One thing I noticed, obviously, was that /letsencrypt/domain.tld/prop.ltcmp.net.key was missing from the contents of the folder:
discourse-mail-receiver:/# ls -tlrha letsencrypt/domain.tld
total 40
-rw-r--r-- 1 root root 3.2K Nov 10 05:10 domain.tld.key
-rw-r--r-- 1 root root 208 Nov 10 05:10 domain.tld.csr.conf
-rw-r--r-- 1 root root 1.6K Nov 10 05:10 domain.tld.csr
-rw-r--r-- 1 root root 2.2K Nov 10 05:10 domain.tld.cer
-rw-r--r-- 1 root root 3.8K Nov 10 05:10 fullchain.cer
-rw-r--r-- 1 root root 1.6K Nov 10 05:10 ca.cer
drwxr-xr-x 3 root root 4.0K Nov 10 05:10 .
-rw-r--r-- 1 root root 799 Nov 11 15:56 domain.tld.conf
drwxr-xr-x 2 root root 4.0K Nov 11 27 15:56 backup
drwxr-xr-x 8 root root 4.0K Nov 16 00:49 ..
It’s interesting since this goes back to this question here by @surety that seems to have not received a direct answer.
The thread there seems to continue to discuss this point, but there’s so much chatter in that thread now that things can become confusing and thus why I’ve created a topic here (to achieve greater clarity for future users with such trouble).
It appears as though the mail-receiver.yml config’s entry POSTCONF_smtpd_tls_key_file’s value of /letsencrypt/domain.tld/prop.ltcmp.net.key must be replaced with /letsencrypt/domain.tld/domain.tld.key.
So the answer to @surety’s #1 question is “YES” this is correct to replace this entry’s contents with the one that you see. #2 also seems correct to leave as default.
I believe that perhaps either @pfaffman or @mpalmer probably should retool the container creation script to have the correct .key file instead of this (apparent wrong) prop.ltcmp.net.key entry…
At this point I am now fortunately able to move on from and past @mpalmer’s step:
You can also now try sending an e-mail to nobody@forum.example.com . While Discourse won’t do anything useful with it yet, the e-mail you sent should show up in your admin panel under “Emails”, “Rejected” in a matter of seconds. If that happens, you’re definitely ready to proceed.
Since now my test email is showing up in the Discourse /admin/email/rejected list!
I thought it was obvious that prop.ltcmp.net was a place-holder just like domain.tld.
Between the move to Debian and the new mail receiver, there could be some other changes needed. I’ll try to have a look in the next few days, as my install scripts may have been broken by these updates.
Interesting, why do you think this is obviously seen as just a placeholder? Should the acronyms be self-evident? If so, then perhaps let’s make it even more self evident with something more like: <REPLACE_THIS_WITH_LETSENCRYPT_DOT.KEY_FILE_PATH.key>
