# spameater

> SpamEater is a self-hosted disposable email service creating temporary inboxes on your domain that auto-delete after 24 hours with AES-256 encryption and ModSecurity WAF.

- **Category:** Email
- **Licence:** MIT
- **Latest version:** v4.1.1
- **Open source:** oss
- **Languages:** JavaScript, CSS, Shell
- **Platforms:** Docker Compose, Linux
- **Tags:** SQLite, Privacy, Email, Security, Mail, Fail2ban, SMTP, Modsecurity, Let's Encrypt, Disposable Email, Node.js, Docker, Self Hosted, Temporary email, Haraka, Disposable Emails

## Description

SpamEater is a self-hosted disposable email service that lets you create temporary inboxes on your own domain for signups and testing. Every inbox and its messages are automatically purged after 24 hours with no way to recover them. Message bodies are encrypted at rest using AES-256-GCM. The web interface includes dark and light themes, a random address generator, a live self-destruct countdown, and blocks remote images by default to prevent tracking pixels. It runs on Haraka SMTP server, Express API, and SQLite storage, protected by ModSecurity WAF with OWASP Core Rule Set and fail2ban. Deployment options include Docker Compose (recommended) and a native installer for AlmaLinux/RHEL/Rocky Linux 9-10 and Ubuntu 22.04+/Debian 11+. Requires a domain with DNS records configured and ports 25, 80, 443 open. Licensed under MIT.

## Links

- [Homepage](https://github.com/rufftruffles/spameater)
- [Website](https://github.com/rufftruffles)
- [Docker](ghcr.io/rufftruffles/spameater)
- [GitHub Repository](https://github.com/rufftruffles/spameater)

---
Source: https://selfhost.directory/project/spameater