Set Up Home Mail Server

CompactHost · March 25, 2026

I've been running my own mail server for three years now, and I'm not going back to Gmail. Yes, it requires upfront work—but once it's running, you own your email entirely. No corporate snooping, no sudden policy changes, no risk of account lockout. In this guide, I'll walk you through building a functional home mail server using Postfix and Dovecot on a modest Linux box.

Why Run Your Own Mail Server?

The obvious answer: privacy and control. You become your own mail provider. But there's a practical side too. When I self-hosted, I eliminated reliance on a third party for something I use every single day. My email lives on hardware I own, in a location I choose, encrypted at rest.

The trade-off is real: you'll need to manage spam filtering, monitor deliverability, maintain DNS records, and handle the occasional misconfiguration. ISPs block port 25 on many residential connections, which complicates outbound mail. If you're just starting out, I'd recommend a small VPS rather than your home network—and RackNerd offers affordable KVM VPS plans perfect for this use case.

Prerequisites

You'll need:

• A Linux server (Ubuntu 22.04 LTS recommended; I use this for mail)
• A domain name you own and can modify DNS records for
• A static IP address (or at least one that doesn't change frequently)
• Basic comfort with the Linux terminal and SSH
• About 2–3 hours for initial setup

If you don't have a static IP at home, a cheap VPS solves this instantly. Many residential ISPs block port 25 anyway, so a VPS on a commercial network is often more reliable.

Install Postfix and Dovecot

Postfix handles incoming and outgoing mail (SMTP). Dovecot retrieves and stores it (IMAP). Together they make a complete mail system.

sudo apt update
sudo apt install -y postfix dovecot-core dovecot-imapd dovecot-pop3d postfix-mysql mysql-server certbot python3-certbot-nginx

During the Postfix installation, select "Internet Site" when prompted for mail server type, and enter your domain name as the mail name.

Next, create a system user for virtual mailboxes:

sudo useradd -r -s /usr/sbin/nologin -d /var/mail/vhosts -m vmail
sudo chown -R vmail:vmail /var/mail/vhosts
sudo chmod -R 770 /var/mail/vhosts

I store mailboxes under /var/mail/vhosts using the vmail user. This isolates mail data from your system user accounts, which is far safer.

Configure Postfix for Virtual Domains

Edit /etc/postfix/main.cf and update these lines:

myhostname = mail.example.com
mydomain = example.com
mynetworks = 127.0.0.0/8 [::1]/128
inet_interfaces = all

# Virtual domain setup
virtual_mailbox_domains = example.com
virtual_mailbox_base = /var/mail/vhosts
virtual_mailbox_maps = static:all
virtual_minimum_uid = 100
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
virtual_alias_maps = hash:/etc/postfix/virtual
virtual_alias_domains = example.com

# TLS settings (we'll generate certs next)
smtpd_tls_cert_file = /etc/letsencrypt/live/example.com/fullchain.pem
smtpd_tls_key_file = /etc/letsencrypt/live/example.com/privkey.pem
smtpd_tls_security_level = may
smtp_tls_security_level = may

# Restrictions
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination

Create a virtual alias map file:

sudo nano /etc/postfix/virtual

Add entries like:

[email protected] [email protected]
[email protected] [email protected]
@example.com @example.com

Then hash it:

sudo postmap /etc/postfix/virtual
sudo systemctl restart postfix

Set Up Dovecot for IMAP

Edit /etc/dovecot/dovecot.conf:

protocols = imap pop3

service imap-login {
  inet_listener imap {
    port = 143
  }
  inet_listener imaps {
    port = 993
    ssl = yes
  }
}

service pop3-login {
  inet_listener pop3 {
    port = 110
  }
  inet_listener pop3s {
    port = 995
    ssl = yes
  }
}

ssl = required
ssl_cert = 

sudo systemctl restart dovecot

sudo certbot certonly --standalone -d mail.example.com -d example.com
sudo systemctl restart postfix dovecot

sudo certbot renew --dry-run

sudo opendkim-genkey -b 2048 -d example.com -D /etc/opendkim/keys -s default
sudo chown opendkim:opendkim /etc/opendkim/keys/default.private

sudo useradd -s /usr/sbin/nologin testuser
sudo passwd testuser

# Install mail utility
sudo apt install mailutils

# Send test mail
echo "Test message" | mail -s "Test" [email protected]

sudo tail -f /var/log/mail.log

sudo apt install -y spamassassin spamc

sudo systemctl enable spamassassin
sudo systemctl start spamassassin

# Update spam rules
sudo sa-update

sudo rsync -av /var/mail/vhosts/ /backup/mail/

df -h /var/mail/vhosts

sudo grep "status=deferred" /var/log/mail.log | tail -20