Troubleshooting

Troubleshooting

"This server doesn't handle mail for …" when signing in

The domain is not listed in goodmail.conf. Add a domainN= block, a domain*=* catch-all, or set autodiscover=true. See Configuration.

"Can't reach the mail server" / "Can't connect to …"

goodmail could not open the IMAP connection. Check host and port (993 TLS or 143 STARTTLS), firewall, and for a private CA the caN= or insecureN=true settings.

Passkeys do not work or are "not found"

A passkey is tied to the exact host name. Behind a proxy keep ProxyPreserveHost On or set GOODMAIL_ORIGIN; do not set GOODMAIL_ORIGIN when serving several hosts. A passkey made on goodmail.example.org does not work on goodmail.example.com. See Two-Step Sign-In.

Everyone is signed out after a restart

Sessions survive restarts as long as secret.key (or GOODMAIL_SECRET) is unchanged, because the login cookie is sealed with it. If the key changed or was deleted, or the cookie expired (12 hours, or a year with "Keep me signed in"), everyone has to sign in again.

S/MIME buttons are missing or it fails on macOS

Needs smime=true and a real OpenSSL ≥ 1.1.1 with cms. macOS's built-in LibreSSL is not enough: brew install openssl and set GOODMAIL_OPENSSL=/opt/homebrew/bin/openssl.

"Mail rules" are missing

Add sieveN= for the domain and make sure ManageSieve (port 4190, STARTTLS) is reachable from goodmail.

Administration, Change password or Forgot password are missing

They appear only when admincmdN=, passwordcmdN= (and for Forgot password also resetfrom= and resetsmtp=) are set, and Administration only for people the helper command recognises as administrators.

The page shows "We'll be right back"

That is the optional error page, shown while the goodmail process is down or restarting. See Deployment. If it stays, check systemctl status goodmail and the journal.

A message list stays empty while loading a huge folder

goodmail shows Loading… while the first page is fetched; very large folders such as "All Mail" can take a moment on slow servers. Opened messages and folder lists are cached, so the next visit is fast.

Mail to some providers is rejected (outgoing)

That is a mail-server matter (SPF, DKIM, DMARC and IP reputation of the sending server), not goodmail's. The raw header view (the </> button) shows the authentication results of received mail.

The wrong day or time format

⚙ has Date format, Time format and Language ("Automatic" follows the browser).