Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Integrate Genma's post about automatic emails #1343

Open
wants to merge 7 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from 5 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions admindoc.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,7 @@
* [Domains, DNS and certificates](/domains)
* [Email](/email)
* [Forms to remove its IP address from the black lists](/blacklist_forms)
* [Automatic admin emails](/auto_email_admin)
* [XMPP](/XMPP)
* [Backup](/backup)
* [Updating the system](/update) and [apps](/app_update)
Expand Down
1 change: 1 addition & 0 deletions admindoc_fr.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,7 @@
* [Les domaines, la configuration DNS et les certificats](/domains)
* [Les emails](/email)
* [Formulaires pour enlever son adresse IP des listes noires](/blacklist_forms)
* [Emails automatiques](/auto_email_admin)
* [XMPP](/XMPP)
* [Les sauvegardes](/backup)
* [Mettre à jour le système](/update) et [les applications](/app_update)
Expand Down
82 changes: 82 additions & 0 deletions auto_email_admin.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,82 @@
This article lists the different mails that are sent automatically by different treatments and automated processes from a Yunohost server.

# Prerequisites - email aliases

In Yunohost's administration area, on the first user's file created, there are the following email aliases:

_Email Aliases_

* [email protected]
* [email protected]
* [email protected]
* [email protected]

Any message sent to one of these addresses is sent to the user's primary email address.

Note: all these mails are sent by the mail server running on Yunohost to itself (if the aliases are on the domain linked to the Yunohost machine),
but can also be sent as a copy to an external e-mail, if the field "Transfer addresses" is also filled in._

# E-mails automatically sent by Yunohost

## Self-diagnostic emails

* Sender: Cron Daemon
* Subject: 'Cron test -x /usr/sbin/anacron || ( cd / && run-parts -report /etc/cron.daily )'
* Recipient: [email protected]
* Message body:
> Automatic diagnosis on mondomaine.fr 'Issues found by automatic diagnosis on mondomaine.fr' The automatic diagnosis on your YunoHost server identified some issues on your server. You will find a description of the issues below. You can manage those issues in the 'Diagnosis' section in your webadmin.

Since version 3.8, Yunohost offers, in graphical form within the administration area and via command line, a complete automatic diagnostic tool
indicating the offsets between the optimum settings for a server and the current situation.

This report is sent by e-mail every 24 hours, if errors or faults are found, and have not already been set to "ignore".
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

IIRC, there is two emails sent by 24 hours.



## Certificate Renewal (Let's Encrypt)

* Sender: [email protected]
* Recipient : [email protected]
* Subject : Certificate renewing attempt for mondomaine.fr failed !
* Message body :
> An attempt to renewing the certificate for domain mondomaine.fr failed with the following
error: Certificate renewing for mondomaine.fr failed! Here's the tail of /var/log/yunohost/yunohost-cli.log, which might help to investigate :

Domains and subdomains for which the self-signed certificate has been replaced by a Let's Encrypt certificate have their certificates renewed automatically.
Sometimes the renewal may have an error (temporary or permanent) which is sent to the administrator.

## Following the installation of an application

* Sender: root
* Topic :`etherpad_mypads` has just been installed
* Recipient: [email protected]
* Message body:
> This is an automated message from your beloved YunoHost server. Specific information for the application etherpad_mypads.

Yunohost's packaging tools allow to propose, when installing a new application, to send an email to the root account with the operation information.
As of today (July 2020), only the Etherpad_Mypads application uses this function.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's not right, Wordpress has this feature too.


## Mail not sent

* Sender: [email protected]
* Recipient: [email protected]
* Subject: Undelivered Mail Returned to Sender

When you use your mailbox (and thus the Yunohost server as a mail server) and there was a problem sending the mail (unknown recipient or other ...), it informs you of errors.

# The other automatic mails
## Connection alert message

* Sender: [email protected]
* Subject: *** SECURITY information for mondomaine.ynh.fr ***
* Message body:
> yunohost: Apr 30 12:23:09: user1: 1 incorrect password attempt; TTY=pts/1; PWD=/var/www/nextcloud/config; USER=root; COMMAND=/bin/nano config.php

When you try to log in several times using the `sudo' command and make a typo in your password, the account gets an email informing them of the error (and the potential bruteforce attempt for example).
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
When you try to log in several times using the `sudo' command and make a typo in your password, the account gets an email informing them of the error (and the potential bruteforce attempt for example).
When you try to log in several times using the `sudo` command and make a typo in your password, the account gets an email informing them of the error (and the potential bruteforce attempt for example).


