Discussion
With DNS things out of the way, I'm gonna play with Aerogramme a little, see if I can use it for my stack (replacing dovecot).
It's EUPL-licensed (yay), by Deuxfleurs, makers of Garage (also yay), stores mail on Garage instead of the filesystem (also yay), encrypted (whee).
Very promising.
So far, so good. Now to see if it works with K9/Thunderbird and mbsync - those are the two uses of imap I care about really.
argasdasd-9121asasldk!#%!ASDA
For some reason, getting a certificate, with the same configuration as another domain (which succeeded earlier today), is failing.
Maybe dns-01 was a bad idea. It looks like lego can put the HTTP verification into an S3 bucket, so... I can technically use the HTTP challenge from behind WG.
Oh. Oh. I might know what's up.
The difference between this zone (where dns-01 didn't work) and the other, is that this zone has DNSSEC, while the other does not.
With DNSSEC, I need to set API-RECTIFY 1, to automatically do dnssec magic when changing the zone through the API.
Install bonfire.cafe
Get the full app experience
