mail.ebaad.dev
Private Corporate Webmail & Dispatch

Zero-VPS Corporate Mail Infrastructure.

Multi-tenant private webmail. Multi-alias dispatch with Handlebars interpolation, strict domain isolation locking, and serverless Cloudflare architecture.

Zero-VPS Serverless Edge

Inbound parsing via Cloudflare Email Routing and Postal-Mime running on V8 workers, encrypted DKIM 2048-bit dispatch.

BYOD Multi-Tenancy

Bring your corporate domain. Auto-generated DNS guidance for MX, SPF, DKIM 2048-bit keys, and strict DMARC quarantine policies.

Handlebars Dynamic Engine

Design modular HTML email templates with mustache syntax. The compiler auto-generates live variable forms with side-by-side previews.

PostgreSQL Row Level Security

Strict tenant isolation via Supabase PostgreSQL policies. Businesses can only inspect and send messages from authorized domains.

Sandboxed Sanitized Reader

All incoming MIME bodies undergo DOMPurify sanitization and render inside isolated iframe sandboxes to eliminate XSS vectors.

Multi-Alias Dispatcher

Transmit from any address under your verified domain (e.g. quotes@, billing@, support@) with automated sent tracking.

Architecture Pipeline Blueprint
RFC 822 / TLS 1.3
INBOUND: MX → Cloudflare Email Routing → V8 Worker (postal-mime) → HMAC-SHA256 Signed Payload → /api/webhook/email → DOMPurify → Supabase Postgres
OUTBOUND: Webmail UI → Multi-Tenant Domain Check → Private Dispatch Gateway → DKIM 2048-bit Signed & SPF Verified Dispatch → Archive to Sent Folder
SECURITY: Isolated <iframe sandbox="allow-popups"> viewer, Supabase RLS policies, Cloudflare Turnstile CAPTCHA