Only those with whitelisted (i.e. @social.coop) email addresses can create new accounts on this GitLab instance.

Currently we use Web Architect's SMTP server to manage the social.coop top-level domain. Generally we only assign aliases, which simply forward mail to the user's personal address, not full accounts. Partly because this is all that is needed, but significantly because we only have 1MB space allocated on the server!

In order to give someone such an address, an existing administrator with access needs to follow these steps:

• Log into https://webarch.email/ as socialcoop (the password should be in the pass keystore).
• Select the 'Aliases' tab, (oddly it has a dropdown too, select 'aliases' here, not 'domain aliases')
• Click on the button to add an alias, which will open a dialog.
  • The top box Alias address/es should contain <new account>@social.coop (and optionally other incoming social.coop addresses to create).
  • The bottom box Goto addresses should contain the users' personal address to forward to ~(and optionally any other destination addresses).
  • Ensure the 'active' box is checked.
• Submit the dialog.
• If the user is a member of any working groups which have their own dedicated group email addresses, like tech.group or finance, add their @social.coop address to the relevant aliases for these too (so that any changes to the user's forwarding address just requires the one alias to be updated).
• Optionally, test the alias.
• Notify the user the alias is ready.

Done.