mix
ab25d24706
Add optional Phase O1 (targeted at the 2.x.x release line, outside the v1.0 baseline) covering inbound relay as an opt-in/plugin: accept on :25 for explicit relay_domains and forward to an upstream backend, with strict anti-open-relay/backscatter (relay_domains + relay_recipient_maps + reject_unauth_destination). Use cases: backup-MX and fronting a mail server with no external IP. Antispam is an important but optional capability: blind forwarding stays valid. Since a blind relay hides the origin IP from the backend (breaking downstream DNSBL/SPF), filtering must be attachable at the inbound hop — provided as a milter hook to an external engine running in a separate optional container, plus native Postfix DNSBL as a dependency-free backstop. SelfPost neither bundles nor runs the engine, keeping the image and the "one container, three processes" model intact. Requires explicit sign-off (spec 12.6) as it extends beyond out-of-scope section 3; plan-only, no implementation. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
SelfPost
Self-hosted outbound SMTP relay with a web control panel, shipped as a single
Docker image. Postfix + OpenDKIM + a small Go panel run together under
supervisord; the panel manages multiple sending domains, per-domain DKIM keys
and SASL-authenticated applications bound to their domain.
SelfPost sends mail straight to the internet from your own IP, with DKIM signing, and is configured once through the panel. It is outbound only — it does not receive mail, provide mailboxes, or offer webmail.
Status: under active development. See docs/specification.md for the full requirements and docs/implementation-plan.md for the phased build plan.
Requirements (site prerequisites)
SelfPost assumes the host already provides the conditions for sending from your own IP — an unblocked outbound port 25, a static IP, configurable PTR/rDNS and a reasonable IP reputation. Providing these is the operator's job, not a feature of SelfPost. Detailed deployment docs land in a later phase.
Repository
- Primary: https://codeberg.org/mix/selfpost
- Mirror: https://github.com/mixeme/selfpost
License
AGPL-3.0. The AGPL closes the "SaaS loophole": if you run a modified version as a network-accessible service, you must make the modified source available to its users — not only when you distribute copies of the code.