this post was submitted on 12 Jun 2023
158 points (98.8% liked)

Selfhosted

40329 readers
485 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

All this new excitement with Lemmy and federation has got me thinking that maybe I should learn to run my own instance. What always comes up though is how email is the orginal federated technology.

I am looking at proxmox and see that is has a built in email server, so now I am wondering if it is time to role my own.

I stopped using gmail a long time ago, and right now I use ProtonMail, but I am super frustrated with the dumb limitation of only having a single account for the app. I get why they do it, and I am willing to pay, but it is pricey and I don't know if that is my best option. I guess it is worth it since ProtonVPN is included. It looks like they are expanding their suite.

Is it worth it? Can I make it secure? Is it stupid to run it off a local computer on my home network?

(page 2) 50 comments
sorted by: hot top controversial new old
[–] DyXen@lemmy.world 3 points 1 year ago (1 children)

Hello, I'm selfhosting mailserver with mailcow in docker container. Its easy to setup. I have static IPv4 and domain. Thats all.

load more comments (1 replies)
[–] milan@discuss.tchncs.de 3 points 1 year ago* (last edited 1 year ago) (1 children)

Well i kinda did that when i started selfhosting way too much a number of years ago... it can be quite annoying trying to get your server out of blocklists (if you need to change servers, because of ip reusing from hosters) and unless you use something like Servercow, it is easy to break things and it kinda hard to find proper tooling for selfservice and stuff.. nowadays i mostly keep it like it is because i don't want to deal with trying to migrate people to a different setup. It's okey and most of the time it just does it job, but it doesn't give too much joy :P

[–] DidacticDumbass@lemmy.one 3 points 1 year ago

Hah. Not the fun DIY project I hoped it would be. Oh well. Yeah, don't want to get to the point of being responsible for other people's data.

[–] taur10@venera.social 3 points 1 year ago (1 children)

@DidacticDumbass I use hosted email from Polaris Email, $25/yr, and my domain from Porkbun at $5 for the first year, and access the mail through Thunderbird on phone and computer.

load more comments (1 replies)
[–] njaard@lemmy.world 3 points 1 year ago (3 children)

Yes, and I love it.

I use mailjet as a proxy on outgoing emails so that I get fewer of my sent messages rejected, which works.

It was a pain to setup but it's treating me very well.

load more comments (3 replies)
[–] PlexSheep@feddit.de 3 points 1 year ago (1 children)

I run my own Mailserver on a vps with mailcow dockerized. Was a real pain to set up, even through it mostly works right now.

DNS stuff isn't just some A or AAAA records, also txt stuff reverse DNS and much more. As the others said, that's completely impossible with a regular ISP.

I'm on some dumb blacklist because my IP is obviously in the IP range of my hosting provider, and some lists generally block all vps ranges.

Now imagine the following: your bank wants to contact you and your primary mail is selfhosted, for some reason they block your IP (yes outgoing blocks, those idiots) and you don't get some real important mail. Or your server is down for maintenance, certificate issues, so on.

The best solution is most probably letting a professional email holster take care of your domain, for email at least. Protonmail offers that but the problem I have with them is that they don't allow a regular login through thunderbird, restricted to their own software.

load more comments (1 replies)
[–] dan@upvote.au 3 points 1 year ago (7 children)

I run my own email server using Mailcow. It works well.

However, I do not even attempt to directly send outbound email. It's very difficult to get your server trusted by the major providers, especially Microsoft (who are very picky about email servers). I have an account with MXRoute (which is an email provider) but only use it for outbound relaying. Inbound emails go directly to my server.

For what it's worth, MXRoute is a great provider to consider if you want to move away from the large ones (Google, Microsoft, etc) but don't want to self-host.

load more comments (7 replies)
[–] Dumledyr2005@feddit.dk 3 points 1 year ago (1 children)

I run a complete ISP style setup with multiple domains. I run it from a rented server at Hetzner, so i don't have problems with being black listed for sending from a consumer IP.

load more comments (1 replies)
[–] nick_99@sh.itjust.works 3 points 1 year ago (1 children)

I used to run my own using Modoboa. I've since switched to mxroute for my email.

