mjl-/mox

Features

• Self-Hosted Email Servers - Runs a full-featured self-hosted email server with SMTP, IMAP, and webmail.
• Monolithic Mail Server Binaries - All mail services are compiled into a single Go binary with no external dependencies or runtime plugins.
• Mail Servers - Provides a full self-hosted mail server handling SMTP, IMAP4, and webmail in a single binary.
• SMTP Mail Servers - Delivers outgoing email with DKIM signing and enforces DANE and MTA-STS for secure transport.
• Webmail Clients - Provides a browser-based email client with threading and keyboard shortcuts.
• A-Frame - A web framework for building VR experiences - Sets up a secure mail server for a domain in under ten minutes using a guided quickstart command.
• Email Account Deletions - Deletes an account and all its data, rejecting incoming email for its addresses.
• Email Account Lifecycles - Lists, adds, removes, disables, or enables email accounts and reloads the configuration.
• Web-Based Account Managements - Lets users manage their email accounts through a browser-based account panel.
• Automated Admin Interfaces - Provides a browser-based admin panel that guides setup of domains, accounts, aliases, and DNS records.
• Mail Account Listings - Lists all configured mail accounts, optionally showing disabled status.
• Auto-Discovered - Publishes configuration via SRV records and profiles so email clients can set up accounts automatically.
• Configuration File Editing - Allows editing all server settings directly in a plain-text configuration file that reloads without restarting.
• Mail Server Configuration Generators - Creates configuration files, admin credentials, DNS records, and a systemd service file for a new mail server instance.
• Mail Server Domain Definitions - Defines domains for which email is accepted, with options for disabling, DKIM signing, and local-part handling per domain.
• Mail Server Deployments - Sets up the server with a single command that generates configs, accounts, and DNS records, and handles upgrades by replacing the binary.
• File-Based Configuration - Server behavior is defined by editing plain-text configuration files that reload without restarting.
• Mail Server Quickstarts - Provides a single-command quickstart that generates configuration files, DNS records, and service scripts for a new domain.
• Smarthost Relays - Routes outgoing messages through a configured SMTP relay with TLS and authentication instead of direct delivery.
• Delivery Queue Hold Rules - Manages queued messages through hold rules, rescheduling, and transport overrides before delivery.
• Client Autodiscovery - Sets up email client settings automatically so users can connect without manual configuration.
• Account Authentication - Updates stored authentication secrets for mail accounts, supporting multiple SASL mechanisms.
• Configuration Generators - Edits configuration files for domains and accounts with sensible defaults, requiring no manual changes for typical setups.
• Web-Based Administration Panels - Ships a browser-based administration panel for managing mail server accounts, domains, and configuration.
• Email Administrative Interfaces - Provides a web interface and CLI tools for managing accounts, domains, aliases, and DNS records.
• Email Autoconfiguration - Provides DNS SRV records, Thunderbird-style autoconfig, Autodiscover, and Apple device management profiles.
• IMAP4rev2 Synchronizations - Provides IMAP4rev2 mailbox synchronization with CONDSTORE and QRESYNC extensions for efficient state tracking.
• Incoming Email Processors - Accepts incoming email via SMTP on port 25 and processes it for local delivery.
• Configuration Generators - Provides a guided quickstart command that generates all necessary configuration files for a new mail server instance.
• IMAP Services - Provides IMAP4rev2 server access for email clients to read and manage messages.
• IMAP Client Retrievals - Provides IMAP4 access for email clients to read and manage messages on the server.
• Self-Hosted Email Delivery Platforms - Delivers a complete self-hosted email platform with SMTP, IMAP4, and webmail in one binary.
• Email Sending and Retrieval - Handles full email sending and retrieval via SMTP and IMAP4 with modern authentication and encryption.
• SMTP Transfers - Transfers email between servers using SMTP with extensions for reliable delivery.
• Login Disablings - Prevents login for an account while still accepting incoming and delivering queued email.
