-
v27.1-rc.8
Pre-Releasejcoffey-dev released this
2026-11-07 01:32:00 +00:00 | 0 commits to main since this releaseThe eighth release candidate of the 27.1 series. It pairs with inbuxa-server 27.1-rc.12.
- Order a certificate with the names you choose. Certificates has a new guide. Enter the names, and it finds the domain they belong to, or adds one only for certificates, with no DKIM keys and nothing published. It then checks the names and orders the certificate. Once it's issued, you can make it the default certificate. Connections that ask for one of its names get it either way. (#167, #170)
- See why an order failed, and order it again. Above the certificate list, each certificate the server orders shows the domain that renews it, the next renewal, and the reason the last order failed. Order again tells the queued renewal to run now instead of waiting for the next retry. (#167, #170)
- "Certificates, automatically" can add a Let's Encrypt account. The guide sent a description the server sets itself, so the server refused it. The guide only worked when a matching account already existed. (#170)
Container image:
registry.coffeylabs.org/inbuxa/inbuxa-admin:27.1-rc.8, also tagged:27.1-rc.:lateststays on v2026.10.26.5.Downloads
-
v27.1-rc.7
Pre-Release2026-11-06 22:48:57 +00:00 | 6 commits to main since this releaseThe seventh release candidate of the 27.1 series. It pairs with inbuxa-server 27.1-rc.11.
- The DNS wizard can connect a domain with no records to publish. For a domain that only needs its DNS host to answer DNS-01 certificate challenges, turn every record type off at the Records step. The review and last step then say nothing is written, instead of counting 0 of 0 records. An older server refuses an empty list, so use this with 27.1-rc.11 or later. (inbuxa-server #304, #168)
Container image:
registry.coffeylabs.org/inbuxa/inbuxa-admin:27.1-rc.7, also tagged:27.1-rc.:lateststays on v2026.10.26.5.Downloads
-
v27.1-rc.6
Pre-Releaseannounce / announce (release) Successful in 13sgithub/ci (branch) GitHub Actionsci / notices (push) Successful in 2m3sci / build (push) Skippedci / publish (push) Skippedgithub/ci (tag) GitHub Actionsci / github (push) Successful in 5m49s2026-11-06 19:33:10 +00:00 | 10 commits to main since this releaseThe sixth release candidate of the 27.1 series. It pairs with inbuxa-server 27.1-rc.10.
- The certificates guide keeps a domain's own hostnames. Switching a domain that already had its own Certificate Hostnames used to clear the list without warning. The guide now keeps the list, and checks and shows the names it orders. A domain without a list gets the defaults, as before. Also in v2026.10.26.5 for
:latest. (#160, #164)
Container image:
registry.coffeylabs.org/inbuxa/inbuxa-admin:27.1-rc.6, also tagged:27.1-rc.:lateststays on v2026.10.26.5.Downloads
- The certificates guide keeps a domain's own hostnames. Switching a domain that already had its own Certificate Hostnames used to clear the list without warning. The guide now keeps the list, and checks and shows the names it orders. A domain without a list gets the defaults, as before. Also in v2026.10.26.5 for
-
v2026.10.26.5
Stablegithub/ci (branch) GitHub Actionsci / build (push) Skippedci / publish (push) Skippedannounce / announce (release) Successful in 45sci / notices (push) Successful in 1m13sgithub/ci (tag) GitHub Actionsci / github (push) Successful in 4m8s2026-11-06 18:14:29 +00:00 | 52 commits to main since this releaseA fix to the certificates guide, also on main for the next 27.1 release candidate (#164, #165).
- Certificates guide: switching a domain that already had its own certificate hostnames no longer clears them. The guide keeps the list, and checks and shows the names it orders. A domain with no list gets the defaults, as before.
Container image:
registry.coffeylabs.org/inbuxa/inbuxa-admin:2026.10.26.5, also:latest.Downloads
-
v27.1-rc.5
Pre-Releasegithub/ci (branch) GitHub Actionsci / build (push) Skippedci / publish (push) Skippedannounce / announce (release) Successful in 49sci / notices (push) Successful in 1m18sgithub/ci (tag) GitHub Actionsci / github (push) Successful in 5m6s2026-11-06 07:10:31 +00:00 | 14 commits to main since this releaseThe fifth release candidate of the 27.1 series. It pairs with inbuxa-server 27.1-rc.9.
