#11: implement MTA-STS, TLS-RPT & Autoconfig HTTP services

migrations/0003_create_report_tables.up.sql

@@ -0,0 +1,49 @@
+-- 0003_create_report_tables.up.sql
+-- Tables for DMARC aggregate (RUA) records and TLS-RPT failure reports
+
+CREATE TABLE IF NOT EXISTS dmarc_reports (
+    id           UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    domain_id    UUID REFERENCES domains(id) ON DELETE CASCADE,
+    org_name     VARCHAR(255) NOT NULL,
+    report_id    VARCHAR(255) NOT NULL,
+    domain       VARCHAR(255) NOT NULL DEFAULT '',
+    date_begin   TIMESTAMPTZ,
+    date_end     TIMESTAMPTZ,
+    raw_xml      TEXT,
+    summary      JSONB,
+    created_at   TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+ALTER TABLE dmarc_reports ALTER COLUMN domain_id DROP NOT NULL;
+ALTER TABLE dmarc_reports ADD COLUMN IF NOT EXISTS domain VARCHAR(255) NOT NULL DEFAULT '';
+ALTER TABLE dmarc_reports ADD COLUMN IF NOT EXISTS date_range_begin TIMESTAMPTZ;
+ALTER TABLE dmarc_reports ADD COLUMN IF NOT EXISTS date_range_end TIMESTAMPTZ;
+
+CREATE TABLE IF NOT EXISTS dmarc_report_records (
+    id          UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    report_id   UUID NOT NULL REFERENCES dmarc_reports(id) ON DELETE CASCADE,
+    source_ip   INET NOT NULL,
+    count       INT NOT NULL,
+    disposition VARCHAR(32) NOT NULL,
+    dkim_result VARCHAR(32) NOT NULL,
+    spf_result  VARCHAR(32) NOT NULL,
+    header_from VARCHAR(255) NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS tls_rpt_reports (
+    id                UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    organization_name VARCHAR(255) NOT NULL,
+    report_id         VARCHAR(255) NOT NULL,
+    domain            VARCHAR(255) NOT NULL,
+    date_range_begin  TIMESTAMPTZ NOT NULL,
+    date_range_end    TIMESTAMPTZ NOT NULL,
+    created_at        TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE TABLE IF NOT EXISTS tls_rpt_report_policies (
+    id            UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    report_id     UUID NOT NULL REFERENCES tls_rpt_reports(id) ON DELETE CASCADE,
+    policy_type   VARCHAR(64) NOT NULL,
+    success_count INT NOT NULL DEFAULT 0,
+    failure_count INT NOT NULL DEFAULT 0
+);