view the rest of the comments
Selfhosted
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
-
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
Just recently, someone wrote about https://github.com/stalwartlabs/stalwart here. It is literally an all-in-one server, so it's quite hard to mess up.
Email itself is an unreliable delivery method, so usually, if a server cannot send an email to the recipient's server, it puts it in a queue and tries again after some time. Therefore, a few hours of downtime won't affect you much. Especially if you don't need an archive of your correspondence.
So I still recommend trying to run your own full server with stalwart. At most, a couple of days of problems, and then it will work for years.
This is what Mozilla’s Thundermail service uses.
I run Stalwart for the server, Bulwark for the webmail frontend (using JMAP), and SMTP2GO for outgoing mail (free tier is more than enough).
I use the exact same stack. It's been working great!
Can confirm. Stalwart is really nice. They very recently released their 1.0 version. It was a couple days of issues, then later I broke it again for a few days. Other that that, the server hosting end of it has been very smooth. There is another project that goes well with it called Bulwark. The pair of those have been stable and reliable for me for months now.
How does it work with network security, do you need to have a SMTP port open to the net?
That would depend on your deployment set up. I do not do that, but many people do. I have a very bespoke ingress route that I coded myself. It consists of a serverless cloudflare edge worker to catch emails, break them into a JSON that is sent over a tunnel to cloudflared as a post. This post is directed at containerized python program that rebuilds the email and that container is the only thing with access to deliver mail to the container running stalwart.
The reason I do this is not security though. It was a personal project more or less to see if it could be done and if it was reliable. Particularly to see if i could make a secure delivery method to bypass my ISPs CGNAT without paying for and maintaining a VPS. So far so good. And it has no monthly fee.
Most people I know of (with CGNAT limitations) are just using a cheap VPS with open ports and then the VPS either has the email server there or a tunnel to the SMTP server. If you have a static IP or a DDNS set up where you can properly port forward, that works too.
What does Bulwark do? Link?
https://bulwarkmail.org/ it's a web mail client that can fully utilize jmap with Stalwart. Its very snappy and the maintainer is very active. They also put together a good android native client and they are working on one for iOS.