- Shipped
- September 12, 2026 at 6:56 PM UTC
- Author
- Kamo
- Commit
- 00fddd1
Every bulk and shared-article message offers an unsubscribe by email (List-Unsubscribe mailto), but mail to that address went to postmaster and was never acted on. Now postfix hands exactly that address, and unsubscribe+anything@ on the same domain, to a small pipe that spools the message, and a new unsubscribe-mail sidecar posts it to EmailService's /api/internal/unsubscribe/mail. EmailService finds the recipient's token in the subject (or the plus-address, or the forwarded link) and unsubscribes them exactly as the one-click link does; anything without a valid token is accepted and dropped. - Every other address is routed as before: the one regexp line matching unsubscribe@hello.kamocrm.com sits above the postmaster catch-all, and transport_maps names only the pseudo-domain it rewrites to. - Nothing is ever bounced or replied to: the pipe only ever answers "delivered" or "try later", and caps its spool at 5000 messages. - The sidecar reuses the postfix-bulk-delivery-events copy of the internal secret, optionally, and never exits, so it can not keep postfix from starting or take the pod out of its Service.