Status page and JSON API read from private/data; root index.php stays a placeholder. Mark todo 06 done.
Co-authored-by: Cursor <cursoragent@cursor.com>
Record live monitor.php cron config in HOSTING.md and close todo 05.
Move optional */5 heartbeat task to todo/13.
Co-authored-by: Cursor <cursoragent@cursor.com>
Add token- and IP-protected ingest.php, boka status checks in monitor.php,
and document the two-repo push workflow. Todo 04 marked complete.
Co-authored-by: Cursor <cursoragent@cursor.com>
Use MTA-style Message-ID and display names on From/To to avoid
SpamAssassin MSGID_RANDY and PDS_NAKED_TO_NUMERO. Add todo/12 for
HTTP token gate on monitor.php (CLI cron unchanged).
Co-authored-by: Cursor <cursoragent@cursor.com>
Document upgraded DMARC policy and known delivery failure to Tuta-hosted
addresses from the 0012.de mail server; no remediation planned yet.
Co-authored-by: Cursor <cursoragent@cursor.com>
Document mail TXT records in the customer login, correct _domainkey
value format, and update todo 02 for DKIM DNS propagation.
Co-authored-by: Cursor <cursoragent@cursor.com>
Add mail.php with STARTTLS sending, test scripts, server.env split from
local .env, admin@ postbox docs, DKIM DNS support-ticket notes, and todo 11
for boka relay.
Co-authored-by: Cursor <cursoragent@cursor.com>
Document Git/Composer capabilities, hosting settings, and backlog todo 10;
record switch from AWStats to GoAccess.
Co-authored-by: Cursor <cursoragent@cursor.com>