All help articles

Your own addresses for webmail and more

A team can give its people addresses on its own domain: webmail at mail.acme.com, the team manager at admin.acme.com, and (with those features) the public forums at forum.acme.com and the public wiki at wiki.acme.com. Each opens at the root of its address, with its own certificate.

Setting one up

1. The name must be on one of the team's proven domains (a domain verified with its ownership record).
2. In your DNS, add a CNAME from the name to the target the team manager shows (the platform's sites. name, or the server's host name). A name that cannot have a CNAME, such as a domain's own apex, can instead point at the same addresses as the target.
3. In the team manager, Your own addresses on the team page: enter the names and choose Save addresses. Each is checked at once.

The card shows each name's check: points here, or not yet with what DNS has. Names are checked again every 30 minutes until they point here, and daily after that; Check now checks at once. Webmail and team manager names are used only once a check finds them pointing here, so the server never asks for a certificate it cannot get; the certificate is issued at the first visit.

From the command line:

corpsuite tenant sites set acme mailHost=mail.acme.com manageHost=admin.acme.com
corpsuite tenant sites check acme

A set of addresses for each domain

A tenant with several domains can give each its own: webmail at webmail.acme.com and webmail.acme.net, the tenant manager at manage.acme.net, and so on. On a domain's page, Own addresses on <domain> takes names that are the domain itself or under it (the domain must be proven); set up DNS the same way. They work beside the tenant-wide ones above, and a domain that moves to another tenant takes none of them along.

corpsuite domain sites set acme acme.net mailHost=webmail.acme.net manageHost=manage.acme.net
corpsuite domain sites check acme acme.net

Good to know

• Signing in on your own address is separate from the platform's own webmail address: a browser signed in on one is not signed in on the other.
• Links in mail the platform sends (password resets, invitations) still use the platform's addresses.
• A name is one site's: the same name cannot be both webmail and forums, or used by two teams.
• The operator sets the target under Settings → Host names and HTTPS (Teams point their own addresses at), for example sites.mailo.city pointed at the server, so the server's own name can change without every team changing its DNS.

For the operator: a wildcard certificate

With DNS-01 set up (CORPSUITE_ACME_DNS_PROVIDER and CORPSUITE_ACME_DNS_ZONE), the server also keeps a wildcard certificate for its zone (*.mailo.city), and for the team-site bases under it (*.f.<base>, *.d.<base>). Every portal host and every <team>.f.<base> address is then served with it, with no certificate to issue per name.