Projects sharing features with Mjl Mox

Cloud-mail is a cloud-based mail server and API platform providing a programmable interface for managing user accounts, sending bulk messages, and performing complex searches on email data. It serves as an automated email extraction tool and forwarding gateway, enabling the identification and capture of verification codes and the routing of incoming messages to external services. The infrastructure is hosted on serverless edge workers to remove the need for dedicated server hardware. It utilizes object storage for managing email attachments and employs a serverless message routing system to p

This project is a disposable email inbox service built to run entirely on Cloudflare's edge network. It creates temporary email addresses that automatically receive and store incoming messages and attachments, all without managing any traditional server infrastructure. The service uses Cloudflare Workers for serverless processing, Durable Objects for persistent inbox state, and Workers KV for storing email data, with attachments handled through R2 object storage. The service distinguishes itself through a comprehensive set of access and management features. Users can authenticate through mult

Mail-in-a-Box is a self-hosted email server appliance that automates the deployment of SMTP, IMAP, and POP3 services on Linux. It functions as a complete suite including a DNS management server, a spam and abuse filter, and a web-based administrative control panel for managing users, aliases, and storage quotas. The project distinguishes itself through a high degree of automation for email security and authenticity. It automatically provisions and maintains SPF, DKIM, DMARC, and DNSSEC records to prevent domain spoofing, while managing the installation and rotation of TLS certificates and enf

Cloud-mail is a serverless email backend and routing service built on Cloudflare infrastructure. It provides a cloud-native system for receiving, storing, and processing electronic messages without the requirement for traditional mail server hardware. The platform includes an email data API for querying records and a visual analytics dashboard for tracking mail volume and system performance. It features automated processing capabilities to extract verification codes from message bodies and manages an email archive using persistent object storage for attachments and history. The system handle

Mailu is a complete email distribution system deployed as a suite of containerized images. It provides a self-hosted email infrastructure that integrates a webmail client interface with a centralized administration dashboard for managing domains, user accounts, and storage quotas. The system focuses on email deliverability and security through a framework that implements identity verification records and digital certificates. This includes the use of identity signatures and encryption to secure mail transport and prevent domain spoofing. The platform includes layered spam and malware filteri

This project provides a full-stack, containerized mail server platform designed for self-hosting. It functions as a complete mail transfer agent that bundles essential services—including SMTP, IMAP, and POP3—into a unified environment. By leveraging container orchestration, it enables the deployment of private email infrastructure that handles message transport, delivery, and user management within a single, manageable service. The platform distinguishes itself through deep integration with container runtimes and robust configuration flexibility. It supports granular customization via configu

Certmagic is a Go library for automating the issuance and renewal of TLS certificates. It functions as an automatic HTTPS provisioner and ACME client that handles the full lifecycle of certificates to ensure secure connectivity without manual intervention. The library is distinguished by its support for on-demand TLS provisioning, which generates certificates dynamically during the TLS handshake based on the server name. It also provides automation for wildcard certificates through DNS challenge verification and integrates with the ZeroSSL API for certificate acquisition. The project covers

Dehydrated is a shell-script ACME client that automates the lifecycle of TLS certificates from certificate authorities like Let's Encrypt. It implements the ACME protocol entirely in POSIX shell script with no external dependencies beyond standard Unix tools, relying on OpenSSL for all cryptographic operations including key generation, signing, and certificate parsing. The tool manages account keys, certificates, and configuration as plain files on disk, maintaining certificate metadata and account status in simple text files without a database. It delegates domain validation challenges to us

Hanko is an open-source identity provider and customer identity and access management system. It serves as a passkey authentication service and an OAuth and SAML SSO gateway, allowing applications to authenticate users and issue tokens via standard identity protocols. The project distinguishes itself through a strong focus on passwordless access using WebAuthn-based passkeys and email-based passcodes. It provides framework-agnostic authentication interfaces as customizable web components that can be embedded directly into web applications to handle login, registration, and profile management.

Salvo is a comprehensive Rust web framework for building asynchronous HTTP servers and web applications. It features a hierarchical web router that uses a tree-based structure to map requests to handlers and an asynchronous middleware pipeline based on the onion model for request and response pre- and post-processing. The framework is distinguished by its native support for modern network protocols, including a QUIC-based HTTP/3 implementation alongside HTTP/1 and HTTP/2. It includes an integrated OpenAPI documentation generator that extracts schemas directly from handler signatures to produc

Inbox is a centralized communication platform designed for team-based email management and collaborative correspondence. It provides a shared workspace where multiple users can access, organize, and respond to messages from shared email addresses, eliminating the need for redundant forwarding. The platform distinguishes itself by offering self-hosted infrastructure, allowing organizations to maintain full control over their email data and routing configurations on private servers. It integrates granular role-based access control and server-side proxying to enforce security policies, while sup

Rainloop Webmail is a self-hosted, browser-based email application that connects to external mail servers using IMAP and SMTP protocols. It operates as a stateless client, fetching data directly from servers without requiring a local database to store messages. The system supports multi-account email management, allowing users to link multiple email identities to a single session for simultaneous access across different browser tabs. It includes a plugin-based extension system and tools for user interface customization and branding. The application provides capabilities for email workflow au

