Secure private onion Mail2News ingress

1 files changed, 16 insertions, 10 deletions

diff --git a/README.md b/README.md
index 4e555f3..06fb6a3 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
 
 **Privacy-focused Usenet posting system with authentication preprocessing**
 
-m2usenet is a secure, privacy-oriented web interface for posting to Usenet newsgroups. The system preprocesses messages with cryptographic authentication (Hashcash + Ed25519) before forwarding them to external mail2news gateways, featuring automatic fallback between .onion and clearnet gateways.
+m2usenet is a secure, privacy-oriented web interface for posting to Usenet newsgroups. The system preprocesses messages with cryptographic authentication (Hashcash + Ed25519) before forwarding them through Tor to a private Mail2News onion ingress.
 
 ## 🏗️ Architecture
 
@@ -15,7 +15,7 @@ m2usenet is a secure, privacy-oriented web interface for posting to Usenet newsg
 └─────────────┘    └─────────────┘    └─────────────┘    └─────────────┘    └─────────────┘
 ```
 
-**Flow:** Web UI → Local sendmail → m2usenet preprocessor → External mail2news gateway → Usenet
+**Current integrated flow:** Web UI → Tor → private Mail2News onion ingress → Mail2News → Tor/onion NNTP → Usenet
 
 ## 🔐 Security Features
 
@@ -23,14 +23,21 @@ m2usenet is a secure, privacy-oriented web interface for posting to Usenet newsg
 - **Ed25519 Digital Signatures**: Cryptographic message authentication  
 - **Tor Integration**: Primary routing through .onion networks
 - **No Data Collection**: Zero access logs, no tracking
-- **Automatic Fallback**: .onion → clearnet gateway redundancy
+- **Private SMTP ingress**: Tor v3 client authorization and restricted Postfix recipient policy
 
 ## 🌐 Gateway Configuration
 
-| Priority | Gateway | Description |
-|----------|---------|-------------|
-| **Primary** | `mail2news@xilb7y4kj6u6qfo45o3yk2kilfv54ffukzei3puonuqlncy7cn2afwyd.onion` | Via Tor for privacy |
-| **Fallback** | `mail2news@mail2news.tcpreset.net` | Clearnet for reliability |
+| Role | Gateway | Description |
+|------|---------|-------------|
+| **Primary and retry** | `mail2news@xilb7y4kj6u6qfo45o3yk2kilfv54ffukzei3puonuqlncy7cn2afwyd.onion` | Private Onion ingress reached through Tor |
+
+There is no clearnet fallback in the integrated Onion Newsreader path. SMTP
+acceptance means that the private relay queued the message; final NNTP
+publication is asynchronous.
+
+The restricted Tor and Postfix deployment fragments are documented in
+[`deploy/`](deploy/README.md). Authorization keys are deployment secrets and
+must never be committed.
 
 ## 📋 Requirements
 
@@ -98,8 +105,8 @@ sudo chmod 755 /var/www/m2usenet /var/log/m2usenet /home/m2usenet
 ```bash
 # Clone repository (or download files)
 cd /tmp
-git clone https://github.com/your-repo/m2usenet.git
-cd m2usenet
+git clone ssh://git@git.virebent.art:2223/virebent/m2usenet-and-mail2news.git
+cd m2usenet-and-mail2news
 
 # Copy web frontend
 sudo cp index.php send.php powWorker.js /var/www/m2usenet/
@@ -352,4 +359,3 @@ Contributions are welcome! Please read CONTRIBUTING.md for guidelines.
 
 **m2usenet v1.0.0** - Privacy-focused Usenet posting for the modern era
 
-