mailcow
about
/dev/hack has a self-hosted email server located at https://mail.devhack.net running on mailcow, which is a suite of applications including Postfix, Dovecot, and nginx. Email is authenticated with rDNS, SPF, DKIM, and DMARC, and should be able to reach the major email providers as well as other private email servers. Please submit a bug report or message someone in chat if you are finding your outbound emails wind up in spam. Our domains are currently devhack.net and devhack.email.
currently, all outbound and inbound mail is self-hosted and does not relay through any external services. devhack.business has a separate mxroute email that is unrelated to our self-hosted mail.devhack.net
sign-in
Any member with a /dev/hack IDP account has access to the mail server. To sign in, go to https://mail.devhack.net and click the dropdown next to the login button, then choose the option for SSO. If you have never signed into the webmail client before, a mailbox will be automatically provisioned for you. If you have not already, it is highly recommended that you set your account up with 2FA if you intend to have an email account.
mail applications
If you want to use a mail application other than the webmail, you can set up an application password through the web ui for clients that support IMAP (TCP/993) and SMTP submission (TCP/587). The hostname for both is mail.devhack.net. POP3 is not currently permitted through the firewall. To set up the application password, click on the wrench in the top right of the webmail UI, select "App passwords", and from this menu add a new application password. This will be for individual applications. If you are using multiple clients, set a password for each one. You will use mail.devhack.net for both IMAP and SMTP submission, with the aforementioned ports. Both require using TLS.
requesting service accounts, aliases, etc
If you need a service account, alias, or distribution list to be created, please submit a ticket through trac and ask in the /dev/hack chat! ToDo: Make this self-service.
To interface with any accounts, including service accounts, programmatically / with applications, refer to #mail applications. Surely you want this since "service accounts" infers an amount of programmatic access.
setting the username field to the full @devhack.net email seems to be the thing that will make things work.
any mailcow admin can provision new mailboxes at https://mail.devhack.net/admin/mailbox
sending as an alias from webmail
Click on the gear at the top of the left navigation panel in webmail. Click on mail, then IMAP accounts, and click the edit button next to your email address. Under settings and identities, click "new identity", and enter the alias you requested earlier here, as well as a name. Save everything, and go back to webmail. If you write a new email, you should now have the option to use this alias when sending mail.
setting a forwarding address
To set a forwarding address, go to your webmail. Click on the preferences gear next to your username, and then go to mail. Under mail, go to forward, and then check the "Forward incoming messages" box. Enter your email address and keep save. If you want to keep a copy in your /dev/hack mailbox, be sure to check the "Keep a copy" box.
technical notes
user attributes
Mailcow gets its user list from idp and is single sign-on enabled. It is important that any users that wish to make use of the mail system have the mailcow_template attribute defined in Keycloak. This tells mailcow that it should allocate a mailbox to the user when they try to sign on. If this is not present, the account will not be able to log into mailcow through sso.
provider IP changes
If the IP ever changes for the mail server's eternal SMTP IP address, it is important to make sure that reverse DNS is set, to avoid being categorized as spam.
how to admin
User:Talija and User:M both have admin accounts and can be accessed via https://mail.devhack.net/admin/
they also have ssh keys: ssh devhack-mail01.int.devhack.net
the deploy exists in /opt/