Sovereign Enterprise Mail Server & exu Suite Deployment by René Bon ĆirićSovereign Enterprise Mail Server & exu Suite Deployment by René Bon Ćirić
Sovereign Enterprise Mail Server & exu Suite DeploymentRené Bon Ćirić
Cover image for Sovereign Enterprise Mail Server & exu Suite Deployment
Escape recurring per-user SaaS license fees ($6–$30/user/month on Microsoft 365 or Google Workspace), retain absolute data sovereignty over executive correspondence, and eliminate email deliverability failures.
We deploy and harden a sovereign, high-deliverability enterprise mail infrastructure powered by EVALinux exu Suite, Exim, Dovecot, and Caddy on CentOS Stream 10. Built with a statically compiled Crystal daemon and CLI, exu provides an intuitive Single-Page Application (SPA) web control plane protected by client-certificate mTLS authentication, alongside native command-line administration (eum), automated 2048-bit DKIM key generation, and copy-paste ready DNS records for a guaranteed 10/10 deliverability score.

Architecture & Safety Invariants

Zero Per-Seat SaaS Taxes: Host unlimited domains, mailboxes, and aliases on your private server infrastructure without recurring per-inbox fees.
100% Data Privacy & Legal Sovereignty: Retain full ownership of corporate email archives, protected from automated cloud scanning and foreign legal jurisdiction.
Guaranteed 10/10 Deliverability: Perfect inbox placement backed by automated RSA-2048 DKIM signing, strict SPF alignment, DMARC enforcement, and verified rDNS/PTR configuration.
Bank-Grade Security: Decoupled transport mTLS client certificate authentication with encrypted HMAC-SHA256 session cookies and modular MTA drop-ins (zero .rpmnew churn).

Tangible Engineering Deliverables

Turnkey exu Virtual Mail Platform: Statically compiled exu daemon, eum CLI utility, Exim MTA, and Dovecot IMAP/POP3 installed on CentOS Stream 10 with clean FHS 3.0 configuration hierarchy.
SPA Web Management Dashboard & mTLS Client PKI: Responsive administrative web console with client-certificate mTLS authentication and administrative certificate generation playbooks.
Cryptographic DNS & 10/10 Deliverability Suite: Automated RSA-2048 DKIM key generation, verified SPF/DMARC record templates, and mail-tester verification achieving a 10/10 deliverability score.
Virtual Domains & Multi-Recipient Routing Engine: Multi-domain configuration, automated default alias templates, and client autodiscover endpoints for Thunderbird and Outlook.
Mail Server Operations Runbook & Backup Pipeline: Daily mailbox snapshot scripts with retention policies and step-by-step CLI administration documentation.
Starting at$3,000
Duration1 week
Tags
Caddy
CentOS
Crystal
DNS
Linux
DevOps Engineer
Email
Security
Service provided by
René Bon Ćirić Ixtlahuacán de los Membrillos, Mexico
2
Followers
Sovereign Enterprise Mail Server & exu Suite DeploymentRené Bon Ćirić
Starting at$3,000
Duration1 week
Tags
Caddy
CentOS
Crystal
DNS
Linux
DevOps Engineer
Email
Security
Cover image for Sovereign Enterprise Mail Server & exu Suite Deployment
Escape recurring per-user SaaS license fees ($6–$30/user/month on Microsoft 365 or Google Workspace), retain absolute data sovereignty over executive correspondence, and eliminate email deliverability failures.
We deploy and harden a sovereign, high-deliverability enterprise mail infrastructure powered by EVALinux exu Suite, Exim, Dovecot, and Caddy on CentOS Stream 10. Built with a statically compiled Crystal daemon and CLI, exu provides an intuitive Single-Page Application (SPA) web control plane protected by client-certificate mTLS authentication, alongside native command-line administration (eum), automated 2048-bit DKIM key generation, and copy-paste ready DNS records for a guaranteed 10/10 deliverability score.

Architecture & Safety Invariants

Zero Per-Seat SaaS Taxes: Host unlimited domains, mailboxes, and aliases on your private server infrastructure without recurring per-inbox fees.
100% Data Privacy & Legal Sovereignty: Retain full ownership of corporate email archives, protected from automated cloud scanning and foreign legal jurisdiction.
Guaranteed 10/10 Deliverability: Perfect inbox placement backed by automated RSA-2048 DKIM signing, strict SPF alignment, DMARC enforcement, and verified rDNS/PTR configuration.
Bank-Grade Security: Decoupled transport mTLS client certificate authentication with encrypted HMAC-SHA256 session cookies and modular MTA drop-ins (zero .rpmnew churn).

Tangible Engineering Deliverables

Turnkey exu Virtual Mail Platform: Statically compiled exu daemon, eum CLI utility, Exim MTA, and Dovecot IMAP/POP3 installed on CentOS Stream 10 with clean FHS 3.0 configuration hierarchy.
SPA Web Management Dashboard & mTLS Client PKI: Responsive administrative web console with client-certificate mTLS authentication and administrative certificate generation playbooks.
Cryptographic DNS & 10/10 Deliverability Suite: Automated RSA-2048 DKIM key generation, verified SPF/DMARC record templates, and mail-tester verification achieving a 10/10 deliverability score.
Virtual Domains & Multi-Recipient Routing Engine: Multi-domain configuration, automated default alias templates, and client autodiscover endpoints for Thunderbird and Outlook.
Mail Server Operations Runbook & Backup Pipeline: Daily mailbox snapshot scripts with retention policies and step-by-step CLI administration documentation.
$3,000