coulomb/railiance-infra
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record IONOS SMTP decision for RAIL-HO-WP-0005 T02/T06
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Operator confirmed IONOS mail for coulomb.social; update workplan gates and
point implementation to railiance-apps Forgejo mailer docs.
This commit is contained in:
tegwick 2026-07-07 02:04:33 +02:00
parent 48610117c7
commit 1cfc5d7b81
1 changed files with 14 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

21
workplans/RAIL-HO-WP-0005-forgejo-production-migration.md
View file

@ -60,8 +60,10 @@ change is made there.
Traefik edge live; Forgejo workload deployed and serving HTTPS. Gitea remains Traefik edge live; Forgejo workload deployed and serving HTTPS. Gitea remains
canonical until migration drills pass. Record: canonical until migration drills pass. Record:
`the-custodian/docs/forgejo-production-decisions.md`. `the-custodian/docs/forgejo-production-decisions.md`.
2. Mail delivery path for password reset and account recovery 2. ~~Mail delivery path~~ **DECIDED 2026-07-07:** IONOS SMTP for `@coulomb.social`
(SMTP relay, sender domain, SPF/DKIM/DMARC expectations). mailboxes (operator-provisioned domain/subdomains). Sender mailbox TBD
(`forgejo@coulomb.social` recommended); SPF/DKIM via IONOS zone. T06 still
requires password-reset test after creds are deployed.
3. Package registry scope: container images only at first, or also generic, 3. Package registry scope: container images only at first, or also generic,
npm, PyPI, Go, Maven, and Helm packages. npm, PyPI, Go, Maven, and Helm packages.
4. ~~Actions runner model~~ **DECIDED 2026-07-03:** in-cluster long-lived runner 4. ~~Actions runner model~~ **DECIDED 2026-07-03:** in-cluster long-lived runner
@ -179,10 +181,11 @@ state_hub_task_id: "f88115bf-4f99-49ef-a415-0b23750141b3"
Decide the production choices listed in "Key Decisions to Confirm". Decide the production choices listed in "Key Decisions to Confirm".
**Partial (2026-07-04):** hostname, exposure, deployment pattern, live deploy, **Partial (2026-07-07):** hostname, exposure, deployment pattern, live deploy,
and in-cluster runner model decided (`ADR-004`). Cutover mode **leaning** staged in-cluster runner model (`ADR-004`), and **SMTP provider (IONOS)** decided.
per-repo (glas-harness pilot). Remaining operator decisions: SMTP, package scope Cutover mode **leaning** staged per-repo (glas-harness pilot). Remaining
beyond OCI, backup target, final cutover confirmation. See operator decisions: sender mailbox name + T06 test, package scope beyond OCI,
backup target, final cutover confirmation. See
`the-custodian/docs/forgejo-production-decisions.md`. `the-custodian/docs/forgejo-production-decisions.md`.
Expected output: Expected output:
@ -292,9 +295,13 @@ state_hub_task_id: "417faa4d-eab8-4247-9485-4f80e5d5b7ff"
Configure and test mail delivery for account recovery. Configure and test mail delivery for account recovery.
**Provider decided (2026-07-07):** IONOS SMTP for `@coulomb.social` mailboxes.
See `the-custodian/docs/forgejo-production-decisions.md` and
`railiance-apps/docs/forgejo-on-railiance01.md` (SMTP section).
Minimum scope: Minimum scope:
- SMTP credentials stored through the approved secret path. - SMTP credentials stored through the approved secret path (`forgejo-secrets.sops.yaml`).
- Sender address and domain alignment documented. - Sender address and domain alignment documented.
- Password reset email works for a controlled non-admin account. - Password reset email works for a controlled non-admin account.
- Account recovery runbook covers lost password, lost MFA, disabled account, - Account recovery runbook covers lost password, lost MFA, disabled account,