• Login Enablings - Restores login access for a previously disabled account.
• Email Signing - Attaches a cryptographic signature to outgoing email headers so recipients can verify message integrity.
• DANE TLS Certificate Verifiers - Validates TLS certificates using DNSSEC-protected DANE records for email transport.
• DANE and MTA-STS Verifiers - Enforces DNSSEC-signed MX records and PKIX-verified TLS certificates during outgoing delivery, and caches MTA-STS policies.
• Domain Removals - Removes a domain from the configuration, rejecting all incoming email for that domain.
• Email Sender Authentication - Validates message authenticity using SPF, DKIM, and DMARC and generates DMARC aggregate reports.
• Outgoing Email Authenticators - Enforces SPF, DKIM, DMARC, DANE, and MTA-STS to authenticate senders and secure delivery.
• DMARC Policy Deference - Checks incoming email against the domain's DMARC policy to decide whether to accept, quarantine, or reject it.
• DMARC Policy Enforcements - Honors a sending domain's DMARC policy by rejecting or quarantining messages that fail authentication alignment checks.
• Email Spam Filtering - Automatically detects and quarantines spam using reputation-based analysis of authenticated domains.
• Rule-Based Mail Filters - Blocks unwanted messages using reputation-based and content-based analysis before they reach the inbox.
• Account Creations - Creates new mail accounts with email addresses and reloads server configuration.
• TLS Certificate Management - Automatically obtains and renews TLS certificates via ACME for all mail and web services.
• Email Address Management - Adds or removes email addresses associated with an account, including catchall addresses.
• Address Removals - Removes an email address from an account, causing incoming email for that address to be rejected.
• Email Address Additions - Adds a new email address, including catchall addresses, to an existing mail account.
• Outbound Delivery Security Enforcers - Uses DANE and MTA-STS to ensure outbound SMTP connections use verified TLS certificates.
• Content-Based Spam Classifiers - Classifies incoming email as spam by analyzing message content, headers, and sender reputation.
• Password Authentication - Stores new passwords for accounts using derived secrets for multiple authentication mechanisms.
• Admin Password Managers - Manages bcrypt-hashed passwords for authenticating to the admin web interface.
• Automatic TLS Certificates - Obtains and renews TLS certificates automatically via ACME for encrypted SMTP and IMAP connections.
• ACME Certificate Clients - Automatically obtains and renews TLS certificates via ACME for all mail and web domains.
• Web-Based Configuration Dashboards - Offers a browser-based dashboard for common mail server maintenance tasks without editing configuration files.
• Account and Domain Management Interfaces - Manages accounts, addresses, aliases, and domain setup with DNS record guidance and verification through a web interface.
• Mail Server Administration Interfaces - Offers a web-based admin panel for configuring and monitoring the email server.
• Admin Account Editors - Creates accounts, addresses, aliases, and domains, and provides DNS record instructions and checks, updating the runtime configuration file.
• Domain Management - Manages email domains by adding, removing, disabling, or enabling them with automatic configuration reload.
• Webmail Clients - Provides a browser-based interface for reading, composing, and organizing email messages.
• Admin Interfaces - Provides a built-in web server that hosts both the admin interface and webmail on internal IPs.
• Autoconfiguration Profiles - Serves autoconfiguration profiles and DNS SRV records so email clients discover server settings automatically.
• Monitoring and Logging - Exposes Prometheus metrics and structured logs for insight into server performance and activity.
• Mailbox Format Exports - Supports on-demand export and import of mailboxes in Maildir and mbox formats for backup and migration.
• Email Message Archiving - Exports messages to maildir or mbox archives through the web interface or CLI commands.
• Mailbox Imports - Imports messages from a maildir archive into a specified account, training the junk filter based on message flags.
• Mailbox Exports - Exports messages from one or all mailboxes of an account into Maildir format.
• Transactional Email Webhooks - Exposes outgoing message delivery and incoming message processing via HTTP/JSON webhook endpoints.
