Tag: Single Sign-On

  • Infinito.Nexus 15.0: Your Own Mail Server, with Calendars, Contacts and Single Sign-On Built In

    Infinito.Nexus 15.0: Your Own Mail Server, with Calendars, Contacts and Single Sign-On Built In

    Release 15.0

    Infinito.Nexus 15.0 gives every deployment a modern mail server of its own. Stalwart is now the default mail provider: one server that handles email, calendars and contacts, with webmail, spam and virus filtering, signed outgoing mail and single sign-on through Keycloak. Infinito.Nexus sets all of it up for you on every deployment, on a single server or a Docker Swarm cluster.

    The release also delivers email to and from the Tor network, moves the shared database to PostgreSQL 18 and brings new major versions of MariaDB, Odoo and XWiki.

    🚨 15.0 is a major release. Some existing setups need changes before they work again, above all for mail and PostgreSQL. Read Before You Upgrade before you deploy.

    One Communication Server

    Stalwart takes over email, calendars and contacts in a single server. Works natively with Thunderbird, Outlook, Apple Mail, JMAP, CalDAV, CardDAV and WebDAV.

    Sign In Once

    Connected directly to Keycloak. Log in to Roundcube webmail and admin settings with the same account you use for every other Infinito.Nexus application.

    A Cleaner, Safer Inbox

    Built-in spam filtering and ClamAV virus scanning check every incoming message. Outgoing mail is automatically signed with DKIM, SPF and DMARC.

    One Server for Mail, Calendars and Contacts

    Until now, Infinito.Nexus ran email on Mailu, a stack of several containers, with calendars and contacts in yet another service. With 15.0, Stalwart takes over all of it in one server.

    Stalwart speaks every protocol your mail and calendar apps expect:

    • Email over SMTP, IMAP and POP3, so Thunderbird, Outlook, Apple Mail and phone mail apps work as usual.
    • JMAP, the modern, faster successor to IMAP for clients that support it.
    • Server-side filters that sort your mail before it reaches you using ManageSieve.
    • Calendars and contacts over CalDAV and CardDAV, plus file storage over WebDAV.

    Calendar and contact apps find the server on their own: point them at mail.<your-domain> and sign in with your mail account. No extra service is needed.

    In the browser, Roundcube webmail waits at webmail.<your-domain>, and administrators manage the server through Stalwart’s own web admin interface.

    Set Up for You, on Every Deployment

    You do not configure Stalwart by hand. On every deployment, Infinito.Nexus creates your domains and accounts, installs TLS certificates, connects Keycloak, generates DKIM keys and publishes the matching DNS records. This works the same way on a single server and on a Docker Swarm cluster.

    Your applications pick up the new mail server automatically. Password resets, invitations and notifications from Nextcloud, GitLab, Mastodon and the other apps go out through Stalwart without any change on your side.

    Email on the Tor Network

    Infinito.Nexus can already make your applications reachable as onion services on the Tor network. With 15.0, email follows:

    • Send mail to onion addresses: A new Tor mail gateway delivers messages for .onion recipients over Tor.
    • Notifications that arrive: 27 applications now reach the mail server over its onion address. Automated tests verify that password-reset messages arrive correctly.

    Moving from Mailu

    Mailu is now deprecated. Existing Mailu installations keep working until Mailu is removed in a future release, but new deployments should not start with it.

    Moving your mailboxes is built in. Deploy Stalwart next to Mailu and switch on the import. Infinito.Nexus then copies every account’s mail from Mailu into Stalwart while keeping folders, read and flagged states and original dates.

    Before You Upgrade

    15.0 contains breaking changes. Check this list before you deploy:

    If you… Then…
    Want to stay on Mailu for now Set MAIL_PROVIDER: web-app-mailu in your inventory.
    Want to move to Stalwart Follow the Moving from Mailu instructions above.
    Run PostgreSQL Existing PostgreSQL 17 databases are not migrated automatically. Dump them before deployment and restore them into PostgreSQL 18.
    Run Odoo Odoo moves from 19 to 20. Back up the database before deployment.
    Run MariaDB MariaDB moves from 12.3 to 13.0 and upgrades itself on first start.
    Run XWiki or OpenLDAP Back up before deploying the new versions.

    More Reliable

    • GitLab updates no longer fail: PostgreSQL now allows enough locks for GitLab migrations to finish.
    • Backups no longer abort on busy files: backups now take a clean copy after stopping the container.

