Shared mail and calendars for a small business.
Bulwark runs as one container next to your Stalwart server. The team gets shared mailboxes, shared calendars and files, and whoever looks after the IT gets a setup wizard and an admin console instead of config files.


The team works in Bulwark, and Stalwart keeps the mail.
Stalwart receives and sends mail, filters spam and holds every mailbox, including the shared ones you create as groups. Bulwark is the browser client on top: mail, calendar, contacts and files, and the settings the team shares.
One mailbox for info@, answered by everyone.
Create a group in Stalwart and its mailbox appears under Shared for every member. Replies go out from the group's address, and Drafts and Sent stay with the group.
Shared mailboxes

Calendars the team can see, and free times when you invite.
Share a calendar and it shows in your colleagues' sidebar in its own colour. When you add people to an event, their busy times show, so you can pick a slot.
Calendar

Signatures, templates and out-of-office replies, set once.
Give everyone the same signature with their own name and phone, keep templates for the replies you write every week, and schedule an automatic reply for the holidays. Stalwart sends it even when nobody has the browser open.
Out of office

Edit office documents next to your mail.
Files keeps documents on the Stalwart server. Office editing needs a second server you run, Collabora Online or ONLYOFFICE; with it, Word, Excel and PowerPoint files open for editing in the browser. The public demo can't show this part.
Files

Thunderbird and phone mail apps keep working.
Bulwark doesn't replace your mail server, so nothing moves and every app that reads your Stalwart accounts today keeps reading them. The company signature from Bulwark goes only on mail sent from Bulwark; Thunderbird keeps its own.
Moving from another webmailComing soon: assign a conversation to a colleague.
The team inbox plugin lets members assign a conversation, mark it done and filter for Assigned to me. It is coming to the extension directory; today an admin downloads team-inbox.zip from the plugins repository and uploads it in the admin console. It needs the full edition.
Team inbox

Coming with Bulwark 1.20: e-invoices you can read.
The e-invoice plugin shows XRechnung and ZUGFeRD invoices as a readable invoice, checks the sums, and forwards them to accounting. It needs Bulwark 1.20, which is not released yet.


Bulwark costs nothing.
Bulwark is open source under AGPL-3.0, with no paid edition and no licence per user. You pay for the server it runs on. Some Stalwart features, such as recovering deleted mail, need a Stalwart Enterprise licence. There is no paid support for Bulwark today; if you would want it, write to dev@bulwarkmail.org.
Install it with one container.
You need Docker and a Stalwart server. Step 3 puts a web server such as Caddy in front of Bulwark. That server gets the HTTPS certificate that phones and sign-ins from home need. Compose with Stalwart runs both together.
- 1Run the container.
$ docker run -d --name bulwark -p 3000:3000 -v bulwark-data:/app/data ghcr.io/bulwarkmail/webmail:latest - 2Run
docker logs bulwarkand open the setup link it prints. The wizard checks your Stalwart server and sets the admin password. - 3Put your reverse proxy in front for HTTPS. The docs have examples for Caddy, nginx and Traefik.
What each part needs.
| Feature | Needs |
|---|---|
| Shared mailbox | A group with a mailbox in Stalwart |
| Shared templates and tag names | Stalwart 1.0 |
| Free/busy and people pickers | On Stalwart 1.0, an admin turns on directory queries, the Stalwart setting that lets people look each other up |
| Office editing | Collabora Online, ONLYOFFICE or EuroOffice, and the full edition |
| Team inbox (coming) | The team inbox plugin, uploaded in the admin console, and the full edition |
| E-invoices (coming) | The e-invoice plugin and Bulwark 1.20 |
| Phone app | The beta app, from GitHub or TestFlight; not yet for your main mail. Until then, the webmail in the phone's browser, installed to the home screen over HTTPS |