Initial infrastructure: NPM + Mailcow on Proxmox

- VM 200: Nginx Proxy Manager (10.48.200.80)
- VM 201: Mailcow email server (10.48.200.82)
- Cloud-init automation for both VMs
- FortiGate VIP/policy documentation
- DNS records for web.orbishosting.com
- NPM proxy host setup guide
- Mailcow post-install checklist
- Cert sync script (NPM → Mailcow)

External IP: 97.176.15.26

proxmox/snippets/mailcow-cloud-init.yaml

@@ -0,0 +1,80 @@
+#cloud-config
+# Mailcow VM - Ubuntu 24.04
+# VM 201 | IP: 10.48.200.82
+# Hostname: mail.web.orbishosting.com
+
+package_update: true
+package_upgrade: true
+
+packages:
+  - curl
+  - ca-certificates
+  - git
+  - htop
+  - net-tools
+  - nftables
+  - qemu-guest-agent
+
+runcmd:
+  # Enable and start qemu-guest-agent
+  - systemctl enable qemu-guest-agent
+  - systemctl start qemu-guest-agent
+
+  # Set hostname (Mailcow requires this to match MAILCOW_HOSTNAME)
+  - hostnamectl set-hostname mail.web.orbishosting.com
+  - echo "127.0.0.1 mail.web.orbishosting.com mail" >> /etc/hosts
+
+  # Install Docker
+  - curl -fsSL https://get.docker.com | sh
+  - systemctl enable docker
+  - usermod -aG docker ubuntu
+
+  # Install Mailcow
+  - git clone https://github.com/mailcow/mailcow-dockerized /opt/mailcow-dockerized
+
+  # Generate Mailcow config non-interactively
+  - |
+    cd /opt/mailcow-dockerized
+    MAILCOW_HOSTNAME=mail.web.orbishosting.com \
+    MAILCOW_TZ=America/New_York \
+    ./generate_config.sh
+
+  # Configure Mailcow to run behind NPM reverse proxy
+  # HTTP on 8080 (proxied by NPM), HTTPS bound only to localhost
+  - |
+    sed -i 's/^HTTP_PORT=.*/HTTP_PORT=8080/' /opt/mailcow-dockerized/mailcow.conf
+    sed -i 's/^HTTP_BIND=.*/HTTP_BIND=0.0.0.0/' /opt/mailcow-dockerized/mailcow.conf
+    sed -i 's/^HTTPS_PORT=.*/HTTPS_PORT=8443/' /opt/mailcow-dockerized/mailcow.conf
+    sed -i 's/^HTTPS_BIND=.*/HTTPS_BIND=127.0.0.1/' /opt/mailcow-dockerized/mailcow.conf
+
+  # Pull images and start Mailcow
+  - cd /opt/mailcow-dockerized && docker compose pull
+  - cd /opt/mailcow-dockerized && docker compose up -d
+
+  # Add Mailcow startup service
+  - |
+    cat > /etc/systemd/system/mailcow.service << 'SERVICE'
+    [Unit]
+    Description=Mailcow Email Server
+    After=docker.service
+    Requires=docker.service
+
+    [Service]
+    Type=oneshot
+    RemainAfterExit=yes
+    WorkingDirectory=/opt/mailcow-dockerized
+    ExecStart=/usr/bin/docker compose up -d
+    ExecStop=/usr/bin/docker compose down
+    TimeoutStartSec=0
+
+    [Install]
+    WantedBy=multi-user.target
+    SERVICE
+
+  - systemctl enable mailcow.service
+
+final_message: |
+  Mailcow VM is ready.
+  Web UI accessible internally at: http://10.48.200.82:8080
+  Default admin: admin / moohoo
+  CHANGE THE PASSWORD IMMEDIATELY after DNS and NPM proxy are configured.