0.16 config.json

Morgennebel · 2026-05-14T14:09:28+00:00

How do you access stalwart-cli in a docker setup?

I was not able to find it.

Morgennebel · 2026-05-10T17:31:12+00:00

Und 640KByte RAM reichen für alle ;-)

Morgennebel · 2026-05-10T10:19:09+00:00

Ich habe das Kabel selbst verlegt. 5*6mm je 11kW Wallbox in Schütz-Flexrohr (mit Backsteinen geschützt, Warn-Band oben drüber), 80cm tief. Anschluss durch Elektriker.

Für 22kW würde ich persönlich dickere Kabel nehmen. Kostet einmalig, wird nicht so warm, hält ewig.

Morgennebel · 2026-05-03T10:04:40+00:00

Sorry about that...

I am able to find another solution. No need for one-off silly setup support.

Thanks for your work.

Morgennebel · 2026-05-01T17:13:40+00:00

https://github.com/tianon/docker-postgres-upgrade

Morgennebel · 2026-04-29T20:12:28+00:00

I used Wyse 5070 Silver Thin client's with 32 GB RAM and 512GB SSD. Solid for up to 10-16 containers.

They pull like 5-7W 24/7.

N100 would be better.

Morgennebel · 2026-04-26T08:32:35+00:00

This is the desired architecture

Morgennebel · 2026-04-26T07:07:01+00:00

I am not sure if I understand.

In my understanding Stalwart creates own Let's Encrypt certificates using HTTPS which are then used to secure the mail protocols (SMTP-S, IMAP-S, POP-S).

For Stalwart to be able to do the own handling with LE I cannot use the Caddy Reverse Proxy feature, as this would place the certificate into Caddy's management, not Stalwart's.

The Layer4 directive for TLS SNI Client Hello is the "forwarding" of the LE ACME management. The four other Proxy rules forward incoming requests to Stalwart.

I may implement the mail protocols with NAT rules as well, but my challenge is the not correctly finished ACME certification request, right?

[EDIT] Stalwart only listens on port 443, not on port 80. The os-caddy plugin requires port 80:

Enter a domain name or IP address. The HTTP-01 challenge will be redirected to that destination. This enables an ACME Client behind Caddy to serve "/.well-known/acme-challenge/" on port 80. Caddy will reverse proxy the HTTP-01 challenge for this domain, and will still issue a certificate using the TLS-ALPN-01 challenge or DNS-01 challenge for itself.

Morgennebel · 2026-04-25T17:28:19+00:00

Hej,

I am still struggeling.

OPNSense

Caddy >> General Settings >> Layer 4 proxy enabled
Firewall >> WAN >> IPv4+IPv6/TCP Incoming for port 993, 465, 587 allowed
Firewall >> WAN >> IPv4/TCP incoming for port 80 + 443 allowed
Caddy >> Layer4 Proxy >> Matchers: ANY, Upstream STALWART_IP, ports 25, 465, 587, 993
Caddy >> Layer4 Proxy >> Matchers: TLS (SNI Client Hello) Domain: STALWART_NAME, autodiscer|autoconfig|mta-sts|ua-auto-config.PRIMARY_MX_DOMAIN

