Automatic DNS-CAA management deletes too many CAA entries

Issue Description

I have enabled in

Management >> Domains >> Domains >> DNS Management >> Records

the record type “CAA records” for my domain “domain.tld”.

Stalwart is deleting all CAA entries in DNS, including the CAA entries for “subdomain.domain.tld”.

This is … undesired in a scenario where Stalwart runs in location A and manages DNS for “domain.tld” and in location B are more services for “subdomain.domain.tld” while both require Let’s Encrypt certificates.

In this scenario I need two CAA entries, one with the Let’s Encrypt account for “domain.tld” and one with the Let’s Encrypt account for “subdomain.domain.tld”.

Expected Behavior

Only delete CAA entries for the configured “domain.tld” at top level at ignore any CAA entries for “subdomain.domain.tld”.

Actual Behavior

Stalwart deletes all CAA entries found.

Stalwart Version

v0.16.x

Installation Method

Docker

Database Backend

RocksDB

Blob Storage

RocksDB

Search Engine

Internal

Directory Backend

Internal

Additional Context

Location A = virtual server in datacenter
Location B = own infrastructure behind OPNSense firewall with Caddy for certificates

I have reviewed the documentation and FAQ and confirm that my issue is NOT addressed there.

on

I have searched this support forum (open and closed topics) and confirm this is not a duplicate.

on

I understand that topics in this category are triaged by a bot first but a human reply will follow up. If I’d prefer a human-only reply, I’ll add the no-ai tag to my topic.

on

Fixed in v0.16.13 which will be released this week.