Back to Changelog
v1.0.230
Mail SSL: SNI per-domain certificate architecture with DKIM/SPF/DMARC overview
New Features
6- Per-domain mail SSL: each domain gets its own certificate via SNI, eliminating hostname-mismatch errors in Outlook, Apple Mail, Fastmail, and Thunderbird
- Startup migrator auto-issues certificates for all existing mail domains on first boot after upgrade, no manual action required
- Daily renewal scheduler at 03:30 renews certificates expiring within 30 days
- Legacy single mail.crt preserved as SNI fallback, zero risk of breaking existing running mail services
- New DKIM/SPF/DMARC per-domain DNS overview endpoint with 8 parallel DNS TXT lookups
- Four new per-domain SSL management API endpoints: list, issue, renew, and bulk issue-all-pending
Improvement
1- Postfix tls_server_sni_maps and Dovecot 15-ssl-sni.conf generators for industry-standard SNI config matching cPanel/Plesk behavior