What We Ship
Golden rule
IMAP delete only after SHA-256 verified local archive. Hard-coded in SQL, not marketing.
No search cluster
SQLite FTS5 for full-text search. Homelab friendly.
Real OSS
AGPL-3.0. Fork it, audit it, run it on your VPS tonight.
Why We Built It
Mail mirrors grow forever. Blind deletes lose data.
⬡Archive
First
First
⬡Delete
Safe
Safe
GiraffeMail archives RFC 822 locally, verifies blobs, then cleans up
Try It Now
git clone https://github.com/GiraffeSecurity/giraffemailer.git
cd giraffemailer
echo "GM_SECRET_KEY=$(openssl rand -hex 32)" > .env
docker compose up -d --build
# http://localhost:9191/login
# admin@localhost / admin123
Screens
