---
title: "GitLab service desk with iRedMail: details"
url: https://michalasobczak.pl/posts/gitlab-service-desk-with-iredmail-details.html
author: "Michał Sobczak"
description: "In addition to my previous article about GitLab service desk feature with iRedMail I would like to enhance it a little bit my fixing some missing parts. Starting with connecting to PostgreSQL vmail database: Verifying mail server connectivity and TLS issues. GitLab (and iRedMail also) does not allow expired certificates."
published: 2025-04-23T08:38:01.000Z
updated: 2025-04-23T08:38:01.000Z
language: en
categories: ["Technology"]
tags: ["iRedMail", "TLS"]
license: CC BY-NC-ND 4.0 (https://creativecommons.org/licenses/by-nc-nd/4.0/)
---
# GitLab service desk with iRedMail: details

In addition to my [previous article](https://michalasobczak.pl/posts/e-mail-service-desk-with-self-hosted-gitlab-ee-and-iredmail.html) about GitLab service desk feature with iRedMail I would like to enhance it a little bit my fixing some missing parts. Starting with connecting to PostgreSQL vmail database:

```bash
sudo -u postgres -i
\c vmail
```

Verifying mail server connectivity and TLS issues.

```text
/opt/gitlab/embedded/bin/openssl s_client -connect mail.domain.com:993
```

GitLab (and iRedMail also) does not allow expired certificates. So be sure to have both root CA present and your certificate valid.

```bash
wget https://letsencrypt.org/certs/2024/r11.pem
cp r11.crt /usr/local/share/ca-certificates/
update-ca-certificates
```

And finally restarting services. Interesting part is that only Nginx do not allow placing R11 root CA before actual certificate. But placing R11 after actual certificate does the job.

```bash
service postfix restart
service dovecot restart
service nginx restart
```