A tale of caution for those would-be self hosters: a friend of mine had a Linux system running mail operations and somehow got ransomwared (theory is via superm

A tale of caution for those would-be self hosters: a friend of mine had a Linux system running mail operations and somehow got ransomwared (theory is via supermicro IPMI). All the filesystems were encrypted and the console login banner was changed to an attacker controlled advertisement to a TOR address for getting the system unlocked. He didn't pay. Logs show there was no data ex-filtration. But as usual, his backups were a couple months old so he lost a significant chunk of his email (he used web interface/imap and I don't think he cached his email locally). I felt vindicated, giving up self-hosting of email and pushing it towards a third party provider because I was concerned about backup/disaster recovery scenarios. When something fundamentally shakes up your life - you might not have the ability to function well and managing a mail server is a stress you could live without.