Hacker News new | ask | show | jobs
by altShiftDev 2391 days ago
Nice, looks good. Can you comment on what logs you keep and how much of users communications you're privy to? Is everything e2e encrypted?
1 comments

Cheers! Nginx access and error logs are kept which do record IP addresses. Default log settings are used for Postfix. The logs are rotated daily using logrotate and retained for 7 days, old log files are deleted.

Log files are only ever used to diagnose any errors/bugs.

Emails received are not e2e encrypted unless they have already been encrypted before arriving to the server.

Users can add their own PGP key to the site for each of their recipients and then the server will encrypt all forwarded emails with it.

Emails received are immediately piped through to the Laravel application by Postfix.