LXD is a unified platform for managing both system containers and virtual machines through a single REST API and command-line interface. It provides a programmatic HTTP interface for controlling the full lifecycle of instances, enabling automation and integration with external tools. The system runs unprivileged containers with per-instance UID/GID mappings, seccomp filters, and AppArmor profiles for kernel-level isolation, while supporting multiple storage backends including directory, Btrfs, LVM, ZFS, Ceph, LINSTOR, and TrueNAS through a unified driver interface. The platform distinguishes

etcd is a distributed, strongly consistent key-value store designed to provide reliable storage for critical system metadata and coordination primitives. It functions as a distributed consensus engine, utilizing a replicated log and leader-based state machine to ensure that all nodes in a cluster maintain a synchronized view of data. By providing atomic operations and linearizable reads and writes, it serves as a foundational component for distributed systems requiring high availability and fault tolerance. The system distinguishes itself through its multi-version concurrency control, which e

Goatcounter is a self-hosted web analytics platform that collects visitor statistics without cookies, personal data, or persistent identifiers. It uses privacy-preserving techniques like anonymous session hashing to count page views and visits, and can be deployed on your own infrastructure using a binary or Docker container with SQLite or PostgreSQL storage. The platform offers multiple data collection methods, including a lightweight JavaScript snippet, an image-based tracking pixel for environments where scripts are blocked, and server log file parsing from nginx, Apache, Caddy, or CloudFr

Mailpile is an encrypted email client and high-volume mail indexer that provides a web-based portal for managing electronic mail. It functions as a private email management system designed to protect user privacy and data control. The project features a search engine optimized for indexing and retrieving large volumes of email on consumer hardware. It includes a Bayesian email filter for automated message classification and tagging. The system supports secure communication through the integration of public-key encryption and signing for sending and receiving messages. Additional capabilities

Mailcow-dockerized is an open-source email hosting platform that provides a complete, self-hosted infrastructure suite. It bundles message transfer, storage, and security protocols into a modular, containerized environment designed for deployment on private infrastructure. The platform distinguishes itself by integrating a centralized management interface for configuring mail domains and user accounts alongside collaborative tools like shared calendars and contact lists. It includes automated security features such as integrated spam and malware filtering gateways, as well as automated certif

BillionMail is a self-hosted email infrastructure and marketing platform designed to provide full control over mail delivery, domain management, and subscriber communication. It functions as a comprehensive mail server manager that enables users to deploy and maintain private email environments, including integrated webmail interfaces for direct account access. The platform distinguishes itself by combining high-volume bulk email distribution with sophisticated deliverability tools. It supports multi-tenant infrastructure provisioning, allowing administrators to manage multiple domains and ma

This project is a public key infrastructure management system designed to automate the issuance, renewal, and revocation of X.509, TLS, and SSH certificates. It functions as a machine identity provider and certificate authority, enabling the establishment of private PKI to secure inter-service communication and remote access. The system distinguishes itself through hardware-bound identity attestation, which ties cryptographic keys to physical device silicon or TPMs to prevent credential exfiltration. It supports a wide array of identity verification mechanisms, including OIDC, cloud-provider

Tutanota is an end-to-end encrypted email client and privacy-focused mail server. It functions as a cross-platform secure messaging application that provides encrypted email and calendar synchronization across desktop and mobile devices. The system ensures that only the sender and recipient can read messages by implementing a zero-knowledge architecture, where the service provider cannot access user private keys or cleartext data. This is achieved through client-side encryption and the use of asymmetric key exchange to share encrypted messages without prior secret key exchange. The platform

Postal is an open-source email infrastructure and self-hosted delivery platform. It functions as an SMTP mail server and inbound email gateway, providing the tools necessary to send and receive email through a privately managed infrastructure. The system manages SMTP infrastructure for outgoing message delivery and provides capabilities for custom email receiving. It allows for the routing of incoming external emails to internal applications or websites for automated processing. The platform includes support for multi-tenant domain mapping, event-driven webhook notifications, and plugin-base

Authboss is a modular HTTP authentication framework for managing user identity, session lifecycles, and password security. It provides a system of identity access middleware to control route access and synchronize user identity across requests via standard web protocols. The framework is distinguished by a pluggable architecture that allows for the registration of independent modules to extend identity logic. It utilizes a hook-based event system to execute custom business logic during authentication state changes and employs a selector-verifier token pattern to protect against timing attacks

Automate SSL/TLS certificates on Windows with ease

This project is a Kubernetes controller that automates the issuance, renewal, and lifecycle management of TLS certificates. It functions as a native extension to the cluster API, using custom resource definitions and reconciliation loops to maintain the desired state of certificates and trust bundles across distributed services. By integrating directly with the cluster's admission control and secret storage systems, it ensures that cryptographic identities are consistently provisioned and available for application workloads. The project distinguishes itself through its extensive support for a

Boulder is a production-grade implementation of the ACME (Automated Certificate Management Environment) protocol, built around the same infrastructure that powers Let's Encrypt. It functions as a full certificate authority that automates the issuance, renewal, and revocation of TLS certificates, supporting multiple key algorithms including RSA, ECDSA, and experimental post-quantum ML-DSA keys. The project distinguishes itself through its multi-algorithm PKI hierarchy, which builds separate RSA and ECDSA root chains with cross-signing to support dual-algorithm trust paths. It includes a CRL-ba

Dokploy is a self-hosted platform-as-a-service designed to simplify the deployment and management of containerized applications and databases. It provides a centralized control plane that decouples administrative management from application workloads, allowing users to oversee infrastructure across multiple server nodes through a unified web interface or a command-line tool. The platform distinguishes itself through an extensive library of pre-configured application templates, enabling the rapid deployment of databases, identity providers, and various productivity or development tools. It sup