OpenEMR. A lot of work is being done on modernizing even more the codebase. LibSodium encryption, U2F support, GeoIP Blocking, Integrated WAF, all 8 (!) HTTP Security Headers, etc. You can already deploy in a single click on AWS and GCP.

I’m going to embed Postfix with Dovecot for extremely secure and encrypted email notifications out of the box next week.