mirror of
https://github.com/chatmail/relay.git
synced 2026-05-16 16:28:58 +00:00
cf96be2cbb
feat: support self-signed TLS via underscore domain convention Domains starting with "_" (e.g. _chat.example.org) automatically use self-signed TLS certificates instead of ACME/Let's Encrypt. The TLS mode is derived from the domain name — no separate config option needed. Internally, when config.tls_cert_mode is "self" (underscore domain): - Generate self-signed certificates via openssl - Set Postfix smtp_tls_security_level to "encrypt" (opportunistic TLS) - Add smtp_tls_policy_map entry for underscore domains - Skip ACME, MTA-STS and www CNAME checks in `cmdeploy dns` - Serve /new via GET (not redirect to dcaccount:) with rate-limiting (nginx limit_req, 2r/s burst=5) - Return dclogin: URLs with ic=3 (AcceptInvalidCertificates) from /new - Render QR codes client-side via JavaScript and qrcode-svg - Use config.tls_cert_path/tls_key_path in Postfix, Dovecot and nginx templates instead of hardcoded ACME paths
39 lines
1.4 KiB
Markdown
39 lines
1.4 KiB
Markdown
|
|
<img class="banner" src="collage-top.png"/>
|
|
|
|
## Dear [Delta Chat](https://get.delta.chat) users and newcomers ...
|
|
|
|
{% if config.mail_domain != "nine.testrun.org" %}
|
|
Welcome to instant, interoperable and [privacy-preserving](privacy.html) messaging :)
|
|
{% else %}
|
|
Welcome to the default onboarding server ({{ config.mail_domain }})
|
|
for Delta Chat users. For details how it avoids storing personal information
|
|
please see our [privacy policy](privacy.html).
|
|
{% endif %}
|
|
|
|
{% if config.tls_cert_mode == "self" %}
|
|
<a class="cta-button" id="dclogin-link" href="#">Get a {{config.mail_domain}} chat profile</a>
|
|
|
|
If you are viewing this page on a different device
|
|
without a Delta Chat app,
|
|
you can also **scan this QR code** with Delta Chat:
|
|
|
|
<a id="qr-link" href="#"><div id="qr-code"></div></a>
|
|
|
|
<script src="qrcode-svg.min.js"></script>
|
|
<script src="dclogin.js"></script>
|
|
{% else %}
|
|
<a class="cta-button" href="DCACCOUNT:https://{{ config.mail_domain }}/new">Get a {{config.mail_domain}} chat profile</a>
|
|
|
|
If you are viewing this page on a different device
|
|
without a Delta Chat app,
|
|
you can also **scan this QR code** with Delta Chat:
|
|
|
|
<a href="DCACCOUNT:https://{{ config.mail_domain }}/new">
|
|
<img width=300 style="float: none;" src="qr-chatmail-invite-{{config.mail_domain}}.png" /></a>
|
|
{% endif %}
|
|
|
|
🐣 **Choose** your Avatar and Name
|
|
|
|
💬 **Start** chatting with any Delta Chat contacts using [QR invite codes](https://delta.chat/en/help#howtoe2ee)
|