Technical details
Everything you need to set up an email client, and everything worth knowing about how the server works.
Email client settings
Most clients detect these settings automatically. If yours doesn't, enter them by hand.
Your username is your full email address, e.g. ania@lolson.pl.
Architecture
Mail doesn't sit on a single public server. Traffic passes through a gateway, and mailboxes live further in, behind an encrypted tunnel.
Internet
Other mail servers and your devices.
VPS gateway
A public IP address in Oracle Cloud. Accepts connections on mail ports and HTTPS.
WireGuard tunnel
An encrypted link between the gateway and the mail server.
Mailcow server
Postfix, Dovecot, rspamd, ClamAV and SOGo. Your mailboxes live here.
Domain authentication
These DNS records keep our messages out of spam folders and stop anyone from impersonating us.
- SPF
- Lists which servers may send mail on behalf of the domain.
- DKIM
- Signs every outgoing message with a cryptographic key.
- DMARC
- Tells other servers what to do with a message that fails SPF or DKIM.
- MTA-STS
- Enforces encrypted connections when mail is delivered to us.
Software
- Postfix
- Receiving and sending mail (SMTP)
- Dovecot
- Mailbox storage and IMAP access
- rspamd
- Spam filtering and reputation scoring
- ClamAV
- Attachment scanning
- SOGo
- Webmail, calendar and contacts
- WireGuard
- Encrypted tunnel to the server
Roadmap
- TLS on every connectionDone
- SPF, DKIM and DMARCDone
- Two-factor login (TOTP, WebAuthn)Done
- Encrypted off-server backupsIn progress
- MTA-STS and TLS-RPT reportsIn progress
- Users' own domainsPlanned
- End-to-end encryption (OpenPGP)Planned