cyrius44/mailserver-ui repository overview

⁠Docker Mailserver UI

A web interface for docker-mailserver⁠. Single container serving an Angular SPA and a FastAPI backend, with local and OIDC/SSO authentication.

⁠Features

• Local authentication — a default admin is seeded on first startup (random password printed once to the logs).
• OIDC / SSO — Keycloak, Authentik, etc. Configured entirely from the web UI (Settings → OIDC / SSO) and stored in the database. No redeploy needed to change the SSO configuration.
• User management — list local & OIDC accounts, reset local passwords (admin only), personal API keys issued from the profile page.
• Mailbox management — create, reset the password of, and delete docker-mailserver accounts, with per-mailbox quotas.
• Mailserver administration — aliases (system & regex), relay hosts and exclusions, DKIM keys, DNS records, Postfix/Dovecot overrides, Sieve scripts, custom SpamAssassin rules and Postgrey whitelists, Rspamd overrides, Postfix LDAP maps, TLS certificates, access restrictions, Dovecot master accounts and mail queue actions.
• Dashboard — real mailbox disk usage (from Dovecot, not the configured quota), TLS certificate expiry, DKIM coverage per hosted domain, supervised service health, the mail queue backlog, banned IPs per jail, the spam/virus and delivery counters of the last 24 hours, and any contradiction between the mailserver's environment variables.
• Fail2ban — inspect jails, ban and unban IPs, read the fail2ban log.
• Disabled features are called out — docker-mailserver only reads a config file when the matching ENABLE_* toggle is on. Pages guarded by a toggle that is off (quotas, fail2ban, SpamAssassin, Postgrey, Amavis) say so, instead of silently saving a file nothing will ever read.
• Group-based role mapping and optional group-restricted access for OIDC users.

⁠Installation

For setup and configuration variables, see the README⁠ in the repository Github⁠.

⁠Architecture