Mail-in-a-box is pretty good. I deployed it at a previous company and it's working fine.

You bought a domain and website? Use the cheapo email service that come with one of those vendors ….

There is pretty much no reason to roll your own these days.

Do you want to spend all your time managing your email server? 'Cause this is how you get to that point.

Directadmin + crossbox is a nice combo I use neither are free tho

Why is gmail not an option?

Mailcow is pretty good. They install fail2ban to protect all endpoints against attacks. And it’s pretty easy to setup and the documentation is pretty good.

Beyond the shorthand advice of "don't" - here's some reasons (from somene who ran a mail server) why you might not want to:

• If your server goes down for any reason, you'll probably loose mail - and potential business - with nobody to blame but yourself.
• You'll probably find that randomly your users can't send email to some domains for no apparent reason - even if your DNS and SPF records are perfectly in line. Fixing this is often non-trivial.
• Gmail and the like has made people forget how much of an issue Spam (and Phishing) is. Run your own mailserver and you'll find out very quickly it's still a huge issue and mitigating it is non-trivial.
• A mail server is a tasty target for attackers, with potentially lots of confidential information in it and the ability to impersonate your users or their contacts - and unless you're doing a full time job keeping it secure, and trust that all the software on it is being patched regularly - it is an easy one to breach.
• At some point your users will complain that it's slow, and you will spend days trying to figure out why.
• Either you'll enforce strict quotas on your users (which they will complain about), or you don't and need to continually feed it disk at ever increasing costs.
• Resetting passwords / 2FA will be another workload on top of all of the above.

All of this may be worthwhile if having your own mail server is the only way to achieve your goals. But, 99% of the time, a managed service (any managed service really) is more than adaquite.