I've been debating between Mailcow and Stalwart (or Maddy), as well as Modoboa. The fallback isn't a cold backup though - it would be the same server with the same data (ideally) being made primary in case my own server is down.