majorwiki/02-selfhosting
MajorLinux 631d7e8bc5 Logwatch fleet article: add Fedora CA bundle diagnosis + bounce-source guidance
Documents three lessons from the 2026-05-10 fleet outage where the
Fedora half (majorhome, majorlab) had been silently failing to send
notification mail for days:

- Missing /etc/pki/tls/certs/ca-bundle.crt symlink (extracted bundle
  exists at /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem but the
  consumer-path symlink was lost during a ca-certificates package
  event). Diagnosis includes the cross-tool tell — dnf and curl break
  with the same path. Fix is a single ln -sfn.
- Methodology: Fedora and majormail log postfix to journald; Debian and
  Ubuntu log to /var/log/mail.log. Querying the wrong source returns
  false negatives for healthy hosts.
- Bounce-source addresses (Watchtower NOTIFICATION_EMAIL_FROM,
  fail2ban sender, root@<host>.localdomain) must resolve to real
  mailboxes — otherwise the first failed delivery generates
  bounce-of-bounce churn.

Also promoting the article from untracked to committed; it had been
authored on 2026-05-09 and not yet added to the repo.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-10 12:08:15 -04:00
..
cloud wiki: publish 3 unpushed articles and catch nav up 2026-04-21 09:17:31 -04:00
dns-networking wiki: update fail2ban digest + netdata docker health + 3 new articles 2026-05-02 14:58:07 -04:00
docker Add 5 wiki articles from 2026-04-17/18 work 2026-04-18 11:13:39 -04:00
monitoring Logwatch fleet article: add Fedora CA bundle diagnosis + bounce-source guidance 2026-05-10 12:08:15 -04:00
reverse-proxy Add 5 wiki articles from 2026-04-17/18 work 2026-04-18 11:13:39 -04:00
security ClamAV fleet caveat: add follow-up on the polite-CPU-on-1vCPU edge case 2026-05-10 02:32:35 -04:00
services services: add Mastodon --prune-profiles trap and recovery article 2026-05-07 12:01:47 -04:00
storage-backup Add 5 wiki articles from 2026-04-17/18 work 2026-04-18 11:13:39 -04:00
index.md wiki: update fail2ban digest + netdata docker health + 3 new articles 2026-05-02 14:58:07 -04:00