• 3 Posts
  • 84 Comments
Joined 1 year ago
cake
Cake day: June 10th, 2023

help-circle
  • I use dovecot for this. And thunderbird to actually move/archive the emails. I use caddy for many of my services, so I have pointed dovecot to caddys certificates (for “my.domain”), since it manages certificates through let’s encrypt. I had a plan to install postfix for sending internal emails from my self-hosted services, but it seemed like a bit of configuration and I got busy with other stuff

    I made an excerpt from my docker-compose.yml, but you probably have to figure out some things on your own

    
    version: '3.4'
    
    services:
      dovecot:
        image: dovecot/dovecot:2.3.20
        restart: unless-stopped
        volumes:
          - ./dovecot/:/etc/dovecot
          - /mnt/storage/dovecot/mail:/srv/mail
          - ./caddy/data/caddy/certificates/acme-v02.api.letsencrypt.org-directory/wildcard_.my.domain/wildcard_.my.domain.crt:/etc/ssl/cert.crt
          - ./caddy/data/caddy/certificates/acme-v02.api.letsencrypt.org-directory/wildcard_.my.domain/wildcard_.my.domain.key:/etc/ssl/key.key
        ports:
          - 993:993
    

    contents of ./dovecot folder:

    dovecot.conf
    passwords
    

    contents of dovecot.conf (I think I searched online to find a good example, I don’t remember where from…)

    ## manage this file
    
    mail_home=/srv/mail/%Lu
    mail_location=sdbox:~/Mail
    mail_uid=1000
    mail_gid=1000
    
    protocols = imap pop3 submission sieve lmtp
    
    first_valid_uid = 1000
    last_valid_uid = 1000
    
    passdb {
      driver = passwd-file
      args = scheme=argon2i /etc/dovecot/passwords
    }
    
    ssl=yes
    ssl_cert=</etc/ssl/cert.crt
    ssl_key=</etc/ssl/key.key
    
    namespace {
      inbox = yes
      separator = /
    
      mailbox Drafts {
        auto = subscribe
        special_use = \Drafts
      }
      mailbox Sent {
        auto = subscribe
        special_use = \Sent
      }
      mailbox Spam {
        auto = subscribe
        special_use = \Junk
      }
      mailbox Trash {
        auto = subscribe
        special_use = \Trash
      }
      mailbox Archive {
        auto = subscribe
        special_use = \Archive
      }
    }
    
    service lmtp {
      inet_listener {
        port = 24
      }
    }
    
    listen = *
    
    log_path=/dev/stdout
    info_log_path=/dev/stdout
    debug_log_path=/dev/stdout
    












  • conrad82@lemmy.worldtoSelfhosted@lemmy.worldFighting with immich
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    5 months ago

    I also have internal only traffic, but I still use let’s encrypt. I self signed for a couple of years, but switching to proper certificates made things much simpler and better. Especially on mobile.

    I use a combination of my own domain and caddy. and duckdns, since my domain registrar does not have an api caddy can use, but I can point my domain to my duckdns domain and it works 👍



  • My thoughts too, what makes this alloy so amazing? It seems to me that sapphire is harder, and otherwise similar use cases

    No mention/comparison to Sapphire in the article that I could see, disappointing.

    Maybe it is the sintering process that makes it interesting, could be easier to shape maybe 🤔