myron/ProxMailcow
1
0
Fork 0
mirror of https://github.com/myronblair/ProxMailcow synced 2026-06-30 17:50:40 -05:00
Code Issues Packages Projects Releases Wiki Activity

Initial infrastructure: NPM + Mailcow on Proxmox

Browse Source 
- VM 200: Nginx Proxy Manager (10.48.200.80)
- VM 201: Mailcow email server (10.48.200.82)
- Cloud-init automation for both VMs
- FortiGate VIP/policy documentation
- DNS records for web.orbishosting.com
- NPM proxy host setup guide
- Mailcow post-install checklist
- Cert sync script (NPM → Mailcow)

External IP: 97.176.15.26
This commit is contained in:
Myron Blair
2026-04-23 04:37:56 +00:00
parent ca6fd7688e
commit b60db8a0d0
10 changed files with 917 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+62 -2
View File
@@ -1,2 +1,62 @@
# ProxMailcow
Proxmox and Mailcow Configuration
# ProxMailcow — Proxmox + Nginx Proxy Manager + Mailcow
Full mail server stack for **web.orbishosting.com** hosted on Proxmox at `10.48.200.90`.
## Infrastructure Overview
| Service | VM ID | Hostname | LAN IP | Role |
|---------|-------|----------|--------|------|
| Nginx Proxy Manager | 200 | npm.web.orbishosting.com | 10.48.200.80 | Reverse proxy, SSL termination |
| Mailcow | 201 | mail.web.orbishosting.com | 10.48.200.82 | Full mail server |
**External IP:** `97.176.15.26`
**Domain:** `web.orbishosting.com`
**Gateway:** `10.48.200.1` (FortiGate)
**FusionPBX** (do not disturb): `orbisne.fortiddns.com` — existing SIP rules left untouched
---
## Quick Start Order
```
1. Configure DNS records → docs/dns-records.md
2. Run Proxmox VM scripts → proxmox/
3. Wait for VMs to boot (~5 min)
4. Configure NPM proxy hosts → nginx-proxy-manager/
5. Configure FortiGate → docs/fortigate-changes.md (REVIEW BEFORE APPLYING)
6. Set up Mailcow domains/users → mailcow/
```
---
## Default Credentials (Change Immediately!)
| Service | URL | Username | Password |
|---------|-----|----------|----------|
| NPM Admin | http://10.48.200.80:81 | admin@example.com | changeme |
| Mailcow Admin | https://mail.web.orbishosting.com | admin | moohoo |
| NPM VM SSH | 10.48.200.80 | ubuntu | mailstack2024! |
| Mailcow VM SSH | 10.48.200.82 | ubuntu | mailstack2024! |
---
## Architecture
```
Internet
│
▼
FortiGate (97.176.15.26 / 10.48.200.1)
│
├── Port 80, 443 ──────────────► NPM VM (10.48.200.80)
│ │
│ └── Proxies ──► Mailcow web UI (10.48.200.82:8080)
│
├── Port 25, 465, 587 ─────────► Mailcow VM (10.48.200.82)
└── Port 143, 993, 110, 995 ──► Mailcow VM (10.48.200.82)
```
SSL flow:
- NPM obtains Let's Encrypt cert for `mail.web.orbishosting.com` (web UI)
- Mailcow's internal ACME obtains its own cert via HTTP-01 challenge forwarded through NPM
- Mailcow uses its cert for all mail protocols (SMTP/IMAP/POP3)