# /etc/aliases — fleet-managed.
# Auto-generated by fleetd from the platform's host_config.config_files.
# Do not edit by hand; change the platform / overlay YAML and
# re-apply (``fleetctl apply <node>``).
#
# ADR-0051 — fleet owns /etc/aliases on every fleet-managed FreeBSD host so
# that system mail addressed to local ``root`` (periodic(8) daily/security/
# monthly output, cron output, root alerts) is forwarded to a real mailbox
# via the dma -> Stalwart smarthost relay (see /etc/dma/dma.conf).  Without a
# ``root:`` alias this mail rots in /var/mail/root and the operator is never
# notified — the bug this block fixes (bee held 86 unread root messages).
#
# This is the FreeBSD base /etc/aliases set (the standard pseudo-user
# redirections every MTA expects) PLUS the fleet-driven ``root:`` line that
# points at {{ system_mail_recipient }} (rendered from the device's sysrc
# map; defaults to jeremie@jourdin.org platform-wide, overridable per
# overlay / tenant).  Operators who need EXTRA aliases declare them in their
# overlay's own /etc/aliases config_file (which wins on the host channel) or
# extend this shared template — fleet never expects hand-edits on the edge.
#
# After this file changes, fleetd runs ``newaliases`` (the file's
# reload_command) to rebuild the /etc/mail/aliases.db dma actually reads.

# Pseudo-user aliases -- every system should have these.
MAILER-DAEMON: postmaster
postmaster: root

# General redirections for pseudo accounts.
_dhcp:	root
_pflogd: root
bin:	root
bind:	root
daemon:	root
games:	root
hast:	root
kmem:	root
mailnull: postmaster
man:	root
news:	root
nobody:	root
operator: root
pop:	root
proxy:	root
smmsp:	postmaster
sshd:	root
system:	root
toor:	root
tty:	root
usenet:	news
uucp:	root
www:	root

# Well-known aliases -- these should be filled in!
manager: root
dumper:	root
abuse:	root

# trap decode to catch security attacks
decode:	root

# root -- fleet-managed: forward all of root's system mail off-box to the
# fleet operator inbox via the dma smarthost relay.
root:	{{ system_mail_recipient }}
