## DELETE AFTER INstALLING SO CANNOT BE VIEWED ##

this confitg setup for files in /var/www/html/mailconfig
built with Gemini help



untar the tarball to /var/www/html/mailconfig/

install ccichecksmtp.php in cci admin tree
apt-get install swaks
setup the two apache sites-enabled files
add the three config lines to dns (autoconfig, Autodiscover, and the tcp entry)
setup/add two domains to certbot
a2ensite autoconfig*
systemctl restart apache2

=========================================
/etc/apache2/sites-available/autoconfig.nebnet.net-ssl.conf

<IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerName autoconfig.nebnet.net
    ServerAlias autodiscover.nebnet.net
    DocumentRoot /var/www/html/mailconfig

    <Directory /var/www/html/mailconfig>
        Options Indexes FollowSymLinks
        AllowOverride None
        Require all granted
    </Directory>

    SSLCertificateFile /etc/letsencrypt/live/cciadmin.nebnet.net/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/cciadmin.nebnet.net/privkey.pem


    # Force correct XML and Apple Profile MIME types
    <FilesMatch "\.(xml)$">
        ForceType application/xml
    </FilesMatch>
    <FilesMatch "\.(mobileconfig)$">
        ForceType application/x-apple-aspen-config
    </FilesMatch>

</VirtualHost>
</IfModule>
=========================================

/etc/apache2/sites-available/autoconfig.nebnet.net.conf 

<VirtualHost *:80>
    ServerName autoconfig.nebnet.net
    ServerAlias autodiscover.nebnet.net
    DocumentRoot /var/www/html/mailconfig

    <Directory /var/www/html/mailconfig>
        Options Indexes FollowSymLinks
        AllowOverride None
        Require all granted
    </Directory>

    # Force correct XML and Apple Profile MIME types
    <FilesMatch "\.(xml)$">
        ForceType application/xml
    </FilesMatch>
    <FilesMatch "\.(mobileconfig)$">
        ForceType application/x-apple-aspen-config
    </FilesMatch>

</VirtualHost>

=========================================

/var/www/html/mailconfig/nebnet.mobileconfig

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://apple.com">
<plist version="1.0">
<!-- Apple mail autoconfig -->
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>PayloadDescription</key>
            <string>Configures NebNet Email Account</string>
            <key>PayloadDisplayName</key>
            <string>NebNet Email Settings</string>
            <key>PayloadIdentifier</key>
            <string>net.nebnet.email.config</string>
            <key>PayloadType</key>
            <string>com.apple.mail.managed</string>
            <key>PayloadUUID</key>
            <string>4A8B9C0D-1E2F-3A4B-5C6D-7E8F9A0B1C2D</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            
            <!-- Account General Info -->
            <key>EmailAccountDescription</key>
            <string>NebNet Mail</string>
            <key>EmailAccountType</key>
            <string>EmailTypeIMAP</string>
            <key>EmailAddress</key>
            <string></string> <!-- Left blank so iOS prompts user to type theirs -->
            
            <!-- Incoming Server (IMAP) -->
            <key>IncomingMailServerAuthentication</key>
            <string>EmailAuthPassword</string>
            <key>IncomingMailServerHostName</key>
            <string>mail.nebnet.net</string>
            <key>IncomingMailServerPortNumber</key>
            <integer>993</integer>
            <key>IncomingMailServerUseSSL</key>
            <true/>
            <key>IncomingMailServerUsername</key>
            <string></string> <!-- Prompts user -->
            
            <!-- Outgoing Server (SMTP) -->
            <key>OutgoingMailServerAuthentication</key>
            <string>EmailAuthPassword</string>
            <key>OutgoingMailServerHostName</key>
            <string>smtp.nebnet.net</string>
            <key>OutgoingMailServerPortNumber</key>
            <integer>587</integer>
            <key>OutgoingMailServerUseSSL</key>
            <false/> <!-- Uses STARTTLS upgrade on 587 automatically -->
            <key>OutgoingPasswordSameAsIncomingPassword</key>
            <true/>
            <key>OutgoingMailServerUsername</key>
            <string></string> <!-- Prompts user -->
        </dict>
    </array>
    
    <!-- Top Level Metadata -->
    <key>PayloadDescription</key>
    <string>Automatic email setup for nebnet.net accounts.</string>
    <key>PayloadDisplayName</key>
    <string>NebNet Email Configuration</string>
    <key>PayloadIdentifier</key>
    <string>net.nebnet.profile</string>
    <key>PayloadOrganization</key>
    <string>Consolidated Telephone</string>
    <key>PayloadRemovalDisallowed</key>
    <false/>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>9F8E7D6C-5B4A-3F2E-1D0C-9B8A7F6E5D4C</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>

=========================================