On Sun, 5 Oct 2025 22:18:33 +0200 =?UTF-8?B?SsOpcsOpbXkgTGFs?=
<[email protected]> wrote:
Le dim. 5 oct. 2025 à 21:56, Geert Stappers <[email protected]> a écrit :
> On Sat, Oct 04, 2025 at 08:41:13PM +0200, Jérémy Lal wrote
> under 'Subject: Re: Stalwart and Rust version':
> > ....
> > I didn't setup stalwart for my own toy MX, yet;
>
> For what it is worth, what I have currently:
> - Several Postfix servers
> - Not any Dovecot servers
> - SPF records for the Postfix servers
> - 1 Stalwart server
> - No DKIM / No DMARC
>
>
> > did you encounter any difficulties ?
>
> Encountered and SOLVED difficulties:
> - "installer", solved with `stalwart-ignite`
> - "download of stalwart-webadmin", solved
> by
>
https://salsa.debian.org/debian/stalwart/-/commit/ed309ab5f300dae9d6ca9b42640f62f9777f3b98
> plus "Depends: stalwart-webadmin"
>
>
> Thing I'm not happy with: Stalwart claims by default the HTTPS port ( 443
> )
> Luckly has upstream documented how to have Stalwart behind a reverse
> proxy. Implementing that will imply to deal manually with SSL
> certificates. I haven't yet faced that challenge.
>
That is somewhat easy with the use of acmev2.
I find the pattern of acmev2 dns-01 challenge with acme.sh --install and
a crontab very easy to maintain in the long term.
Yeah, I'm messing around w/ stalwart now (v0.16) via podman container. I
don't know if it was the case back in Oct when you wrote this, but if
you're willing to give stalwart API access to your domains, it'll
automatically handle all the acme stuff; no crontab needed, even. It's
also nice that it automatically handles all the dns-related DKIM stuff, too.
My running this inside of a podman container feels very much like
overkill for this btw, since it's a single binary. I'd much rather be
using a debian package with systemd sandboxing of it.
> And another challenge I have to face is DKIM / DMARC.
> It is my fear that I will faulty configure DKIM / DMARC,
> so giving recieving mailservers a valid reason to drop email I want
> to transmit. But that will be my learning experience,
> not something to blame stalwart. It is even the reason
> why I want to shift from Postfix to Stalwart: Build-in DKIM / DMARC.
> (and build-in IMAP)
>
And built-in JMAP !
One thing I'd like to bring up for future thoughts around stalwart
packaging, is having a way to turn off all the "enterprise" feature
buttons. This should be configurable (after all, maybe someone does want
to buy a license and enable the features), but there should be an option
to hide all those enterprise feature buttons.
