain</th><th>Selector</th><th>Apps</th><th></th></tr>
|
|
</thead>
|
|
<tbody>
|
|
{{range .Domains}}
|
|
<tr>
|
|
<td><a href="/domains/{{.ID}}">{{.Name}}</a></td>
|
|
<td class="muted">{{.DKIMSelector}}</td>
|
|
<td>{{.AppCount}}</td>
|
|
<td class="actions"><a class="danger" href="/domains/{{.ID}}/delete">Delete</a></td>
|
|
</tr>
|
|
{{end}}
|
|
</tbody>
|
|
</table>
|
|
{{else}}
|
|
<p class="muted">No domains yet. Add one above to get started.</p>
|
|
{{end}}
|
|
</div>
|
|
|
|
<div class="card">
|
|
<h2>Backup & migration</h2>
|
|
<p class="muted">Download a full backup of all persistent state — the database,
|
|
every domain's DKIM key and the application credentials. Use it to move the
|
|
whole server to a new machine: restore it into a container of the
|
|
<strong>same SelfPost version</strong>, with the same data mount, before first
|
|
start. TLS certificates and the mail queue are not included.</p>
|
|
<p class="muted"><strong>The backup file is a secret</strong> (it contains
|
|
private keys and credentials). Store and transfer it securely and delete it
|
|
once the restore succeeds.</p>
|
|
<form class="inline" method="post" action="/backup">
|
|
<button type="submit">Download full backup</button>
|
|
</form>
|
|
|
|
<h2>Import a domain</h2>
|
|
<p class="muted">Move a single domain here from another SelfPost instance using
|
|
a domain export file (from that domain's page). Its DKIM key and application
|
|
passwords come across, so the published DNS record needs no change. The export
|
|
file is a secret, like a full backup.</p>
|
|
{{if .ImportErr}}<p class="error">{{.ImportErr}}</p>{{end}}
|
|
<form method="post" action="/domains/import" enctype="multipart/form-data">
|
|
<label for="importfile">Domain export file</label>
|
|
<input id="importfile" name="file" type="file" accept=".json,application/json" required>
|
|
<button type="submit">Import domain</button>
|
|
</form>
|
|
</div>
|
|
{{end}}
|