Comments (4)
r-raymond
commented on August 17, 2024
Sry for running into this, it should have been documented better. I'd be kind of uncomfortable though to let port 80 open the whole time for no reason. It seems as if this is something that needs to be fixed upstream, i.e. the ACME certificate obtaining process should temporarily change the firewall.
Do you think mentioning in the docs that one has to temporarily open port 80 is sufficient?
from nixos-mailserver.
r-raymond
commented on August 17, 2024
On the other hand I just noticed that one would have to reopen the port every 3 months for the update. I guess it is best to just open it.
from nixos-mailserver.
dotlambda
commented on August 17, 2024
Well the question is: Do you see any possibility to automatically open and close it again every 3 months?
from nixos-mailserver.
r-raymond
commented on August 17, 2024
I don't but as I said this would need to be integrated upstream, as the
certificate renewal process knows when to open these ports.
Otherwise we could ditch the implemented renewal and do it ourselves, which
sounds tedious.
If anyone is aware of a possibility let me know!
…On 11/26, Robert Schütz wrote:
Well the question is: Do you see any possibility to automatically open and close it again every 3 months?
--
You are receiving this because you modified the open/close state.
Reply to this email directly or view it on GitHub:
#42 (comment)
from nixos-mailserver.
Related Issues (20)
- Own DNS fails due to kresd being enabled. HOT 3
- Suggestion: Add option for admin email HOT 4
- There are plenty of new features that need documentation HOT 1
- How to send email to multiple recipients HOT 5
- Dovecot's default connections per ip is a bit low HOT 1
- [support] How to use only enableImapSsl and enablePop3Ssl? HOT 4
- localDnsResolver (kresd) fails HOT 3
- catchAll issue during sending HOT 2
- Using certificateScheme = 3 fails HOT 6
- 18.03 tests fail HOT 5
- Timeout on postfix.service when generating big DH parameter HOT 3
- add dmarc instructions to the complete guide? HOT 1
- Error connecting to IMAP HOT 5
- DKIM signature validation fails with the simple canonicalization HOT 4
- Looking for (Co)-Maintainer(s) HOT 4
- Provide mailing list support with mailman HOT 2
- Trouble with DKIM signature HOT 2
- Using ACME without another nginx process HOT 2
- Backup relay MTA HOT 1
- Will edit later
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nixos-mailserver.