Forked repo to test stuff on
1873ed0908
As the ecosystems around us evolve so should the NixOS mailserver project. DKIM signing could be improved by allowing users to treat DKIM keys like a secret that they would commonly manage through agenix/sops/etc. Forwarding mail these days requires SRS and possibly ARC. The latter has already become a required feature for bulk message to iCloud[1] and Google Mail[3]. I propose that we stay ahead of the curve by adding support for these features. LDAP user management was added, but one pain point is that we currently prevent it from coexisting with declarative users. And finally Oauth (via RFC7628[3]) is the new kid on the block that everyone wants to try out, but most notably client support[4] for hosting this yourself is not quite there yet. [1] https://support.apple.com/en-us/102322 [2] https://support.google.com/a/answer/81126?hl=en#zippy=%2Crequirements-for-all-senders%2Crequirements-for-sending-or-more-messages-per-day [3] https://www.rfc-editor.org/rfc/rfc7628.html [4] https://bugzilla.mozilla.org/show_bug.cgi?id=1602166 |
||
|---|---|---|
| .hydra | ||
| docs | ||
| mail-server | ||
| nixops | ||
| scripts | ||
| tests | ||
| .editorconfig | ||
| .gitignore | ||
| .gitlab-ci.yml | ||
| .readthedocs.yaml | ||
| default.nix | ||
| flake.lock | ||
| flake.nix | ||
| LICENSE | ||
| README.md | ||
| shell.nix | ||
| update.sh | ||
Release branches
For each NixOS release, we publish a branch. You then have to use the SNM branch corresponding to your NixOS version.
- For NixOS 24.11
- For NixOS 24.05
- For NixOS unstable
- Use the SNM branch
master - Documentation
- Use the SNM branch
Subscribe to SNM Announcement List This is a very low volume list where new releases of SNM are announced, so you can stay up to date with bug fixes and updates.
Features
v2.0
- Continous Integration Testing
- Multiple Domains
- Postfix MTA
- smtp on port 25
- submission tls on port 465
- submission starttls on port 587
- lmtp with dovecot
- Dovecot
- maildir folders
- imap with tls on port 993
- pop3 with tls on port 995
- imap with starttls on port 143
- pop3 with starttls on port 110
- Certificates
- manual certificates
- on the fly creation
- Let's Encrypt
- Spam Filtering
- via rspamd
- Virus Scanning
- via clamav
- DKIM Signing
- via opendkim
- User Management
- declarative user management
- declarative password management
- LDAP users
- Sieves
- A simple standard script that moves spam
- Allow user defined sieve scripts
- ManageSieve support
- User Aliases
- Regular aliases
- Catch all aliases
In the future
- DKIM Signing
- Allow per domain selectors
- Allow passing DKIM signing keys
- Improve the Forwarding Experience
- User management
- Allow local and LDAP user to coexist
- OpenID Connect
- Depends on relevant clients adding support, e.g. Thunderbird
Get in touch
- Subscribe to the mailing list
- Join the Libera Chat IRC channel
#nixos-mailserver
How to Set Up a 10/10 Mail Server Guide
Check out the Setup Guide in the project's documentation.
For a complete list of options, see in readthedocs.
Development
See the How to Develop SNM documentation page.
Contributors
See the contributor tab
Alternative Implementations
Credits
- send mail graphic by tnp_dreamingmao from TheNounProject is licensed under CC BY 3.0
- Logo made with Logomakr.com