Roundcube Deployment

Subsystem: WSAI_RoundcubeDeployment_v1

Status: Production Validated / Locked

Purpose

The Roundcube Deployment subsystem documents the validated webmail architecture for the WickedSpooky.ai mail platform.

Validated Architecture

• Roundcube deployed on web host
• Apache presentation layer
• Mail host remains Postfix/Dovecot only
• Roundcube connects remotely via IMAPS and SMTP Submission

Runtime Architecture

webmail.wickedspooky.org
        ↓
Apache
        ↓
Roundcube
        ↓
mail.wickedspooky.org
        ↓
IMAPS 993
SMTP Submission 587

Validated Runtime State

• HTTPS operational
• Roundcube login validated
• Mail send validated
• Mail receive validated
• Session cookies validated
• Production deployment approved

Operational Rules

• Roundcube runs only on web host
• Mail host remains dedicated mail services
• No webmail stack installed on mail host
• IMAPS used for mailbox access
• SMTP Submission used for outbound mail

Connectivity Validation

Mail host intentionally blocks ICMP. Service validation must use application ports rather than ping.

• SSH validated
• IMAPS 993 validated
• SMTP Submission 587 validated
• ICMP blocked by design

Bootstrap Usage

Bootstrap Repository:
WSAI_RoundcubeDeployment_v1

Related Subsystems

• WSAI_EmailAliasManager_v1
• WSAI_DomainMailRouting_v1
• WSAI_OperationalKnowledgeBase_v1