release: 1.4.0: Optional inbound relay (backup-MX) on port 25

Optional inbound relay (backup-MX / forwarder) on port 25, off by default. Mail is accepted only for domains configured in the panel and forwarded to an upstream; there are still no mailboxes. A dedicated security review of the inbound path is still open on the plan (Fable).
Added:
  - `INBOUND_RELAY_ENABLE` (default `false`): when true, Postfix listens on
  - Panel **Inbound** pages (global administrator): domains, upstream host/port
  - Optional `INBOUND_ANTISPAM_MILTER` on the inbound listener only, plus
  - Inbound rate limit (`INBOUND_RATE_LIMIT_MESSAGES_PER_IP`, default 20) and
Changed:
  - Compose publishes host port 25 even when the flag is off (nothing listens
  - Full-backup restore Resync also rebuilds inbound maps when the flag is on.

Full detail: CHANGELOG.md (1.4.0).

This commit is contained in:

mix

2026-09-22 15:24:52 +03:00

parent 0730b2090e

commit 656c4d4d7f

50 changed files with 2512 additions and 125 deletions

									
										deploy/nginx/docker-compose.nginx.yml
									
		+1
		
												View File
												
				@@ -23,6 +23,7 @@ services:

				    ports: !override

				      - "465:465"

				      - "587:587"

				      - "25:25"

				      # No host publish for 8080 here: nginx reaches it over the compose

				      # network at selfpost:8080 instead (see nginx.conf.example).

				    volumes: !override