Local website users (both admin, and the one running the website) are allowed at the moment to receive external mails. This would require to go through their mails periodically to catch any bounced mails.

It would be better to instead have all the mails delivered to the local root account. Easiest and least invasive way to do this would be to create a .forward file in admin user's home directory. This file should contain one or more local or remote addresses that will receive the mails.

The following should be done:

• Role php_website should set-up ~/.forward entry for both the admin and application user that point to the root account.
• Role wsgi_website should set-up ~/.forward entry for both the admin and application user that point to the root account.
• To allow for easier switching in future, make the alias configurable, defaulting to root.
• Role reference documentation should be updated.
• Usage instructions should be updated.