Your question
I am trying to follow the migration guide to migrate from 0.15.x to 0.16.x. I am currently setting up the new 0.16.x instance. My setup with the 0.15.x server was that its hostname was mx2.example.net and it was serving example.com and example.org as maildomains (note the different TLDs to illustrate separate domains). Stalwart was successfully acquiring a TLS certificate for mx2.example.net via ACME with Let’s Encrypt using Cloudflare’s DNS API.
When trying to replicate this setup with 0.16.x and reading the documentation, I understand that performing the DNS-01 ACME challenge requires configuring a domain object for the respective domain (mx2.example.net) and enabling automatic DNS management.
However, I don’t want to receive mail under mx2.example.net and I also do not require any of the automatic DNS management for this domain since it does not receive any mail. The only remotely useful record would be SPF and TLSA. However during migration when having the intermediate proxy, I need to handle SPF manually and do not want to handle TLSA, where certificates vary. All other records that are mail related should also not be set. When enabling automatic DNS management, the UI does not allow me to deselect all possible records. One record needs to be set.
Since I did not find any related issue, I am assuming that my setup is rather unorthodox and I would be happy to learn what I am doing wrong and which setup would be better, or I would love to learn how I can configure automatic TLS certificate management without enabling any DNS record which I believe to require during the migration phase.
Stalwart version: 0.16.10 (Docker)
I understand that topics in this category are triaged by a bot first but a human reply will follow up. If I’d prefer a human-only reply, I’ll add the no-ai tag to my topic.
on