OpenMail v0.2.0
OpenMail v0.2.0
Image (Docker Hub)
docker pull ianshaw027/openmail:v0.2.0
docker pull ianshaw027/openmail:latest
Run
docker pull ianshaw027/openmail:v0.2.0
docker run -d --name openmail -p 8000:8000 \
-e OPENMAIL_MASTER_KEY="$(openssl rand -base64 32)" \
-v openmail-data:/data \
ianshaw027/openmail:v0.2.0Or with compose from this repo: docker compose pull && docker compose up -d
/api/health reports version: 0.2.0.
Changelog
Added
- Device QR transfer — PC ↔ phone vault sync via short-lived server ciphertext package (approve / reject / overwrite ack)
- Brand taxonomy — CF temp-mail + regular brands (Gmail, Outlook, QQ, 163, mail.com, GMX, Proton, Zoho, DuckMail, …) with multi-color SVG chips on the console
- 2FA service brand SVGs — Google, Microsoft, GitHub, Apple, Amazon, Discord, X, Facebook, Dropbox, Steam, Binance (+ fallback mark)
- 2FA service filter chips and drag-to-reorder with
sortOrderpersisted in the vault - 2FA circular countdown (amber ≤10s / red ≤5s) instead of a thin bar
- Mail load-more — first fetch 20 messages; “load more” shows more from cache then pulls 10 older (
before+max_messageson proxy fetch; IMAP / Graph) - Clear & refetch — wipe local mailbox cache and pull latest 20
- Auto-detect unknown accounts every 5s (small concurrent batches)
- CF Worker root URL expands to known mail API paths; HttpApi auth styles expanded
- Top-nav GitHub icon → IanShaw027/openmail
- Console: purpose note chips, folder tabs (inbox / spam / sent), full-bleed topnav / resizable panes polish
- Docs: expanded README, ops, screenshots, Dependabot, security advisory path
Changed
- Mobile console actions column: no sticky freeze; collapsed ⋯ expand per row
- Copying email / secret / code / 2FA also selects that mailbox so the mail panel follows
- Default quick fetch window raised toward 20 messages; proxy supports
before+max_messages - Published image remains Docker Hub only (
ianshaw027/openmail)
Fixed
- Client-sealed accounts never hit server decrypt; clear local-secrets errors
- WARP / egress retries capped so proxy fetch stays under client timeout
- mail.com: faster first login;
logout/?ls=wdtreated as wrong password; body hydrate via detail URL - CF Worker ConnectError — TLS SNI uses original host (not pin-to-IP alone)
- 2FA form: dropdowns selectable, simplified fields, full SHA/SHA3, webcam + image QR
- Brand marks and IMAP host classification for multi-color chips
Security
- Sample / demo credentials scrubbed from docs and fixtures where present
- Vault transfer packages are opaque ciphertext; short TTL on the server