From 81592a3b2cb683d14d6bdd9784288444a71a8e02 Mon Sep 17 00:00:00 2001
From: jochen <jschoubben@gmail.com>
Date: Sat, 26 Sep 2026 19:26:53 +0200
Subject: [PATCH] mailu: the smtp provision serves the name its certificate
 answers to
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

A consumer connecting by the binding's address meets a certificate for
mail.novox.be and refuses it — found live by the forwarder's cutover
proof, one send before production would have. The TLS name is mailu's
own fact (HOSTNAMES), so the binding carries it; consumers say
${bound:smtp:name} and verification holds.
---
 modules/mailu/module.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/modules/mailu/module.json b/modules/mailu/module.json
index 7ee64b3..7b3aa0f 100644
--- a/modules/mailu/module.json
+++ b/modules/mailu/module.json
@@ -547,7 +547,8 @@
   "serves": {
     "smtp": {
       "port": 587,
-      "domain": "novox.be"
+      "domain": "novox.be",
+      "name": "mail.novox.be"
     }
   },
   "receives": {
-- 
2.54.0