Mailcow VPS: Email Server Docker Hoan Chinh

Cau hinh Postfix + Dovecot + OpenDKIM + Rspamd thu cong la qua trinh phuc tap, mat 2-3 ngay voi nguoi co kinh nghiem. Sau cai dat, viec quan ly user, alias, va domain van phai sua config file - khong than thien cho doi IT khong chuyen email.

Mailcow giai quyet bang cach:

• Docker Compose mot lenh cai dat: Toan bo stack chay len trong 10 phut. Khong cau hinh tung component.
• Web UI quan tri: Tao mailbox, alias, domain qua giao dien web. Quan ly user khong can SSH.
• SOGo webmail va calendar: Da co webmail chuyen nghiep, lich, danh ba CardDAV/CalDAV - tuong duong Google Workspace.
• Update tu dong: ./update.sh cap nhat toan bo stack giu nguyen du lieu.
• 2FA cho admin va user: TOTP, U2F, Webauthn - hau het khong san sang trong setup thu cong.

Mailcow can it nhat 4GB RAM va 6GB dia. VPS Pro AnubizHost (4GB RAM, 100GB NVMe) phu hop khoi dau. Voi luong email lon, mo rong sang Pro+ hoac VPS dedicated.

Tien quyet: domain co A record cho mail.yourdomain.com, MX record cho yourdomain.com tro den mail.yourdomain.com, va reverse DNS cua VPS IP set thanh mail.yourdomain.com (lien he AnubizHost support).

Cai Docker va Docker Compose tren Debian 12:

apt update && apt install -y curl ca-certificates gnupg
install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/debian/gpg | \
  gpg --dearmor -o /etc/apt/keyrings/docker.gpg
echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian bookworm stable" \
  > /etc/apt/sources.list.d/docker.list
apt update
apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

Clone Mailcow:

cd /opt
git clone https://github.com/mailcow/mailcow-dockerized
cd mailcow-dockerized
./generate_config.sh

Script se hoi:

• Mail server hostname (FQDN): mail.yourdomain.com
• Timezone: Atlantic/Reykjavik

Mac dinh Mailcow nghe cong 80, 443, 25, 465, 587, 110, 143, 993, 995. Neu da co reverse proxy chiem cong 80/443, sua mailcow.conf doi HTTP_PORT=8080, HTTPS_PORT=8443.

Khoi dong stack:

docker compose pull
docker compose up -d

Sau 1-2 phut, truy cap https://mail.yourdomain.com. Login mac dinh: admin / moohoo. DOI PASSWORD NGAY LAP TUC.

Trong web UI, them domain va mailbox dau tien:

1. Configuration -> Mail setup -> Domains -> Add domain
2. Configuration -> Mail setup -> Mailboxes -> Add mailbox
3. Configuration -> Configuration & details -> Configuration -> ARC/DKIM keys -> Add

Sao chep DKIM record sang DNS provider. Them SPF va DMARC record nhu da huong dan o bai Postfix. Test deliverability tai mail-tester.com.

Bat 2FA cho admin va user: Trong web UI, mo profile va bat TOTP/U2F. Du admin password bi compromise, hacker khong vao duoc neu khong co token.

Han che truy cap admin panel: Sua data/conf/nginx/sites.conf them allowlist IP:

location /admin {
    allow 1.2.3.4;
    allow 5.6.7.8;
    deny all;
    proxy_pass ...
}

Bat fail2ban cho Mailcow: Mailcow co fail2ban built-in. Trong web UI: System -> Configuration -> Fail2ban. Cau hinh maxretry=5, bantime=24h.

Backup tu dong hang ngay: Mailcow co script backup chinh thuc:

# /etc/cron.daily/mailcow-backup
#!/bin/bash
cd /opt/mailcow-dockerized
MAILCOW_BACKUP_LOCATION=/var/backups/mailcow ./helper-scripts/backup_and_restore.sh backup all --delete-days 7

Backup gom: database, vmail (mailboxes), Redis, Rspamd, postfix config, SOGo. Day backup encrypted sang VPS thu hai bang rclone:

rclone sync /var/backups/mailcow remote-encrypted:mailcow-backup

Monitoring uptime va deliverability:

• Uptime monitoring qua Uptime Kuma self-hosted, alert Telegram khi mail server down.
• Kiem tra IP khong vao DNSBL tuan mot lan tai mxtoolbox.com.
• Theo doi spam queue trong Rspamd UI (cong 11334) de spot phishing campaign nham vao server.

Update Mailcow: Hang thang chay ./update.sh de cap nhat. Mailcow co changelog ro rang, doc truoc khi update production.

Voi cau hinh tren, Mailcow tren AnubizHost VPS Iceland tro thanh email server doanh nghiep hoan chinh - sanh ngang Google Workspace ve tinh nang nhung voi quyen rieng tu tuyet doi va chi phi co dinh chi ~$25/thang cho mailbox khong gioi han.