0kaba0/yarilo repository overview

⁠yarilo Production-grade IMAP / POP3 / LMTP / ManageSieve / Submission mail server written in Go, with built-in full-text search. Multi-binary architecture — each protocol component is a separate process — Kubernetes-native via a Helm chart. Source & docs: https://github.com/yarilomail/yarilo⁠ License: AGPL-3.0 · Platform: linux/amd64

⁠Architecture

Each protocol and infrastructure role is a separate compiled binary — no monolith, no mode flags. Login proxies terminate TLS and pass the authenticated connection to session backends; a director ring provides consistent-hash routing with sticky per-user sessions; shared yarilo-auth and yarilo-locks services back authentication and cross-process write coordination. The same binaries serve a single-node standalone install and a sharded clustered deployment — topology is configuration, not code. See ARCHITECTURE⁠ and DEPLOYMENT⁠.

⁠One image, many components

This is a single image containing every yarilo binary. The component to run is selected with the YARILO_COMPONENT environment variable, so the same image serves the all-in-one process and every clustered role:

⁠Supported tags

⁠Observability & ports

HTTP on 8080 exposes health (/healthz, /readyz) and Prometheus /metrics; a ServiceMonitor is shipped with the Helm chart. Mail ports (config-driven; defaults):

⁠Environment variables

Admin/API tokens (YARILO_ADMIN_TOKEN, DIRECTOR_API_TOKEN, …) gate the control-plane endpoints in clustered mode; the Helm chart wires these automatically.

⁠Deploy

⁠Kubernetes (recommended)

yarilo is designed for Kubernetes via its Helm chart — login proxies, an optional director ring, co-located backend StatefulSets per storage tag, and shared services. See DEPLOYMENT⁠.

⁠Local (standalone)

docker run --rm \
  -e YARILO_COMPONENT=yarilo \
  -v "$PWD/yarilo.yaml:/etc/yarilo/yarilo.yaml:ro" \
  -p 143:143 -p 993:993 -p 587:587 -p 465:465 \
  0kaba0/yarilo:latest

⁠Stack

• Go (linux/amd64), multi-stage build → slim runtime
• Storage: Maildir / sdbox / mdbox + FileIndex (mail-index v7.3 wire format)
• Full-text search: flatcurve (Xapian) via yarilo-fts
• TLS 1.3 throughout; SASL PLAIN / LOGIN / SCRAM-SHA-256 / XOAUTH2; mTLS between components
• Redis for the dict / locks state (clustered mode)

⁠CI

Built and published on every push to main; a tagged release is cut automatically when the Helm chart appVersion advances. Images are linux/amd64, built from docker/Dockerfile⁠.