Finding a modern cloud-native email server solution
reddit / selfhosted

----------------------------------------------------------------------
South-Blackberry9257 · 2023-09-27 08:40

Goal: a private email server for internal use only, no internet
access.

Features wanted:

1. Oauth2/OpenID Connect support. Unified external user base for IMAP
and SMTP
2. Deploy to kubernetes cluster
3. TLS using let's encrypt certs

tried:

[poste.io](https://poste.io), but do not support certs with ECDSA,
while our certs generated by cerbot 2.0 which default to ECDSA other
than RSA.

mailu, not friendly with environment without internet access.

Haraka + Dovecot + RoundCube: Haraka seems does not support OAuth2 at
all..


any suggestion ?

----------------------------------------------------------------------
ElevenNotes · 2023-09-27 08:51

Offline MS Exchange.

----------------------------------------------------------------------
South-Blackberry9257 · 2023-09-27 09:55

forget to mention that I want free solution. 😁

----------------------------------------------------------------------
KaiserNero · 2023-09-27 14:55

may take a look at mailcow, not sure if it covers all your
requirements (ea second point)

----------------------------------------------------------------------
Nekit1234007 · 2023-09-28 09:35

You can make certbot get RSA certificates instead OR in addition to
ECDSA. But the fact that this poste.io solution doesn't support ECDSA
is certainly not a good look.

----------------------------------------------------------------------
South-Blackberry9257 · 2023-09-28 10:08

I patched [poste.io](https://poste.io)'s source code, you won't belive
it's hard coded for RSA.

`/opt/admin/src/Base/Config/Certificate.php`

skip the cert validation, and now it works.


[poste.io](https://poste.io)  don't support oauth2,  which is a
feature I will not give up until having no choice

I will try mailcow later.

----------------------------------------------------------------------
South-Blackberry9257 · 2023-09-28 10:13

if someone looking to fix same problem:

1. patch the php file mentioned above
2. upload cert's from admin page
3. restart [poste.io](https://poste.io)

* chain.pem -> server.crt  AKA public part of certficate
* cert.pem -> ca.crt AKA Intermediate certificate
* privkey.pem -> server.key AKA private part of certficate