WARNING: THIS IS A ALPHA EDITION, DO NOT TRY IT IN PRODUCTION YET.

• Base image is Ubuntu 24.04 (noble).
• Dockerized iRedMail follows the Best Practice of iRedMail Easy platform.

Getting Started

In below sample setup:

• Server hostname: mail.a.io (inventory_hostname)
• First email domain name: a.io (first_mail_domain)
• Domain admin: [email protected]
• Domain admin password: 123456 (first_domain_admin_password)
• MySQL root password: 123456 (mysql_root_password)

Create directory /iredmail as working directory:

mkdir /iredmail
cd /iredmail

Save this content as /iredmail/settings.json (Note: this file should be generated on a web UI in the future):

{
    "iredmail_backend": "mariadb",
    "storage_base_dir": "/var/vmail",
    "first_mail_domain": "a.io",
    "first_domain_admin_password": "123456",
    "inventory_hostname": "mail.a.io",
    "sql_server_address": "iredmail-mariadb",
    "mysql_server_address": "iredmail-mariadb",
    "mysql_grant_host": "ALL",
    "mysql_root_password": "123456",
    "use_antispam": true,
    "use_nginx": true,
    "use_phpfpm": true,
    "use_roundcube": true,
    "use_autoconfig": true,
    "use_iredapd": true,
    "use_sogo": true,
    "use_fail2ban": true,
    "use_iredadmin": true,
    "use_adminer": true,
    "use_backup": true,
    "homepage_application": "roundcube",
    "dovecot_enable_last_login": true,
    "dovecot_enable_fts": true,
    "sogo_prefork_processes": 5,
    "fail2ban_store_banned_ip_in_db": true
}

Save this content as /iredmail/docker-compose.yml (Note: this file should be generated on a web UI in the future):

version: "3"
services:
  iredmail-mariadb:
    image: mariadb:latest
    environment:
      - MARIADB_ROOT_PASSWORD=123456
      - TZ=UTC
    volumes:
      - ./data/mysql:/var/lib/mysql  
    networks:
      iredmail-network:
        aliases:
          - iredmail-mariadb

  iredmail:
    image: iredmail/test-mariadb:nightly
    container_name: iredmail
    restart: unless-stopped
    depends_on:
      - iredmail-mariadb
    environment:
      - TZ=UTC
    volumes:
      - ./settings.json:/settings.json
      - ./data/dot_iredmail:/root/.iredmail
      - ./data/backup_mysql:/var/vmail/backup/mysql
      - ./data/mailboxes:/var/vmail/vmail1
      - ./data/mlmmj:/var/vmail/mlmmj
      - ./data/mlmmj_archive:/var/vmail/mlmmj-archive
      - ./data/imapsieve_copy:/var/vmail/imapsieve_copy
      - ./data/custom:/opt/iredmail/custom
      - ./data/ssl:/opt/iredmail/ssl
      - ./data/clamav:/var/lib/clamav
      - ./data/sa_rules:/var/lib/spamassassin
      - ./data/postfix_queue:/var/spool/postfix
      - ./data/letsencrypt:/etc/letsencrypt
    ports:
      - 80:80
      - 443:443
      - 110:110
      - 995:995
      - 143:143
      - 993:993
      - 25:25
      - 465:465
      - 587:587
    networks:
      iredmail-network:  

networks:
  iredmail-network:
    driver: bridge

Run:

docker-compose --project-name iredmail up

Notes:

• On first run, it will generate a self-signed ssl cert, this may take a long time, please be patient.
• Do not forget to setup DNS records for your server hostname and email domain names.
• Docker on Windows and macOS are buggy, please run it on a Linux host instead.
• You may want to set a different time zone for your server (by updating TZ environment variable), here's list of time zones.

Hardware requirements

• At least 4GB RAM is required for a low traffic production mail server.

Installed softwares

• Postfix: SMTP server.
• Dovecot: POP3/IMAP/LMTP/Sieve server, also offers SASL AUTH service for Postfix.
• mlmmj: mailing list manager.
• Amavisd-new + ClamAV + SpamAssassin: anti-spam and anti-virus, DKIM signing and verification, etc.
• Roundcube: webmail.
• SOGo Groupware
• Fail2ban: scans log files and bans bad clients.
• mlmmjadmin: RESTful API server used to manage (mlmmj) mailing lists. Developed by iRedMail team.
• iRedAPD: Postfix policy server. Developed by iRedMail team.
• iRedAdmin: web-based admin panel, open source edition. Developed by iRedMail team.

You may want to check this tutorial to figure out the mapping of softwares and network ports.

Exposed network ports

• 80: HTTP
• 443: HTTPS
• 25: SMTP
• 465: SMTPS (SMTP over SSL)
• 587: SUBMISSION (SMTP over TLS)
• 143: IMAP over TLS
• 993: IMAP over SSL
• 110: POP3 over TLS
• 995: POP3 over SSL
• 4190: Managesieve service