@daya it doesn't really matter where the webmail is hosted. i'd prefer to have the web accessible from mail.phantoma.online but i've been meaning to do some more infrastructure changes before that. there's no security difference with what part of my services are hosted where so long as I don't move the MX record off of the root of my domain.