autonomic-bot
916bdd8b68
mailu (full email stack). TLS_FLAVOR=notls avoids certdumper/ACME dep (cc-ci file-provider cert); MAIL_DOMAIN/HOSTNAMES=run domain; TRAEFIK_STACK_NAME for the letsencrypt-volume mount. P2 vacuous (no corpus). P3: test_mailbox (flask mailu user create + config-export read-back), test_imap_login (mailbox authenticates over dovecot IMAP:143), test_mail_flow (SMTP submission send → IMAP retrieve, auth to avoid greylisting). P4 N/A (no backupbot label) — DEFERRED.md + PARITY.md, Adversary §7.1 sign-off pending. Smoke-validated: 8 services converge, mail ports 25/587/143/993 host-open, flask CLI. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
33 lines
1.7 KiB
Python
33 lines
1.7 KiB
Python
# Per-recipe harness config for mailu (Phase 2 Q4.9 — full email stack: nginx front + admin +
|
|
# dovecot(imap) + postfix(smtp) + rspamd(antispam) + webmail + redis + certdumper).
|
|
#
|
|
# cc-ci integration notes:
|
|
# - TLS_FLAVOR=notls: mailu's mail-port TLS normally comes from `certdumper`, which dumps certs from
|
|
# traefik's ACME acme.json. cc-ci uses a FILE-PROVIDER wildcard cert (no ACME), so there is no
|
|
# acme.json — certdumper would never produce certs. notls disables mail-port TLS so the stack does
|
|
# not depend on those certs. (certdumper still runs idle, mounting the existing
|
|
# traefik_ci_commoninternet_net_letsencrypt volume; harmless.) The web/admin UI is served over the
|
|
# real wildcard TLS via Traefik regardless.
|
|
# - TRAEFIK_STACK_NAME must match cc-ci's traefik stack so the external `*_letsencrypt` volume resolves.
|
|
# - MAIL_DOMAIN/HOSTNAMES are pinned to the per-run domain (callable EXTRA_ENV).
|
|
# - Mail ports (25/465/587/110/143/993/995) are published mode:host on the cc-ci host, so on-host
|
|
# tests can reach SMTP/IMAP at 127.0.0.1.
|
|
# Smoke (mail-smoke deploy) showed the nginx front serves `/` → 301 (redirect to /webmail) once up;
|
|
# /admin briefly 502s during admin first-boot, so `/` is the stable readiness signal. (The
|
|
# create-mailbox test uses the admin-container `flask mailu` CLI, which bypasses HTTP entirely.)
|
|
HEALTH_PATH = "/"
|
|
HEALTH_OK = (200, 301, 302)
|
|
DEPLOY_TIMEOUT = 900
|
|
HTTP_TIMEOUT = 600
|
|
|
|
|
|
def EXTRA_ENV(domain):
|
|
return {
|
|
"MAIL_DOMAIN": domain,
|
|
"HOSTNAMES": domain,
|
|
"TRAEFIK_STACK_NAME": "traefik_ci_commoninternet_net",
|
|
"TLS_FLAVOR": "notls",
|
|
"SITENAME": "ccci-mail",
|
|
"POSTMASTER": "admin",
|
|
}
|