system

the software behind vael.

send: postfix sends mail. rspamd signs it with dkim.
receive: postfix receives mail. rspamd checks spam. clamav scans for malware. dovecot stores it. sieve applies filters.
read: webmail sanitizes the display without changing the original message. remote images require permission.
account: postgresql stores account and mailbox metadata. redis holds temporary limits and caches. cap checks signup requests.
access: nginx handles connections. node.js, next.js, and react run the website and webmail. tor provides onion access.
backups: restic encrypts backups before upload to cloudflare r2. retention normally covers seven days; failed captures preserve the newest verified snapshot.
providers: hetzner hosts the server. cloudflare provides dns and backup storage. oxapay handles payments.

mail is encrypted at rest. the running server can read it. ordinary email is not end-to-end encrypted.