chore: bump start-sdk to 3.1.0; 1.163.0:1 → 1.163.0:2

README.md

@@ -187,7 +187,7 @@ Seven forms over `homeserver.yaml`, all available whether or not the service is
 - **Registration** governs whether new accounts can be created, which rooms they land in, and whether guests may look around.
 - **Rate Limits** tunes Synapse's throttles, including `rc_profile` for profile lookups. Normal and Relaxed leave that limit to Synapse; Custom reads and writes its sustained rate and burst. Its Custom preset also carries `remote_media_download_per_second` and its burst — bytes rather than counts, and applied per requester, so they throttle one person's media fetching without touching anyone else's.
 - **Discoverability** controls how visible the server and its rooms are to the wider network. In Custom, **Only Share Profiles Within Shared Rooms** requires **Require Sign-in to View Profiles**; the action rejects the invalid combination before writing configuration.
-- **Email/SMTP** takes StartOS's system SMTP, your own server, or disabled. Email notifications and transport security are enforced on where the rest of that block is yours.
+- **Email/SMTP** takes StartOS's system SMTP, your own server, or disabled. Email notifications and transport security are enforced on where the rest of that block is yours. The selected connection security sets `email.force_tls`: TLS uses implicit TLS; STARTTLS upgrades the SMTP connection.
 
 ### App Services — Register Appservice, List Appservices, Delete Appservice
 

instructions.md

@@ -107,7 +107,7 @@ The **Admin Dashboard** interface opens Ketesa. Log in with the admin credential
 - **Import Existing Homeserver** — adopt a homeserver you run elsewhere. See above; only available before the first start.
 - **Rate Limits** — how fast people may send messages, look up profiles, join rooms, invite others and sign in. Pick Normal or Relaxed; pick Custom if you want to set any of them yourself.
 - **Discoverability** — what someone without an account can find out about your server. Pick Private, Normal or Public; pick Custom to decide each setting.
-- **Email/SMTP** — email notifications, using either your StartOS system SMTP settings or custom credentials.
+- **Email/SMTP** — email notifications, using either your StartOS system SMTP settings or custom credentials. Match **Connection Security** to your provider: **TLS** uses port 465; **STARTTLS** upgrades the connection on the selected port.
 - **Get Access Token** — return a Matrix access token for a given username and password; useful for programmatic access. The service must be running.
 - **Force-Purge Room** — delete a room and its history from your server when deleting it from the Admin Dashboard fails. It removes everyone here from the room, even members Synapse cannot remove the normal way, and it cannot be undone. Sign in with an admin account; the service must be running.
 - **Register / List / Delete Appservice** — manage Matrix bridges (appservices). Create the user accounts a bridge needs from the **Users** tab of the Admin Dashboard. Leave **Appservice URL** empty for a bot that only sends messages and never needs to hear from the homeserver.

package.json

@@ -1,7 +1,7 @@
 {
   "name": "synapse-startos",
   "dependencies": {
-    "@start9labs/start-sdk": "3.0.6"
+    "@start9labs/start-sdk": "3.1.0"
   },
   "overrides": {
     "@start9labs/start-sdk": "$@start9labs/start-sdk"

startos/fileModels/homeserver.yml.ts

@@ -235,6 +235,7 @@ const shape = z.looseObject({
       enable_notifs: z.literal(true),
       require_transport_security: z.literal(true),
       // set by SMTP config
+      force_tls: z.boolean().catch(false),
       notif_from: z.string(),
       smtp_host: z.string(),
       smtp_pass: z.string().optional(),

startos/main.ts

@@ -139,6 +139,7 @@ export const main = sdk.setupMain(async ({ effects }) => {
     email: smtpCredentials && {
       enable_notifs: true,
       require_transport_security: true,
+      force_tls: smtpCredentials.security === 'tls',
       notif_from: smtpCredentials.from,
       smtp_host: smtpCredentials.host,
       smtp_port: smtpCredentials.port,

startos/versions/current.ts

@@ -1,13 +1,13 @@
 import { VersionInfo } from '@start9labs/start-sdk'
 
 export const current = VersionInfo.of({
-  version: '1.163.0:1',
+  version: '1.163.0:2',
   releaseNotes: {
-    en_US: 'Performance improvement',
-    es_ES: 'Mejora de rendimiento',
-    de_DE: 'Leistungsverbesserung',
-    pl_PL: 'Poprawa wydajności',
-    fr_FR: 'Amélioration des performances',
+    en_US: `Fixes email notifications not sending through SMTP servers set to TLS security. Adds Forward Email to the SMTP provider presets.`,
+    es_ES: `Corrige las notificaciones por correo que no se enviaban a través de servidores SMTP con seguridad TLS. Añade Forward Email a los proveedores SMTP predefinidos.`,
+    de_DE: `Behebt, dass E-Mail-Benachrichtigungen über SMTP-Server mit TLS-Sicherheit nicht versendet wurden. Fügt Forward Email zu den vordefinierten SMTP-Anbietern hinzu.`,
+    pl_PL: `Naprawia niewysyłanie powiadomień e-mail przez serwery SMTP z zabezpieczeniem TLS. Dodaje Forward Email do predefiniowanych dostawców SMTP.`,
+    fr_FR: `Corrige les notifications par e-mail qui n'étaient pas envoyées via les serveurs SMTP configurés en sécurité TLS. Ajoute Forward Email aux fournisseurs SMTP prédéfinis.`,
   },
   migrations: {
     up: async ({ effects }) => {},