Currently taking new orders · average turnaround under 36 hours
ConfiguredMail
All services
Service

Postfix + Dovecot —
own your mail server.

For teams who want full control of their inbox: we install and harden Postfix and Dovecot on a VPS you provide. TLS via Let's Encrypt, full deliverability stack, and a runbook so you know exactly what lives where.

Postfix MTA Dovecot IMAP/POP Let's Encrypt TLS SpamAssassin + Fail2Ban 72h turnaround
post-install verification
$ postconf -d | grep mail_version
mail_version = 3.7.5
$ systemctl is-active postfix dovecot
active
active
$ dig -x 203.0.113.42 +short
mail.yourdomain.com.
PTR record matches HELO
What's included

A production-ready mail stack.

Configured to industry best practice — not a half-finished tutorial copy/paste.

Postfix MTA

Configured for outbound + inbound on submission (587) and SMTPS (465). TLS-only, modern cipher suite, no plaintext auth on port 25.

Dovecot IMAP/POP

IMAP4rev1 + POP3 on TLS-only ports. SASL auth via system users or virtual users in MariaDB.

Let's Encrypt TLS

Auto-renewing cert for mail.yourdomain.com, applied to Postfix submission, SMTPS, and Dovecot.

Reverse DNS (PTR)

Coordinated with your VPS provider so the rDNS matches your HELO — major deliverability factor.

SPF · DKIM · DMARC

Same authentication stack as our managed plans. opendkim signs outbound, BIND-style records published in your DNS.

SpamAssassin + Fail2Ban

Inbound spam filtering with sane defaults; brute-force protection on SMTP/IMAP/SSH ports.

Roundcube webmail

Optional. Hardened install with HTTPS, plugins for password change + two-factor login.

Runbook + handover

Markdown runbook covering paths, configs, log locations, renewal commands, and how to add a mailbox.

What you provide

A small VPS + DNS access.

  • VPS
    Ubuntu 22.04 LTS or Debian 12, minimum 1 vCPU + 2 GB RAM + 20 GB disk. Hetzner, DigitalOcean, Linode, Vultr, AWS Lightsail all work.
  • Static IPv4
    Most providers give one by default. Required for clean reverse DNS.
  • DNS access
    Either delegated (we add records) or self-managed (we send a copy-paste list).
  • Reverse DNS access
    Most VPS panels let you set the PTR record yourself. We'll guide you through it.
Important note

Self-hosted mail isn't free maintenance

Once we hand it over, you'll be responsible for OS updates, certificate monitoring, and watching for IP-reputation issues. We document everything you need in the runbook, but if you'd rather not deal with that, Google Workspace or Zoho is the easier path — and we'll happily set those up instead.

Talk to us first