• Integrity Verifiers - Checks the consistency of database files and message files in a data directory, optionally fixing issues.
• Server Backup Snapshots - Creates consistent snapshots of configuration and data directories, hard-linking unchanged message files.
• Configuration File Validators - Parses and validates the configuration files, reporting any errors found.
• Domain Additions - Adds a new domain to the server configuration, optionally in disabled mode to prevent TLS and message handling.
• Mailbox Imports - Imports messages from maildir or mbox archives uploaded as zip or tgz files through the web interface or CLI commands.
• Mbox Imports - Imports messages from an mbox archive into a specified account mailbox.
• HTTP/JSON Transactional APIs - Sends outgoing messages and processes incoming deliveries through HTTP/JSON endpoints and webhooks without SMTP or IMAP.
• Outgoing Transactional APIs - Sends programmatic outgoing messages through an HTTP/JSON web API that composes and delivers the email.
• Mail Server Deployments - Runs the full mail server stack inside a Docker container with multi-architecture support for easy deployment.
• Mail Server Binary Upgrades - Replaces the running binary and restarts the service, with automated database schema upgrades and a backup-and-verify workflow.
• SPF Verifications - Verifies that an email originates from an IP address authorized by the domain's SPF DNS record.
• Webhook Notification Delivery - Receives HTTP callbacks for incoming and outgoing message delivery events with suppression list management.
• Mail Server DNS Zone Generators - Outputs annotated DNS zone records for mail server domains to guide DNS setup.
• DNS Record Verification - Validates that DNS records for a domain match the server's configuration.
• Internationalized Email Handlers - Accepts and stores email with UTF-8 localparts, internationalized domain names, and UTF-8 headers.
• Alias Settings Displays - Displays the settings and members of a mailing list alias.
• Mailing List Aliases - Creates aliases that deliver incoming email to multiple recipients with configurable posting rules.
• Mailing List Managements - Lists, adds, updates, and removes mailing list aliases with configurable posting and membership rules.
• Mail Queue Management - Inspects, holds, reschedules, or fails queued messages and webhooks to troubleshoot delivery issues.
• Email Message API Managements - Retrieves, moves, deletes, or changes flags on stored messages through an HTTP/JSON web API.
• SMTP Delivery Queues - Implements a delivery queue with retries, hold rules, and suppression lists for outgoing messages.
• Outbound Message Queues - Queues outgoing messages from authenticated clients and delivers them with automatic retry logic.
• Delivery Event Webhooks - Sends HTTP callbacks for incoming and outgoing message delivery updates with suppression list management.
• SASL Implementations - Verifies user identity through standard SASL authentication mechanisms for secure access.
• Bayesian Spam Classifiers - Learns per-user junk classification from message content to automatically sort incoming email.
• REQUIRETLS Enforcements - Aborts message delivery if the full path cannot guarantee verified MX records and TLS certificates.
• Mailbox Exports - Exports mailboxes from an account into Maildir format for backup or migration.
• Backup and Restore - Creates consistent snapshots of configuration and data directories for safe storage or restoration.
• Rate Limiting - Implements rate-limiting for low-reputation senders to mitigate spam.
• Sender Throttling Mechanisms - Implements reputation-based throttling that slows low-reputation senders and temporarily stores rejected messages.
• Server Metrics - Exposes Prometheus metrics for application and mail-specific internals with structured logging.
• Prometheus Metrics Exporters - Exposes Prometheus metrics and structured logs for monitoring server health and activity.
• Prometheus Monitoring Practices - Exposes application and internal metrics for Prometheus with structured logging and trace-level protocol logs.
• Server Health Monitoring - Exposes Prometheus metrics and structured logs with configurable levels for operational monitoring.
• Mail Protocol Test Servers - Runs a full email server on non-privileged ports that accepts all messages and checks protocol compliance for testing applications.
• Email - Secure, low-maintenance mail server.
• Email Services - Modern SMTP and IMAP server.

Star history