[–] DidacticDumbass@lemmy.one 2 points 1 year ago

I will add it to the list of solutions.

Hah, I wonder how badly I will dissapoint everyone if I just pay for the basic tier of my email provider.

[–] Robbie@lemmy.world 3 points 1 year ago (5 children)

E-mail was the first "thing" that got me off of Google (to Proton & then currently Tutanota) but is really the last remaining service I not have self hosted.

I have always read about how difficult and time consuimg it was to run your own mail server, but I felt like I needed to experience it myself. So I purchased another domain and followed the instructions on https://mailinabox.email/.

I am using a small VPS on Hetzner and I have to say the experience has been almost flawless so far. I did need to have my new domain taken off the Domain Block List, but Hetzner gave me a clean IP and defaults to blocking port 25 outbound to prevent spam (simple ticket to open, once account is 30 days old and paid).

I know I'm still early into this journey so far, but it has been really simple and I plan to test this secondary domain for a few months before moving onto it full time.

As an avid self hosted of literally everything else, I can say it has been a lot of fun learning so far!

load more comments (5 replies)
[–] Tempiz@sh.itjust.works 3 points 1 year ago (1 children)

Nope. It can’t really be self hosted anymore, as having a residential IP is a straight track to the spam folder. It can be done if you also pay for a mail relay service, but then what’s the point of self hosting when you need to rely on a cloud service anyways.

[–] DidacticDumbass@lemmy.one 3 points 1 year ago

Some dreams are born dead.

[–] chris@l.roofo.cc 3 points 1 year ago (3 children)

I did but I stopped. My server had everything set up (DKIM, DMARC, SPF, Spam filtering) but I gave up after some providers wanted me to jump through hoops to get my mail delivered. Also I never had enough outgoing mail to build some reputation.

load more comments (3 replies)
[–] ricecake@sh.itjust.works 3 points 1 year ago (1 children)

I have run my own email server, and have worked in the commercial web hosting sector.

Honestly, I wouldn't run your own email except as a side project.

It's certainly possible and all the tools are available and easy enough to use, but email in general is a rough combo of super old, and a "big target".

The super old part means that a lot of things that we might consider standard for a modern federated system just aren't there for email. Security is profoundly lacking, and if something gets dropped because of an update, or your computer crashed, there's no guarantee that the system will find a way to get it to you, and the sender might not even know it didn't get to you.

Security wise, you basically have to set everything up correctly all at once, or some system somewhere between you and the recipient will just throw the messages away, and they may or may not tell you.
They do this because all the tools are old, crufty and there's a lot of good exploits that misconfiguration leaves open that automated tools can use to send spam.

Be sure to keep your computer fully patched, and install a malware scanner, even on Linux.

Ultimately, I wouldn't bother running one because the ratio of reward to work is just off for me. I would recommend setting something up for an afternoon though, just so you can see how the pieces work, and get to send yourself an email and know what steps it took.

[–] DidacticDumbass@lemmy.one 2 points 1 year ago

Good point! I had not considered that the technolog itself is a bit of a vampire, and really only lives on due to its legacy as a cheap form of communication.

I guess the world could have a better more secure kind of email, but change is expensive and the biggest companies are cheap.

Very interesting. Thanks for the follow up.

[–] Thewanderer@lemmy.one 2 points 1 year ago (3 children)

I'm using openbsd with dovcot, opensmtpd on a pi. I used mailhardener to get it scoring well. I've had no issues with it getting flagged.

load more comments (3 replies)
[–] NochMehrG@feddit.de 2 points 1 year ago (1 children)

I don't. But I do have my domain and use a hosted solution, so I'm kind of independent and own my data.

load more comments (1 replies)
load more comments
view more: ‹ prev next ›