mailcow: dockerized - Blog

4 min read Original article ↗

Home avatar

The mailserver suite with the 'moo' – 🐮 + 🐋 = 💕

News and Infos

🎄🐮 Moocember 2025 | Just Another Bugfix Update - Revision A

 published on  included in Updates

Warning

If you are using Docker Compose v5, please make sure that you first apply these small fixes in order to prevent the update.sh script from failing:

1
2
git fetch
git checkout origin/master update.sh

Without this, the update script will tell you, that your docker compose version is unsupported, even if you are using v5.

This is due to a small typo in the version check that has been fixed but may need to be applied manually if you are on Docker Compose v5 already.

🍂🐄 Mootember Update 2025 | MTA-STS Support, SOGo 5.12.3, Rspamd 3.12.1, and More - Revision A

The Infrastructure Company GmbH published on  included in Updates

2025-09c (Revision C Release from 7th October 2025)

Changes

  • [SOGo][Web] SOGo URL Encryption support ➡️ PR #6758
  • [Nginx] do not invert ENABLE_IPV6 ➡️ PR #6762
  • [Web] Remove Port from HTTP_HOST ➡️ PR #6760
  • [Web] Allow wildcard subdomains for MTA-STS ➡️ PR #6759
  • [Web] set cookie SameSite attribute to Lax ➡️ PR #6766
  • [Web] Rename PHP Cookie to MCSESSID ➡️ PR #6767
  • Update GitHub’s issue template ➡️ PR #6772
  • Clearer message to install required tool, e.g. jq ➡️ PR #6764
  • Make domain description field readonly when no ACL ➡️ PR #6789
  • Show “Never” by default if no last-modified date saved ➡️ PR #6788
  • Hide relayhosts when ACL does not allow ➡️ PR #6787
  • Fix several SQL statements ➡️ PR #6786
  • Fixed wrong footer escaping for certain characters ➡️ PR #6782
  • Rename password fields for AppPasswords same way for consistency ➡️ PR #6781
  • Fixed password complexity check for AppPasswords creation/edit ➡️ PR #6780
  • Remove debug console.log calls ➡️ PR #6779
  • Enable HTTPS redirect by default on new setups ➡️ PR #6777
  • [Helpers] Fix cold-standby digits in compose project names and inclusion of docker-compose.override.yml ➡️ PR #6800
  • Fix enabling of ipv6 when updating ➡️ PR #6791
  • Update variable name for prometheus-exporter security token ➡️ PR #6776
  • Fixed typo in lang de-de ➡️ PR #6765
  • Fix typos in config by ➡️ PR #6792
  • chore(deps): update actions/stale action to v10.1.0 ➡️ PR #6806
  • [Postfix] update postscreen_access.cidr ➡️ PR #6801
  • Translations update from Weblate ➡️ PR #6771
  • Translations update from Weblate ➡️ PR #6794
  • Translations update from Weblate ➡️ PR #6785
  • Translations update from Weblate ➡️ PR #6790
  • Translations update from Weblate ➡️ PR #6793
  • Translations update from Weblate ➡️ PR #6743
  • Translations update from Weblate ➡️ PR #6749

Full Changelog

https://github.com/mailcow/mailcow-dockerized/compare/2025-09b...2025-09c

Featured image for Quick Guide: Upgrading Debian 12 to Debian 13 for mailcow Servers

Quick Guide: Upgrading Debian 12 to Debian 13 for Mailcow Servers

The Infrastructure Company GmbH published on  included in Guides

Moohoo, dear community!

With the release of Debian 13 (Trixie), the question arises for you as administrators: How can you perform a smooth dist-upgrade from Debian 12 (Bookworm) – especially on systems running mailcow?
A commonly overlooked pitfall: Exim.

🐥🐄 Febmooary 2025 Update | Rspamd and MariaDB Update

The Infrastructure Company GmbH published on  included in Updates

Moohoo everyone

It’s time for another update.

This time, we’ve updated Rspamd to 3.11-2, upgraded MariaDB to 10.11, and moved our Docker images from Docker Hub to GitHub.
Nothing too wild.

Important Fix: Dovecot & Netfilter

Previously, Dovecot allowed multiple failed login attempts within a single session without being properly detected by Netfilter. This has now been fixed.

🌙🐄 LDAP/OIDC Status Update - We Didn’t Forget. We Were Just... Testing!

FreddleSpl0it published on  included in News

Moohoo everyone

In this blog post, I’ll walk you through the current state of the nightly branch of mailcow. The biggest highlight is of course the support for external authentication sources.

To make this new feature as seamless and user-friendly as possible, we had to introduce some adjustments — you’ll see what I mean.

But first, a huge thank you to everyone in the community who tested the nightly branch and provided valuable feedback. 🙌 At this point, most of the work is done, and we’re only expecting small bug fixes if needed. Some users have already adopted the nightly branch in production and are happy with it — which is fantastic!