Specifically, there are many packages that not yet available on CentOS 8 (as of December 2019). The main examples are supporting packages for Postfix (postfix-pcre, postfix-sqlite) and Dovecot (dovecot-pigeonhole). In principle, these packages can be compiled from source and I have done this for Postfix and Postgrey (see this page. However, compilation for Dovecot is currently a nightmare because other packages need to be compiled in order to compile dovecot and some of these are just broken! This is starting to go down the rabbit hole...
This is an attempt to port the Mail-in-a-Box project from Ubuntu to Centos. The home page of the original Ubuntu project is here and the code on Github is here.
Current development status/log is here.
The goals of this project are the same as the original project
- Make deploying a good mail server easy.
- Promote decentralization, innovation, and privacy on the web.
- Have automated, auditable, and idempotent configuration.
- Not make a totally unhackable, NSA-proof server.
- Not make something customizable by power users.
- Do it all on CentOS 7 with Security Enhanced Linux (SELinux) providing an additional layer of protection
CentOS-Mail-in-a-Box will one day turn a fresh CentOS 7 64-bit machine into a working mail server by installing and configuring various components.
It is a one-click email appliance. There are no user-configurable setup options. It "just works".
The components installed are:
- SMTP (postfix), IMAP (dovecot), CardDAV/CalDAV (Nextcloud), Exchange ActiveSync (z-push)
- Webmail (Roundcube), static website hosting (nginx)
- Spam filtering (spamassassin), greylisting (postgrey)
- DNS (nsd4) with SPF, DKIM (OpenDKIM), DMARC, DNSSEC, DANE TLSA, and SSHFP records automatically set
- Backups (duplicity), firewall (firewalld), intrusion protection (fail2ban), system monitoring (munin)
It also includes:
- A control panel and API for adding/removing mail users, aliases, custom DNS records, etc. and detailed system monitoring.
For more information on how Mail-in-a-Box handles your privacy, see the security details page.
Eventually tags/releases/commits will be crytographicall signed.My PGP key can be found on most key servers but you can get it directly from the MIT PGP system here, or the PGP Public Key Server here or look them up directly using "brett dot schroeder at gmail dot com". The key is self-signed but the fingerprint is
$ gpg --fingerprint 61D6D391
Key fingerprint = 4FA3 9DA3 636B 5902 175D 4419 3A58 77D3 61D6 D391