{{define "title"}}Server Settings - Email Server{{end}} {{define "extra_css"}} {{end}} {{define "content"}}

Server Settings

Server Configuration
Port for plain/IP-whitelisted SMTP connections
Port for direct-TLS authenticated SMTP connections
Plain HTTP port for this admin web interface
Self-signed by default, or the Let's Encrypt cert once enabled
Custom SMTP banner (empty by default)
Database Configuration
Logging Configuration
Email Relay Configuration
IMAP Configuration
Plain IMAP port (no STARTTLS offered)
Implicit-TLS IMAP port (IMAPS)
Rspamd (Spam Scoring)
Optional; the built-in heuristic spam score always runs regardless of this setting.
Two-Factor Authentication (MFA)
Require every admin account (global or domain-scoped) to set up TOTP/passkey MFA before using the dashboard
Require MFA before a mailbox owner can create new app passwords in the self-service portal — overridable per-domain or per-mailbox
TLS/SSL Configuration
The "custom" certificate: self-signed on first run, or your own uploaded cert/key above.

Which certificate each TLS listener uses — custom (above), or one of the two Let's Encrypt certificates managed on the Let's Encrypt page. Independent per listener, e.g. an HTTP-01 cert for mail while the dashboard keeps a DNS-01 or custom cert.

Changing which certificate a listener uses needs a restart to take effect. Once assigned, that listener's certificate then hot-reloads automatically on every future obtain/renew, no restart needed for that part.
DKIM Configuration
Attachments Configuration
Make sure the path exists and is writable by the server process
Server restart required after changing settings
{{end}} {{define "extra_js"}} {{end}}