Migrating from Google Workspace or Microsoft 365 to self-hosted mail is no longer madness.
Why self-hosted
- Data sovereignty
- Predictable cost
- Complete control
- Zero vendor lock-in
Technical stack
Postfix MTA, Dovecot, Rspamd, ClamAV, Roundcube/SOGo, Postscreen.
Modern email security
DKIM, SPF, DMARC, MTA-STS, TLSA/DANE, Greylisting.
Example: Postfix main.cf
The essential main.cf settings (TLS, DKIM, RBL anti-spam):
# /etc/postfix/main.cf — esential
myhostname = mail.example.com
smtpd_tls_security_level = may
smtpd_milters = inet:localhost:8891 # OpenDKIM
smtpd_recipient_restrictions =
permit_mynetworks,
reject_unauth_destination,
reject_rbl_client zen.spamhaus.org