Get in Touch
 Duration 21 hours

Course Outline

Introduction to Stalwart

  • Overview of Stalwart and its design philosophy
  • The single Rust binary architecture
  • Comparison with traditional mail stacks
  • Licensing details: AGPL-3.0 and Enterprise

Installation and Initial Setup

  • System requirements and supported platforms
  • Installation procedures using Docker and Docker Compose
  • Installing on Linux from binary files
  • Selecting the appropriate database backend
  • Bootstrap mode and the setup wizard

Core Protocols and DNS

  • SMTP configuration for inbound and outbound mail
  • IMAP4 and JMAP for mail access
  • POP3 support for legacy clients
  • Configuring DNS records: MX, SPF, DKIM, and DMARC
  • Automated DKIM key rotation

Security and Authentication

  • TLS implementation with ACME certificate provisioning
  • DANE and MTA-STS transport security measures
  • Authentication backends: internal, LDAP, OIDC, and SQL
  • OAuth 2.0 and two-factor authentication setup
  • Access control lists and permission management
  • Rate limiting and automated IP blocking

Spam and Phishing Protection

  • Architecture of the built-in spam filter
  • AI and LLM-driven classification techniques
  • Statistical Bayesian classification
  • Utilizing DNS blocklists and Pyzor
  • Greylisting and spam trap strategies
  • Protection against phishing and homographic attacks

Storage and Search Backends

  • Storage options: RocksDB, PostgreSQL, MySQL, and SQLite
  • Cloud blob storage integration with S3 and Azure
  • Caching mechanisms using Redis
  • Full-text search capabilities: built-in vs. external engines

Collaboration Services

  • CalDAV and JMAP-based calendars
  • CardDAV and JMAP-based contacts
  • WebDAV file storage
  • Sharing features using ACLs and JMAP Sharing

Multi-Tenancy and User Management

  • Domain and tenant isolation strategies
  • Managing user accounts and groups
  • Setting up mailing lists and aliases
  • Subaddressing and catch-all address configuration
  • Per-user and per-tenant disk quotas

Administration and Monitoring

  • WebUI dashboard and statistical insights
  • CLI tools for scripting and automation
  • SMTP queue management
  • OpenTelemetry and Prometheus metrics integration
  • Webhooks for event-driven automation

Clustering and High Availability

  • Peer-to-peer cluster coordination
  • Clustering implementations with Kafka and Redis
  • Read replicas and sharded storage
  • Deployment on Kubernetes
  • Designing for fault tolerance

Advanced Configuration

  • Using the Sieve scripting language
  • MTA hooks and milter integration
  • Routing rules and virtual queues
  • Envelope rewriting techniques

Migration and Integration

  • Migrating from Postfix and Dovecot
  • Migrating from Microsoft Exchange
  • Configuring Autoconfig and Autodiscover
  • Automated DNS management
  • API-driven declarative deployments

Requirements

  • Proficiency with the Linux command line
  • A basic understanding of DNS concepts
  • Knowledge of email fundamentals is beneficial but not mandatory

Target Audience

  • System administrators
  • DevOps and platform engineers
  • IT infrastructure specialists
  • Individuals managing or planning self-hosted email deployments

Number of participants


Price per participant (excl. VAT)

Upcoming Courses

Related Categories