diff --git a/README.md b/README.md index a2677509..91ca0910 100644 --- a/README.md +++ b/README.md @@ -11,39 +11,23 @@

- - continuous integration - + continuous integration   - - License: AGPL v3 - + License: AGPL v3   - - Documentation - + Documentation

- - Mastodon - + Mastodon   - - Twitter - + Twitter   - - Nostr - + Nostr

- - Discord - + Discord   - - Matrix - + Matrix

## Features @@ -84,27 +68,33 @@ Key features: - Sieve scripting language with support for all [registered extensions](https://www.iana.org/assignments/sieve-extensions/sieve-extensions.xhtml). - Email aliases, mailing lists, subaddressing and catch-all addresses support. - Automatic account configuration and discovery with [autoconfig](https://www.ietf.org/id/draft-bucksch-autoconfig-02.html) and [autodiscover](https://learn.microsoft.com/en-us/exchange/architecture/client-access/autodiscover?view=exchserver-2019). - - Metrics, tracing, logging and alerts with **OpenTelemetry** and **Prometheus** integration. - - Webhooks for event-driven automation. - - Disk quotas. -- **Web-based administration**: - - Account, domain, group and mailing list management. - - SMTP queue management for messages and outbound DMARC and TLS reports. - - Report visualization interface for received DMARC, TLS-RPT and Failure (ARF) reports. - - Configuration of every aspect of the mail server. - - Log viewer with search and filtering capabilities. - - Self-service portal for password reset and encryption-at-rest key management. + - Multi-tenancy support with domain and tenant isolation. + - Disk quotas per user and tenant. - **Secure and robust**: - Encryption at rest with **S/MIME** or **OpenPGP**. - Automatic TLS certificate provisioning with [ACME](https://datatracker.ietf.org/doc/html/rfc8555) using `TLS-ALPN-01`, `DNS-01` or `HTTP-01` challenges. - OAuth 2.0 [authorization code](https://www.rfc-editor.org/rfc/rfc8628) and [device authorization](https://www.rfc-editor.org/rfc/rfc8628) flows. - Two-factor authentication with Time-based One-Time Passwords (`2FA-TOTP`) - Application passwords (App Passwords). - - Automated blocking of hosts that cause multiple authentication errors (aka **fail2ban**). - - Access Control Lists (ACLs). + - Automated blocking of hosts that perform brute-force attacks or scans (aka **fail2ban**). + - Roles, permissions and Access Control Lists (ACLs). - Rate limiting. - Security audited (read the [report](https://stalw.art/blog/security-audit)). - Memory safe (thanks to Rust). +- **Observability**: + - Logging and tracing with **OpenTelemetry**, journald, log files and console support. + - Metrics with **OpenTelemetry** and **Prometheus** integration. + - Webhooks for event-driven automation. + - Alerts with email and webhook notifications. + - Live tracing and metrics. +- **Web-based administration**: + - Dashboard with real-time statistics and monitoring. + - Account, domain, group and mailing list management. + - SMTP queue management for messages and outbound DMARC and TLS reports. + - Report visualization interface for received DMARC, TLS-RPT and Failure (ARF) reports. + - Configuration of every aspect of the mail server. + - Log viewer with search and filtering capabilities. + - Self-service portal for password reset and encryption-at-rest key management. ## Screenshots