* If the PRIMARY_HOSTNAME is in a zone with a DS record set at the registrar, show any DNSSEC failure (but only a failure) immediately since it is probably the cause of other DNS errors displayed later.
* For zones, if a DS record is set at the register, do the DNSSEC test first because even the NS test will fail if DNSSEC is improperly configure.
* But if a DS record is not set, the this is just a suggestion to configure DNSSEC so offer the suggestion last --- after mail and web checks.

see https://discourse.mailinabox.email/t/dns-nameserver-gandi-glue-records-issues/105/3

dont log robots.txt and favicon.ico. we should REALLY consider creating seperate include files for *all* of our "apps", this is getting messy..

Aliases have precedence over mail users. A catch-all address would grab mail intended for a mail user and send it elsewhere. This adds some SQL hackery to create dummy aliases for all mail users.

fixes #200
closes #214 another way

revert dovecot part of 39bca053 because dovecot started behaving weird and I don't have time to debug it

nginx/postfix use a new pre-generated dh2048.pem file. dovecot generates the bits on its own.

ssllabs.com reports that TLS_DHE ciphers went from 1024 to 2048 bits as expected. The ECDHE ciphers remain at 256 bits --- no idea what that really means. (This tests nginx only. I haven't tested postfix/dovecot.)

see https://discourse.mailinabox.email/t/fips-ready-for-ssl-dhec-key-exchange/76/3

see https://github.com/mail-in-a-box/mailinabox/commit/8e0967dd8e2ecce6a1092deaca7241a6d927ae1e#commitcomment-7940724

add strict SPF and DMARC records to any subdomains (including custom records) that do not have SPF/DMARC set

closes #208

fixes #206 (hopefully)

fixes #195

don't allow catch-all addresses in the admin because they take precedence over mail users and that's counter-intuitive

For now use the command-line tools/mail.py if you need it.

see #200

Revert "Changed incomming-email-input to type text"

This reverts commit 9631fab7.

see http://discourse.mailinabox.email/t/activesync-z-push-not-working/94/3

see https://discourse.mailinabox.email/t/set-www-a-and-other-dns-records-after-install/63/10

don't run `apt-get update` when generating the status checks output because it is so slow and should be update daily by cron anyway

Create directory in $STORAGE_ROOT for bayes database.

Added --username arg to sa-learn as the user mail does not have permission to edit files in $STORAGE_ROOT. There is probably a better solution to this...

https://discourse.mailinabox.email/t/opening-up-a-custom-port-for-ssh-after-install/55/2

revise the description of A records on domains: the A record must be present for good deliverability so that the envelope domain resolves, but it doesn't have to resolve to this machine

add link to contributors, remove duplicate "to"s