Go to file

Joshua Tauberer 4ec6692f21 showing the mail-in-a-box version might fail if git isn't actually installed The user might acquire the sources via some means other than a git clone. On Vagrant, the files come in via Vagrant. So test for git before running `git describe`.		2014-09-01 07:51:25 -04:00
conf	output/text tweaks	2014-08-27 14:42:00 +00:00
management	add SSHFP records to DNS	2014-08-27 12:59:40 +00:00
setup	showing the mail-in-a-box version might fail if git isn't actually installed	2014-09-01 07:51:25 -04:00
tests	update test_dns	2014-06-21 12:32:20 -04:00
tools	Merge pull request #167 from hjjg/feature-owncloudadmin	2014-08-27 07:43:01 -04:00
.gitignore	adding externals and .env to gitignore	2014-07-07 07:06:36 -04:00
CONTRIBUTING.md	adding CONTRIBUTING.md, see #23	2014-04-23 15:52:49 -04:00
LICENSE	add CC0 1.0 Universal in LICENSE	2014-04-23 15:49:23 -04:00
README.md	add SSHFP records to DNS	2014-08-27 12:59:40 +00:00
Vagrantfile	replace '-t 0' test with an environment variable since '-t 0' is false when standard input has been redirected and doesn't tell us whether or not we can use dialog for input, but Vagrant must be non-interactive	2014-08-25 07:54:11 -04:00

README.md

Mail-in-a-Box

By @JoshData and contributors.

Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box.

This is a work in progress. I work on this in my limited free time.

Why build this? Mass electronic surveillance by governments revealed over the last year has spurred a new movement to re-decentralize the web, that is, to empower netizens to be their own service providers again. SMTP, the protocol of email, is decentralized in principle but highly centralized in practice due to the high cost of implementing all of the modern protocols that surround it. As a result, most individuals trade their independence for access to a “free” email service.

The Box

Mail-in-a-Box turns a fresh Ubuntu 14.04 LTS 64-bit machine into a working mail server, including SMTP (postfix), IMAP (dovecot), Exchange ActiveSync (z-push), webmail (Roundcube), spam filtering (spamassassin), greylisting (postgrey), CardDAV/CalDAV (ownCloud), DNS, SPF, DKIM (OpenDKIM), DMARC, DNSSEC, DANE TLSA, SSHFP, and basic system services like a firewall, intrusion protection, and setting the system clock.

This setup is what has been powering my own personal email since September 2013.

Please see mailinabox.email for more information and how to set up a Mail-in-a-Box.

In short, it's like this:

# do this on a fresh install of Ubuntu 14.04 only!
sudo apt-get install -y git
git clone https://github.com/mail-in-a-box/mailinabox
cd mailinabox
sudo setup/start.sh

Congratulations! You should now have a working setup. You'll be given the address of the administrative interface for further instructions.

Status: This is a work in progress. It works for what it is, but it is missing such things as quotas, backup/restore, etc.

The Goals

I am trying to:

Make deploying a good mail server easy.
Promote decentralization, innovation, and privacy on the web.
Have automated, auditable, and idempotent configuration.
Not to be a mail server that the NSA cannot hack.
Not to be customizable by power users.

For more background, see The Rationale.

The Acknowledgements

This project was inspired in part by the "NSA-proof your email in 2 hours" blog post by Drew Crawford, Sovereign by Alex Payne, and conversations with @shevski, @konklone, and @GregElin.

Mail-in-a-Box is similar to iRedMail.

The History

In 2007 I wrote a relatively popular Mozilla Thunderbird extension that added client-side SPF and DKIM checks to mail to warn users about possible phishing: add-on page, source.
Mail-in-a-Box was a semifinalist in the 2014 Knight News Challenge, but it was not selected as a winner.