Closed Issues

mxb hands non-local mail (its own DMARC reports) to mx99:2525, which rejects it #b1f7229 · 4 comments

Oct 9

Inbound DANE: publish TLSA records for the cells' and the relay's MX hostnames #209274a · 6 comments

Oct 8

Verify Stalwart's local vs relay delivery split on mx99 (replaces 9bec37e) #e9d14c1 · 3 comments

Oct 8

Stalwart inbound spam filter takes 25-60 s per message (likely DNS list lookups timing out) #d4988da · 4 comments

Oct 8

Cells must not claim sovrn.at in Stalwart: use an internal domain for service accounts #9cbbce8 · 3 comments

Oct 8

Fleet integration: deploy sovrn from ~/projects/servers #ae42c89 · 2 comments

Oct 6

Cutover mx99 and decommission Ansible #c3b0d04 · 2 comments

Sep 29

Recovery as systemd: sovrn-restore.target + freshen-backups #1badc33 · 2 comments

Sep 29

Telemetry edge on NixOS: vmagent, Vector, node_exporter #a6edca3 · 5 comments

Sep 29

Backups on NixOS: Litestream + rclone + health markers #0e32e5a · 3 comments

Sep 29

Cell data plane on NixOS: ZDS, sovrnd, Caddy, did.json #63eb0d9 · 3 comments

Sep 29

Backup relay (mxb) on NixOS #b45a76f · 6 comments

Sep 29

systemd orchestration: Stalwart recovery -> converge -> normal #ba3c79f · 4 comments

Sep 29

Stalwart bootstrap as a checked-in JSON apply plan (incl. sovrnd service account) #b724acb · 2 comments

Sep 29

Stalwart NixOS module on nixpkgs stalwart_0_16 (pinned 0.16.23) #9f24376 · 1 comment

Sep 29

Pilot: metrics box (infra.sovrn.at) on NixOS #dd3c64a · 1 comment

Sep 29

Package sovrnd and backup-route-sync with Nix #d6ee5d9 · 1 comment

Sep 29

Colmena keys via secrets decrypt; retire ansible-vault #4ce0593 · 1 comment

Sep 29

Provision NixOS on Hetzner with nixos-anywhere + disko #bc4b527 · 1 comment

Sep 29

Epic: migrate provisioning from Ansible to NixOS + Colmena #3beadb2 · 2 comments

Sep 29

Evaluate NixOS and Colmena #ebce532 · 2 comments

Sep 29

Audit: new-domain saga end to end with relay-only DKIM signing #3d450a9 · 1 comment

Sep 24

Integrate Web Awesome copy-button web component for click-to-copy #34b6241 · 1 comment

Sep 21

shadcn: migrate fragments partials (formError, mailbox/password rows, appPasswordSecret) #be3204c · 1 comment

Sep 21

shadcn: migrate account page (settings table, app-password flows) #e3493f0 · 1 comment

Sep 21

shadcn: migrate domain page (dnsTable to table, details to accordion, forms to input/label/checkbox) #85b745e · 1 comment

Sep 21

shadcn: migrate home page lists to card + item + badge #45b7f10 · 1 comment

Sep 21

shadcn: migrate login page to card + field + input + button #f5c76f1 · 1 comment

Sep 21

shadcn: migrate layout primitives (fieldLabel, textInput, primaryButton, flash) #135a5ee · 2 comments

Sep 21

shadcn: install missing components (card, input, label, field, alert, badge, checkbox, separator, accordion, item) #68d7ae7 · 1 comment

Sep 21

TRACKING: migrate appview to shadcn-templ UI components #c32b584

Sep 21

Account creation UI: optional initial contact-card fields #c83864d · 2 comments

Sep 21

Signup E2E + race/conflict acceptance tests #df700bf · 1 comment

Sep 20

Accounts provisionable for an active domain #858fad1 · 3 comments

Sep 20

Reconciler core: DB ↔ Stalwart ↔ route-record reconciliation #9f75370

Sep 20

Postmaster identity creation on the new instance #eb70bc9 · 2 comments

Sep 20

Auto-provision the per-domain PDS instance in the domain saga #63547c4 · 2 comments

Sep 20

Saga: full domain signup to active + provisionable accounts (ADR-0009 architecture) #516fcde · 1 comment

Sep 20

Auto-provision vault secrets in bootstrap (fold provision-*-secrets) #3418287 · 4 comments

Sep 19

Justfile: domain-derived tags for update/bootstrap (idiot-proof box roles) #e2ad8bd · 3 comments

Sep 18

Backup route sync: jetstream watcher replacing manual domain-map var #0a0fb42 · 2 comments

Sep 18

Saga teardown destroys reused infra on duplicate domain.create #5e674f6 · 1 comment

Sep 18

Backup MX (pri-20): store-and-forward relay with postmaster route records #d43eebe · 15 comments

Sep 18

Cell Caddyfile references undefined var caddy_acme_ca #ba06600 · 1 comment

Sep 16

Defer Unbound; manage DNS via systemd-resolved (Hetzner + Quad9) #38de33d · 1 comment

Sep 16

[follow-up] Stalwart local delivery + relay split verification on smoke server with full DNS #9bec37e · 1 comment

Sep 16

Outbound SMTP relay integration (Lettermint + SMTP2GO behind OutboundRelay interface) #941e9ad · 3 comments

Sep 15

T2 follow-up: comail/crawler provisioning for per-domain ZDS env #781ef28 · 3 comments

Sep 15

[follow-up] app password issuance swallows Stalwart notCreated reason #71a97a6 · 1 comment

Sep 13

[follow-up] AppViewUI integration test predates role-based home + owner_handle form #1344bf0 · 1 comment

Sep 13

[follow-up] integration XRPC tests pass no owner to mail.createAccount (400) #ca92d38 · 1 comment

