hetzner-infra - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author	Lines
2026-06-09	Switch mail container from SES relay to direct delivery	yyamashita	-7/+0
	Port 25 outbound is no longer blocked on Hetzner, so SES relay is unnecessary. Remove relayhost, SASL auth config, and libsasl2-modules. Postfix now delivers directly to recipient MX; inet_protocols=ipv4 already present to avoid IPv6 PTR issues. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-01	Configure Amazon SES relay for Postfix (port 25 blocked by Hetzner)	yyamashita	-0/+7
	SES credentials are injected via .env file (not committed). entrypoint.sh creates sasl_passwd at runtime from SES_ACCESS_KEY_ID / SES_SMTP_PASSWORD. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-01	entrypoint: copy resolv.conf etc into Postfix chroot before start	yyamashita	-0/+8
	smtp プロセスは chroot 環境で動くため /etc/resolv.conf が見えず MX ルックアップが失敗していた。chroot (/var/spool/postfix/etc/) に resolv.conf / hosts / services / nsswitch.conf をコピーして解決。 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-01	entrypoint: fix DNS via cat-to-bind-mount (no python3/sed needed)	yyamashita	-9/+5
	Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-01	entrypoint: use python3 for resolv.conf edit (sed -i fails on bind mount)	yyamashita	-3/+8
	Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-01	entrypoint: replace Docker embedded DNS with external resolvers	yyamashita	-0/+5
	127.0.0.11 は MX クエリを正しく処理できないため 8.8.8.8/1.1.1.1 に差し替える。メールコンテナはコンテナ名解決が不要なため問題なし。 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-01	Fix entrypoint: remove chmod on read-only mount, run opendkim as root	yyamashita	-5/+2
	/etc/opendkim が :ro マウントのため chmod/chown が失敗していた問題を修正。 opendkim.conf で UserID root に変更しコンテナ内でルートとして実行する。 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-01	Add Postfix+OpenDKIM MTA with txt-based domain management	yyamashita	-0/+32
	- mail/ ディレクトリ追加: Postfix + OpenDKIM の Docker コンテナ - mail/domains.txt で送信ドメインを管理（現在: golive.yyamashita.com） - install.sh が domains.txt から KeyTable/SigningTable を動的生成 - setup-route53.py で SPF/DKIM/DMARC を Route 53 に一括設定 - post-receive フックに mail/deploy.sh を追加 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>