this post was submitted on 14 Apr 2026
10 points (91.7% liked)
Sysadmin
13973 readers
1 users here now
A community dedicated to the profession of IT Systems Administration
No generic Lemmy issue posts please! Posts about Lemmy belong in one of these communities:
!lemmy@lemmy.ml
!lemmyworld@lemmy.world
!lemmy_support@lemmy.ml
!support@lemmy.world
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I was just surprised to see anyone doing mail in 2026!
I wish it would just die already.
I have wasted weeks to months of time on postfix + dovecot, SSL, non-DUL IPs, spam, etc.
Oy, letsencrypt with dns challenge and nsupdate have me automated on the SSL side, proxy for spam, all I care about is the first two now. Yeah, not an easy task, but paying for a spam proxy took 90% of maintenance away.
Well the really hard thing about SSL is sni maps, at least when working the first time with it and trying to debug it (especially with Thunderbird desktop which still wrongfully reports an invalid certificate 50% of the time. Click on refresh and it suddenly says it's okie-dokie)
Thankfully we only give two possible endpoints on two different addresses for all our domains .... this is good to know because I was thinking about using SANs as well. Thanks for the warning!