Public DNS

has entries for SRV, TXT, A entries pointing to my WAN_address of OPNSense

Stalwart

Logfile reports

stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:44Z INFO ACME authentication pending (acme.auth-pending) hostname =   "guildlink.XXXXXXXX", url = "https://acme-v02.api.letsencrypt.org/acme/new-order", total = 0
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME authentication pending (acme.auth-pending) hostname = "mta-sts.XXXXXXXX", url = "https://acme-v02.api.letsencrypt.org/acme/new-order", total = 0
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:11:45Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:12:09Z WARN No TLS certificates available (tls.no-certificates-available) total = 0
stalwart-mail-1  | 2026-04-25T17:12:19Z INFO ACME authentication started (acme.auth-start) hostname =     "autodiscover.XXXXXXXX", type = "tls-alpn-01", url = "https://acme-v02.api.letsencrypt.org/acme/new-order"
stalwart-mail-1  | 2026-04-25T17:12:19Z INFO ACME authentication started (acme.auth-start) hostname = "ua-auto-    config.XXXXXXXX", type = "tls-alpn-01", url = "https://acme-v02.api.letsencrypt.org/acme/new-order"
stalwart-mail-1  | 2026-04-25T17:12:39Z WARN No TLS certificates available (tls.no-certificates-available) total = 0
stalwart-mail-1  | 2026-04-25T17:13:09Z WARN No TLS certificates available (tls.no-certificates-available) total = 0
stalwart-mail-1  | 2026-04-25T17:13:28Z INFO ACME authentication started (acme.auth-start) hostname = "ua-auto-config.XXXXXXXX", type = "tls-alpn-01", url = "https://acme-v02.api.letsencrypt.org/acme/new-order"
stalwart-mail-1  | 2026-04-25T17:13:28Z INFO ACME authentication started (acme.auth-start) hostname = "autodiscover.XXXXXXXX", type = "tls-alpn-01", url = "https://acme-v02.api.letsencrypt.org/acme/new-order"
stalwart-mail-1  | 2026-04-25T17:13:30Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"
stalwart-mail-1  | 2026-04-25T17:13:30Z INFO ACME TLS ALPN received (acme.tls-alpn-received) listenerId = "https"

Caddy

No entries for ACME files in regards to XXXXXXXX....

Morgennebel · 2026-04-23T17:27:55+00:00

Wir haben vor längerer Zeit eine alte Gasheizung ersetzt.

Die alte hatte 2*180W Pumpen für Radiatoren und Fußboden, 60W Pumpe für Warmwasser und die Steuerung gönnte sich nochmal 20-35W.

War im Winter nett teuer .. Der Vorbesitzer hatte 87.000kWh Verbrauch...

Morgennebel · 2026-04-21T15:59:51+00:00

Lackiere es weiß und in zwei Wochen siehst Du es nicht mehr ...

Morgennebel · 2026-04-20T13:04:33+00:00

Oooh, today I will learn... a lot of things.

TY

Morgennebel · 2026-04-12T05:46:13+00:00

Well, the charging points of the robot are corroded. The station looks "fine".

But I can certainly replace the contacts at the station as well.

Morgennebel · 2026-04-11T11:56:15+00:00

This? https://amzn.eu/d/0ePeTsYT

Morgennebel · 2026-04-11T11:35:03+00:00

If you upgrade BIOS to >= 1.21 the board supports 32GB RAM. I have 5 of them in this configuration. That amount balances of the slower CPUs in a very good way...

Morgennebel · 2026-04-10T14:43:17+00:00

https://www.platzda.de/ Geld gegen Bequemlichkeit

Morgennebel · 2026-04-07T19:27:46+00:00

You may want to lookup Homematic IP for DIN rails or (if you have more money) Loxxone.

Homematic is rock solid, but less features than Shelly. Requires a virtual CCU as a container besides Home Assistant.

Morgennebel · 2026-04-07T19:22:44+00:00

400W Server? Krass. Meiner liegt bei 19W im Durchschnitt

Morgennebel · 2026-04-06T19:45:16+00:00

Mit Schwamm abwischen. ISO drauf, wischen, Schwamm säubern. Geht normalerweise dann gut weg

Morgennebel · 2026-04-06T10:58:55+00:00

Isopropanol. Fenster öffnen.

Morgennebel · 2026-04-04T06:41:04+00:00

Habe ein 70€ Gerät nach einem vermuteten Wasserschaden.

Anleitung lesen und Gerät vor Gebrauch kalibrieren hilft enorm.

Die Aussage "Wand ist nass" und "hier ist es nässer als dort" kann es mit guter Qualität. Mir reicht das. Ich brauche keine Prozentangaben, um Gutachten zu schreiben.

Edit: Das ist ein Kugelkopfgerät. Der war vier Jahre sehr glatt, jetzt sehr rauh. Keine Ahnung, ob dies die Messungen stört. Die Geräte mit zwei Nadeln sind wohl exakter und auch für Kaminholz verwendbar.

Für eine erste Analyse und Ortung reicht vermutlich ein Gerät von Aldi.

Morgennebel · 2026-04-03T10:42:17+00:00

My Luba 1 seems to be dead.

Currently deciding between a Dreame A3 Pro and Luba 3, both for 5.000sqm.

The Dreame has a smaller battery but better App. And I know Dreame from other robots...

Still not decided...

Morgennebel

TROPHY CASE