## The security bulletin

* Sender: [email protected]
* Recipient: [email protected]
* Subject: Debian security status of Yunohost

Not sent by default by Yunohost, this mail is linked to the `Unattended Upgrades` package which can be installed manually, to get automatic security updates on its server.
82 changes: 82 additions & 0 deletions auto_email_admin_fr.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,82 @@
Cet article recense les différents mails qui sont envoyés de façon automatique par différents traitements et processus automatisés depuis un serveur Yunohost.

# Prérequis - les alias mails

Dans l’espace d’administration de Yunohost, sur la fiche du premier utilisateur créé, il y a les alias mails suivants :

_Alias de courriel_

* [email protected]
* [email protected]
* [email protected]
* [email protected]

Tout message envoyé à l’une de ces adresses est envoyé à l’adresse mail principale de l'utilisateur.

_Remarque : tous ces mails sont envoyés par le serveur de mail tournant sur Yunohost à lui-même (si les alias sont sur le domaine lié à la machine Yunohost),
mais peuvent également être envoyés en copie à un mail extérieur, si le champ "Adresses de transfert" est également rempli._

# Les mails envoyés automatiquement par Yunohost

## Les mails de diagnostique automatique

* Expéditeur : Cron Daemon
* Sujet : ’Cron test -x /usr/sbin/anacron || ( cd / && run-parts —report /etc/cron.daily )’
* Destinataire : [email protected]
* Corps du message :
> Automatic diagnosis on mondomaine.fr ’Issues found by automatic diagnosis on mondomaine.fr’ The automatic diagnosis on your YunoHost server identified some issues on your server. You will find a description of the issues below. You can manage those issues in the ’Diagnosis’ section in your webadmin.

Depuis la version 3.8, Yunohost propose en graphique au sein de l’espace d’administration et en ligne de commande, un outil de diagnostique automatique assez complet
indiquant les décalages entre les réglages optimum pour un serveur et la situation réelle actuelle.

Ce rapport est envoyé par mail chaque 24h, si des erreurs ou des défauts sont trouvés, et qu'ils n'ont pas déjà été réglés à "ignorer".
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same remark.



## Renouvellement des certificats (Let’s Encrypt)

* Expéditeur : [email protected]
* Destinataire : [email protected]
* Sujet : Certificate renewing attempt for mondomaine.fr failed !
* Corps du message :
> An attempt for renewing the certificate for domain mondomaine.fr failed with the following
error : Certificate renewing for mondomaine.fr failed ! Here’s the tail of /var/log/yunohost/yunohost-cli.log, which might help to investigate :

Les domaines et sous-domaines pour lesquels le certificat autosigné a été remplacé par un certificat /Let’s Encrypt voient leurs certificats renouvellés de façon automatique.
Parfois, le renouvellement peut présenter une erreur (temporaire ou définitive) qui est ainsi envoyée à l'administrateur.

## Suite à l’installation d’une application

* Expéditeur : root
* Sujet :`etherpad_mypads` has just been installed
* Destinataire : [email protected]
* Corps du message :
> This is an automated message from your beloved YunoHost server. Specific information for the application etherpad_mypads.

Les outils de packaging de Yunohost permettent de proposer, à l’installation d’une nouvelle application, un envoi d'email sur le compte root avec les informations de l'opération.
A ce jour (Juillet 2020) seule l'application Etherpad_Mypads utilise cette fonction.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same remark


## Mail non envoyé

* Expéditeur : [email protected]
* Destinataire : [email protected]
* Sujet : Undelivered Mail Returned to Sender

Quand on utilise sa boite mail (et donc le serveur Yunohost comme serveur de mail) et qu’il y a eu un soucis à l’envoi du mail (destinataire inconnu ou autre...), celui-ci nous informe des erreurs.

# Les autres mails automatiques
## Message d’alerte connexion

* Expéditeur : [email protected]
* Sujet : *** SECURITY information for mondomaine.ynh.fr ***
* Corps du message :
> yunohost : Apr 30 12:23:09 : user1 : 1 incorrect password attempt ; TTY=pts/1 ; PWD=/var/www/nextcloud/config ; USER=root ; COMMAND=/bin/nano config.php

Quand on tente de se connecter plusieurs fois via la commande `sudo` et que l’on fait une faute de frappe dans son mot de passe, le compte reçoit un mail pour informer de l’erreur (et de la potentielle tentative de bruteforce par exemple).

## Le bulletin de sécurité

* Expéditeur : [email protected]
* Destinataire : [email protected]
* Sujet : Debian security status of Yunohost

Non envoyé par défaut par Yunohost, ce mail est lié au paquet `Unattended Upgrades` qui peut être installé manuellement, pour avoir des mises à jour de sécurité automatique sur son serveur.