The source offer is a link to this fork, not a tarball in the image (#2)

INBUXA's webmail built its own source into every image: the whole tree,
web and server, packed as dist/source.tar.gz with an identity string
beside the link naming the exact tree it came from. The sign-in page and
Settings > About offered that download.

It answered the AGPL precisely -- the source of *this* build, uncommitted
work and all -- but it paid for that precision by carrying 2.5 MB of
source into production on every deploy, to a repository that is public
and already has it. The fork is at github.com/inbuxa/ihasmail-inbuxa;
the version shown directly above the link already names the commit the
build came from, so the link and the version together say the same
thing the archive said.

Both links now go there, through the mechanism upstream ihasmail already
has and this fork had replaced: the server's SOURCE_URL, read from
/api/config on the sign-in page and from the session in About, with
web/src/lib/source.ts as the fallback before either answers. That
mechanism is better than a hardcoded URL for the deployer who patches
this tree -- they set SOURCE_URL and both links follow -- which is the
case the AGPL is actually about. The defaults in config.ts, the compose
file and .env.example move from the upstream repo to this one, since a
build from this tree is a modified ihasmail and its offer is ours.

Removed with it: scripts/source-archive.mjs and its type stub, the Vite
plugin that ran it, __SOURCE_ID__, and SOURCE_ARCHIVE/SOURCE_ID. The
build no longer shells out to git or tar, and nothing is written next
to the app.

Links to Coffey-Labs/ihasmail that are credit rather than a source
offer -- the README's "built on", the translation issue link -- are
left alone.

No new strings: "AGPL-3.0 source" is unchanged, and the About line keeps
its existing {source} placeholder, now filled with the host and path
instead of a file name.

This commit is contained in:

jcoffey

2026-09-20 16:07:30 -07:00

committed by

GitHub

parent 25763832f3

commit de120ba7ca

12 changed files with 31 additions and 164 deletions

									
										.env.example
									
		+3
		-2
	
												View File
												
				@@ -73,8 +73,9 @@ APP_NAME=ihasmail

				# Where this instance's source can be had. ihasmail is AGPL-3.0-or-later, which

				# asks whoever runs a modified version to offer *that* version's source -- so if

				# you have patched it, point this at your own tree. Shown on the sign-in page

				# and in Settings > About.

				SOURCE_URL=https://github.com/Coffey-Labs/ihasmail

				# and in Settings > About. INBUXA's webmail is itself a modified ihasmail, so

				# the default is this fork.

				SOURCE_URL=https://github.com/inbuxa/ihasmail-inbuxa

				# ---- Settings this installation decides (all optional) ----

				#