Skip to content

OpenMail 1.0.0

Choose a tag to compare

View all tags
@eshanized eshanized released this 12 Sep 12:50
· 301 commits to master since this release
v1.0.0
39351e4

OpenMail 1.0.0 (Initial Release)

OpenMail is a modern, self-hosted webmail application for organizations, designed for deployment on shared hosting (cPanel) or VPS without requiring a mail server or background worker daemons.

Added

  • Browser-Based Setup Wizard: An 8-step WordPress-style graphical installer at /install that auto-detects mail servers (Gmail, Outlook, Yahoo, Custom), verifies PHP extensions, runs database migrations, and locks the installer upon completion.
  • Headless CLI Installer: php artisan openmail:install for automated CI/CD and VPS installations.
  • Pure-PHP IMAP Engine: Native IMAP integration via webklex/laravel-imap with support for folder hierarchy, message pagination, flag synchronization, and nested MIME attachment handling without requiring PHP's legacy ext-imap.
  • Rich Email Composer: Powered by TipTap 3 with formatting toolbar, inline link insertion, table support, task lists, and emoji picker.
  • Dual-Layer HTML Sanitization: Server-side HTMLPurifier paired with client-side DOMPurify in a sandboxed iframe to prevent XSS and script execution.
  • Remote Image Blocking: External tracking pixels and remote images blocked by default with one-click consent loading.
  • Conversation Threading: JWZ conversation threading algorithm grouping related messages by Message-ID, In-Reply-To, and References headers.
  • Full-Text Search: Fast relevance-ranked search powered by Laravel Scout with native MySQL/MariaDB FULLTEXT indexes.
  • Gmail-Style Labels: 10-color customizable label palette with instant filtering and bulk label application.
  • Address Book & Autocomplete: Contact management with contact groups, vCard export/import, and instant composer autocomplete from recent recipients.
  • Undo Send: Configurable delivery delay (5–30 seconds) allowing users to cancel sent messages before SMTP dispatch.
  • Multi-Signature Management: Create and manage multiple rich-text email signatures with automatic default insertion.
  • Audit Logging: Comprehensive security event logging for logins, session revocations, and sending operations with 90-day automatic pruning.
  • Content Security Policy (CSP): Hardened CSP headers with cryptographic nonces and violation reporting endpoint.
  • Zero-Daemon Architecture: Database-backed sessions and cache eliminating the need for Redis, Memcached, or long-running workers on shared hosting.

See SETUP.md for deployment instructions.

Assets 2
Loading