Releases: fenilsonani/email-server
Releases · fenilsonani/email-server
v2.0.0 - Major Features, Security & Reliability
v2.0.0 Release
🚀 New Features
Mailing Lists
- Full mailing list manager with subscriber management
- Archive support with pagination
- Moderation capabilities
User Self-Service Portal
- New
/account/endpoint for end-users - Manage personal settings without admin access
Email Scheduling
- Send Later: Schedule emails for future delivery
- Snooze: Temporarily hide emails and resurface later
- Undo Send: Configurable delay before sending
Email Attachments
- Full attachment support in transactional API
- Base64-encoded attachments with auto content-type detection
- Support for PDF, images, Office documents, and more
Multi-Domain Support
- Per-domain mail hostname DNS records (
mail.{domain}) - Automatic DNS verification for all domains
CardDAV/CalDAV
- Improved Apple mobileconfig profiles
- Contacts and calendar sync support
🔒 Security Fixes
- CSRF token protection on all forms
- Safe type assertions preventing nil pointer panics
- Path traversal prevention in file operations
- Integer overflow protection in quota calculations
- Fixed multiple security vulnerabilities
🛡️ Reliability Improvements
Connection & Resource Protection
| Component | Limit |
|---|---|
| SMTP connections | 1000 total, 50 per IP |
| IMAP connections | 2000 total, 100 per IP |
| Webhook workers | 50 concurrent |
| CSRF token cache | 10,000 max |
| Session cache | 10,000 max |
| IMAP tracker cache | 5,000 max (LRU eviction) |
Timeout Safeguards
- DNS lookups: 10 second timeout
- Database queries: 5 second timeout
- Webhook delivery: 10 second timeout
Other Improvements
- Race condition fixes with proper mutex protection
- Database resilience and connection pooling
- Message deduplication in delivery engine
- Distributed tracing integration
- Improved observability and metrics
📦 Installation
go install github.com/fenilsonani/email-server/cmd/mailserver@v2.0.0⚠️ Breaking Changes
None - this release is backwards compatible.
Full Changelog: main...v2.0.0
v1.0.0 - Initial Release
Personal Email Server v1.0.0
Self-hosted, privacy-focused email server with complete infrastructure.
Features
- SMTP - MX, submission (587), SMTPS (465)
- IMAP - Full mailbox access with TLS (993)
- CalDAV/CardDAV - Calendar and contacts sync
- Auto-TLS via Let's Encrypt
- DKIM/SPF/DMARC - Email authentication
- Greylisting - Spam prevention
- Prometheus metrics - Monitoring
- Audit logging - Security tracking
Quick Start
git clone https://github.com/fenilsonani/email-server.git
cd email-server
go build -o mailserver ./cmd/mailserver
./mailserver setup
./mailserver serveSee README for full docs.