* Remove reference to shell variables.
* Lose the variable sample.
* Whoops, somehow I brought back index.markdown
---------
Co-authored-by: Mike Hillyer <mike@kumomta.com>
* Reuse the tls acceptor stuff from the smtp_server.
We'll automatically generate self-signed certs when
none are provided.
* Add trusted_hosts setting for the http server
* Add an auth middleware that will accept connections from
trusted hosts as pre-authenticated. Other hosts must provide
http authorization.
* Add lua hooks for the policy script to validate either http
basic auth (user+pass), or bearer auth (token).
There's not currently an authentication storage subsystem, but
the lua hook allows for very basic stuff to be configured, and
could also be used to employ eg: looking things up from a database
once we add some lua utility functions for that purpose.
The `/metrics` endpoint will only respond to trusted IPs.
Other endpoints all require some kind of successful authentication.
QueueManager::insert could acquire MANAGER lock then a queue handle
lock.
Meanwhile, the queue maintainer would hold a queue handle lock
and then attempt to acquire MANAGER lock when idling out and removing
itself, leading to a livelock because MANAGER is protected by a
tokio Mutex which ping pongs in and out of the event loop.
A downside of pulling in rocksdb is that it is a pretty big
C++ library and musl/alpine don't really get on with it.
Switch to using the latest ubuntu LTS image as our base.
Adds some plumbing that allows the application to request
a shutdown that is channelled along the same path as ctrl-c
handling.
If we have errors defining spools or during spool start,
then we request a shutdown on the basis that we can't store
anything and it would be unsafe to continue.
This teaches the smtp listener and delivery sides
how to shutdown when a shutdown is requested, as well
as how to indicate when they are still doing important
work.
This doesn't guarantee that any deferred spooling is
done; that will be part 2.
I don't plan to remove compression or to allow it to be disabled: it
makes a massive difference to the size of the log files and saves IO and
storage space.
Same for "rcpt to". The <> are required in the ABNF in the spec,
but they are widely considered to be optional by major implementations,
which makes it convenient when ad-hoc testing via telnet.
We require the <> when ESMTP mail from or rcpt to parameters are
used.
We require that `--user username` be passed and specify
the user id that we should assume instead of running as
root.
We do the magic setup needed to preserve the ability
to bind to port 25 while dropping the other privs.
A fairly sprawling commit:
* Move config to its own crate to facilitate making things more modular
* Crates/modules can now provide a registration function that can be
used to setup functions in the lua environment
* Message crate now has a dkim module with a signer type that can
be loaded from lua; signers are cached (with ttl) and shareable
* Message now has a dkim_sign method that does the signing, as well
as methods for appending and prepending headers that are necessary
to support signing.
Wez Furlong
Mike HillyerandMike Hillyer