    Updated Applications

    Keycloak 26.8.0 GitLab 19.4.1 Synapse 1.162.0 Element 1.12.30 Odoo 20.0 XWiki 18.8.0 ERPNext 16.37.0 Discourse 2026.9.0 Matomo 5.14.0 PeerTube 8.3.1 Snipe-IT 8.8.0 EspoCRM 10.0.9 Joomla 6.1.4

    Your Mail, Under Your Control

    Email is still the backbone of how organizations work. With 15.0, Infinito.Nexus treats it that way: a complete modern mail, calendar and contact server deployed on your own infrastructure.

    Fediverse Reactions
  • Infinito.Nexus 13.0: A Sovereign Cloud on Clearnet or Tor

    Infinito.Nexus 13.0: A Sovereign Cloud on Clearnet or Tor

    Infinito.Nexus 13.0 introduces a new choice in how organizations can operate their digital infrastructure.

    Until now, an Infinito.Nexus environment was primarily organized around public or private clearnet domains. Version 13.0 adds Tor onion services as a first-class deployment option. An organization can now build its application landscape on the conventional Internet, through Tor, or through a combination of both.

    This release includes:

    • Tor as a first-class deployment axis
    • Stable onion addresses generated during provisioning
    • Tor-aware identity and Single Sign-On flows
    • Optional parallel clearnet domains
    • Cross-domain and cross-protocol SSO improvements
    • Recovery tests based on real database dumps
    • Mandatory health probes across containerized services
    • Broader automated testing across Python, JavaScript, PHP and Ruby
    • A consolidated and more secure CI deployment chain

    Together, these changes extend digital sovereignty beyond the question of who operates the servers. Infinito.Nexus 13.0 also begins addressing where services can be reached, which network infrastructure they depend on and how much an organization must disclose merely to exist online.

    (more…)
    Fediverse Reactions
  • Infinito.Nexus 12.0: From a Single Server to a Scalable Sovereign Cloud

    Infinito.Nexus 12.0: From a Single Server to a Scalable Sovereign Cloud

    Infinito.Nexus 12.0 is one of the most significant releases in the project’s history.

    Until now, Infinito.Nexus focused primarily on automating complete open-source environments on a single Docker Compose host. Version 12.0 introduces Docker Swarm as a second deployment mode, enabling applications to run across multiple servers, scale horizontally and recover from node failures.

    This release combines capabilities that are rarely delivered by one automation platform:

    • More than 75 automatically deployable open-source applications
    • One Single Sign-On experience backed by a unified user database
    • Horizontal scaling across multiple cloud servers
    • Automated backup and continuously tested disaster recovery
    • Support across Debian, Arch Linux and RHEL-family distributions
    • Filesystem-independent operation across ext4, btrfs and ZFS

    Together, these changes transform Infinito.Nexus from an application installer into a comprehensive foundation for scalable, sovereign cloud infrastructure.

    (more…)
    Fediverse Reactions
  • WHERE OTHERS LOSE CONTROL – WE STAY IN THE LOOP.

    At Infinito.Nexus, we believe that AI should never replace human judgment.

    We are the captains. AI is our navigator.

    While others hand over responsibility to black-box systems, we stay in control. We design the architecture, review the code, verify every deployment, and make the decisions that shape the future of the systems we build.

    AI is one of the most powerful tools ever created. But it remains a tool.

    We are the engineers, architects, and craftsmen who use it to build sovereign digital infrastructure faster, more reliably, and at a scale that was impossible only a few years ago.

    (more…)
    Fediverse Reactions
  • Digitale Souveränität jetzt sichern

    Digitale Souveränität jetzt sichern

    Digitale Souveränität ist längst keine theoretische Debatte mehr, sondern eine strategische Notwendigkeit. Was sich aktuell abzeichnet, ist nicht nur ein technologischer Wandel, sondern eine geopolitische Verschiebung, die direkten Einfluss auf europäische Unternehmen hat.

    Die Diskussion in der Schweiz über ein faktisches Cloud-Verbot für sensible Daten zeigt, wie ernst die Lage inzwischen eingeschätzt wird. Gleichzeitig geraten große Anbieter wie Microsoft zunehmend unter Druck durch wettbewerbsrechtliche Prüfungen. Sicherheitsvorfälle wie das Datenleck im Schweizer Außendepartement verdeutlichen zusätzlich, wie verwundbar zentrale Systeme sind.

    Auch politisch verschärft sich die Lage. Frankreich denkt offen darüber nach, sich von US-Technologien wie Windows zu lösen. Der Hintergrund ist klar. Digitale Infrastruktur ist längst Teil geopolitischer Macht.

