UAI Mail docs
runbookrunbooksv2redacted view

UAI Mail Preserve and Restore

Verify Mac archives and restore Mailu after wipe. Owner-gated — not safe-auto. See GO checklist 2026-07-11 (NO-GO).

Updated 2026-07-11·Freshness: Reference·Sensitive tokens or credentials were hidden before display.

UAI Mail Preserve and Restore

Verify Mac archives and restore Mailu after wipe. Owner-gated — not safe-auto. See GO checklist 2026-07-11 (NO-GO).

Body

UAI Mail — Preserve and Restore

Preserved Artifacts (Mac)

Folder (broken path form):

UAI-preserved-artifacts / wipe-readiness-2026-07-03 / umail /

Contents:

  • mailu-data-<UTC-stamp>.tar.gz plus .sha256 sidecar
  • mailu-config-<UTC-stamp>.tar.gz plus .sha256 sidecar
  • manifest and metadata inventory

Known stamp fragment for the full preserve pass: 2026-07-03-T225000Z.

Archives contain secrets (mailu.env, certs, DKIM). Never print values into docs, logs, or model context.

Verify Integrity (Mac)

cd "$HOME/Documents/UAI-preserved-artifacts"
cd wipe-readiness-2026-07-03/umail
ls
shasum -a 256 -c mailu-data-2026-07-03-T225000Z.tar.gz.sha256
shasum -a 256 -c mailu-config-2026-07-03-T225000Z.tar.gz.sha256

If sidecar names use a compact stamp form, list the directory and check the matching sidecar for each archive.

Transfer to Host

Owner approval required before restore that starts services.

# From Mac — use hostname, not embedded secrets
scp mailu-data-2026-07-03-T225000Z.tar.gz root@mail.united-ai.ca:/root/
scp mailu-config-2026-07-03-T225000Z.tar.gz root@mail.united-ai.ca:/root/

Restore Config

LEGACY WARNING. mailu.env is inside the config archive. Restore in place. Never cat, echo, or pipe values into models, logs, or docs.

Members extract as root/mail/... with tar -C /.

tar -C / -xzf /root/mailu-config-2026-07-03-T225000Z.tar.gz
ls /root/mail/docker-compose.yml /root/mail/mailu.env /root/mail/renew-certs.sh

Restore Data

Members extract as mailu/... with tar -C /.

tar -C / -xzf /root/mailu-data-2026-07-03-T225000Z.tar.gz
ls /mailu/mail /mailu/data /mailu/dkim /mailu/certs /mailu/filter /mailu/webmail /mailu/redis /mailu/mailqueue

Post-Restore Validation (Owner-Gated)

Do not start containers without owner approval. When approved:

  1. Confirm Docker and Compose plugin are installed.
  2. From /root/mail, run docker compose config.
  3. Run docker compose up -d only with explicit owner approval.
  4. Verify listeners on ports 25, 465, 587, 143, and 993.
  5. Reconcile 8 maildirs vs 3 admin DB users — see uai-doc-runbooks-uai-mail-state.
  6. Confirm DNS intent (MX/SPF/DMARC) still matches; do not change DNS without owner approval.

Do not run renew-certs.sh until Beacon/Mailu coupling freeze is lifted — see uai-doc-runbooks-uai-mail-boundaries.

See Also

  • uai-doc-ecosystem-product-uai-mail
  • uai-doc-runbooks-uai-mail-arch

  • uai-doc-plans-uai-mail-ai-access

  • [REDACTED:high-entropy] — Owner GO checklist 2026-07-11 (NO-GO / not safe-auto)