docs
AurionMail Suite is a free, open-source end-to-end encrypted productivity suite that combines CryptPad document collaboration with JMAP-based email in a single unified workflow.
Ficha actualizada 23 sept 2026, 8:34 · upstream 23 sept 2026, 8:16 · release 0.0.6
Qué es docs
Descripción editorial construida a partir del repositorio, su documentación y sus señales de mantenimiento.
The AurionMail Suite delivers a Proton-like user experience by combining proven technologies such as CryptPad for secure document collaboration, Bulwark Webmail for email delivery, and the PGP E2E Plugin for end-to-end encryption. It acts as an orchestrator that links these components into a single workflow where users authenticate once with a master password to access both encrypted emails and CryptPad documents simultaneously.
The core problem addressed is the traditional fragmentation of privacy solutions: existing email providers like Proton offer seamless single-password workflows but use proprietary backends, while self-hosted alternatives often require managing separate accounts and passwords for different services. AurionMail bridges this gap by delivering a unified Zero-Knowledge experience on top of an open-source stack.
Key features include single password encryption across all data types, global logout functionality, key synchronization between devices, and full support for OpenPGP standards through the Bulwark PGP Plugin. The architecture is distributed with separate services (SSO Web App, Stalwart Server, Bulwark components) orchestrated by a Core API layer that manages session state and inter-component communication.
Users can install via Docker or self-hosted binaries, with support for LDAP user management and optional OIDC integration through external SSO providers. The suite is designed to be extensible, allowing organizations to integrate it into existing identity infrastructure while maintaining complete control over their data.
- Organizations requiring unified email and document collaboration without managing multiple accounts
- Teams needing end-to-end encrypted communication for sensitive or confidential information
- Remote workers with a need for secure, self-hosted communication tools that integrate with existing workflows
- Educational institutions implementing privacy-focused communication infrastructure on-premises
- Small to medium businesses seeking a cost-effective alternative to commercial email encryption suites
- Developers and technical teams requiring open-source alternatives to proprietary enterprise security solutions
- Provides end-to-end encrypted email and document collaboration in a single unified interface without managing multiple accounts or passwords
- Fully open-source with no backend dependencies, allowing complete self-hosting control over user data
- Supports OpenPGP standards through the Bulwark PGP Plugin, enabling true zero-knowledge encryption for emails alongside CryptPad documents
- Requires manual key management and import/export of keys; no automatic key discovery or revocation without Web Key Directory integration
- Single password encryption does not support per-email or per-document encryption levels, limiting granular control over data sensitivity
- LDAP user provisioning requires external directory infrastructure with proper SAML/OIDC configuration to function correctly
- No built-in calendar synchronization; users must manually manage calendar events and reminders outside the suite
- Email delivery depends on Bulwark Webmail's availability, which may not be available in all regions or organizations
Perfil de infraestructura
Estimación inicial derivada del repositorio y de los servicios detectados.
Despliegue detectado
Qué señales reales de instalación hemos encontrado.
Install AurionMail using Docker with a minimal image containing Hydra, SSO App, Stalwart Server, Bulwark components, and Core API. Configure LDAP for user management via an external directory service (e.g., Active Directory, OpenLDAP). For OIDC integration, configure the SSO Web App to use your organization's identity provider. Enable the PGP Plugin with your key server configuration. Use Orchestra as a single binary for container orchestration or deploy individual services on Kubernetes. Always rotate master passwords periodically and implement emergency account destruction URLs for security compliance.
Stack y dependencias
Componentes inferidos a partir de manifests, configuración y documentación.
Puede sustituir a
Relaciones detectadas por el análisis del repositorio y su categoría.
Experiencia real de la comunidad
Ayuda a contrastar la estimación automática con instalaciones reales.
Todavía no hay datos comunitarios para este proyecto.