48 lines
1.4 KiB
Markdown
48 lines
1.4 KiB
Markdown
### stalwart
|
|
|
|
**initial setup**
|
|
|
|
1. server identity
|
|
- server hostname: `post.atom.town`
|
|
- default email domain: `atom.town`
|
|
- automatically obtain tls certificate: `true`
|
|
- generate email signing keys: `true`
|
|
2. storage
|
|
- main data storage: `rocksdb`
|
|
- path: `/var/lib/stalwart/`
|
|
3. account directory
|
|
- directory type: `use internal`
|
|
4. logging
|
|
- log destination: `console`
|
|
5. automatic dns management
|
|
- dns server type: `porkbun`
|
|
- description: `porkbun`
|
|
|
|
**further setup**
|
|
|
|
- settings -> security -> allowed ips
|
|
- added `172.18.0.0/16`; reason: `docker internal`
|
|
- settings -> network -> http -> security
|
|
- permissive cors policy: `true` **[restart needed]**
|
|
- settings -> authentication -> oidc provider
|
|
- oauth settings
|
|
- key: `secret read from environment variable`
|
|
- variable name: `OIDC_KEY`
|
|
- openid connect
|
|
- signature algorithm: `ECDSA using P-384 and SHA-384`
|
|
- signature key: `secret read from environment variable`
|
|
- variable name: `OIDC_SIGNATURE_KEY`
|
|
- management -> directory -> oauth clients
|
|
- create oauth client
|
|
- client id: `gitea`
|
|
- description: `Gitea`
|
|
- client secret: `<generate_secret>`
|
|
- redirect uris: `https://git.atom.town/user/oauth2/Stalwart/callback`
|
|
|
|
**useful links**
|
|
|
|
- https://stalw.art/docs
|
|
- https://testconnectivity.microsoft.com/tests/Imap/input
|
|
- https://mail-tester.com
|
|
</details>
|