Infrastructure

Email hosting

A full self-hosted mail server with DKIM, SPF, DMARC, and webmail — installed with one click, managed from the portal.

Installing the mail server

Navigate to Email in the server sidebar.
Click Install Mail Server.
Enter your mail domain (e.g. mail.yourdomain.com).
Click Install.

The installer configures Postfix (SMTP), Dovecot (IMAP/POP3), Roundcube webmail, and all required authentication records. Installation takes 3–6 minutes.

Required DNS records

Add these records at your DNS registrar before sending mail. The portal shows the exact values for your server and domain.

Type	Name	Value
A	`mail.yourdomain.com`	Your server IP
MX	`yourdomain.com`	`mail.yourdomain.com` (priority 10)
TXT	`yourdomain.com`	SPF: `v=spf1 mx ~all`
TXT	`default._domainkey.yourdomain.com`	DKIM public key (from portal)
TXT	`_dmarc.yourdomain.com`	`v=DMARC1; p=quarantine; rua=mailto:admin@yourdomain.com`
PTR	Your server IP	`mail.yourdomain.com` (set at cloud provider)

Use the DNS Checklist in the portal to verify all records are propagated before sending.

Creating mailboxes

Go to Email → Mailboxes and click Add Mailbox. Enter the local part (e.g. alice) and set a password. The full address will be alice@yourdomain.com.

Webmail

Roundcube webmail is available at https://mail.yourdomain.com/webmail (or the hostname you configured). Users can log in with their full email address and password.

IMAP / SMTP settings for mail clients

Incoming (IMAP):
  Host: mail.yourdomain.com
  Port: 993 (SSL/TLS)
  Username: alice@yourdomain.com

Outgoing (SMTP):
  Host: mail.yourdomain.com
  Port: 587 (STARTTLS)
  Username: alice@yourdomain.com

DKIM key rotation

From the Email page, click Rotate DKIM Key to generate a new key pair. The portal shows the new DNS TXT value to add. Keep the old key record in DNS for 48 hours before removing it to allow in-flight messages to validate.

Troubleshooting

Mail going to spam

Verify all DNS records are correct using the portal DNS Checklist. Confirm your server’s IP is not on a blocklist (check MXToolbox). Make sure a PTR (reverse DNS) record is set at your cloud provider pointing the IP to your mail hostname.

Cannot connect via IMAP

Confirm ports 993 (IMAP) and 587 (SMTP) are open in UFW and in your cloud provider’s firewall panel. Use the portal’s Open Ports check to verify.

DMARC failures

Check that the SPF record includes the server IP and that DKIM is signing outbound mail. Run docker logs mail_postfix --tail 50 on the server for delivery details.