~/jcoffey$

John Coffey

Boring infrastructure, on purpose.

Thirty years of it, from mainframes to Kubernetes, now Manager Platform Engineering – Linux & Containers. I helped write two of the Linux Foundation's certification exams and sit on the advisory council for a third. Mail servers that stay up, zero trust that isn't theatre, and tooling I wrote because I couldn't find it.

Read the articles See what I build

John Coffey

Latest All 125 →

  1. ihasmail-oneshot: From a Bare Server to Mail and Webmail in One Command

    ihasmail has always assumed you already run a Stalwart mail server. ihasmail-oneshot is for everyone who doesn't yet — one command that sets up Stalwart and ihasmail together…

  2. WGX Grew Up: It's ihasvpn Now, Rewritten From Scratch in Go

    Eleven months ago WGX was an installer that wired a VPN together out of other people's parts. It has been rewritten from the ground up as a WireGuard server of its own — one Go…

  3. Why I'm Moving jcoffey.dev, coffeylabs.org, and My Email Out of the United States

    jcoffey.dev and coffeylabs.org are headed to Germany and my mail to the Netherlands. It costs more, it is slower by a few dozen milliseconds, and it means rebuilding sender…

  4. ihasmail Was Written for One User

    ihasmail started eleven months ago as a webmail for my own Stalwart server, and stayed private for ten of them. It is not competing with anyone — here is what it is, what it…

  5. Get Over Yourself and Support the Distro

    Arch at home, Debian in the lab, RHEL and Ubuntu at work. I don't love IBM or Canonical either, and it changes nothing about what I run on a Monday morning — letting a corporate…

Building All projects →

  • ihasmail

    Immutable webmail for Stalwart

    A Gmail-class mail, calendar, contacts and files client that speaks only JMAP — no IMAP, no SMTP, no database, and with IMMUTABLE=1 no writable filesystem either. The container has nothing to persist, so there is nothing on the client side to back up.

  • Cairn OBS

    Kubernetes-native log aggregation

    Open-core observability built to match Splunk on capability and beat it on cost-per-GB, with multi-tenant RBAC that is honest about what it isolates. AGPLv3 throughout, enterprise directory included.