So, I’m trying to set up a self-hosted mastodon instance, and of course this requires an email service. Self hosting one is not an option, because of anti-spam stuff, or so everyone says. The recommendations are to use services like mailgun or postmark, but there’s one thing I don’t really understand:

All these services require verification of an email to be able to send from it. For example, if I want to use noreply[at]mydomain.com with mailgun, I need to click a link sent to that address, which to me feels like a catch-22. How can I receive that email if I don’t have the email service set up yet? Do I have to set the domain up with some private email service (protonmail, tuta…) first?

Any help is appreciated, I’m pretty new at this.

Edit: Alright, so it seems that Mailgun actually doesn’t require this weird confirmation email, just dns records. The first one I tried, SendPulse, did. Postmark requires an email from the domain at signup. Hope someone else can learn from this.

  • ASK_ME_ABOUT_LOOM@sh.itjust.worksEnglish
    1·
    9 months ago

    I use Mail-in-a-Box on a small VPS. Have been doing so for about 10 years. It takes care of basically everything.

    Last year I subscribed to a small-time email provider, anydomain.net, because I got tired of playing whack-a-mole with services blocking my entire subnet due to spammers on the VPS. All told I probably spend ~US$20 per month to host it.

  • Shdwdrgn@mander.xyzEnglish
    1·
    9 months ago

    It’s not that self hosting email is impossible, just that it takes a lot of work to set up correctly and keep up with spam and abuse prevention. You can literally just fire up postfix, add a DNS record, and you’re up and running. The problem is none of the major providers will talk to you until you add SPF, DKIM, and DMARK (including the appropriate DNS records), and if you don’t have controls in place to immediately shut down any spammer attempts then those services will blacklist you. It can get exhausting after awhile, especially dealing with providers like Microsoft who make you go through impossible hoops to get access to monitor their view of your domain, but then their tools don’t actually show any incidents which cause them to blacklist you.

    You might be able to just set up a quick local mail server for your domain in order to receive those confirmation messages, but I would suggest taking a closer look at exactly what you’re trying to get set up for, or maybe contact the companies directly. You might not actually be in the right area to sign up for a service to handle all the email for your domain, and a company rep could possibly point you to the right spot or explain to you how you’re supposed to receive a confirmation email when no email service exists yet.