Skip to content

Mail

Tundra manages a full mail stack: Postfix (SMTP), Dovecot (IMAP/POP3), Rspamd (spam filtering + DKIM signing), and optionally Roundcube (webmail).

  1. Go to Mail → Domains → Add

  2. Step 1 — Core records

    • Enter the domain
    • Tundra generates the recommended MX and SPF records
    • Copy these to your DNS zone (or use a DNS template)
  3. Step 2 — DMARC & preview

    • Configure DMARC policy (none, quarantine, reject)
    • Preview all DNS records before saving
  4. Generate DKIM key

    • Click Regenerate DKIM on the domain detail page
    • Tundra generates a 2048-bit RSA keypair, stores the private key encrypted (AES-256-GCM), and shows the public key TXT record to add to DNS

Create mailboxes in Mail → [domain] → Mailboxes → Add:

  • Username + password (Argon2id hashed)
  • Quota (MB)
  • Aliases

Password reset available via Mailboxes → [mailbox] → Reset Password.

Aliases forward to one or more mailboxes:

info@example.com → alice@example.com, bob@example.com

Create in Mail → [domain] → Aliases → Add.

View and manage the Postfix queue in Mail → Queue:

  • Hold — suspend delivery of a message
  • Release — resume delivery
  • Delete — permanently discard

Mail → [domain] → Diagnostics runs automated DNS checks:

CheckWhat it verifies
MXMX record points to your server
SPFSPF record allows your server’s IP
DKIMDKIM public key matches the active key
DMARCDMARC record is valid

A Send test email button lets you verify delivery end-to-end.