- The DNS guide leaves CAA off by default. A CAA record covers every name under the domain and ties it to this server's ACME account, so another ACME client there is refused at its next renewal. Its switch now carries that warning. A domain that already publishes CAA still loads with it on. (#162)
- DNS providers show their Description in the list, so two providers of the same type can be told apart without opening each one. (#161)
- The manual names console pages by the menu path you see. (#159)
Container image:
registry.coffeylabs.org/inbuxa/inbuxa-admin:27.1-rc.5, also tagged:27.1-rc.:lateststays on v2026.10.26.4.Downloads
-
v2026.10.26.4
Stableci / build (push) Skippedci / publish (push) Skippedannounce / announce (release) Successful in 41sci / notices (push) Successful in 1m11sgithub/ci (branch) GitHub Actionsgithub/ci (tag) GitHub Actionsci / github (push) Successful in 5m44s2026-11-01 16:21:57 +00:00 | 55 commits to main since this releaseFor OpenID Connect directories, this brings the console in line with the server's security release 2026.10.29.1 (GHSA-v3gv-4j87-3mg2, GHSA-2p7h-9hv3-4292).
- Setup guide: it now asks for the provider's client ID as the audience. The server refuses a new OpenID Connect directory without one, and the guide had no field for it.
- Security to-do list: it now flags directories with no required audience, and directories that accept any token the provider's user info endpoint answers for. Both can let in tokens issued to other applications.
If you have an existing OpenID Connect directory, check your Security to-do list after updating.
Releases from this line will stop moving
:latestonce 27.1 is out. The GitHub copy of each release now has its files too.Downloads
-
v2026.10.26.3
Stable2026-11-01 15:54:44 +00:00 | 61 commits to main since this releaseFixes a console container that wouldn't start again after a restart. Each start added another IPv6 listener, and nginx refused the duplicate and exited, so a reboot or
docker restartleft it in a restart loop (#135).If yours is stuck, pull this image and recreate the container.
This is the only change from v2026.10.26.2. The 27.1 release candidates already have the fix.
Downloads
-
v27.1-rc.4
Pre-Release2026-10-31 05:22:17 +00:00 | 24 commits to main since this releaseThe fourth release candidate of the 27.1 series. It pairs with inbuxa-server 27.1-rc.5.
New: the Relays page, under Settings › Mail flow › Sending › Relays, for inbuxa Relay. Add a relay and copy its join command; see each relay's links, version and queues; change its settings, MX preference and certificate; upgrade it with a signed release; choose who may link; replace the link CA without a new join. The page says when the relay keys are wrapped under a key file.
New: the Migrations page, under Management › Directory › Migrations. Move a domain in from IMAP, JMAP, Microsoft 365 or Google Workspace: preview, move, final pass, and the new accounts' passwords once. It needs the Run migrations permission.
Both pages need inbuxa-server 27.1-rc.5. An older server doesn't show them.
Container image:
registry.coffeylabs.org/inbuxa/inbuxa-admin:27.1-rc.4, also tagged:27.1-rc.:lateststays on v2026.10.26.2.Downloads
-
v27.1-rc.3
Pre-Releasegithub/ci (branch) GitHub Actionsannounce / announce (release) Successful in 32sci / notices (push) Successful in 1m24sci / build (push) Skippedci / publish (push) Skippedgithub/ci (tag) GitHub Actionsci / github (push) Successful in 3m34s2026-10-29 17:20:09 +00:00 | 47 commits to main since this releaseThe third release candidate of the 27.1 series. It pairs with inbuxa-server 27.1-rc.3.
Changed: when you set up an OpenID Connect directory, the console now asks for the client ID that the provider issues tokens to, and sends it as the expected audience. Server 27.1-rc.3 refuses tokens issued to other clients when the audience is set.
New: the security page flags OpenID Connect directories with no audience set, because those accept tokens issued to any other app at the same provider.
Container image:
registry.coffeylabs.org/inbuxa/inbuxa-admin:27.1-rc.3, also tagged:27.1-rc.:lateststays on v2026.10.26.2.Downloads
-
v27.1-rc.2
Pre-Release2026-10-28 23:15:15 +00:00 | 56 commits to main since this releaseThe second release candidate of the 27.1 series.
Fixed: in 27.1-rc.1 and v2026.10.26.2, a console container that was restarted rather than recreated (after a reboot,
docker restart, or an installer stopping and starting the stack) failed to start and restarted in a loop. nginx stopped withduplicate listen [::]:8080. The IPv6 listener is now added only once.Container image:
registry.coffeylabs.org/inbuxa/inbuxa-admin:27.1-rc.2, also tagged:27.1-rc.:lateststays on v2026.10.26.2.Downloads