- Runs in a docker container - Host an unencrypted, unauthenticated POP3 / SMTP server, proxy connections to this server to authenticated IMAPS and SMTPS - If this is impossible, connect to IMAPS and SMTPS, cache these mailboxes, and serve them again on an unencrypted server. Mail sent to the unencrypted server by a client should then be re-sent to the backend encrypted server. - Backend server configuration, hosts, ports, logins, should be done via environment variables