company flows

This commit is contained in:
debu-2 2026-10-04 15:35:17 +05:30
parent c04a6ce6fe
commit a3a6464a99
15 changed files with 963 additions and 60 deletions

View file

@ -6,8 +6,8 @@ This guide covers DNS changes when moving from `getall.help` to `gentic.email`.
| Hostname | Purpose |
|----------|---------|
| `gentic.email` | Platform domain — individual users get `@gentic.email` addresses |
| `email.gentic.email` | Web UI (Caddy HTTPS) |
| `gentic.email` | Platform domain + primary Agmail web UI (Caddy HTTPS) |
| `email.getall.help` | Legacy alternate URL to the same web UI |
| `mail.gentic.email` | Postfix SMTP (inbound :25 + outbound) |
| `_spf.gentic.email` | Platform SPF include target (TXT on `gentic.email`, host `_spf`) |
@ -22,13 +22,14 @@ Copy and edit `.env` from `.env.example`:
```env
PLATFORM_DOMAIN=gentic.email
PLATFORM_SPF_INCLUDE=_spf.gentic.email
APP_PUBLIC_HOST=email.gentic.email
APP_PUBLIC_HOST=gentic.email
CADDY_ALT_HOST=email.getall.help
CADDY_ACME_EMAIL=admin@gentic.email
SMTP_PUBLIC_HOST=mail.gentic.email
MAIL_HOSTNAME=mail.gentic.email
MAIL_DOMAIN=gentic.email
INBOUND_DOMAINS=gentic.email
CORS_ORIGINS=["https://email.gentic.email"]
INBOUND_DOMAINS=gentic.email,getall.help
CORS_ORIGINS=["https://gentic.email","https://email.getall.help"]
```
Redeploy app + SMTP + Caddy stacks after updating env.
@ -43,8 +44,8 @@ Add or update these records at the **gentic.email** DNS provider:
| Type | Host | Value | Notes |
|------|------|-------|-------|
| **A** | `@` | `<VPS_PUBLIC_IP>` | Agmail web UI (primary) |
| **A** | `mail` | `<VPS_PUBLIC_IP>` | Mail server |
| **A** | `email` | `<VPS_PUBLIC_IP>` | Web UI |
| **MX** | `@` | `10 mail.gentic.email` | Platform inbox delivery |
### Outbound authentication (platform domain)
@ -56,7 +57,9 @@ Add or update these records at the **gentic.email** DNS provider:
| **TXT** | `agmail._domainkey` | *(from /smtp-credentials page after domain register)* |
| **TXT** | `_dmarc` | `v=DMARC1; p=quarantine; rua=mailto:dmarc@gentic.email` |
Generate exact DKIM/SPF rows from **https://email.gentic.email/smtp-credentials** once DNS for `email` resolves.
Generate exact DKIM/SPF rows from **https://gentic.email/smtp-credentials** once DNS resolves.
In the **getall.help** zone, add `email` → `<VPS_PUBLIC_IP>` for the legacy web entry.
### Reverse DNS (PTR)
@ -83,7 +86,7 @@ Blocked domains (`google.com`, etc.) cannot be registered as company domains.
1. Lower TTL on old `getall.help` records 24h before (optional).
2. Publish new `gentic.email` A/MX/TXT records.
3. Update `.env` and redeploy Docker stacks.
4. Verify TLS: `curl -fsSI https://email.gentic.email/health`
4. Verify TLS: `curl -fsSI https://gentic.email/health` and `curl -fsSI https://email.getall.help/health`
5. Verify SMTP banner: `nc mail.gentic.email 25`
6. Send test mail to `user@gentic.email` and from the app.
7. Re-verify any active company domains (ownership TXT may be added on next verify).
@ -94,8 +97,8 @@ Blocked domains (`google.com`, etc.) cannot be registered as company domains.
After cutover you can remove or repoint:
- `email.getall.help`, `mail.getall.help` A records
- `getall.help` MX if it pointed at the mail VPS
- `mail.getall.help` A record (if no longer used)
- `getall.help` MX if it pointed at the mail VPS and you've moved all mail to `@gentic.email`
- `_spf.getall.help` if no longer used
Keep old records until you're confident nothing still references `getall.help`.
Keep **`email.getall.help`** while you want the legacy web URL. Remove it once all users use `https://gentic.email`.