Loomixv0.2.0 · MailOps live
Email you host,
not email that hosts you.
Loomix pairs Stalwart's mail engine with the Loomix Mail client: email, calendars, contacts and files on your own infrastructure. Authentik identity, Cerulean DNS and certificates, NPM edge — one platform, with tenant administration, migration presets, health monitoring and compliance reporting.
$ git clone https://github.com/innotelinc/oasis.git && cd oasis && cp .env.example .env && ./scripts/setup-oasis.sh
Mail, calendars and collaboration — self-hosted.
A complete mail and collaboration platform — the engine, the client, the identity and the trust — self-hosted on your own infrastructure.
Stalwart mail engine
SMTP, IMAP, JMAP and Sieve, with calendars, contacts and file storage in one Rust service and an embedded store.
Loomix Mail client
Mail, calendar, contacts and files behind one login, with admin, settings, themes and plugins.
Authentik identity
One OIDC login for mail, admin and the rest of the estate; disable a user and their mail access dies.
Edge + wildcard TLS
app/api/auth/mail/files/admin hostnames provisioned in NPM with a wildcard Let's Encrypt certificate.
Mail security
MX, SPF, DKIM, DMARC, MTA-STS and TLS-RPT posture with exit codes, `--json` output and dated Markdown reports.
Migration presets
imapsync-based moves from Exchange, Google Workspace and Zimbra with per-provider presets.
Tenant administration
Domains, users and DNS zones from admin.<domain>, wired to Authentik and Stalwart in the same request.
Health monitoring
A daily host/TLS/SSO and mail-posture report, with the current result visible in the admin page.
The Mail layer of the stack.
One engine, one client, and the estate's identity and trust behind them.
Stalwart core
Mailboxes, calendars, contacts and file storage in one embedded-store engine.
Loomix Mail
The one client for mail, calendar, contacts, files and admin.
Authentik identity
OIDC SSO for the client and the admin surface, from the estate's identity provider.
Cerulean trust
Authoritative DNS, DKIM publication and wildcard certificates, all through one bridge.
# one platform: engine, client, identity, trust $ ./scripts/oasis-health.sh --report 18/18 hosts · MX ok · SPF ok · DKIM ok · DMARC ok · MTA-STS ok $ python3 scripts/oasis-mail-admin.py domains · users · DKIM · Cerulean zones · Authentik accounts
Every mail surface, one deploy.
Edge hostnames provisioned automatically in Nginx Proxy Manager with a wildcard certificate.
Roadmap.
Shipped as v0.2.0; LTS hardening is next.
Stalwart engine + Loomix Mail client, tenant admin, edge and wildcard TLS, health and compliance reporting.
doneSecurity audit, hardening, LTS channel.
next