Post-Deploy TODOs

Review and update project status after each phase

Document issues as they arise in appendix-issues

AD authentication for dovecot via sssd (replace local users)

Webmail interface (Roundcube) for browser-based testing

Postfix relay to external SMTP (if external mail testing needed)

Automated Vault certificate renewal (cron or cert-manager pattern)

Wazuh active response — auto-block IPs on repeated auth failures

Grafana dashboard for mail metrics (delivery rate, reject rate, auth pass/fail)

Postfix configuration patterns → codex/postfix

DKIM/DMARC/SPF setup patterns → codex/mail-security

Wazuh custom decoder/rule patterns → codex/wazuh

IMAP scripting patterns (Python) → codex/python