Skip to main content

Admin Console

The Mailez admin console makes mail-system administration simple instead of painful.

Core Features​

Everything in One Place​

Manage all mail-related configuration from a single interface:

  • Domain management — add, verify and configure domains
  • Mailbox management — create, edit and delete mail accounts
  • Alias management — configure aliases, forwarding rules and anonymous aliases
  • Distribution groups — create, edit and delete groups; one address delivers to many members (including external addresses and nested groups)
  • Relay configuration — set up external SMTP relays
  • External mailbox fetching — pull mail from external mailboxes automatically
  • App tokens — dedicated passwords for third-party apps

One-Click DKIM Setup​

  • Generate DKIM signing keys with one click
  • Clear status feedback so mail never lands in spam
  • DNS records configured automatically

Directory & Identity​

  • AD / LDAP integration — LDAP/AD authentication fallback with account lifecycle sync
  • Organization contacts — department-tree browsing; LDAP groups expanded into mailing lists in real time
  • SSO — integrate with enterprise identity providers

Mail Archive​

  • Full capture of inbound/outbound mail at the engine
  • Retention policies and metadata search
  • Review notes, .eml download and mbox export

Outbound DLP Approval​

  • Keyword/regex rules scan outbound mail; hits are blocked or routed to approval
  • Approval desk can release or reject; auto-rejects on expiry
  • Fully audited

Announcements​

  • Publish global announcement banners with one click
  • Reaches every mailbox in the organization

Audit Log​

  • Records every admin action
  • Who did what and when, at a glance
  • Export and search supported

Role-Based Access​

  • Admin — full control
  • Manager — manages mailboxes and users
  • User — manages only their own settings

License & Mailbox Cap​

  • The enterprise edition is capped by the license file (MAILEZ_LICENSE_FILE): mailbox count (users/mailboxes)
  • Mailbox creation, self-signup and AD/LDAP auto-provisioning all enforce the cap; over-limit requests return 403
  • The overview page shows license status: edition, used/max and expiry

Technical Service​

  • Service (support/SLA/launch assistance) is a separate annual subscription available to both editions
  • The service certificate is loaded via MAILEZ_SERVICE_FILE; the overview shows the tier and coverage status

Config Import/Export​

  • Back up the entire configuration with one click
  • Restore quickly when migrating to a new server
  • Configuration versioning

Webhooks​

  • New-mail and approval events callback to external systems
  • HMAC signature verification; integrate with ticketing, CRM and monitoring

Security Features​

  • Two-factor authentication (TOTP)
  • Session management
  • IP allowlist (optional)
  • Action auditing

Horizontal Scaling & Multi-Replica HA​

The enterprise edition scales the control plane horizontally: mailezctl up ha (the enterprise stack plus the docker-compose.ha.yml overlay). The backend and both frontends run as stateless replicas; the gateway picks up new replicas automatically, so capacity grows on demand.

  • Atomic scheduled-send claims — no double delivery under any replica count; a replica that dies mid-delivery has its claim reclaimed and redelivered after 5 minutes
  • Lease-elected background workers — external mailbox fetch, web push, calendar reminders, attachment cleanup, archive retention, DLP approval expiry and LDAP sync run on exactly one lease holder; if the leader dies another replica takes over within 60 seconds, no operator action needed
  • Shared object storage — large attachments and the drive live in MinIO/S3 (MAILEZ_DRIVE_BACKEND=minio), so an upload may land on one replica and be downloaded from another
  • Natively distributed storage — control-plane MySQL, engine KV (TiDB) and blobs (MinIO/S3) are distributed components; the engine cluster is either lease-based active-passive failover or the multi tier's fully multi-active serving tier (every replica serves every account, deliveries claimed per message with crash take-over — mailezctl up multi)

Scale out with docker compose … up -d --scale backend=4; the gateway picks up new replicas within 30 seconds. Operational notes (NTP, backups, rolling upgrades) live in the repository's docs/scaling.md.

Access the Console​

Default address: http://localhost:8082

After first startup, create the admin account: for container deployments run docker compose … exec backend mailez-seed; for source-based development run go run ./cmd/seed (default account admin@example.com / MailezDemo2026!, overridable via environment variables).