Project

General

Profile

ContactAddress » History » Revision 7

Revision 6 (Denis 'GNUtoo' Carikli, 04/12/2020 04:41 PM) → Revision 7/23 (Denis 'GNUtoo' Carikli, 04/12/2020 04:45 PM)

h1. ContactAddress 

 h2. Description 

 For the DNS part, see [[DNS]]. 

 For now this uses OpenSMTPD. 

 

 h2. Design 

 This system was designed to be as simple as possible: 
 * It was designed in a way that enables it to receive mail but it does not to need to send any mail: 
 * ** There is no need of reverse DNS for the IP address 
 * ** We don't have to have DKIM 
 * ** It's easier to get the setup right and secure 

 If we want to send mail we would need to implement all that. 

 
 ** We could also can probably whitelist the individual servers used by the people receiving this mail through this system, through SPF, if we want people to send SPF for sending mail to the same address they received it from (which is probably not very important). 

 The DNS zones are configured to set the MX to the Replicant vm at the FSF. 

 h2. Maintenance 

 h3. Add new people 

 * Create an account for the new person: @useradd -m <lowercase_username>@ 
 * Add the lower_case_username to /etc/smtpd/aliases 
 * run @smtpctl update table aliases@ 

 Notes: 
 * The Maildir directory is created automatically when receiving the first mail 
 * There is no need to setup a password for the account 
 * I didn't look how much we can lock down the accounts and still make openstmtpd work. 

 h3. Switching to more recent OpenSMTPD 

 The configuration format changed in newer OpenSMTPD. 

 We will probably have to migrate the configuration when switching to to Trisquel 9. 

 TODO: Document the format change.