Hello aaPanel Team,
I am using the latest aaPanel with Nginx and aaPanel Mail Server (Postfix/Dovecot).
For example, my setup is:
Server IP: 203.0.113.10
Main/infrastructure domain: example.com
Mail hostname: mail.example.com
DNS provider: Cloudflare
Mail ports: 465 and 587
I use mail.example.com as a central mail server for multiple domains, for example:
website-a.com
website-b.com
website-c.com
│
▼
mail.example.com
│
▼
Central Mail Server
All these domains use the same central mail server instead of having separate mail servers for each domain.
For the mail server, I currently use a Let's Encrypt wildcard certificate:
*.example.com
example.com
The certificate is working correctly on both SMTP 465 and STARTTLS 587. I verified it with OpenSSL, and the certificate contains:
DNS:*.example.com
DNS:example.com
My question
The wildcard certificate is currently obtained using DNS verification.
When Let's Encrypt renews the certificate, the private key and certificate may change. I want to know whether aaPanel can automatically deploy the renewed certificate to the Mail Server (Postfix/Dovecot).
Ideally, I want:
Cloudflare DNS API
↓
Automatic Let's Encrypt renewal
↓
New wildcard certificate
↓
Automatically deployed to Mail Server
↓
Postfix/Dovecot automatically reloaded
So I don't have to manually copy the new Private Key and Certificate into Mail Server SSL after every renewal.
Questions
Does the current aaPanel Mail Server support automatic SSL renewal and automatic deployment?
If the website/domain SSL is automatically renewed, will the Mail Server certificate also update automatically?
If not, what is the officially recommended production-safe method for automatic deployment?
Is there an official aaPanel hook, cron, API, or deployment mechanism for this?
Is using a symlink between the aaPanel website certificate and Mail Server certificate officially supported?
I would prefer an official and production-safe solution, rather than an unsupported workaround.
Thank you.
