-
v27.1-rc.5
Pre-Releaseci / fork-checks (push) Skippedci / build (push) Skippedgithub/ci (branch) GitHub Actionspublish / version (push) Skippedpublish / publish-amd64 (push) Skippedpublish / publish-arm64 (push) Skippedpublish / publish-relay (push) Skippedpublish / release (push) Skippedpublish / binaries (push) Skippedannounce / announce (release) Successful in 22sci / github (push) Canceled after 34m55sgithub/ci (tag) GitHub Actionspublish / github (push) Successful in 47m51spublish / relay-sign (push) Successful in 12spublish / announce (push) Successful in 25sreleased this
2026-10-31 05:18:55 +00:00 | 49 commits to main since this releaseThe fifth release candidate of the 27.1 series. It brings inbuxa Relay, a small relay for a public machine, and moving a domain in from inbuxa Admin. It has no security fixes.
inbuxa Relay
A small relay that takes mail in on port 25 for your server, and can send its mail on, so the server itself never opens a mail port to the internet. Your server dials out to it, and you manage it from inbuxa Admin, under Settings › Mail flow › Sending › Relays.
- While its link to your server is up, your server decides on each message during the sender's session: your spam filter, directory and rules answer at the door.
- While the link is down, it holds mail for your addresses, encrypted to your server's key, and passes it on once the link is back.
- Outgoing mail goes through it with DKIM signed by your server, DANE and MTA-STS.
- Your server publishes its MX and SPF records where it manages a domain's DNS, and orders its certificate by DNS-01.
- Upgrades from inbuxa Admin take a signed release.
- Hardening: a list of who may dial the link, replacing the link CA without a new join, and the relay keys wrapped under a key file (
INBUXA_RELAY_KEY_FILE).
It ships from this tag as
registry.coffeylabs.org/inbuxa/inbuxa-relay:27.1-rc.5(linux/amd64, linux/arm64), and as static binariesinbuxa-relay-x86_64-linux-muslandinbuxa-relay-aarch64-linux-musl, each with a.sigfile by the inbuxa release key. Run it with the server release of the same version. Docs: https://docs.inbuxa.org/run/relay/Migrations
An administrator can move a domain in from another server under Management › Directory › Migrations in inbuxa Admin, from IMAP, JMAP, Microsoft 365 or Google Workspace: preview, move, final pass, and the new accounts' passwords once. The server runs the bundled inbuxa-migrate 27.1-rc.8. It needs the new Run migrations permission, which only the Administrator role has.
Changed
- The store now carries inbuxa's own store version. A store marked by a newer release is refused before anything writes to it, with a message pointing at that release or the pre-upgrade backup.
- A store brought over from Stalwart 0.16 has upstream's web interface switched off the first time inbuxa opens it, so it is no longer served at /admin. The log says how to switch it back on.
Container image:
registry.coffeylabs.org/inbuxa/inbuxa-server:27.1-rc.5, also tagged:27.1-rc.:lateststays on 2026.x until 27.1 ships.Downloads