This is the home documentation for “Homebox”, a set of Ansible scripts to deploy a fully functional and secure mail server at home or online.
The source code is on GitHub.
This project is for you if:
- You are interested to host your emails yourself, for privacy, security or any other reason.
- You want your server to be secure against both physical and remote intrusion.
- You want a low maintanance box that keep itself updated automatically.
- You prefer security and stability over latest features.
- You trust the Debian community to push security updates.
Philosophy
- You should be able to upgrade anything installed via the apt command. No git clone / wget / curl here, ever.
- If you are using your own hardware, the disk can be fully encrypted using LUKS. Nobody will be able to steal your hardware and your information.
- AppArmor is activated on the first boot, and all the services are configured to support it. This makes your server very safe against remote intrusion, even when using 0-day vulnerabilities.
- You can set up multiple backup destination, local and remote, all encrypted.
- A lot of default choices made towards simplicity, KISS principle, and safety.
- Attention to details, keep focused on the nitty-gritty features of self hosting, like full IPv6 support and DNSSEC.
Main components
- Operating System: Debian Bullseye
- Authentication: OpenLDAP
- DNS: PowerDNS
- Firewall: nftables
- Mail transfer agent: Postfix
- Mail delivery agent: Dovecot
- Antispam: RSpamd
- Antivirus: ClamAV
- Groupware: SOGo
- Jabber: ejabberd
Other projects to mention
If you are interested in self-hosting, you will find a lot of interesting projects on the internet, for instance:
- Sovereign: A different target, but a similar deployment approach using Ansible.
- yunohost: Contains a lot of plugins and features, not all of them are stable, but it is worth testing.
- mailinabox, more oriented towards online hosting, but very good as well.
- and many others…
All have plenty of features, but maybe a different approach to self-hosting, though.