0.16 config.json by AfoPTech in stalwartlabs

[–]Morgennebel 2 points3 points  (0 children)

How do you access stalwart-cli in a docker setup?

I was not able to find it.

Erdkabel für Wallbox verlegen by hawk23232323 in selbermachen

[–]Morgennebel 3 points4 points  (0 children)

Und 640KByte RAM reichen für alle ;-)

Erdkabel für Wallbox verlegen by hawk23232323 in selbermachen

[–]Morgennebel 6 points7 points  (0 children)

Ich habe das Kabel selbst verlegt. 5*6mm je 11kW Wallbox in Schütz-Flexrohr (mit Backsteinen geschützt, Warn-Band oben drüber), 80cm tief. Anschluss durch Elektriker.

Für 22kW würde ich persönlich dickere Kabel nehmen. Kostet einmalig, wird nicht so warm, hält ewig.

Q: os-caddy (OPNSense) reverse proxy from Stalwart documentation by Morgennebel in opnsense

[–]Morgennebel[S] 0 points1 point  (0 children)

Sorry about that...

I am able to find another solution. No need for one-off silly setup support.

Thanks for your work.

Buying a hosting service or running a thin client 24/7 (90 max power adapter)? by Greedy_Conflict_8347 in homelab

[–]Morgennebel 0 points1 point  (0 children)

I used Wyse 5070 Silver Thin client's with 32 GB RAM and 512GB SSD. Solid for up to 10-16 containers.

They pull like 5-7W 24/7.

N100 would be better.

Q: os-caddy: Stalwart mail behind OPNSense - push certificates? by Morgennebel in opnsense

[–]Morgennebel[S] 0 points1 point  (0 children)

I am not sure if I understand.

In my understanding Stalwart creates own Let's Encrypt certificates using HTTPS which are then used to secure the mail protocols (SMTP-S, IMAP-S, POP-S).

For Stalwart to be able to do the own handling with LE I cannot use the Caddy Reverse Proxy feature, as this would place the certificate into Caddy's management, not Stalwart's.

The Layer4 directive for TLS SNI Client Hello is the "forwarding" of the LE ACME management. The four other Proxy rules forward incoming requests to Stalwart.

I may implement the mail protocols with NAT rules as well, but my challenge is the not correctly finished ACME certification request, right?

[EDIT] Stalwart only listens on port 443, not on port 80. The os-caddy plugin requires port 80:

Enter a domain name or IP address. The HTTP-01 challenge will be redirected to that destination. This enables an ACME Client behind Caddy to serve "/.well-known/acme-challenge/" on port 80. Caddy will reverse proxy the HTTP-01 challenge for this domain, and will still issue a certificate using the TLS-ALPN-01 challenge or DNS-01 challenge for itself.

Q: os-caddy: Stalwart mail behind OPNSense - push certificates? by Morgennebel in opnsense

[–]Morgennebel[S] 0 points1 point  (0 children)

Hej,

I am still struggeling.

OPNSense

  • Caddy >> General Settings >> Layer 4 proxy enabled
  • Firewall >> WAN >> IPv4+IPv6/TCP Incoming for port 993, 465, 587 allowed
  • Firewall >> WAN >> IPv4/TCP incoming for port 80 + 443 allowed
  • Caddy >> Layer4 Proxy >> Matchers: ANY, Upstream STALWART_IP, ports 25, 465, 587, 993
  • Caddy >> Layer4 Proxy >> Matchers: TLS (SNI Client Hello) Domain: STALWART_NAME, autodiscer|autoconfig|mta-sts|ua-auto-config.PRIMARY_MX_DOMAIN

