MailBoo turns a fresh Debian 13 box into a complete, multi-domain mail server with authoritative DNS, DNSSEC, webmail, calendars, contacts and encrypted backups. One file. One command. Update in place later. No per-mailbox fees.
Mail-in-a-Box simplicity, rebuilt on a modern Python/FastAPI stack, with a clean control plane and a CLI.
Mailboxes, contacts, calendars and DNS zones stay on your own server. No SaaS lock-in, no per-mailbox pricing.
Automatic per-domain DKIM, SPF, DMARC and MTA-STS, checked against real external resolvers, TLD nameservers and DNSBLs, not just local checks.
Some TLDs, like .de, insist on two nameservers in different subnets. MailBoo hands you a one-liner that turns any second Debian host into an automated NS2, with DNSSEC signing handled for you.
Daily BorgBackup snapshots with live progress, full or selective restore, and offsite sync to SFTP, S3-compatible storage or WebDAV.
Everything MailBoo v14.3 does, room by room.
autoconfig. / autodiscover. records./mail/ on PHP 8.4 FPM with SQLite./cloud/, with .well-known discovery redirects for desktop and mobile clients.www/apex records.AAAA records, enables IPv6 in NSD and Postfix, and checks IPv6 PTR/AAAA in the status checks, with an A/AAAA preflight before requesting certificates.mailboo secondary and paste the generated curl/wget one-liner on a second Debian host in another network. It installs NSD, opens the firewall, enrolls via HTTPS token, configures TSIG (hmac-sha256) AXFR/NOTIFY and a 2-minute sync timer, with live heartbeat in the UI. NS2 bootstrap uses strict TLS by default; a temporary self-signed fallback covers the moment before Let's Encrypt is active, then locks down to strict verification automatically.mta-sts.*, autoconfig.*, ns1.*…) get a friendly "nothing here" page..tar.gz: everything, or just mailboxes & database, DNS zones, config & keys, or CalDAV/CardDAV. Affected services reload automatically.mailboo backup restore.mailboo update. MailBoo fetches the official release manifest and verifies the installer's SHA-256, or you can apply a downloaded installer directly (mailboo update --file or upload in the UI).mailboo setup detects your public IPv4 and IPv6 as editable defaults, warns about private addresses, and validates the administrator email, and can autogenerate the initial admin password (or asks you to confirm a custom one twice).mailboo status, setup, secondary, user, alias, report, backup, update, version.0600 SQLite permissions.MailBoo ships as a single self-extracting installer for Debian 13 ("trixie").
Start with a fresh Debian 13 server and root access.
sudo bash mailboo-installer-v14.3.sh and accept the license.
Follow the interactive mailboo setup wizard, then optionally enroll NS2 with the generated one-liner.
Free of charge. The installer shows the license and asks you to accept it before installing; for unattended installs add --accept-license. Third-party programs installed by MailBoo (Postfix, Dovecot, Roundcube, NSD …) come with their own licenses, shipped with those packages.
| Port | Service |
|---|---|
| 25 | SMTP (Postfix) |
| 465 | SMTPS (Postfix) |
| 587 | Submission (Postfix) |
| 993 | IMAPS (Dovecot) |
| 4190 | ManageSieve (Dovecot) |
MailBoo is free. No tiers, no seat fees, no trial clock. If it earns its keep, here is how to say thanks.
If MailBoo spared you hours of wiring up Postfix, Dovecot, DNSSEC and backups by hand, consider chipping in. Every donation keeps MailBoo free and maintained.
♥ Donate
(donation link to be added)
MailBoo is built by Lantrest LLC, and we are happy to build more. A tailored MailBoo for your setup, or an entirely different program for your internet business: tell us what you need and we'll make it fit.
Talk to Lantrest LLC (contact link to be added)The short technical answers.
A fresh Debian 13 ("trixie") server with root access, and a domain you control. MailBoo is built for Debian 13 only.
No. Authoritative DNS mode (NSD with DNSSEC) is recommended, but External DNS mode is available if you keep your zones elsewhere.
No. Some TLDs, such as .de, insist on two nameservers in different subnets. Run mailboo secondary on your MailBoo server, paste the generated curl or wget one-liner on a second Debian host in a different network, and NS2 is configured automatically, with TSIG-secured zone transfers and a sync status in the UI.
BorgBackup creates encrypted snapshots daily and on demand. Restore everything or selected components from the web UI or with mailboo backup restore, and optionally sync offsite to SFTP, S3-compatible storage or WebDAV.
In place, without reinstalling. Use the Software Updates card in the web UI or run mailboo update: MailBoo fetches the official release manifest, downloads the new installer and verifies its SHA-256 before applying it. You can also apply a downloaded installer file yourself with mailboo update --file mailboo-installer-vX.Y.sh or by uploading it in the UI.
Any standard IMAP/SMTP client. Thunderbird autoconfig and autodiscover records are generated, and CalDAV/CardDAV is served by Radicale.
MailBoo serves a landing page per domain (admin login, webmail redirect, standard placeholder, or a custom static HTML/CSS page). It is deliberately not a full CMS host.