    (more…)
    Fediverse Reactions
  • Infinito.Nexus vs. YunoHost

    Infinito.Nexus vs. YunoHost

    Similar Vision, Different Architectural Layer

    When people first hear about Infinito.Nexus, a common question is:

    “Isn’t this basically like YunoHost?”

    It’s a fair question.

    Both projects support digital sovereignty.
    Both are open source.
    Both aim to reduce dependency on Big Tech platforms.

    But they operate at fundamentally different architectural layers.


    The Core Difference

    The most important distinction:

    Infinito.Nexus is not an operating system.

    YunoHost behaves like a server distribution — a tightly integrated system environment that packages applications into a controlled OS base.

    Infinito.Nexus, by contrast, is a provisioning and orchestration framework.

    It does not replace the operating system.
    It provisions and orchestrates infrastructure on top of it.

    This architectural choice makes Infinito.Nexus significantly more scalable and flexible.

    Instead of being tied to a specific system base, it operates across environments — allowing infrastructure to grow without requiring replatforming.

    (more…)
    Fediverse Reactions
  • Ein Stack, der zusammenarbeitet: Warum Infinito.Nexus mehr ist als SaaS

    Ein Stack, der zusammenarbeitet: Warum Infinito.Nexus mehr ist als SaaS

    In der heutigen IT-Landschaft bieten nahezu alle großen Hoster eine Vielzahl an Tools und Diensten an: von Web-Apps über Datenbanken bis hin zu kompletten Entwicklungsumgebungen. Auf den ersten Blick scheint es, als könne man mit ein paar Klicks alles selbst zusammenstellen. Doch wer versucht hat, diese einzelnen Komponenten sicher, integriert und wartbar zu verbinden, weiß: Das ist leichter gesagt als getan.

    (more…)
    Fediverse Reactions
  • Infinito.Nexus: Die Zukunft von SSO & IAM für Unternehmen und Communities

    Infinito.Nexus: Die Zukunft von SSO & IAM für Unternehmen und Communities

    Die digitale Welt wird immer komplexer. Unternehmen, Organisationen und Communities nutzen heute eine Vielzahl an Anwendungen – von Projektmanagement-Tools über Cloud-Speicher bis hin zu sozialen Plattformen. Damit steigt die Herausforderung, Identitäten, Rechte und Zugriffe effizient, sicher und benutzerfreundlich zu verwalten. Genau hier setzt Infinito.Nexus an: mit einer einzigartigen Kombination aus Single Sign-On (SSO) und Identity & Access Management (IAM), die weit über klassische Enterprise-Lösungen hinausgeht.

    (more…)
    Fediverse Reactions
  • Infinito.Nexus: Der komplette Entwicklungs-Stack in unter zwei Stunden

    Infinito.Nexus: Der komplette Entwicklungs-Stack in unter zwei Stunden

    Softwareentwicklungsfirmen stehen oft vor der Herausforderung, zahlreiche Systeme zur Zusammenarbeit, Versionsverwaltung, Kommunikation, Dokumentation und Sicherheit aufzusetzen. Infinito.Nexus löst dieses Problem in weniger als zwei Stunden – modular, automatisiert und vollständig integriert.

    (more…)
    Fediverse Reactions
  • Wissensmanagement im Nexus: MediaWiki, Discourse & Confluence out of the Box

    Wissensmanagement im Nexus: MediaWiki, Discourse & Confluence out of the Box

    In modernen Organisationen ist Wissen die entscheidende Ressource. Ob als kollaboratives Nachschlagewerk, als strukturierte Projektdokumentation oder als lebendige Community-Diskussion: ohne ein gut eingebundenes Wiki- oder Wissenssystem verlieren Teams wertvolle Zeit.
    Das Infinito.Nexus stellt deshalb drei etablierte Systeme out of the box bereit: MediaWiki, Discourse und Confluence. Alle drei sind nahtlos über LDAP und OpenID Connect (OIDC) in den eigenen Mikrokosmos eingebunden – entweder über das vom Nexus bereitgestellte OpenLDAP oder über eine direkte Active-Directory-Integration, falls bereits eine Microsoft-Infrastruktur vorhanden ist.

    Damit wird Infinito.Nexus zu einer echten Alternative zu Microsoft SharePoint: leistungsfähig, flexibel, anpassbar und voll OnPremise kontrollierbar.

    (more…)
    Fediverse Reactions