I’ve noticed that on creation of a new virtual server Virtualmin is creating a record for ServerAlias mail.domain.com (in httpd.conf) - is there a reason for this? We don’t need webmail and I’m pretty sure this has never happened on older installs of Virtualmin.
If it’s not needed, where do we switch it off so that it is not created for new virtual servers?
Obviously, if you aren’t hosting mail, you don’t need it. But, if you are hosting mail, and if you have recent enough versions of everything, most mail services would use it for sending and receiving.
Yes, but you need to validate an TLS cert if you want to use it for any mail operation that needs a cert, and you can only validate mail.domain.tld if there’s a website for it, or if Virtualmin is managing DNS.
The last two posts above clarify and answer this question - if you don’t need webmail but you do want an ssl cert for sending mail, then mail.domain.tld will be required to set up things like letsencrypt as letsencrypt needs to resolve that domain/sub-domain in order to issue a cert.
Only other question remaining is:
Should we just edit httpd.conf? Or is there some setting in Virtualmin that will do it for us?
Sure, that’d be fine. I don’t think Virtualmin will setup the virtual domain stuff in mail automatically though…so it wouldn’t actually do anything with the cert. I’m not sure how one should make it do all that for an old domain from before those features were available in the various services and in Virtualmin.