• v27.1-rc.5
    ci / fork-checks (push) Skipped
    ci / build (push) Skipped
    github/ci (branch) GitHub Actions
    publish / version (push) Skipped
    publish / publish-amd64 (push) Skipped
    publish / publish-arm64 (push) Skipped
    publish / publish-relay (push) Skipped
    publish / release (push) Skipped
    publish / binaries (push) Skipped
    announce / announce (release) Successful in 22s
    ci / github (push) Canceled after 34m55s
    github/ci (tag) GitHub Actions
    publish / github (push) Successful in 47m51s
    publish / relay-sign (push) Successful in 12s
    publish / announce (push) Successful in 25s
    Pre-Release

    jcoffey-dev released this 2026-10-31 05:18:55 +00:00 | 49 commits to main since this release

    The fifth release candidate of the 27.1 series. It brings inbuxa Relay, a small relay for a public machine, and moving a domain in from inbuxa Admin. It has no security fixes.

    inbuxa Relay

    A small relay that takes mail in on port 25 for your server, and can send its mail on, so the server itself never opens a mail port to the internet. Your server dials out to it, and you manage it from inbuxa Admin, under Settings › Mail flow › Sending › Relays.

    • While its link to your server is up, your server decides on each message during the sender's session: your spam filter, directory and rules answer at the door.
    • While the link is down, it holds mail for your addresses, encrypted to your server's key, and passes it on once the link is back.
    • Outgoing mail goes through it with DKIM signed by your server, DANE and MTA-STS.
    • Your server publishes its MX and SPF records where it manages a domain's DNS, and orders its certificate by DNS-01.
    • Upgrades from inbuxa Admin take a signed release.
    • Hardening: a list of who may dial the link, replacing the link CA without a new join, and the relay keys wrapped under a key file (INBUXA_RELAY_KEY_FILE).

    It ships from this tag as registry.coffeylabs.org/inbuxa/inbuxa-relay:27.1-rc.5 (linux/amd64, linux/arm64), and as static binaries inbuxa-relay-x86_64-linux-musl and inbuxa-relay-aarch64-linux-musl, each with a .sig file by the inbuxa release key. Run it with the server release of the same version. Docs: https://docs.inbuxa.org/run/relay/

    Migrations

    An administrator can move a domain in from another server under Management › Directory › Migrations in inbuxa Admin, from IMAP, JMAP, Microsoft 365 or Google Workspace: preview, move, final pass, and the new accounts' passwords once. The server runs the bundled inbuxa-migrate 27.1-rc.8. It needs the new Run migrations permission, which only the Administrator role has.

    Changed

    • The store now carries inbuxa's own store version. A store marked by a newer release is refused before anything writes to it, with a message pointing at that release or the pre-upgrade backup.
    • A store brought over from Stalwart 0.16 has upstream's web interface switched off the first time inbuxa opens it, so it is no longer served at /admin. The log says how to switch it back on.

    Container image: registry.coffeylabs.org/inbuxa/inbuxa-server:27.1-rc.5, also tagged :27.1-rc. :latest stays on 2026.x until 27.1 ships.

    Downloads