town/docs/services/stalwart.md

stalwart

initial setup

1. server identity
   • server hostname: post.atom.town
   • default email domain: atom.town
   • automatically obtain tls certificate: true
   • generate email signing keys: true
2. storage
   • main data storage: rocksdb
   • path: /var/lib/stalwart/
3. account directory
   • directory type: use internal
4. logging
   • log destination: console
5. automatic dns management
   • dns server type: porkbun
   • description: porkbun

further setup

• settings -> security -> allowed ips
  • added 172.18.0.0/16; reason: docker internal
• settings -> network -> http -> security
  • permissive cors policy: true [restart needed]
• settings -> authentication -> oidc provider
  • oauth settings
    • key: secret read from environment variable
    • variable name: OIDC_KEY
  • openid connect
    • signature algorithm: ECDSA using P-384 and SHA-384
    • signature key: secret read from environment variable
    • variable name: OIDC_SIGNATURE_KEY
• management -> directory -> oauth clients
  • create oauth client
    • client id: gitea
    • description: Gitea
    • client secret: <generate_secret>
    • redirect uris: https://git.atom.town/user/oauth2/Stalwart/callback

useful links

• https://stalw.art/docs
• https://testconnectivity.microsoft.com/tests/Imap/input
• https://mail-tester.com