Sep 13

T12: reevaluate amd64+arm64 cell support after FoundationDB removal #ea055d0 · 2 comments

Sep 13

T11: recovery-backup + recovery-bootstrap roles and playbooks #c0e0ddb · 2 comments

Sep 13

T10: floating-IP + Hetzner role (guest /32, v6 bootstrap, known_hosts) #410e370 · 2 comments

Sep 13

T8 EVAL: SMTP relay options (comail-first, Lettermint EU fallback) #05830c8 · 1 comment

Sep 13

T7: metrics to central VictoriaMetrics host #6cae3a0 · 5 comments

Sep 13

T9: cell-model ADR + runbooks (provision, floating-IP recovery, relay drain) #c2f7f81 · 3 comments

Sep 13

T5 SPIKE: ZDS S3 blob + CDN redirect PR eval (timeboxed) #23e262e · 1 comment

Sep 13

T6: consolidated cell healthz in sovrnd #b957ddb · 3 comments

Sep 13

T3: Stalwart back to SQLite, remove FoundationDB #a6181d9 · 2 comments

Sep 13

T4: Litestream + rclone to R2 (roles, secrets, restore drill) #2559f24 · 2 comments

Sep 13

T1: dev PDS moves to ZDS (devenv runner + smoke) #f1be097 · 2 comments

Sep 13

T2: Ansible ZDS role + Caddy/TLS + smoke deploy #2f8a863 · 9 comments

Sep 13

TRACKING: cell architecture (EU/US), floating IPs, SQLite+Litestream+R2, ZDS #75966cc · 2 comments

Sep 13

TRACKING: PDS selection atproto-crates vs tranquil vs ZDS (S3, 2FA, spaces-GA upgrade) #9303770 · 2 comments

Sep 11

New ATProto account stub + at.domain vanity plumbing (pending UX) #3a8659e · 1 comment

Sep 11

Mailbox <-> existing handle association (resolve + bind) #74339dc · 2 comments

Sep 11

Permissions: tenant-owner admin + My-mailboxes UI (Stage A) #86021db · 2 comments

Sep 11

Smoke test UX feedback: implementation batch #f4092c9

Sep 11

Decide IMAP/SMTP service endpoint architecture (imap./smtp. vs per-MX) #16df68d · 1 comment

Sep 11

Account page: secret placement + dismiss, row cleanup, delete with confirm #6663bc8 · 3 comments

Sep 11

atproto-handle typeahead on hand-typed handle inputs #f197c0a · 2 comments

Sep 11

Inline mailbox creation on domain page (htmx) #4f7a69b · 3 comments

Sep 11

HTMX v4 foundation: vendored lib, fragment responses, user-facing error mapping #d656998 · 2 comments

Sep 11

ATProto identity <-> mailbox mapping (app DB now, spaces record later) #3726817 · 1 comment

Sep 11

App-password display: chunked + click-to-copy, never expire #58db1bc · 1 comment

Sep 11

Accept bare local part for mailbox creation; reject foreign domains with 400 #6651065 · 1 comment

Sep 11

UI: per-field DNS record copy + manual recheck button #4611274 · 2 comments

Sep 11

Multi-MX architecture: single appview, multiple mail servers, failover #6ca5959 · 1 comment

Sep 11

Auth: post-login return-to redirect (internal paths only) #0a27bf0 · 1 comment

Sep 9

Auth: logout route #8cb7799 · 2 comments

Sep 9

Auth: key-material handling — DB-encrypted keys with a startup master key #2964546 · 1 comment

Sep 9

Auth: opaque session cookie (never a naked DID) #40e284e · 2 comments

Sep 9

PoC: minimal live deployment (control plane + Stalwart, active/passive FDB) #70790ed · 35 comments

Sep 8

Service configuration: required config surface (TOML/env via viper) #82af326 · 2 comments

Sep 1

v1 roadmap: feature in/out cut #9185c91 · 1 comment

Aug 28

App view: admin UI + mutation/query XRPC (templ + HTMX) #b04aeb9

Aug 28

Reconciler: XRPC signup → DB → Stalwart → postmaster records; three-way sweep #f15633a · 1 comment

Aug 28

Postmaster DID ceremony + KMS + hosted spaces-PDS #ee2256b · 1 comment

Aug 28

Lexicon: at.sovrn.mail.service — endpoint inventory (webmail + appview) #a472ea3 · 1 comment

Aug 28

Lexicons: space type declarations + record schemas (at.sovrn.*) #f6192a1 · 1 comment

Aug 28

[C7] domain ownership verification + readiness probes (internal/domain) #b5a31bd · 1 comment

Aug 26

[follow-up] DKIM task orphan on domain delete #cf71374 · 2 comments

Aug 25

review: internal/registry package #d73c3db · 2 comments

Aug 25

review: internal/jmap package #19e419e · 1 comment

Aug 25

[C6] End-to-end risk probe: signup→login→read-mailbox + failure injection #0d541aa · 6 comments

Aug 24

[C5] OIDC issuer → Stalwart OpenId directory wiring + app-password round-trip #c1c7e19 · 3 comments

Aug 24

[C4] OAuth broker walking skeleton — indigo ClientApp vs live PDS #a589d34 · 2 comments

Aug 24

[C3] Control-plane credential & impersonation model (masquerade as any user) #3541d85 · 2 comments

Aug 24

[C2] stalwartsync: Registry-client spike — schema, object lifecycle, two-phase reload #24dcaa6 · 4 comments

Aug 24

[C1] Deployment harness: Nix-built Stalwart OSS + spaces-alpha PDS containers via devenv up #ccd3c37 · 2 comments

Aug 24

Phase 0: critical-path risk reduction (tracking) #f98ccdc · 6 comments

Aug 24