Initial infrastructure: NPM + Mailcow on Proxmox

- VM 200: Nginx Proxy Manager (10.48.200.80)
- VM 201: Mailcow email server (10.48.200.82)
- Cloud-init automation for both VMs
- FortiGate VIP/policy documentation
- DNS records for web.orbishosting.com
- NPM proxy host setup guide
- Mailcow post-install checklist
- Cert sync script (NPM → Mailcow)

External IP: 97.176.15.26

mailcow/post-install.md

@@ -0,0 +1,126 @@
+# Mailcow Post-Installation Steps
+
+Access Mailcow admin: **https://mail.web.orbishosting.com**  
+Default login: `admin` / `moohoo`
+
+---
+
+## Step 1: Change Admin Password
+
+**Configuration → Access → Administrator accounts → admin → Edit**
+
+---
+
+## Step 2: Add Your Domain
+
+**Configuration → Mail Setup → Domains → Add domain**
+
+| Field | Value |
+|-------|-------|
+| Domain | `web.orbishosting.com` |
+| Description | Orbis Hosting Mail |
+| Max. aliases | 400 |
+| Max. mailboxes | 10 (adjust as needed) |
+| Max. quota | 10240 MB |
+| Default mailbox quota | 1024 MB |
+| Active | On |
+
+---
+
+## Step 3: Create Mailboxes
+
+**Configuration → Mail Setup → Mailboxes → Add mailbox**
+
+Suggested mailboxes to create:
+- `admin@web.orbishosting.com`
+- `postmaster@web.orbishosting.com` (required for RFC compliance)
+- `abuse@web.orbishosting.com` (required for RFC compliance)
+- Your personal email address
+
+---
+
+## Step 4: Get DKIM Key
+
+**Configuration → Domains → web.orbishosting.com → DKIM**
+
+Click **Generate** if no key exists, then copy the TXT record and add it to your DNS:
+```
+dkim._domainkey.web.orbishosting.com  TXT  "v=DKIM1; k=rsa; p=YOURKEY..."
+```
+
+---
+
+## Step 5: Verify Mail Configuration
+
+**Configuration → Diagnostics** — Run all checks and ensure green on:
+- DNS MX record
+- SPF record
+- DMARC record
+- Reverse DNS (PTR)
+- DKIM
+
+---
+
+## Step 6: Configure Mail Clients
+
+Use these settings for Outlook, Thunderbird, Apple Mail, etc.:
+
+### Incoming Mail (IMAP)
+| Setting | Value |
+|---------|-------|
+| Server | `mail.web.orbishosting.com` |
+| Port | `993` |
+| Security | SSL/TLS |
+| Username | full email address (e.g., user@web.orbishosting.com) |
+
+### Outgoing Mail (SMTP)
+| Setting | Value |
+|---------|-------|
+| Server | `mail.web.orbishosting.com` |
+| Port | `587` |
+| Security | STARTTLS |
+| Authentication | Normal password |
+| Username | full email address |
+
+---
+
+## Step 7: Test Email Deliverability
+
+1. Send a test email from your new mailbox to an external address (Gmail, Outlook)
+2. Check spam score: https://www.mail-tester.com
+3. Check blacklists: https://mxtoolbox.com/blacklists.aspx
+
+**Target score:** 10/10 on mail-tester.com
+
+Common issues if score is low:
+- Missing PTR record → contact ISP
+- Missing DKIM → check Step 4
+- Missing DMARC → check dns-records.md
+- On a residential ISP blacklist → consider a mail relay (SendGrid, Mailgun) for outbound
+
+---
+
+## Mailcow Useful Commands
+
+```bash
+ssh ubuntu@10.48.200.82
+cd /opt/mailcow-dockerized
+
+# View all container status
+sudo docker compose ps
+
+# View logs for specific container
+sudo docker compose logs -f postfix-mailcow
+sudo docker compose logs -f dovecot-mailcow
+sudo docker compose logs -f acme-mailcow
+
+# Restart all Mailcow containers
+sudo docker compose restart
+
+# Update Mailcow
+sudo docker compose pull
+sudo docker compose up -d
+
+# Update Mailcow (official method)
+sudo ./update.sh
+```