0.2.0

Install

Add the software repository https://danb35.github.io/ns8-repomd/ in Software center → Settings → Software repositories, then install automx from the Software center. Or from a shell on the leader node:

add-module ghcr.io/danb35/automx:0.2.0 1

Existing instances installed from the repository are offered this version as an update; otherwise run update-module with ghcr.io/danb35/automx:0.2.0. Enabled domains and settings are kept.

What's new since 0.1.1

• Calendars, contacts and ActiveSync. Settings has a CalDAV/CardDAV provider and an ActiveSync provider, each offering the installed Nextcloud, SOGo or WebTop that can serve this mail server (both are off until you choose one):
  • Apple profiles get calendar and contacts accounts, Thunderbird is told about the calendar and address book, and Outlook and phones using ActiveSync are pointed at the ActiveSync server. Users log in with their mail user name.
  • An app is offered when it has a host name and uses the mail server's user domain. ActiveSync also needs SOGo or WebTop to use this mail server (Nextcloud has none), and SOGo only offers what is switched on in its own settings. Nextcloud is offered only when it runs on the same node as automx.
  • Tested on real nodes with Nextcloud 1.7.5, SOGo 2.2.8 and WebTop 1.5.10. An iPhone (iOS 26.7) set up mail, calendar and contacts from a profile against Nextcloud, and added an Exchange account whose calendar synced with SOGo, asking for the password once.
• Mail aliases resolve to a login. A client given an alias that delivers to one user (dan.brown@ for user dan) now gets that user's login and name instead of the bare address. Aliases shared by several users, groups, public folders and external addresses are left as before. New or changed aliases are picked up within 15 minutes. On by default, which changes what existing instances hand out for such aliases: like display names, it tells anyone who asks which login is behind an alias. Turn off Resolve mail aliases in Settings for the previous behavior.
• Signed Apple profiles. Sign Apple profiles (off by default) signs downloaded .mobileconfig profiles with the service host's certificate: the one Let's Encrypt issues, or one you uploaded. iOS then shows the profile as signed, and macOS no longer shows it as unsigned. Settings says whether profiles are being signed and, if not, why (no certificate yet, or one that can't sign, such as an ECDSA key); a certificate this server doesn't trust is used with a warning. Renewals are picked up automatically. Turning it on places that certificate's private key in the automx container. Tested with a Let's Encrypt certificate on iOS 26.7 and macOS 15.8.
• The capitalized Autodiscover path (/Autodiscover/Autodiscover.xml), which Outlook and phones also use, is now served. An iPhone's Exchange setup used it. automx serves it through a patch until upstream releases the change (croessner/automx#2).
• automx itself is updated to 3.0.0-beta.4.
• The Settings page is translated into German, Spanish, French, Italian, European Portuguese and Brazilian Portuguese, including all new settings.

This release adds the traefik@node:certadm permission, which reading the certificate for signing needs; it is granted when an instance updates. It also allows setting and deleting certificates, which automx never does.

Fixes

• Display names from OpenLDAP were cut to their first word ("Test User" became "Test"). automx now reads the full name, as NS8 itself does. Samba AD was not affected.
• "Completed" notifications: background work (such as the new alias refresh) and route and DNS changes no longer show bare "Completed" notifications in the admin UI.
• For maintainers: CI now publishes the automx-app image it has just built. It had been republishing the image first built on 2026-09-23 under every tag. 0.1.0 and 0.1.1 were not affected, since nothing in that image had changed.

Everything else is as in 0.1.1. See the user guide for the new settings.

Full changelog: 0.1.1...0.2.0