feat(mail): fleet mail-env audit + map; PMG VIP proposal [#696][#694]

Audit findings note (55/64 systems, read-only): https://projects.knownelement.com/issues/696#note-4088 Map + deploy plan: https://community.turnsys.com/t/322 Key: relayhost empty fleet-wide (direct-to-MX today); prod PMG pair already installed (VM 604/711, PMG 9.1, unclustered); VIP slot proposed 192.168.3.249; open PQs in questions-v8.md.
2026-09-03 12:49:59 -05:00
parent 7ca87c1200
commit d3b9099d5f
5 changed files with 309 additions and 0 deletions
@@ -0,0 +1,21 @@
+# netinfra/mail — PMG / fleet mail tooling
+
+Pointers + usage. Knowledge doc (map, findings, deploy plan):
+[Discourse t/322 — Mail environment map + PMG deploy plan](https://community.turnsys.com/t/322).
+Ticket: [Redmine #696](https://projects.knownelement.com/issues/696).
+
+## Files
+
+- `audit-mail-env.sh` — read-only mail probe, runs ON a target
+  (postfix config, alt relays, identity, :25 listeners, relay log
+  evidence). Delivered via the ssh chokepoints only
+  (`remote.sh prox-file|vm-file`, `remote-dns.sh <host>-file`).
+- `run-mail-audit.sh` — drives the probe across
+  `audit-targets.txt`; output per host under `.crush/audit/mail/`.
+- `audit-targets.txt` — fleet target list (`mode|name|user`).
+
+## Re-run the audit
+
+```bash
+bash netinfra/mail/run-mail-audit.sh
+```