Files

T

jschoubben 1601d5a335 fail2ban holds the intrusion seat's verbs and composes the jails; mail, forge and proxy declare theirs (hq ADR 0179, to-be 31)

The module gains a runtime carrying only the fail2ban client with the daemon's socket shared in,
serving status/banned/ban/unban and its own fail2ban_settings. It declares jailing, so the
controller's composition lands in jail.d/mesh.conf and filter.d; mailu, route-proxy and gitea log to
the journal and declare a jail reading it by container name. The base is strict: three in a day for
a day, twice banned in two weeks for four; the mesh's range stays never banned.

2026-10-02 17:02:49 +02:00

automx

automx: the seed writes the schema 2021.6 reads

2026-09-26 00:06:24 +02:00

provisioner

No definition names this installation

2026-09-30 20:49:21 +02:00

tools

Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation

2026-09-05 12:49:16 +02:00

client.ts

mssql remaps a user only when orphaned; mailu's operator tool no longer re-enables

2026-09-26 01:30:15 +02:00

Dockerfile

mailu: the manifest matches the machine, provides smtp, and carries automx

2026-09-25 22:39:29 +02:00

index.ts

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

module.json

fail2ban holds the intrusion seat's verbs and composes the jails; mail, forge and proxy declare theirs (hq ADR 0179, to-be 31)

2026-10-02 17:02:49 +02:00

package.json

Every credential provider says whether it still holds a consumer

2026-09-26 01:09:52 +02:00

README.md

No definition names this installation

2026-09-30 20:49:21 +02:00

tsconfig.json

mailu: full nox module — client, tools and events (ADR 0044/0046)

2026-09-04 02:29:38 +02:00

README.md

mailu

Mail — Mailu, with its provisioner (the smtp provision) and tools, on the tool runtime.

Settings

A definition names no mesh (novox/hq ADR 0112, ADR 0155), so the values that are this installation's are settings on the assignment, settings set mailu <file>:

{"domain": "…", "sitename": "…", "website": "https://…", "proxy-address": "…"}

domain is the mail domain (also the provisioner's, for a consumer's address); sitename and website are shown by the web front; proxy-address is what REAL_IP_FROM trusts a real-IP header from — the address the proxy forwards with. The front's own hostname is the name of its web route, told to it by the mesh.