Get in Touch

Course Outline

Introduction to Stalwart

  • Overview of Stalwart and its design philosophy
  • Architecture based on a single Rust binary
  • Comparative analysis with traditional mail stacks
  • Licensing details: AGPL-3.0 and Enterprise editions

Installation and Initial Configuration

  • Review of system requirements and supported platforms
  • Installation procedures using Docker and Docker Compose
  • Deploying the Linux binary directly
  • Selecting the appropriate database backend
  • Utilizing bootstrap mode and the setup wizard

Core Protocols and DNS Configuration

  • Configuring SMTP for inbound and outbound mail flows
  • Implementing IMAP4 and JMAP for email access
  • Supporting POP3 for legacy client compatibility
  • Setting up essential DNS records: MX, SPF, DKIM, and DMARC
  • Configuring automated DKIM key rotation

Security and Authentication Frameworks

  • Enabling TLS with ACME certificate provisioning
  • Implementing DANE and MTA-STS for transport security
  • Integrating authentication backends: internal, LDAP, OIDC, and SQL
  • Configuring OAuth 2.0 and two-factor authentication
  • Defining access control lists and user permissions
  • Applying rate limiting and automated IP blocking strategies

Spam and Phishing Defense Mechanisms

  • Understanding the built-in spam filter architecture
  • Utilizing AI and LLM-based classification tools
  • Applying statistical Bayesian filtering
  • Integrating DNS blocklists and Pyzor services
  • Implementing greylisting and spam trap techniques
  • Safeguarding against phishing and homographic attacks

Storage and Search Infrastructure

  • Choosing storage engines: RocksDB, PostgreSQL, MySQL, or SQLite
  • Connecting cloud blob storage via S3 and Azure
  • Optimizing performance with Redis caching
  • Implementing full-text search using built-in or external engines

Collaboration Service Integration

  • Managing calendars via CalDAV and JMAP
  • Synchronizing contacts using CardDAV and JMAP
  • Storing files via WebDAV
  • Configuring sharing features with ACLs and JMAP Sharing

Multi-Tenancy and User Administration

  • Ensuring domain and tenant isolation
  • Managing user accounts and group structures
  • Configuring mailing lists and email aliases
  • Utilizing subaddressing and catch-all address strategies
  • Enforcing disk quotas at the user and tenant level

Administration and Monitoring

  • Navigating the WebUI dashboard and statistical views
  • Using the CLI for scripting and automation tasks
  • Managing the SMTP mail queue
  • Collecting metrics via OpenTelemetry and Prometheus
  • Leveraging webhooks for event-driven automation

Clustering and High Availability

  • Coordinating peer-to-peer cluster nodes
  • Implementing clustering using Kafka and Redis
  • Setting up read replicas and sharded storage
  • Deploying Stalwart within a Kubernetes environment
  • Designing for fault tolerance and resilience

Advanced Configuration Techniques

  • Writing scripts using the Sieve language
  • Integrating MTA hooks and milter components
  • Defining routing rules and virtual queues
  • Configuring envelope rewriting policies

Migration and System Integration

  • Migrating data from Postfix and Dovecot setups
  • Transitioning from Microsoft Exchange environments
  • Configuring Autoconfig and Autodiscover services
  • Implementing automated DNS management workflows
  • Executing API-driven declarative deployments

Requirements

  • Proficiency with the Linux command line interface
  • Fundamental knowledge of DNS concepts
  • Background in email fundamentals is beneficial but not mandatory

Target Audience

  • System administrators
  • DevOps and platform engineers
  • IT infrastructure specialists
  • Professionals responsible for or planning self-hosted email infrastructure
 21 Hours

Number of participants


Price per participant

Upcoming Courses

Related Categories