thunderbird / thunderbird/mailstrom

Test/document ACM cert renewal process

Open
#166 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

documentation infra monitoring security
Dominant language
Python
Stars
20
Forks
2
Avg merge
36m
Merged PRs (30d)
2

Description

We rely on a TLS certificate issued by AWS for encrypting mail service traffic and Stalwart's management API traffic. We currently will alert when this cert is within 30 days of expiration, but we do not currently have documentation on how to renew this certificate. We need to test that process and write it up here or in a runbook somewhere.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the AWS ACM certificate used for mail service and Stalwart management API traffic, and review the existing 30-day expiration alert. Test the renewal process in the relevant environment, then document the steps and verification in this issue or a runbook; done means another operator can renew the certificate and confirm both services remain covered.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, documentation, security
Issue type
Documentation
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.