# Hermes Email Platform

## Configuration

**Provider:** Postfix + Dovecot → direct delivery (no relay)

**Credentials:**
- Mailbox: `gwen@kaburu.cc` (CyberPanel MySQL `e_users.password`)
- SMTP username: `gwen@kaburu.cc`
- SMTP password: [REDACTed] — stored in `/home/kaburu/.hermes/.env` on kaburuaibox
- SMTP relay: `smtp-relay.brevo.com:587`

**Hermes config:**
- Location: `~/.hermes/config.yaml`
- Section: `platforms.email.enabled = true`
- Target: `email:web@kaburu.co`

**Environment variables (kaburuaibox):**
```bash
EMAIL_ADDRESS=gwen@kaburu.cc
EMAIL_PASSWORD=***
EMAIL_SMTP_HOST=mail.kaburu.cc
EMAIL_IMAP_HOST=mail.kaburu.cc
EMAIL_IMAP_PORT=993
EMAIL_SMTP_PORT=587
EMAIL_ALLOWED_USERS=web@kaburu.co
EMAIL_HOME_ADDRESS=web@kaburu.co
EMAIL_POLL_INTERVAL=30
```

## Troubleshooting

**Symptom:** 535 Error: authentication failed

**Steps:**
1. Enable email platform in Hermes: `hermes config set platforms.email.enabled true`
2. Verify `EMAIL_PASSWORD` set in `/home/kaburu/.hermes/.env`
3. Reset mailbox password in CyberPanel MySQL: `UPDATE e_users SET password='{CRYPT}<hash>' WHERE email='gwen@kaburu.cc'`
4. Check Hetzner mail.log for Postfix delivery status

**Log location:** `/var/log/mail.log` on Hetzner (kaburusvr)

**Success pattern:** 
```
postfix/smtpd[PID]: SASL PLAIN authentication failed (old)
postfix/smtpd[PID]: from=<gwen@kaburu.cc>, size=777, nrcpt=1 (queue active)
postfix/smtp[PID]: to=<web@kaburu.co>, relay=smtp-relay.brevo.com[1.179.115.1]:587, status=sent (250 2.0.0 OK)
```

## Related Pages

- [[hermes]] — Infrastructure agent configuration
- [[fusion-invoice]] — Brevo SMTP setup for billing
- [[credentials]] — API tokens and credential locations