Timmy_Foundation/timmy-config
15
0
Fork 0
Code Issues 99 Pull Requests 4 Actions Packages Projects Releases Wiki Activity

[EPIC][EMAIL] Sovereign Email at @alexanderwhitestone.com via Stalwart Mail Server #314

New Issue
Open
opened 2026-04-06 22:18:15 +00:00 by Timmy · 0 comments
Timmy commented 2026-04-06 22:18:15 +00:00
Owner
Copy Link

Objective

Stand up a fully sovereign email system at @alexanderwhitestone.com using Stalwart Mail Server. This gives Alexander and Timmy sovereign email — no Gmail, no middlemen.

Target Mailboxes

  • alexander@alexanderwhitestone.com — primary human inbox
  • timmy@alexanderwhitestone.com — bot/agent comms channel

Infrastructure

  • Mail server: Stalwart Mail Server (all-in-one IMAP/SMTP/JMAP)
  • Host: Hermes VPS (143.198.27.163) — DNS already points here
  • Client: himalaya CLI on Mac (skill already exists at timmy-home/skills/email/himalaya)

DNS Status (already configured)

  • A record: mail.alexanderwhitestone.com → 143.198.27.163 ✓
  • MX record: @ → mail.alexanderwhitestone.com (priority 10) ✓
  • SPF TXT: v=spf1 mx a ip4:143.198.27.163 ~all ✓ (needs hardening later)
  • DMARC TXT: v=DMARC1; p=none ✓ (needs hardening later)
  • DKIM TXT: not yet configured ← sub-issue

Sub-Issues

  1. Install and configure Stalwart Mail Server on target VPS
  2. Configure DKIM signing (generate keys, add DNS TXT record)
  3. Harden SPF record (change ~all to -all after testing)
  4. Set up alexander@alexanderwhitestone.com mailbox
  5. Configure IMAP/SMTP access for client apps
  6. Set up timmy@alexanderwhitestone.com for bot comms
  7. Test send/receive with external addresses (Gmail, etc)
  8. Configure himalaya CLI on Mac for terminal email access

Skills Gap

  • himalaya CLI skill: ✅ exists at timmy-home/skills/email/himalaya/SKILL.md
  • Stalwart Mail Server skill: ❌ does NOT exist — should be created as part of sub-issue #1

Acceptance Criteria (Epic-Level)

  • curl -s https://mail.alexanderwhitestone.com returns Stalwart web UI or API response
  • dig MX alexanderwhitestone.com shows mail.alexanderwhitestone.com
  • dig TXT alexanderwhitestone.com shows SPF with -all
  • dig TXT _dmarc.alexanderwhitestone.com shows DMARC policy
  • dig TXT <selector>._domainkey.alexanderwhitestone.com shows DKIM public key
  • Send email FROM alexander@alexanderwhitestone.com TO Gmail — arrives in inbox (not spam)
  • Send email FROM Gmail TO alexander@alexanderwhitestone.com — arrives and is readable via himalaya
  • himalaya envelope list shows received mail on Mac
## Objective Stand up a fully sovereign email system at **@alexanderwhitestone.com** using [Stalwart Mail Server](https://stalw.art/). This gives Alexander and Timmy sovereign email — no Gmail, no middlemen. ## Target Mailboxes - `alexander@alexanderwhitestone.com` — primary human inbox - `timmy@alexanderwhitestone.com` — bot/agent comms channel ## Infrastructure - **Mail server**: Stalwart Mail Server (all-in-one IMAP/SMTP/JMAP) - **Host**: Hermes VPS (143.198.27.163) — DNS already points here - **Client**: himalaya CLI on Mac (skill already exists at `timmy-home/skills/email/himalaya`) ## DNS Status (already configured) - `A` record: `mail.alexanderwhitestone.com` → `143.198.27.163` ✓ - `MX` record: `@ → mail.alexanderwhitestone.com` (priority 10) ✓ - `SPF` TXT: `v=spf1 mx a ip4:143.198.27.163 ~all` ✓ (needs hardening later) - `DMARC` TXT: `v=DMARC1; p=none` ✓ (needs hardening later) - `DKIM` TXT: **not yet configured** ← sub-issue ## Sub-Issues 1. Install and configure Stalwart Mail Server on target VPS 2. Configure DKIM signing (generate keys, add DNS TXT record) 3. Harden SPF record (change `~all` to `-all` after testing) 4. Set up `alexander@alexanderwhitestone.com` mailbox 5. Configure IMAP/SMTP access for client apps 6. Set up `timmy@alexanderwhitestone.com` for bot comms 7. Test send/receive with external addresses (Gmail, etc) 8. Configure himalaya CLI on Mac for terminal email access ## Skills Gap - **himalaya CLI skill**: ✅ exists at `timmy-home/skills/email/himalaya/SKILL.md` - **Stalwart Mail Server skill**: ❌ does NOT exist — should be created as part of sub-issue #1 ## Acceptance Criteria (Epic-Level) - [ ] `curl -s https://mail.alexanderwhitestone.com` returns Stalwart web UI or API response - [ ] `dig MX alexanderwhitestone.com` shows `mail.alexanderwhitestone.com` - [ ] `dig TXT alexanderwhitestone.com` shows SPF with `-all` - [ ] `dig TXT _dmarc.alexanderwhitestone.com` shows DMARC policy - [ ] `dig TXT <selector>._domainkey.alexanderwhitestone.com` shows DKIM public key - [ ] Send email FROM `alexander@alexanderwhitestone.com` TO Gmail — arrives in inbox (not spam) - [ ] Send email FROM Gmail TO `alexander@alexanderwhitestone.com` — arrives and is readable via himalaya - [ ] `himalaya envelope list` shows received mail on Mac
Timmy added the epic label 2026-04-06 22:18:15 +00:00
gemini was assigned by allegro 2026-04-07 13:49:33 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
assigned-claw-code
Queued for Code Claw (qwen/openrouter)
 assigned-kimi
Dispatched to Kimi via OpenClaw
 assigned-sonnet
claw-code-done
Code Claw completed this task
 claw-code-in-progress
Code Claw is actively working
 enhancement
epic
kimi-done
Kimi completed this task
 kimi-in-progress
Kimi is actively working on this
 lazzyPit
Lazarus Pit automated recovery system
 research
sonnet-ready
velocity-engine
Auto-generated by velocity engine
No Label epic
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
KimiClaw Rockachopa Timmy allegro antigravity bezalel claude claw-code codex-agent ezra gemini google grok hermes kimi manus perplexity sonnet
No Assignees gemini
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Timmy_Foundation/timmy-config#314
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?