# Ratatoskr

Ratatoskr is a self-hosted webmail client for any IMAP/SMTP account. It is open source and self-hosted, installable on Unraid.

Canonical page: https://ourlocalhost.com/app/7234/ratatoskr

## Description

Ratatoskr is a self-hosted webmail client for any IMAP/SMTP account. One container, configured by environment variables, with data in SQLite under /data. Features: unified inbox, conversations, Web Push notifications and PWA, snooze, and dark mode. Every email is treated as hostile: server-side sanitising, sandboxed rendering, and remote images are proxied. REQUIRES HTTPS through a reverse proxy (SWAG, Nginx Proxy Manager, Traefik, Caddy) for push notifications and installing it as an app. WebSockets on /api/ws must be proxied. Set the Base URL to the public https address and keep Trust Proxy enabled.

## Platform availability

Available on 1 of 9 platforms: Unraid.

## Health score

40/100 (Fair), based on 3 of 4 factors.
- Maintained: 75 (last commit 0 days ago)
- Popular: 0 (0 GitHub stars)
- Easy to install: 20 (1 install platform, Docker image)

## Links

- Unraid: https://ca.unraid.net/apps/app_55d3244f211ed65e
- GitHub: https://github.com/magnuspihl/Ratatoskr

## Common questions

### What data does Ratatoskr store on its volume?

It stores users, encrypted account settings, preferences, push subscriptions, notified inbox UIDs, and snooze state in one SQLite file. It also keeps an encrypted disposable cache of the newest INBOX and Sent mail in a second SQLite file.

### Can one Ratatoskr user connect more than one IMAP/SMTP account?

Yes, each user can add several IMAP/SMTP accounts with separate host, port, TLS, credentials, SMTP settings, and display name. Connections are tested when saved, and passwords are encrypted at rest.

### How are remote images and contact pictures handled?

Remote email images are blocked by default and are only fetched and embedded server-side if the user loads them, so the sender does not see the reader’s IP. Contact pictures from Gravatar, Libravatar, or website icons are also fetched server-side and can be turned off.

### Does the Docker setup require Redis, PostgreSQL, or other sidecars?

No, it is one container configured by environment variables with a volume for SQLite files. It does not require Redis, Postgres, or sidecars.

### What reverse proxy settings are required for push notifications and app install?

It requires HTTPS through a reverse proxy, with WebSockets on /api/ws proxied. The Base URL should be set to the public https address and Trust Proxy should stay enabled.

---
Source: Our Local Host (https://ourlocalhost.com/app/7234/ratatoskr), the self-hosted and open-source app directory.