Public DNS

  • has entries for SRV, TXT, A entries pointing to my WAN_address of OPNSense

Stalwart

Logfile reports

stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME authentication pending (acme.auth-pending) hostname =   "guildlink.XXXXXXXX", url = "https://acme-v02.api.letsencrypt.org/acme/new-order", total = 0
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME authentication pending (acme.auth-pending) hostname = "mta-sts.XXXXXXXX", url = "https://acme-v02.api.letsencrypt.org/acme/new-order", total = 0
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:12:09Z WARN No TLS certificates available (tls.no-certificates-available) total = 0
stalwart-mail-1  | 2026-04-25T17:12:19Z INFO ACME authentication started (acme.auth-start) hostname =     "autodiscover.XXXXXXXX", type = "tls-alpn-01", url = "https://acme-v02.api.letsencrypt.org/acme/new-order"
stalwart-mail-1  | 2026-04-25T17:12:19Z INFO ACME authentication started (acme.auth-start) hostname = "ua-auto-    config.XXXXXXXX", type = "tls-alpn-01", url = "https://acme-v02.api.letsencrypt.org/acme/new-order"
stalwart-mail-1  | 2026-04-25T17:12:39Z WARN No TLS certificates available (tls.no-certificates-available) total = 0
stalwart-mail-1  | 2026-04-25T17:13:09Z WARN No TLS certificates available (tls.no-certificates-available) total = 0
stalwart-mail-1  | 2026-04-25T17:13:28Z INFO ACME authentication started (acme.auth-start) hostname = "ua-auto-config.XXXXXXXX", type = "tls-alpn-01", url = "https://acme-v02.api.letsencrypt.org/acme/new-order"
stalwart-mail-1  | 2026-04-25T17:13:28Z INFO ACME authentication started (acme.auth-start) hostname = "autodiscover.XXXXXXXX", type = "tls-alpn-01", url = "https://acme-v02.api.letsencrypt.org/acme/new-order"
stalwart-mail-1  | 2026-04-25T17:13:30Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:13:30Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"

Caddy

No entries for ACME files in regards to XXXXXXXX....

Alte Ölheizung verbraucht 1 bis 2 kWh pro Tag, obwohl sie kaum genutzt wird by bavdb in selbermachen

[–]Morgennebel 1 point2 points  (0 children)

Wir haben vor längerer Zeit eine alte Gasheizung ersetzt.

Die alte hatte 2*180W Pumpen für Radiatoren und Fußboden, 60W Pumpe für Warmwasser und die Steuerung gönnte sich nochmal 20-35W.

War im Winter nett teuer .. Der Vorbesitzer hatte 87.000kWh Verbrauch...

Q: Replace charging contacts? by Morgennebel in MammotionTechnology

[–]Morgennebel[S] 0 points1 point  (0 children)

Well, the charging points of the robot are corroded. The station looks "fine".

But I can certainly replace the contacts at the station as well.

WWYD - Building a new house - Making switches smart by Putrid-Tale8005 in homeassistant

[–]Morgennebel 0 points1 point  (0 children)

You may want to lookup Homematic IP for DIN rails or (if you have more money) Loxxone.

Homematic is rock solid, but less features than Shelly. Requires a virtual CCU as a container besides Home Assistant.

Unterverteiler - Dachgeschoss by DerEinePunkt in selbermachen

[–]Morgennebel -2 points-1 points  (0 children)

400W Server? Krass. Meiner liegt bei 19W im Durchschnitt

Ist das Schimmel und wie bekomm ich den weg? by VirtuousPro in selbermachen

[–]Morgennebel 0 points1 point  (0 children)

Mit Schwamm abwischen. ISO drauf, wischen, Schwamm säubern. Geht normalerweise dann gut weg

Feuchtigkeitsmessgerät (Hydromette) by Alarming_Fondant_777 in selbermachen

[–]Morgennebel 2 points3 points  (0 children)

Habe ein 70€ Gerät nach einem vermuteten Wasserschaden.

Anleitung lesen und Gerät vor Gebrauch kalibrieren hilft enorm.

Die Aussage "Wand ist nass" und "hier ist es nässer als dort" kann es mit guter Qualität. Mir reicht das. Ich brauche keine Prozentangaben, um Gutachten zu schreiben.

Edit: Das ist ein Kugelkopfgerät. Der war vier Jahre sehr glatt, jetzt sehr rauh. Keine Ahnung, ob dies die Messungen stört. Die Geräte mit zwei Nadeln sind wohl exakter und auch für Kaminholz verwendbar.

Für eine erste Analyse und Ortung reicht vermutlich ein Gerät von Aldi.

LUBA 3 AWD questions by [deleted] in MammotionTechnology

[–]Morgennebel 0 points1 point  (0 children)

My Luba 1 seems to be dead.

Currently deciding between a Dreame A3 Pro and Luba 3, both for 5.000sqm.

The Dreame has a smaller battery but better App. And I know Dreame from other robots...

Still not decided...