Skip to content

OpenMail v0.2.0

Choose a tag to compare

@github-actions github-actions released this 02 Aug 17:11
· 50 commits to main since this release

OpenMail v0.2.0

Image (Docker Hub)

docker pull ianshaw027/openmail:v0.2.0
docker pull ianshaw027/openmail:latest

Run

docker pull ianshaw027/openmail:v0.2.0
docker run -d --name openmail -p 8000:8000 \
  -e OPENMAIL_MASTER_KEY="$(openssl rand -base64 32)" \
  -v openmail-data:/data \
  ianshaw027/openmail:v0.2.0

Or with compose from this repo: docker compose pull && docker compose up -d

/api/health reports version: 0.2.0.

Changelog

Added

  • Device QR transfer — PC ↔ phone vault sync via short-lived server ciphertext package (approve / reject / overwrite ack)
  • Brand taxonomy — CF temp-mail + regular brands (Gmail, Outlook, QQ, 163, mail.com, GMX, Proton, Zoho, DuckMail, …) with multi-color SVG chips on the console
  • 2FA service brand SVGs — Google, Microsoft, GitHub, Apple, Amazon, Discord, X, Facebook, Dropbox, Steam, Binance (+ fallback mark)
  • 2FA service filter chips and drag-to-reorder with sortOrder persisted in the vault
  • 2FA circular countdown (amber ≤10s / red ≤5s) instead of a thin bar
  • Mail load-more — first fetch 20 messages; “load more” shows more from cache then pulls 10 older (before + max_messages on proxy fetch; IMAP / Graph)
  • Clear & refetch — wipe local mailbox cache and pull latest 20
  • Auto-detect unknown accounts every 5s (small concurrent batches)
  • CF Worker root URL expands to known mail API paths; HttpApi auth styles expanded
  • Top-nav GitHub icon → IanShaw027/openmail
  • Console: purpose note chips, folder tabs (inbox / spam / sent), full-bleed topnav / resizable panes polish
  • Docs: expanded README, ops, screenshots, Dependabot, security advisory path

Changed

  • Mobile console actions column: no sticky freeze; collapsed ⋯ expand per row
  • Copying email / secret / code / 2FA also selects that mailbox so the mail panel follows
  • Default quick fetch window raised toward 20 messages; proxy supports before + max_messages
  • Published image remains Docker Hub only (ianshaw027/openmail)

Fixed

  • Client-sealed accounts never hit server decrypt; clear local-secrets errors
  • WARP / egress retries capped so proxy fetch stays under client timeout
  • mail.com: faster first login; logout/?ls=wd treated as wrong password; body hydrate via detail URL
  • CF Worker ConnectError — TLS SNI uses original host (not pin-to-IP alone)
  • 2FA form: dropdowns selectable, simplified fields, full SHA/SHA3, webcam + image QR
  • Brand marks and IMAP host classification for multi-color chips

Security

  • Sample / demo credentials scrubbed from docs and fixtures where present
  • Vault transfer packages are opaque ciphertext; short TTL on the server