Email Accounts
Email Accounts is where mailboxes live: create [email protected], give it a quota, and the panel wires up everything a real mail account needs, from the Maildir on disk to the Postfix and Dovecot configuration that receives and serves the mail.
Email → Email Accountshttps://YOUR-SERVER-IP:8443/email/accounts| Email Account | Quota Usage | Last Login | Status | Actions |
|---|---|---|---|---|
| [email protected] created 2026-07-01 | 0.8 / 2 GB | 2026-07-22 | active | edit · webmail · config · password · delete |
Creating a mailbox
The create dialog asks for a domain, a username (the full address builds itself live), a password and a quota in GB. The default quota is pulled from your panel-wide setting under Email Settings, so accounts start consistent. Once a domain is selected, the dialog also shows exactly what a mail client will need: IMAP on 993 (SSL), POP3 on 995 (SSL), and the SMTP submission port your server actually advertises, queried live from its autoconfig data.
/home/<user>/<domain>/mail/<name>/Maildir/ with Sent, Drafts, Trash and Junk folders, owned by the account's own Linux user (mail storage counts against the account's disk, not a shared pool); Postfix's virtual domain, mailbox and alias maps are regenerated, compiled with postmap and reloaded; and Dovecot needs no file at all, because it authenticates directly against the panel database over SQL. That last detail matters: a password change, quota change or suspension takes effect in Dovecot instantly. If the Maildir cannot be created, the database record is rolled back so you never get a half-made account.mail., webmail., autoconfig. and autodiscover. names, so clients connect without certificate warnings. See Email Settings → SSL.The panel also auto-answers the RFC 2142 role addresses: postmaster@, abuse@ and hostmaster@ on every mail-hosting domain are aliased to admin@ if it exists, otherwise to the domain's oldest mailbox, unless you define your own forwarder for them.
Quotas, live
Each row shows a usage bar (green under 70%, amber under 90%, red above) with used/total figures. Enforcement is two-layered: Dovecot enforces the byte limit in real time through its quota engine (fed live from the database), and a background job measures the true on-disk size of every Maildir, updates the usage figures, and flips an account to quota_exceeded status when it overflows, restoring it to active automatically once space is freed. An exceeded account stops authenticating until it is back under its limit.
Managing accounts
Edit adjusts the quota and toggles IMAP, POP3, SMTP and per-account scanning flags. Password sets a new password in one field. Config opens a copy-friendly card with the exact server names, ports and username a mail client needs (mail.<domain>, IMAP 993, POP3 995, and the advertised submission port). The envelope icon jumps straight into webmail. Delete asks for confirmation with a clear warning, then removes the account permanently, including the Maildir and all mail on disk; there is no trash-bin recovery for a deleted mailbox.
Access
Behind the email license feature, with the account count capped by the license's mailbox quota and by the hosting plan's per-account limit. Visibility follows the roles and permissions chain: users see their own accounts, resellers their customers', admins their created-by chain, ROOT everything. The same operations are available over the External API and CLI, including a client-config endpoint that can emit Apple .mobileconfig profiles.