VPS for Self-Hosted Email Server

Email remains the most important digital identity system in existence. Your email address is your login credential for hundreds of services. Hosting it yourself means a single company's policy change, legal demand, or business failure cannot revoke your access. Google Workspace suspensions, ProtonMail account locks, and Tutanota delivery failures affect users every day - none of those risks apply to a mail server you operate.

Privacy is the second major reason. Gmail scans email content. Microsoft reads Outlook attachments for "safety" purposes. Even privacy-focused providers like ProtonMail and Tutanota comply with court orders in their jurisdictions. A self-hosted server in Iceland or Romania reduces your exposure to non-local legal demands significantly and eliminates any vendor-side scanning entirely.

The counterargument - deliverability - is real but manageable. With proper SPF, DKIM, DMARC, PTR records, and a clean IP, a self-hosted mail server achieves excellent deliverability to Gmail and Outlook. AnubizHost provides rDNS (PTR record) configuration for all VPS plans, which is the most critical factor for mail deliverability.

An email server for personal use or a small organization (under 50 mailboxes, moderate volume) runs on 1 vCPU and 1 GB RAM. Mail-in-a-Box, the most popular all-in-one mail server setup tool, requires Ubuntu 22.04 and recommends 512 MB RAM minimum but performs better with 1 GB+. Add 20 GB SSD for the OS and mail storage - email is text-heavy and 20 GB holds years of correspondence for most users.

IP reputation is more important than hardware. Before setting up a mail server, verify that your VPS IP is not on major spam blocklists (check MXToolbox blacklist lookup). AnubizHost maintains clean IP pools and can reassign your IP if you encounter a pre-existing listing. New IP addresses provisioned on fresh VPS plans typically have no prior mail history, which is a neutral starting point that improves with good sending practices.

Request rDNS configuration from AnubizHost support after provisioning. Set the PTR record to match your mail server's hostname (e.g., mail.yourdomain.com). This is a hard requirement for delivery to major providers - email from servers without a matching PTR record is almost universally rejected or spam-filtered.

Mail-in-a-Box (mailinabox.email) automates the installation and configuration of the full mail server stack: Postfix (SMTP), Dovecot (IMAP), Roundcube (webmail), SpamAssassin (spam filtering), and Nextcloud (contacts and calendar sync). It also configures DNS automatically if you point your domain's nameservers to the MiaB instance.

Installation on Ubuntu 22.04: curl -s https://mailinabox.email/setup.sh | sudo -E bash. The setup script asks for your email address and domain, then configures everything. The process takes 15-30 minutes depending on server speed. After completion, the admin panel at https://mail.yourdomain.com/admin shows your DNS configuration requirements - update your domain registrar's DNS records accordingly.

After setup, run the system status check in the admin panel. Address all warnings - particularly SPF (TXT record v=spf1 mx -all), DKIM (long TXT record auto-generated by MiaB), and DMARC (v=DMARC1; p=quarantine; rua=mailto:[email protected]). These three records collectively tell receiving servers your mail is legitimate and provide a reporting mechanism for spoofing attempts.

Email servers are high-value targets for compromise because a breached mail server gives attackers access to password reset flows for every account linked to those email addresses. Harden your VPS aggressively: change SSH to a non-standard port, disable password authentication (key-only), configure fail2ban to block brute-force IMAP and SMTP authentication attempts, and restrict SMTP submission (port 587) to authenticated users only.

Enable TLS enforcement for all incoming and outgoing connections. Mail-in-a-Box handles this automatically with Let's Encrypt certificates. For manual Postfix setups, configure smtpd_tls_security_level = may and smtp_tls_security_level = may at minimum, or encrypt if you control all sending and receiving servers.

Backup strategy is critical for email - losing your mail store is catastrophic. Configure daily encrypted backups to a second VPS or an S3-compatible object storage endpoint. Mail-in-a-Box has built-in backup to Amazon S3 or any compatible endpoint. For manual setups, use rsync or Borg Backup to copy /var/mail and /etc/postfix to an offsite destination daily. AnubizHost's backup VPS plans are designed exactly for this use case.