# Upstream sources — mailu

| service | image | source repo | releases / changelog |
|---------|-------|-------------|----------------------|
| app/admin/dovecot/postfix/rspamd/webmail | ghcr.io/mailu/* | https://github.com/Mailu/Mailu | https://github.com/Mailu/Mailu/releases |
| db | redis | https://github.com/redis/redis | https://github.com/redis/redis/releases |
| certdumper | ldez/traefik-certs-dumper | https://github.com/ldez/traefik-certs-dumper | https://github.com/ldez/traefik-certs-dumper/releases |

## Standing notes
- All mailu services share the same image tag (e.g. `2024.06.52`). Always bump all services together.
- The mailu tag format is `YYYY.MM.patch` — `2024.06.x` is the current stable series.
- Redis is used purely as a cache/session store (no persistence required). Operator-approved (2026-06-12): jump from 8.0.x to latest stable 8.x-alpine (currently 8.8.0-alpine). Future upgrades: stay on latest stable 8.x-alpine unless a major release adds breaking changes relevant to cache use.
- traefik-certs-dumper is a sidecar that dumps Traefik TLS certs to disk. Minor bumps are safe.